This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3LeqtWCiWKYCO3VJg47MHHSpecM.roa File: 3LeqtWCiWKYCO3VJg47MHHSpecM.roa (raw, json) Hash identifier: xsu+j+NpULn00KTFAv8muR0AXRuz7QKt4k293bIvJo8= Subject key identifier: DC:B7:AA:B5:60:A2:58:A6:02:3B:75:49:83:8E:CC:1C:74:A9:79:C3 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1367CB2CCE672CD990DA924CC534D5 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3LeqtWCiWKYCO3VJg47MHHSpecM.roa Signing time: Fri 02 Jan 2026 00:20:05 +0000 ROA not before: Fri 02 Jan 2026 00:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 176.125.248.0/24 maxlen: 24 185.251.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:67:cb:2c:ce:67:2c:d9:90:da:92:4c:c5:34:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcb7aab560a258a6023b7549838ecc1c74a979c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:37:7d:f3:8a:c3:90:c6:ab:06:19:e9:a5: cc:fe:fd:7a:6e:39:a0:16:e9:e4:1c:6c:59:2d:6f: 3c:00:fd:65:c4:b9:f3:e4:9e:27:74:c4:0a:34:da: 60:3a:a3:ba:c4:33:5c:8f:e9:8e:71:6c:11:89:55: 34:3d:00:4e:94:48:44:ae:72:8d:1b:91:51:a3:01: a6:bd:29:6f:d9:a5:86:af:3c:35:65:03:39:b8:44: 51:58:ef:39:ec:b6:82:bc:e5:94:90:d8:e5:ea:f8: ee:d5:6b:c1:3a:52:5e:b7:a2:3b:38:03:9f:bd:ea: 24:e7:f8:f6:ca:08:b4:1b:c1:bc:6b:d8:12:ea:94: 1c:27:cb:fc:1a:f6:6a:fe:3a:78:16:f7:28:92:4e: f9:ff:9a:05:55:a4:d9:16:91:d6:74:c0:af:6c:58: 5f:bb:96:47:f3:54:5c:77:6a:55:cc:98:c9:83:1e: c5:cf:58:7e:08:46:77:f8:33:29:82:67:5e:b2:ed: f0:57:fb:70:22:e3:64:3c:b9:96:bf:c8:e7:86:c1: 4a:32:55:aa:86:1a:31:fb:17:f9:a8:4b:8f:89:7e: 26:50:8f:22:cd:56:da:d9:56:a6:51:be:b2:89:00: b8:fe:09:3b:f6:10:29:55:49:a4:b4:c6:d9:1a:29: 2f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B7:AA:B5:60:A2:58:A6:02:3B:75:49:83:8E:CC:1C:74:A9:79:C3 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3LeqtWCiWKYCO3VJg47MHHSpecM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.125.248.0/24 185.251.231.0/24 Signature Algorithm: sha256WithRSAEncryption b6:f2:4b:1f:6b:f2:0e:90:c6:25:d4:a9:ce:2f:15:3e:56:54: 04:41:4e:8e:4b:2d:29:08:59:94:a0:b0:18:5e:a0:35:dc:24: b4:8a:18:52:3a:ae:6e:21:8f:18:f5:97:8c:35:2b:3d:86:2c: be:b6:76:cb:5a:86:3c:43:3d:66:c8:11:c1:e1:90:09:60:55: e8:d5:bd:93:dd:87:e2:cc:6c:28:a7:29:8e:64:34:19:25:47: a2:1f:86:84:1e:99:96:81:5d:85:9d:70:93:90:81:3d:71:3c: ac:9c:a8:d6:e6:d0:2a:af:d3:88:e6:3f:5d:cf:ba:62:63:09: 0e:ee:11:a7:31:39:58:b1:af:38:9c:e5:9d:7b:a3:8a:88:00: 08:75:68:13:cf:fb:9d:fe:1b:f4:61:24:2f:3b:21:fc:c4:b4: 97:8e:16:64:14:0b:47:d4:03:86:62:4f:28:e9:87:93:6d:c0: 33:1f:54:0e:69:19:53:9a:10:a5:b3:e6:cb:e6:21:28:42:12: 04:8a:e8:61:ef:84:53:18:15:8d:be:71:8d:0e:ce:c8:bd:4e: 61:96:70:bb:a3:f6:15:6d:dd:a1:95:1c:1f:f5:a3:d9:16:d1: f3:45:f8:d4:d9:b1:51:d7:07:b1:4c:45:e5:e8:51:cb:bb:cf: 81:fb:d9:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E2fLLM5nLNmQ2pJMxTTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2I3YWFiNTYwYTI1OGE2MDIzYjc1NDk4MzhlY2MxYzc0YTk3OWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xE3ffOKw5DGqwYZ6aXM/v16bjmg FunkHGxZLW88AP1lxLnz5J4ndMQKNNpgOqO6xDNcj+mOcWwRiVU0PQBOlEhErnKN G5FRowGmvSlv2aWGrzw1ZQM5uERRWO857LaCvOWUkNjl6vju1WvBOlJet6I7OAOf veok5/j2ygi0G8G8a9gS6pQcJ8v8GvZq/jp4Fvcokk75/5oFVaTZFpHWdMCvbFhf u5ZH81Rcd2pVzJjJgx7Fz1h+CEZ3+DMpgmdesu3wV/twIuNkPLmWv8jnhsFKMlWq hhox+xf5qEuPiX4mUI8izVba2VamUb6yiQC4/gk79hApVUmktMbZGikvcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNy3qrVgolimAjt1SYOOzBx0qXnDMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvM0xlcXRXQ2lXS1lDTzNWSmc0N01ISFNwZWNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsH34AwQA ufvnMA0GCSqGSIb3DQEBCwUAA4IBAQC28ksfa/IOkMYl1KnOLxU+VlQEQU6OSy0p CFmUoLAYXqA13CS0ihhSOq5uIY8Y9ZeMNSs9hiy+tnbLWoY8Qz1myBHB4ZAJYFXo 1b2T3YfizGwopymOZDQZJUeiH4aEHpmWgV2FnXCTkIE9cTysnKjW5tAqr9OI5j9d z7piYwkO7hGnMTlYsa84nOWde6OKiAAIdWgTz/ud/hv0YSQvOyH8xLSXjhZkFAtH 1AOGYk8o6YeTbcAzH1QOaRlTmhCls+bL5iEoQhIEiuhh74RTGBWNvnGNDs7IvU5h lnC7o/YVbd2hlRwf9aPZFtHzRfjU2bFR1wexTEXl6FHLu8+B+9lO -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:17 2026 by rpki-client