This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3_4fUkeXq7XMfdSS8AEFfMjXh7E.roa File: 3_4fUkeXq7XMfdSS8AEFfMjXh7E.roa (raw, json) Hash identifier: vILHsCzT6lQmDlwdHLCrw7jCVe4+Mkw2lHeawmW9sXs= Subject key identifier: DF:FE:1F:52:47:97:AB:B5:CC:7D:D4:92:F0:01:05:7C:C8:D7:87:B1 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138C5E79A6EBABA30ABE53A974DD7C Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3_4fUkeXq7XMfdSS8AEFfMjXh7E.roa Signing time: Fri 02 Jan 2026 00:20:14 +0000 ROA not before: Fri 02 Jan 2026 00:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208528 IP address blocks: 185.232.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:8c:5e:79:a6:eb:ab:a3:0a:be:53:a9:74:dd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dffe1f524797abb5cc7dd492f001057cc8d787b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:de:3b:b6:a7:24:0b:72:c2:bd:52:a3:11: 48:39:de:b3:97:19:55:bd:6d:2f:92:7e:7f:a4:f8: e7:44:e8:53:f1:93:e2:38:95:44:e9:e4:ab:bc:6c: a7:56:e5:2f:13:a2:06:cb:dd:5e:a2:4d:3c:ab:16: ad:17:e8:dc:08:50:ae:b1:8d:d2:b9:20:05:1b:27: eb:1c:28:a2:15:81:a8:17:ab:59:84:ec:e5:e5:99: 5d:2a:9a:69:d2:01:c7:91:14:b8:31:53:8e:03:dc: 79:64:48:3d:fe:b1:bc:57:d9:6e:72:07:a7:5b:8b: 8b:1e:35:aa:95:0c:40:b6:a7:5c:bc:0f:2f:a4:a5: ad:d7:39:81:b7:9d:77:12:7f:7d:9d:9e:d8:ba:73: 6d:69:76:b1:b1:ec:4a:18:15:ca:3b:87:75:7e:65: 91:18:d0:cf:fe:9d:4f:09:0e:3b:f7:89:ed:db:0e: 79:f4:1c:f2:bf:46:7a:1d:b3:bd:a5:20:c7:e3:2f: c5:96:d3:85:43:2e:ad:79:75:66:19:1a:78:c4:c5: ec:6b:b9:aa:6b:fa:6b:80:17:9b:3f:33:0c:3a:91: f6:53:74:1a:5c:f8:c7:a2:7f:1a:3a:da:a9:a0:0c: 6d:89:da:58:63:03:8a:2b:db:72:3f:cd:b5:94:c3: e1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FE:1F:52:47:97:AB:B5:CC:7D:D4:92:F0:01:05:7C:C8:D7:87:B1 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3_4fUkeXq7XMfdSS8AEFfMjXh7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.11.0/24 Signature Algorithm: sha256WithRSAEncryption b2:a9:84:51:1f:41:eb:47:3b:84:6e:0d:99:e1:fc:4e:04:44: 3b:36:73:07:99:dd:7d:58:6c:e8:77:f5:bb:7e:12:3a:28:17: 84:35:6f:8c:77:22:96:78:12:ff:f5:80:63:e4:bf:03:a6:a0: 68:bc:57:2a:fb:de:e9:b6:cb:38:2d:c9:84:f5:79:f5:97:bf: 22:66:f8:8a:49:4f:9b:7b:08:28:6d:cd:6c:83:3d:06:70:bc: 57:0b:c4:bd:58:cf:3c:0b:69:a8:85:31:68:31:3c:2a:c1:33: ca:b2:a2:07:40:98:5b:76:30:90:a6:42:3a:be:6a:3e:de:fd: d6:43:e1:44:01:a0:9e:98:9a:ad:18:34:27:52:42:8f:d7:16: 0b:39:83:5e:6b:fc:ba:8f:a2:bf:cb:49:b1:1c:1b:67:56:26: f2:a5:4c:bd:c6:20:27:97:63:57:32:b9:e6:c0:b6:a7:f0:b0: 6a:07:60:45:f2:f9:13:93:56:9f:f6:42:2b:c7:04:4b:00:79: 9c:ad:96:5d:f6:3e:fc:77:97:d7:41:43:5e:e1:7d:4c:96:b2: fb:e7:dd:01:ce:97:ff:68:cd:44:60:71:da:0a:a5:c7:d3:94: 29:bc:88:ac:8b:b1:01:a6:4c:46:81:81:68:b5:39:34:3d:8c: 58:20:d7:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E4xeeabrq6MKvlOpdN18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmZlMWY1MjQ3OTdhYmI1Y2M3ZGQ0OTJmMDAxMDU3Y2M4ZDc4N2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS7eO7anJAtywr1SoxFIOd6zlxlV vW0vkn5/pPjnROhT8ZPiOJVE6eSrvGynVuUvE6IGy91eok08qxatF+jcCFCusY3S uSAFGyfrHCiiFYGoF6tZhOzl5ZldKppp0gHHkRS4MVOOA9x5ZEg9/rG8V9lucgen W4uLHjWqlQxAtqdcvA8vpKWt1zmBt513En99nZ7YunNtaXaxsexKGBXKO4d1fmWR GNDP/p1PCQ4794nt2w559Bzyv0Z6HbO9pSDH4y/FltOFQy6teXVmGRp4xMXsa7mq a/prgBebPzMMOpH2U3QaXPjHon8aOtqpoAxtidpYYwOKK9tyP821lMPh5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/+H1JHl6u1zH3UkvABBXzI14exMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvM180ZlVrZVhxN1hNZmRTUzhBRUZmTWpYaDdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuegLMA0G CSqGSIb3DQEBCwUAA4IBAQCyqYRRH0HrRzuEbg2Z4fxOBEQ7NnMHmd19WGzod/W7 fhI6KBeENW+MdyKWeBL/9YBj5L8DpqBovFcq+97ptss4LcmE9Xn1l78iZviKSU+b ewgobc1sgz0GcLxXC8S9WM88C2mohTFoMTwqwTPKsqIHQJhbdjCQpkI6vmo+3v3W Q+FEAaCemJqtGDQnUkKP1xYLOYNea/y6j6K/y0mxHBtnVibypUy9xiAnl2NXMrnm wLan8LBqB2BF8vkTk1af9kIrxwRLAHmcrZZd9j78d5fXQUNe4X1MlrL7590Bzpf/ aM1EYHHaCqXH05QpvIisi7EBpkxGgYFotTk0PYxYINfu -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:30 2026 by rpki-client