This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3xjp_oIGsvAazHVZ9GpbG-1oIBE.roa File: 3xjp_oIGsvAazHVZ9GpbG-1oIBE.roa (raw, json) Hash identifier: q0Dg5GDr4yA0xD0ULmzaXBATHcjSal7733iPHml2/oA= Subject key identifier: DF:18:E9:FE:82:06:B2:F0:1A:CC:75:59:F4:6A:5B:1B:ED:68:20:11 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B2BDC83B9388624F4F6015BE370572660 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3xjp_oIGsvAazHVZ9GpbG-1oIBE.roa Signing time: Wed 17 Dec 2025 10:30:30 +0000 ROA not before: Wed 17 Dec 2025 10:30:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 185.223.77.0/24 maxlen: 24 185.246.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:dc:83:b9:38:86:24:f4:f6:01:5b:e3:70:57:26:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 17 10:30:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=df18e9fe8206b2f01acc7559f46a5b1bed682011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:3c:fd:f7:e2:5c:e6:ad:f8:2b:a5:9d:13: 51:09:35:c5:e7:34:f5:88:be:3e:d3:55:68:ff:ba: 04:ec:c1:fb:4d:f5:26:15:2c:82:a8:d2:08:d2:de: 96:93:ea:83:0e:b3:b3:42:67:b9:01:d3:fe:4c:39: 51:88:33:82:d5:6b:ea:7d:08:b2:47:58:34:27:65: 56:ef:fd:05:38:94:46:4d:95:32:56:bf:b2:f9:b0: 8d:a4:15:63:08:8d:71:f5:53:9e:e6:fa:64:0a:28: e9:5c:03:94:3a:c7:d0:44:e3:7d:bb:26:09:c1:47: e6:5c:f5:27:ed:87:39:09:95:a9:24:e2:5e:3a:70: 65:03:2c:78:45:89:76:ad:41:da:4f:a6:ef:1f:f3: 30:40:fd:13:8d:b8:65:70:69:58:33:bf:3c:ff:65: 27:00:a2:16:09:f3:e7:9a:46:e1:90:6a:47:5d:16: e7:38:b1:0d:aa:ad:f3:ca:31:8c:a1:87:a0:51:92: 9d:62:d1:2b:79:f4:1f:60:57:ea:ea:5a:04:89:a4: e5:c3:f7:76:f8:bf:84:a0:c6:ba:9d:19:db:28:a1: 1c:d5:59:99:bb:dd:34:3e:65:00:a4:89:fa:da:26: f0:2f:32:3e:d6:e0:ba:5b:49:3c:82:cb:b9:56:a5: 0e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:18:E9:FE:82:06:B2:F0:1A:CC:75:59:F4:6A:5B:1B:ED:68:20:11 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3xjp_oIGsvAazHVZ9GpbG-1oIBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.77.0/24 185.246.113.0/24 Signature Algorithm: sha256WithRSAEncryption 82:48:78:fc:ba:17:56:f2:7a:a6:c5:34:12:af:18:87:93:19: 1d:f1:09:5b:9c:c6:67:66:e4:2c:50:d7:e5:43:57:71:d1:6d: 2d:de:c2:de:29:42:92:66:3f:08:3d:cb:ca:e6:ee:c3:5f:15: 74:10:9a:ad:51:55:08:62:84:c5:bc:78:27:be:59:a0:ec:33: 73:e5:ef:f0:1c:ee:c1:18:43:7e:b3:e7:b8:50:10:c4:c9:12: b8:fc:d1:5d:6c:e5:d4:f1:09:13:47:45:67:fd:6a:38:5e:d4: cc:e4:75:5c:4c:a8:35:cc:e5:a7:ac:69:24:01:83:49:80:7b: 6e:e0:dd:0b:62:6e:18:d1:88:6e:8c:23:58:3a:85:39:3c:46: 06:07:9f:af:5e:6d:75:3f:f5:e2:70:2d:57:5e:aa:e7:03:b3: a4:44:60:8b:a4:1c:4f:56:f6:af:63:9e:93:e0:71:e7:15:f1: 96:d0:31:83:73:0e:38:52:be:68:13:8e:c9:60:ae:21:3b:94: 9c:b6:f5:5b:0a:08:93:73:9c:51:2e:e0:91:2c:1c:ed:c8:6a: 70:ee:53:ba:ad:66:42:6c:bf:26:b3:69:58:4f:92:c0:f2:0a: ee:f4:85:05:a6:bf:94:36:f7:02:fa:28:39:db:dc:7e:df:ca: d0:a1:c4:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsr3IO5OIYk9PYBW+NwVyZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjE3MTAzMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjE4ZTlmZTgyMDZiMmYwMWFjYzc1NTlmNDZhNWIxYmVkNjgyMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7U8/ffiXOat+CulnRNRCTXF5zT1 iL4+01Vo/7oE7MH7TfUmFSyCqNII0t6Wk+qDDrOzQme5AdP+TDlRiDOC1WvqfQiy R1g0J2VW7/0FOJRGTZUyVr+y+bCNpBVjCI1x9VOe5vpkCijpXAOUOsfQRON9uyYJ wUfmXPUn7Yc5CZWpJOJeOnBlAyx4RYl2rUHaT6bvH/MwQP0TjbhlcGlYM788/2Un AKIWCfPnmkbhkGpHXRbnOLENqq3zyjGMoYegUZKdYtErefQfYFfq6loEiaTlw/d2 +L+EoMa6nRnbKKEc1VmZu900PmUApIn62ibwLzI+1uC6W0k8gsu5VqUOdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN8Y6f6CBrLwGsx1WfRqWxvtaCARMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvM3hqcF9vSUdzdkFhekhWWjlHcGJHLTFvSUJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud9NAwQA ufZxMA0GCSqGSIb3DQEBCwUAA4IBAQCCSHj8uhdW8nqmxTQSrxiHkxkd8QlbnMZn ZuQsUNflQ1dx0W0t3sLeKUKSZj8IPcvK5u7DXxV0EJqtUVUIYoTFvHgnvlmg7DNz 5e/wHO7BGEN+s+e4UBDEyRK4/NFdbOXU8QkTR0Vn/Wo4XtTM5HVcTKg1zOWnrGkk AYNJgHtu4N0LYm4Y0YhujCNYOoU5PEYGB5+vXm11P/XicC1XXqrnA7OkRGCLpBxP VvavY56T4HHnFfGW0DGDcw44Ur5oE47JYK4hO5SctvVbCgiTc5xRLuCRLBztyGpw 7lO6rWZCbL8ms2lYT5LA8gru9IUFpr+UNvcC+ig529x+38rQocTf -----END CERTIFICATE-----Generated at Thu Dec 18 09:35:50 2025 by rpki-client