This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/3yGgq6gpQ9NYaasBYMMPQaATXzo.roa File: 3yGgq6gpQ9NYaasBYMMPQaATXzo.roa (raw, json) Hash identifier: i0WCJtC2Kt+N/0o8HIjmO/t5ox+yoXwX3GlgqEv4MdQ= Subject key identifier: DF:21:A0:AB:A8:29:43:D3:58:69:AB:01:60:C3:0F:41:A0:13:5F:3A Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77 Certificate serial: 019B783509CED14D83568D588D15D8621D22 Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/3yGgq6gpQ9NYaasBYMMPQaATXzo.roa Signing time: Thu 01 Jan 2026 06:18:20 +0000 ROA not before: Thu 01 Jan 2026 06:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49895 IP address blocks: 46.254.76.0/24 maxlen: 24 46.254.79.0/24 maxlen: 24 2a00:e800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:09:ce:d1:4d:83:56:8d:58:8d:15:d8:62:1d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77 Validity Not Before: Jan 1 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df21a0aba82943d35869ab0160c30f41a0135f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:65:ac:91:a2:11:65:c3:8c:dd:5e:cb:e4:aa: e8:07:5a:4a:41:d7:67:5d:21:15:a3:d3:69:e8:a2: 10:65:9e:ec:7d:81:d6:90:8b:e9:33:92:8b:42:d0: 24:2f:78:4d:1a:9e:44:cc:aa:d6:11:42:cb:88:a3: 96:e2:75:99:07:ce:cc:9b:d5:1a:2f:8c:99:7f:c0: 8c:d8:d7:b2:2e:a4:85:55:b1:d6:3e:6a:37:38:28: fa:2e:aa:ea:02:29:48:14:b6:4f:51:2c:57:1b:a5: 2a:d3:54:6b:6c:af:27:21:ff:5f:70:9c:82:d5:83: 13:10:e2:ea:a6:b1:68:55:13:0f:4c:0d:2c:97:66: 63:b3:11:d2:df:a1:25:97:19:fa:11:62:d4:d5:71: 7c:bc:e6:fc:5a:c1:60:61:59:8c:73:08:23:0b:ea: a3:19:6c:d9:dc:55:db:b5:14:2d:51:c1:93:76:7b: 18:0c:64:f6:6b:59:9a:a8:46:70:ef:0c:61:a6:73: 4e:ec:cb:48:9f:70:59:6b:9c:46:df:be:cf:5e:1e: 0b:f7:9e:f6:e2:94:f1:c9:c1:48:f3:02:42:39:b2: 23:7c:69:40:d4:18:03:e0:50:11:f4:93:7d:9b:a9: 8f:4a:fb:bb:54:c5:0a:a3:d7:7d:52:cc:a7:38:6f: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:21:A0:AB:A8:29:43:D3:58:69:AB:01:60:C3:0F:41:A0:13:5F:3A X509v3 Authority Key Identifier: keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/3yGgq6gpQ9NYaasBYMMPQaATXzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.76.0/24 46.254.79.0/24 IPv6: 2a00:e800::/32 Signature Algorithm: sha256WithRSAEncryption 59:a8:aa:33:c0:13:97:41:70:27:31:a0:cf:62:d5:d9:bd:f6: 7e:f0:73:af:61:c4:2e:19:d0:e1:5a:58:34:1e:6c:85:18:a9: d9:12:0d:17:6f:eb:53:3d:2f:b1:4c:ea:9a:a9:09:d2:1c:06: f5:e3:e1:5e:e2:81:6e:4c:e2:7d:83:d8:a2:e7:63:32:ee:42: 7c:47:ca:41:6d:b3:39:8c:3e:e8:1b:38:fe:25:ab:d3:89:b2: 34:cd:c6:2c:45:57:5e:9a:e9:96:21:20:ba:24:9c:9b:ad:65: c1:4d:7e:c5:48:df:32:e4:2d:39:18:c0:20:50:d8:16:87:39: 68:27:30:4b:63:a8:fa:55:f6:cb:3e:f1:50:97:74:e4:cf:b9: eb:07:e3:a0:5b:29:91:f1:7a:e1:14:11:38:86:0d:e4:fa:ff: 4e:0b:29:ec:57:ee:54:c5:c8:a9:f6:b5:2d:00:cf:08:c9:df: bc:5e:b2:ba:68:42:38:6a:9d:b4:bc:dd:da:f9:5c:d2:9f:1f: f8:69:80:21:3f:12:c3:f0:e2:e1:19:20:d9:70:19:e5:dd:c3: ec:a6:43:43:5a:15:99:55:86:e2:f1:18:64:b3:f4:f4:8a:7c: 9d:46:3f:6e:cd:8f:ad:19:6c:18:f7:18:5e:22:94:bb:d6:40: ba:4e:7a:3f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NQnO0U2DVo1YjRXYYh0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ODBjZDRlNzRmMTg1YThmMWFkNDA1MjFiNjExYjc0ZDUx NmJmNzcwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjIxYTBhYmE4Mjk0M2QzNTg2OWFiMDE2MGMzMGY0MWEwMTM1ZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42WskaIRZcOM3V7L5KroB1pKQddn XSEVo9Np6KIQZZ7sfYHWkIvpM5KLQtAkL3hNGp5EzKrWEULLiKOW4nWZB87Mm9Ua L4yZf8CM2NeyLqSFVbHWPmo3OCj6LqrqAilIFLZPUSxXG6Uq01RrbK8nIf9fcJyC 1YMTEOLqprFoVRMPTA0sl2ZjsxHS36Ellxn6EWLU1XF8vOb8WsFgYVmMcwgjC+qj GWzZ3FXbtRQtUcGTdnsYDGT2a1maqEZw7wxhpnNO7MtIn3BZa5xG377PXh4L9572 4pTxycFI8wJCObIjfGlA1BgD4FAR9JN9m6mPSvu7VMUKo9d9UsynOG8IQQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFN8hoKuoKUPTWGmrAWDDD0GgE186MB8GA1UdIwQY MBaAFHeAzU508YWo8a1AUhthG3TVFr93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQt ZTk4ZDA1MmNlYTdmLzEvM3lHZ3E2Z3BROU5ZYWFzQllNTVBRYUFUWHpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQtZTk4ZDA1MmNlYTdm LzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALv5MAwQA Lv5PMA0EAgACMAcDBQAqAOgAMA0GCSqGSIb3DQEBCwUAA4IBAQBZqKozwBOXQXAn MaDPYtXZvfZ+8HOvYcQuGdDhWlg0HmyFGKnZEg0Xb+tTPS+xTOqaqQnSHAb14+Fe 4oFuTOJ9g9ii52My7kJ8R8pBbbM5jD7oGzj+JavTibI0zcYsRVdemumWISC6JJyb rWXBTX7FSN8y5C05GMAgUNgWhzloJzBLY6j6VfbLPvFQl3Tkz7nrB+OgWymR8Xrh FBE4hg3k+v9OCynsV+5Uxcip9rUtAM8Iyd+8XrK6aEI4ap20vN3a+VzSnx/4aYAh PxLD8OLhGSDZcBnl3cPspkNDWhWZVYbi8Rhks/T0inydRj9uzY+tGWwY9xheIpS7 1kC6Tno/ -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:37 2026 by rpki-client