This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/34ts3PIYYIFWGi911YLJC_MNTy0.roa File: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (raw, json) Hash identifier: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4= Subject key identifier: DF:8B:6C:DC:F2:18:60:81:56:1A:2F:75:D5:82:C9:0B:F3:0D:4F:2D Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019B7910A6277F8333EAF017FA7A3B5C0EDC Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/34ts3PIYYIFWGi911YLJC_MNTy0.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210526 IP address blocks: 185.179.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a6:27:7f:83:33:ea:f0:17:fa:7a:3b:5c:0e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df8b6cdcf2186081561a2f75d582c90bf30d4f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:c5:ce:d2:be:66:91:35:6b:c2:39:fb:ee: 76:28:ac:8f:09:64:85:21:aa:a1:4a:ae:f5:f0:7c: 87:68:7d:14:cf:65:55:4b:1f:8c:06:63:3d:aa:c2: 23:98:2e:f8:2c:0c:58:24:12:26:9f:69:e8:bd:2f: b7:cc:c1:af:f2:52:ea:dc:c6:87:07:18:3a:93:e5: 7a:6a:22:1a:d1:22:b3:2e:3a:51:c1:e5:92:44:72: 16:7f:7f:fb:36:86:c9:e2:2f:f8:16:a4:82:88:f1: 8e:0b:d1:67:ab:1d:44:c3:41:38:47:58:36:bb:57: aa:b4:5b:1a:44:af:01:cf:7a:87:99:96:b2:d5:b5: cc:54:95:71:3d:b5:e1:f4:fe:1b:68:9c:bb:89:11: 0e:d6:cd:29:bc:b1:e8:67:a9:d5:15:3a:01:96:10: 8c:01:ed:c3:2a:63:2c:59:39:9d:f0:ca:b1:23:ed: fd:a2:ab:d2:26:28:b0:08:32:29:52:a4:b9:f1:b6: 67:34:02:b0:65:c2:00:b9:bb:84:55:da:2b:f6:77: cf:63:58:60:89:6e:8e:a3:62:6d:75:15:10:6b:59: df:c2:84:8e:2d:bf:19:0f:7c:a6:01:90:ec:d8:5f: d8:5a:9e:c1:2f:ba:ef:12:fd:1e:70:1d:2b:2e:3c: 09:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8B:6C:DC:F2:18:60:81:56:1A:2F:75:D5:82:C9:0B:F3:0D:4F:2D X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/34ts3PIYYIFWGi911YLJC_MNTy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.212.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c0:a1:2e:cb:25:df:68:a7:6b:42:a6:4c:3e:d7:a3:a5:31: 30:1a:8a:3d:87:07:37:9b:d6:d1:fb:55:5c:24:59:c0:6b:de: 68:96:bb:ab:92:cc:2e:4d:f5:d7:25:d3:fc:c8:ee:0e:4d:68: 87:cc:d2:34:c7:49:45:72:0f:ac:8c:27:f9:8b:6f:08:33:b7: 54:ae:bc:a8:01:84:7f:f4:09:c4:f8:8e:d6:c1:4b:bd:c4:36: 83:53:c9:3d:ee:ff:61:6d:35:83:e9:da:3d:af:7b:0b:c9:46: e5:20:1c:70:73:62:33:21:13:cd:f6:34:79:5d:5c:0a:9c:80: e9:a4:1b:b8:19:ee:32:b4:27:2b:1f:ee:b7:a9:54:e7:a4:55: ae:bc:42:db:8b:6e:61:d9:5f:8a:f6:dd:0b:fa:66:22:f6:ee: fd:a1:73:16:3e:5f:9f:1e:d6:62:a6:04:fa:fc:26:40:20:46: 5e:f2:e6:bc:69:a6:04:02:0c:a1:ba:91:25:d5:60:b6:70:81: 2c:c9:0b:cd:48:c7:e3:e0:95:ce:9b:83:b4:c3:86:b2:d9:0e: 20:1e:3f:c9:af:81:2a:46:7b:8c:e1:22:b8:1d:3e:36:8d:d5: 45:9e:89:c2:e0:8d:50:91:fc:01:95:83:06:04:a2:27:69:c3: 5c:50:b7:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKYnf4Mz6vAX+no7XA7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjhiNmNkY2YyMTg2MDgxNTYxYTJmNzVkNTgyYzkwYmYzMGQ0ZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmDFztK+ZpE1a8I5++52KKyPCWSF IaqhSq718HyHaH0Uz2VVSx+MBmM9qsIjmC74LAxYJBImn2novS+3zMGv8lLq3MaH Bxg6k+V6aiIa0SKzLjpRweWSRHIWf3/7NobJ4i/4FqSCiPGOC9Fnqx1Ew0E4R1g2 u1eqtFsaRK8Bz3qHmZay1bXMVJVxPbXh9P4baJy7iREO1s0pvLHoZ6nVFToBlhCM Ae3DKmMsWTmd8MqxI+39oqvSJiiwCDIpUqS58bZnNAKwZcIAubuEVdor9nfPY1hg iW6Oo2JtdRUQa1nfwoSOLb8ZD3ymAZDs2F/YWp7BL7rvEv0ecB0rLjwJ5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+LbNzyGGCBVhovddWCyQvzDU8tMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvMzR0czNQSVlZSUZXR2k5MTFZTEpDX01OVHkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubPUMA0G CSqGSIb3DQEBCwUAA4IBAQAFwKEuyyXfaKdrQqZMPtejpTEwGoo9hwc3m9bR+1Vc JFnAa95olrurkswuTfXXJdP8yO4OTWiHzNI0x0lFcg+sjCf5i28IM7dUrryoAYR/ 9AnE+I7WwUu9xDaDU8k97v9hbTWD6do9r3sLyUblIBxwc2IzIRPN9jR5XVwKnIDp pBu4Ge4ytCcrH+63qVTnpFWuvELbi25h2V+K9t0L+mYi9u79oXMWPl+fHtZipgT6 /CZAIEZe8ua8aaYEAgyhupEl1WC2cIEsyQvNSMfj4JXOm4O0w4ay2Q4gHj/Jr4Eq RnuM4SK4HT42jdVFnonC4I1QkfwBlYMGBKInacNcULcK -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:15 2026 by rpki-client