This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa File: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (raw, json) Hash identifier: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U= Subject key identifier: 6B:7A:4C:30:A0:44:25:01:FC:97:33:46:07:AF:8F:A4:6B:EB:5B:C7 Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4 Certificate serial: 019B7A5B9B4156EF8AB1B093452DBDFF6A38 Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62381 IP address blocks: 185.37.80.0/22 maxlen: 24 185.37.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9b:41:56:ef:8a:b1:b0:93:45:2d:bd:ff:6a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08759158de234b754b7150f21933096c1094aac4 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b7a4c30a0442501fc97334607af8fa46beb5bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:dd:59:7f:a8:c5:97:e5:c8:3e:83:6a:71: cb:0e:59:5d:f9:f2:f3:fc:a5:51:11:f0:40:a7:fb: 4f:f7:95:f8:21:d6:3d:34:95:11:f2:5a:a7:80:96: d9:8c:74:33:fe:a3:03:5a:f5:65:b2:58:e2:05:ed: a9:3d:6c:53:b6:43:7d:6a:8e:dc:af:6f:06:df:16: f5:13:ca:99:12:6c:4a:39:7a:c8:9b:56:c8:65:33: a0:e2:47:85:40:e1:bd:c8:aa:44:06:fd:19:63:8b: e5:67:38:4d:fc:61:de:34:95:16:1e:b4:62:93:56: 3f:4e:78:7a:58:a3:fa:e6:56:71:e2:d7:a7:12:90: 87:6b:43:b7:01:ba:ae:be:0f:75:59:f8:af:1c:8c: 1d:2c:21:58:3a:71:06:9e:73:1f:31:e1:4e:4e:1a: cb:13:f0:4a:62:5f:2c:22:ca:70:4a:b3:13:00:9c: 4c:72:81:95:e4:f8:2a:29:c0:2f:46:cc:cd:87:1f: e6:90:cb:46:ea:e8:60:52:cb:f0:d7:ce:11:e1:1a: 07:43:01:fa:72:2c:6d:b1:f6:13:34:02:bd:7f:4b: 43:46:04:fc:e8:47:d4:c3:40:de:36:dc:75:12:37: 05:10:f5:88:14:76:e7:9e:f1:4b:6a:c4:fe:e7:2e: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7A:4C:30:A0:44:25:01:FC:97:33:46:07:AF:8F:A4:6B:EB:5B:C7 X509v3 Authority Key Identifier: keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.80.0/22 Signature Algorithm: sha256WithRSAEncryption 92:20:e2:c6:c5:a9:d0:00:f0:13:57:7c:42:a6:2a:3c:ba:b0: 73:71:3d:a0:e0:ab:34:15:83:97:42:fa:f9:af:3a:62:64:f3: c2:5e:6f:f8:46:81:26:25:97:c7:2c:61:4c:c9:85:c3:d0:1d: bc:11:8e:22:f5:55:be:79:fa:d0:e8:d9:45:55:e7:e3:43:4b: 38:18:b3:54:5f:ef:d4:fc:f7:e0:09:54:70:c8:5a:b0:b6:03: 3a:b6:51:b3:9c:c1:97:39:1f:20:4a:4d:f7:ac:4c:af:a8:51: 76:8a:85:84:d6:33:bb:2e:39:98:08:ce:8e:8a:dc:9e:f1:13: 3b:c1:01:86:0e:f3:33:f2:74:c7:91:60:8e:ba:15:05:d7:bc: f8:cf:e3:0e:0f:04:89:cf:7a:0e:8b:ae:6f:dc:37:93:ec:e4: 13:ae:d1:cc:c6:6c:33:c2:72:fc:16:14:e4:81:a2:d6:42:5b: c2:3e:92:b1:32:14:13:ec:9d:83:ac:ec:b0:9e:d0:d2:50:ec: 5f:7d:64:b8:46:85:ce:6d:f8:80:a4:ed:a7:f7:5c:e9:b2:e1: 1c:74:df:5c:99:f3:98:3c:ac:78:60:c7:10:5a:4f:9a:df:95: f8:3a:07:ab:71:11:91:30:1e:e5:21:03:db:03:74:fc:73:9e: 7a:55:e4:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5tBVu+KsbCTRS29/2o4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NzU5MTU4ZGUyMzRiNzU0YjcxNTBmMjE5MzMwOTZjMTA5 NGFhYzQwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjdhNGMzMGEwNDQyNTAxZmM5NzMzNDYwN2FmOGZhNDZiZWI1YmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT/dWX+oxZflyD6DanHLDlld+fLz /KVREfBAp/tP95X4IdY9NJUR8lqngJbZjHQz/qMDWvVlsljiBe2pPWxTtkN9ao7c r28G3xb1E8qZEmxKOXrIm1bIZTOg4keFQOG9yKpEBv0ZY4vlZzhN/GHeNJUWHrRi k1Y/Tnh6WKP65lZx4tenEpCHa0O3Abquvg91WfivHIwdLCFYOnEGnnMfMeFOThrL E/BKYl8sIspwSrMTAJxMcoGV5PgqKcAvRszNhx/mkMtG6uhgUsvw184R4RoHQwH6 cixtsfYTNAK9f0tDRgT86EfUw0DeNtx1EjcFEPWIFHbnnvFLasT+5y5X6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGt6TDCgRCUB/JczRgevj6Rr61vHMB8GA1UdIwQY MBaAFAh1kVjeI0t1S3FQ8hkzCWwQlKrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQt Y2Q5ZWNjZjkzYjMxLzEvYTNwTU1LQkVKUUg4bHpOR0I2LVBwR3ZyVzhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQtY2Q5ZWNjZjkzYjMx LzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSVQMA0G CSqGSIb3DQEBCwUAA4IBAQCSIOLGxanQAPATV3xCpio8urBzcT2g4Ks0FYOXQvr5 rzpiZPPCXm/4RoEmJZfHLGFMyYXD0B28EY4i9VW+efrQ6NlFVefjQ0s4GLNUX+/U /PfgCVRwyFqwtgM6tlGznMGXOR8gSk33rEyvqFF2ioWE1jO7LjmYCM6Oitye8RM7 wQGGDvMz8nTHkWCOuhUF17z4z+MODwSJz3oOi65v3DeT7OQTrtHMxmwzwnL8FhTk gaLWQlvCPpKxMhQT7J2DrOywntDSUOxffWS4RoXObfiApO2n91zpsuEcdN9cmfOY PKx4YMcQWk+a35X4OgercRGRMB7lIQPbA3T8c556VeR3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:13 2026 by rpki-client