This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/3I4M3z7hk5Jaghl-IJJmyqtHR94.roa File: 3I4M3z7hk5Jaghl-IJJmyqtHR94.roa (raw, json) Hash identifier: HXLoBLMS+Moi8PgCDzeYzip6BSpqWVV46UR0vIKYGy8= Subject key identifier: DC:8E:0C:DF:3E:E1:93:92:5A:82:19:7E:20:92:66:CA:AB:47:47:DE Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a Certificate serial: 019B78A324689AA9DE7A71E993E95B69855A Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/3I4M3z7hk5Jaghl-IJJmyqtHR94.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49265 IP address blocks: 185.91.188.0/22 maxlen: 22 185.91.188.0/23 maxlen: 23 185.91.188.0/24 maxlen: 24 185.91.189.0/24 maxlen: 24 185.91.190.0/23 maxlen: 23 185.91.190.0/24 maxlen: 24 185.91.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:24:68:9a:a9:de:7a:71:e9:93:e9:5b:69:85:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc8e0cdf3ee193925a82197e209266caab4747de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:76:4c:76:1d:a4:39:72:f1:81:a4:0f:51: 86:a6:75:af:6d:14:0a:de:db:38:55:f5:d8:fb:41: 91:09:82:67:39:20:f7:1b:0f:80:cd:ca:b3:f1:72: 30:f5:21:c6:7c:01:40:ca:6d:ee:3d:c5:0f:b4:3f: cd:3a:6f:f5:5b:c4:71:79:fa:99:55:b1:cf:1f:12: 28:ab:69:64:db:cb:3e:df:23:f1:83:2d:6d:b4:91: 69:dc:b6:a1:96:b6:29:f4:81:c4:d2:d5:40:14:89: 6d:53:80:6a:7f:55:4d:ce:8f:e6:f7:ac:68:d3:65: e7:34:39:0c:47:f7:73:10:82:8e:ad:8d:00:07:19: 67:86:4f:2c:d2:59:0f:b8:fc:64:59:9e:50:31:58: 64:6f:2c:46:d7:ed:2c:10:2b:ad:71:86:a4:33:c3: eb:01:2e:fe:2f:e2:bd:2b:73:97:24:32:64:f8:a9: 6f:de:3c:22:f8:06:eb:70:1a:0d:df:85:3b:c4:13: 0b:69:3e:bc:eb:ac:97:0b:a1:a1:5b:8f:bc:b8:84: 6f:4f:ba:fc:d7:7d:0e:ed:c1:0c:43:d0:3e:97:94: 2c:9d:61:8c:47:d7:4c:6b:15:4b:b3:d3:eb:fc:ea: c6:9d:ec:d8:5a:88:81:13:fc:1b:04:c2:a4:22:c8: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8E:0C:DF:3E:E1:93:92:5A:82:19:7E:20:92:66:CA:AB:47:47:DE X509v3 Authority Key Identifier: keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/3I4M3z7hk5Jaghl-IJJmyqtHR94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.188.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:6a:31:da:a4:fe:bc:e5:77:14:c3:8e:b1:26:4e:a0:cc:dd: 44:56:f9:86:70:8a:98:aa:06:50:ed:bf:ee:c6:05:fd:57:2c: 6f:eb:12:bb:e5:7f:eb:0c:e5:39:ce:05:1e:ab:9b:57:7e:c0: f3:12:be:c8:8e:6a:d0:de:78:a6:8d:9a:03:64:34:03:a8:a6: ad:b4:da:ff:cf:c5:6b:f2:08:70:94:80:de:e9:f4:6a:96:cb: 55:20:15:ca:1a:d3:ed:07:25:9d:99:84:56:0e:e1:d0:95:36: 5f:5e:f0:1d:a1:9c:24:17:00:40:d4:21:a2:28:62:e6:f3:ab: 81:6a:ef:ba:75:8d:3a:18:4e:f4:58:4b:01:93:21:eb:14:c0: a7:2f:a6:c8:d9:92:cd:5b:34:37:15:bc:86:6b:99:56:0b:d1: 92:82:b9:eb:a8:12:ed:20:4f:10:5b:6f:71:7f:68:6a:10:cb: 21:df:7d:dd:81:33:3f:36:c9:f4:06:5b:94:15:17:94:63:a3: 9e:2e:06:68:96:39:a3:db:f5:ab:0b:05:24:b8:67:f6:02:08: da:48:f0:6c:d2:b8:59:36:c5:01:a1:a0:07:61:45:ad:ef:5f: 2d:e4:25:f5:45:1b:ea:67:3d:08:5e:fe:3d:4f:c9:01:27:87: ae:02:35:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyRomqneenHpk+lbaYVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZTg1NTBiY2M5ZmIzYjE0MDI2MGMyOWQ2OWY3ODk5Nzhk Y2MwOWEwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzhlMGNkZjNlZTE5MzkyNWE4MjE5N2UyMDkyNjZjYWFiNDc0N2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8x2THYdpDly8YGkD1GGpnWvbRQK 3ts4VfXY+0GRCYJnOSD3Gw+Azcqz8XIw9SHGfAFAym3uPcUPtD/NOm/1W8RxefqZ VbHPHxIoq2lk28s+3yPxgy1ttJFp3LahlrYp9IHE0tVAFIltU4Bqf1VNzo/m96xo 02XnNDkMR/dzEIKOrY0ABxlnhk8s0lkPuPxkWZ5QMVhkbyxG1+0sECutcYakM8Pr AS7+L+K9K3OXJDJk+Klv3jwi+AbrcBoN34U7xBMLaT6866yXC6GhW4+8uIRvT7r8 130O7cEMQ9A+l5QsnWGMR9dMaxVLs9Pr/OrGnezYWoiBE/wbBMKkIshCOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNyODN8+4ZOSWoIZfiCSZsqrR0feMB8GA1UdIwQY MBaAFDPoVQvMn7OxQCYMKdafeJl43MCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYt YWQyNDk3ZjI4NGY1LzEvM0k0TTN6N2hrNUphZ2hsLUlKSm15cXRIUjk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYtYWQyNDk3ZjI4NGY1 LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVu8MA0G CSqGSIb3DQEBCwUAA4IBAQBeajHapP685XcUw46xJk6gzN1EVvmGcIqYqgZQ7b/u xgX9Vyxv6xK75X/rDOU5zgUeq5tXfsDzEr7IjmrQ3nimjZoDZDQDqKattNr/z8Vr 8ghwlIDe6fRqlstVIBXKGtPtByWdmYRWDuHQlTZfXvAdoZwkFwBA1CGiKGLm86uB au+6dY06GE70WEsBkyHrFMCnL6bI2ZLNWzQ3FbyGa5lWC9GSgrnrqBLtIE8QW29x f2hqEMsh333dgTM/Nsn0BluUFReUY6OeLgZoljmj2/WrCwUkuGf2AgjaSPBs0rhZ NsUBoaAHYUWt718t5CX1RRvqZz0IXv49T8kBJ4euAjXx -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:34 2026 by rpki-client