This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/3dTGZIR5xNjpUjR4hZwNlOd2Bsc.roa File: 3dTGZIR5xNjpUjR4hZwNlOd2Bsc.roa (raw, json) Hash identifier: f2BLKcRZVhnRXkQ4qW92OvGurLauRFZKARhH1pRyUeg= Subject key identifier: DD:D4:C6:64:84:79:C4:D8:E9:52:34:78:85:9C:0D:94:E7:76:06:C7 Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db Certificate serial: 019B7BA4F326C1E2B773BF4BDC9AACB921B2 Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/3dTGZIR5xNjpUjR4hZwNlOd2Bsc.roa Signing time: Thu 01 Jan 2026 22:19:26 +0000 ROA not before: Thu 01 Jan 2026 22:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44180 IP address blocks: 93.89.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f3:26:c1:e2:b7:73:bf:4b:dc:9a:ac:b9:21:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddd4c6648479c4d8e9523478859c0d94e77606c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:fb:64:dc:17:76:16:8e:76:3f:0f:b7:c9: f0:9f:11:e5:c2:69:3a:67:e5:9c:68:02:31:0f:cc: 51:5f:6a:60:69:b1:4a:c5:3c:c2:b5:ae:2a:9e:5a: d5:d9:77:07:7e:97:33:fe:d4:91:7a:32:fe:5f:20: fa:a6:ab:b4:12:96:04:5e:6b:91:45:d5:e7:90:e9: 5d:4b:f1:5d:21:11:36:7e:95:15:67:29:86:65:4d: bb:45:9d:94:4f:2d:42:e6:cd:59:32:f3:46:83:8c: a0:78:f5:50:b6:d5:02:c5:2c:51:35:e3:e6:01:9f: 54:1b:0b:4e:f0:b4:32:8b:20:0c:60:92:07:12:b9: 6f:b1:7e:ff:3f:19:5a:61:73:37:a6:61:12:63:ec: 15:9b:47:ea:d3:ef:12:2e:c2:8d:3c:8b:b2:31:23: 87:5c:5b:29:e4:c7:6f:2f:b0:b8:d9:e1:9e:a8:ea: b9:fc:be:07:c4:a7:8c:c2:e1:b7:fd:61:e5:7b:a3: e0:9b:a8:93:b3:9d:c8:73:b0:1b:7a:8f:dc:47:b9: 41:c7:55:f9:db:6a:de:8c:a7:88:01:11:2f:0d:fe: 4b:14:cd:65:44:f0:a3:64:92:78:00:c1:1c:d9:77: f5:13:bf:dc:02:18:f0:2b:0a:39:26:52:32:36:13: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D4:C6:64:84:79:C4:D8:E9:52:34:78:85:9C:0D:94:E7:76:06:C7 X509v3 Authority Key Identifier: keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/3dTGZIR5xNjpUjR4hZwNlOd2Bsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.89.8.0/22 Signature Algorithm: sha256WithRSAEncryption b2:de:ac:04:09:ce:0c:f1:58:36:4b:2a:9b:73:e3:33:26:d9: 7e:d6:2b:a2:6d:db:f1:a2:5f:16:d9:50:cd:a1:49:b0:df:cd: 04:53:04:5d:5a:6d:69:9e:22:d4:2a:2d:9c:42:50:fd:a4:1d: 99:b2:1b:8c:02:24:40:da:61:18:79:6a:6b:51:97:a9:01:9e: 6d:b6:b4:9d:e7:f2:4e:aa:89:91:77:f7:36:54:e1:5e:0d:aa: 4a:2e:94:41:77:2e:57:57:f0:ea:8a:d5:04:e4:d8:fc:c5:b2: 9f:05:33:bf:75:d0:e4:65:5d:b1:ea:23:fe:e2:cc:e2:69:aa: f8:96:1c:0d:13:de:f1:fe:f8:84:ad:8a:e9:ac:03:4d:6c:ae: b5:88:85:f5:75:fd:16:dd:9e:94:69:93:5e:51:e3:da:e0:46: 07:a8:83:4f:7a:21:86:94:bc:44:a9:3c:53:67:2c:d4:da:f4: 74:0c:b4:8c:d9:c3:8c:5f:72:89:ab:97:d5:2e:f6:32:29:2b: 3d:10:af:2b:fe:26:3c:ba:bd:5e:0a:ff:19:df:93:b5:3d:93: 07:10:8d:a3:2a:3b:9d:7f:b3:f8:5b:c7:c4:c7:20:d3:05:29: 6d:7d:7f:0c:69:f4:f1:a3:27:9d:3a:2d:74:29:0e:07:e6:04: 96:a8:e5:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPMmweK3c79L3JqsuSGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZWIwZWJkODc4Yjc3ZDQyZjJjYTlkZDA4ZjcwYzMyM2M1 ZDAzZGIwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGQ0YzY2NDg0NzljNGQ4ZTk1MjM0Nzg4NTljMGQ5NGU3NzYwNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhH7ZNwXdhaOdj8Pt8nwnxHlwmk6 Z+WcaAIxD8xRX2pgabFKxTzCta4qnlrV2XcHfpcz/tSRejL+XyD6pqu0EpYEXmuR RdXnkOldS/FdIRE2fpUVZymGZU27RZ2UTy1C5s1ZMvNGg4ygePVQttUCxSxRNePm AZ9UGwtO8LQyiyAMYJIHErlvsX7/PxlaYXM3pmESY+wVm0fq0+8SLsKNPIuyMSOH XFsp5MdvL7C42eGeqOq5/L4HxKeMwuG3/WHle6Pgm6iTs53Ic7Abeo/cR7lBx1X5 22rejKeIAREvDf5LFM1lRPCjZJJ4AMEc2Xf1E7/cAhjwKwo5JlIyNhNoJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN3UxmSEecTY6VI0eIWcDZTndgbHMB8GA1UdIwQY MBaAFFzrDr2Hi3fULyyp3Qj3DDI8XQPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEt OWMzNzQ3OGE1OTNmLzEvM2RUR1pJUjV4TmpwVWpSNGhad05sT2QyQnNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEtOWMzNzQ3OGE1OTNm LzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXVkIMA0G CSqGSIb3DQEBCwUAA4IBAQCy3qwECc4M8Vg2Syqbc+MzJtl+1iuibdvxol8W2VDN oUmw380EUwRdWm1pniLUKi2cQlD9pB2ZshuMAiRA2mEYeWprUZepAZ5ttrSd5/JO qomRd/c2VOFeDapKLpRBdy5XV/DqitUE5Nj8xbKfBTO/ddDkZV2x6iP+4sziaar4 lhwNE97x/viErYrprANNbK61iIX1df0W3Z6UaZNeUePa4EYHqINPeiGGlLxEqTxT ZyzU2vR0DLSM2cOMX3KJq5fVLvYyKSs9EK8r/iY8ur1eCv8Z35O1PZMHEI2jKjud f7P4W8fExyDTBSltfX8MafTxoyedOi10KQ4H5gSWqOWd -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:53 2026 by rpki-client