This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/3c3uhHJIXcmzuSurpE71RWpGTzM.roa File: 3c3uhHJIXcmzuSurpE71RWpGTzM.roa (raw, json) Hash identifier: iDKHaTF09sxqVKNiMAtGNVAQO3C4p4KDaPeTJrOLjSg= Subject key identifier: DD:CD:EE:84:72:48:5D:C9:B3:B9:2B:AB:A4:4E:F5:45:6A:46:4F:33 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019BC6BCED753ECE870799E99D85D7905C6C Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/3c3uhHJIXcmzuSurpE71RWpGTzM.roa Signing time: Fri 16 Jan 2026 12:17:08 +0000 ROA not before: Fri 16 Jan 2026 12:17:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 79.132.180.0/24 maxlen: 24 79.132.183.0/24 maxlen: 24 79.132.188.0/24 maxlen: 24 79.132.190.0/24 maxlen: 24 88.223.154.0/23 maxlen: 24 88.223.164.0/24 maxlen: 24 88.223.165.0/24 maxlen: 24 88.223.166.0/24 maxlen: 24 88.223.167.0/24 maxlen: 24 88.223.176.0/20 maxlen: 24 88.223.180.0/24 maxlen: 24 88.223.183.0/24 maxlen: 24 88.223.189.0/24 maxlen: 24 88.223.190.0/24 maxlen: 24 88.223.191.0/24 maxlen: 24 88.223.208.0/24 maxlen: 24 88.223.211.0/24 maxlen: 24 88.223.218.0/24 maxlen: 24 88.223.228.0/22 maxlen: 22 88.223.232.0/22 maxlen: 22 88.223.244.0/22 maxlen: 22 213.164.96.0/20 maxlen: 24 213.164.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:bc:ed:75:3e:ce:87:07:99:e9:9d:85:d7:90:5c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 16 12:17:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddcdee8472485dc9b3b92baba44ef5456a464f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ad:f0:c6:ee:b3:50:c7:5f:6b:9d:65:c8:55: dd:05:39:74:14:f8:16:90:46:2b:ba:fb:ab:ce:9c: e2:8b:1c:8a:bd:bb:49:a0:b7:6e:12:ba:43:73:e1: 67:7d:38:a6:e6:79:67:74:23:01:91:6f:ff:df:49: ba:9e:42:3f:e7:c8:da:da:b1:90:72:38:28:53:e3: dd:cc:97:59:1b:e9:21:c3:d0:7a:2c:81:00:85:e0: 8d:de:e4:b9:7e:4e:ca:7e:f8:3a:a0:f5:5b:46:17: 67:20:19:13:6e:b3:e7:a5:eb:a8:c8:be:2a:c2:c2: 5a:e1:46:67:b1:ca:54:a1:88:8d:65:95:f2:22:dc: 9f:84:c4:33:11:f4:36:22:67:6e:fa:18:b6:63:05: 75:a3:00:36:a6:22:cf:35:86:97:b8:9a:5f:5e:de: e1:94:b8:09:6f:af:ce:75:74:3e:f6:18:17:65:24: 74:9f:07:9e:e9:e5:83:b4:39:41:a1:51:35:2b:68: f7:a0:e3:d7:ed:91:5d:46:43:1e:32:7c:21:c6:b7: d1:ea:7e:4b:f9:85:31:90:2a:25:ea:43:06:e5:1b: 90:4c:b1:aa:04:48:c0:d2:59:d9:fd:a8:cc:7f:92: ef:ed:01:d6:07:fd:77:d4:94:1b:72:ed:e2:f2:07: 5b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CD:EE:84:72:48:5D:C9:B3:B9:2B:AB:A4:4E:F5:45:6A:46:4F:33 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/3c3uhHJIXcmzuSurpE71RWpGTzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.180.0/24 79.132.183.0/24 79.132.188.0/24 79.132.190.0/24 88.223.154.0/23 88.223.164.0/22 88.223.176.0/20 88.223.208.0/24 88.223.211.0/24 88.223.218.0/24 88.223.228.0-88.223.235.255 88.223.244.0/22 213.164.96.0/20 Signature Algorithm: sha256WithRSAEncryption 06:24:9d:9e:97:c9:42:14:18:04:c5:c3:d7:2d:b1:91:38:e3: 70:be:81:58:6a:72:1c:55:9d:14:50:66:95:fd:51:76:7d:8c: e7:df:6b:69:91:6b:a0:b4:b7:34:a2:51:10:50:c2:22:da:a1: 7b:cb:09:c9:af:97:7f:42:c7:83:72:b2:19:b7:c4:45:75:65: 5a:57:87:28:9f:e4:df:f9:71:5e:38:08:18:85:f6:1c:bd:3f: 9f:72:fb:29:b0:87:6e:92:62:d8:87:1d:af:a8:18:99:de:b2: 97:5f:6a:bf:57:d6:3d:d7:95:9c:6a:5f:dc:c8:23:c2:e2:50: d5:88:04:ab:ce:97:6d:64:b5:dd:b8:9e:4e:53:78:51:f2:5f: c8:99:1f:dc:65:0f:a6:11:21:42:62:56:5a:19:f7:8d:49:97: 3b:4b:29:17:9a:fa:2e:04:31:90:ae:d3:00:c8:42:2a:35:b8: 59:59:37:ef:6e:70:94:5b:f0:e1:00:bc:b9:74:93:4c:0e:6b: e8:5d:75:3c:91:95:23:36:3b:6b:5b:77:4c:44:a5:c8:25:3c: e7:9d:ff:c5:fc:74:80:12:34:a4:15:69:ec:cb:dd:1c:38:58: 4d:ba:2d:b1:fe:04:99:61:0d:a0:ca:24:37:33:5d:65:87:de: 7b:7d:0e:3e -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZvGvO11Ps6HB5npnYXXkFxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTE2MTIxNzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGNkZWU4NDcyNDg1ZGM5YjNiOTJiYWJhNDRlZjU0NTZhNDY0ZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK3wxu6zUMdfa51lyFXdBTl0FPgW kEYruvurzpziixyKvbtJoLduErpDc+FnfTim5nlndCMBkW//30m6nkI/58ja2rGQ cjgoU+PdzJdZG+khw9B6LIEAheCN3uS5fk7Kfvg6oPVbRhdnIBkTbrPnpeuoyL4q wsJa4UZnscpUoYiNZZXyItyfhMQzEfQ2Imdu+hi2YwV1owA2piLPNYaXuJpfXt7h lLgJb6/OdXQ+9hgXZSR0nwee6eWDtDlBoVE1K2j3oOPX7ZFdRkMeMnwhxrfR6n5L +YUxkCol6kMG5RuQTLGqBEjA0lnZ/ajMf5Lv7QHWB/131JQbcu3i8gdbgwIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFN3N7oRySF3Js7krq6RO9UVqRk8zMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvM2MzdWhISklYY216dVN1cnBFNzFSV3BHVHpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAT4S0AwQA T4S3AwQAT4S8AwQAT4S+AwQBWN+aAwQCWN+kAwQEWN+wAwQAWN/QAwQAWN/TAwQA WN/aMAwDBAJY3+QDBAJY3+gDBAJY3/QDBATVpGAwDQYJKoZIhvcNAQELBQADggEB AAYknZ6XyUIUGATFw9ctsZE443C+gVhqchxVnRRQZpX9UXZ9jOffa2mRa6C0tzSi URBQwiLaoXvLCcmvl39Cx4Nyshm3xEV1ZVpXhyif5N/5cV44CBiF9hy9P59y+ymw h26SYtiHHa+oGJnespdfar9X1j3XlZxqX9zII8LiUNWIBKvOl21ktd24nk5TeFHy X8iZH9xlD6YRIUJiVloZ941JlztLKRea+i4EMZCu0wDIQio1uFlZN+9ucJRb8OEA vLl0k0wOa+hddTyRlSM2O2tbd0xEpcglPOed/8X8dIASNKQVaezL3Rw4WE26LbH+ BJlhDaDKJDczXWWH3nt9Dj4= -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:29 2026 by rpki-client