This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa File: F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa (raw, json) Hash identifier: 23DkMsSVoahaS49VnCTPljUSOUkll2ueapsYq9u+mmk= Subject key identifier: 17:78:22:D2:D1:90:1F:FD:43:2A:E2:3C:AC:DC:C5:B9:76:66:46:59 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F144A4B0F900CB14372F7A9D24648AB Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa Signing time: Fri 02 Jan 2026 14:19:54 +0000 ROA not before: Fri 02 Jan 2026 14:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212163 IP address blocks: 92.55.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4a:4b:0f:90:0c:b1:43:72:f7:a9:d2:46:48:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=177822d2d1901ffd432ae23cacdcc5b976664659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:67:65:c0:6b:06:d5:8c:6d:9f:6d:9e:88: 30:bf:6d:8b:34:35:a9:a3:98:5a:52:2d:c1:4e:74: 7c:ce:94:06:3e:21:32:d7:60:e6:a7:66:4b:a7:48: 70:07:7d:7f:5b:07:66:24:40:09:ea:02:41:f5:67: c1:9a:85:2e:aa:f9:f6:e9:34:0a:a2:53:c7:52:37: 2b:56:10:7c:16:f6:57:1e:44:be:c4:ed:4c:c3:26: 3d:1b:f5:b8:c0:07:8a:fa:7d:e2:d7:74:7a:a9:7b: 05:f3:ba:e2:bb:7a:73:8e:09:9d:4a:e0:14:f2:94: 48:b2:ae:a2:53:bb:da:ce:64:c2:3a:dc:a1:0e:49: 7b:65:29:b8:11:86:b5:11:a3:5b:4f:60:8f:21:37: fc:64:ba:cf:d0:46:6c:a7:9d:a2:8d:41:97:5d:6c: 6f:50:f0:9c:0d:83:fa:54:0d:d8:73:36:1f:ae:26: f0:ba:c2:a6:34:ce:24:e7:04:f8:51:59:d3:59:9d: dd:2f:ed:45:e5:5e:7b:b6:5b:95:65:23:67:92:20: 25:64:20:4f:07:b5:f7:1c:0d:c7:97:e6:f4:7f:ad: 4a:cb:f8:a6:1e:41:aa:f1:f2:54:77:1e:17:52:d4: 36:8c:3b:9a:f9:1d:64:a5:2e:42:2d:23:88:c2:b5: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:78:22:D2:D1:90:1F:FD:43:2A:E2:3C:AC:DC:C5:B9:76:66:46:59 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.55.198.0/23 Signature Algorithm: sha256WithRSAEncryption 80:72:08:8f:96:8b:e1:fc:c1:4d:78:13:07:41:69:2d:1b:dd: 4f:fc:ab:32:b1:70:24:19:29:0f:8c:b8:9b:96:79:07:6a:ba: 34:19:f0:f1:9d:9d:35:f6:4e:60:cd:c4:fa:86:34:1d:15:c7: e4:da:c8:5c:46:cd:b0:c2:80:e6:a6:78:a5:79:56:4d:4b:c8: ad:27:54:51:d5:e9:ca:28:ad:e7:cb:bd:08:70:cb:52:26:7a: f5:15:1e:c6:cf:42:24:c3:4f:15:90:e0:2e:5d:30:0c:dd:cb: 2f:b2:95:75:2c:a2:f5:d2:39:ed:fd:0d:54:c3:01:46:c4:6e: f8:ab:1e:07:f1:ed:25:34:7c:51:0c:9d:65:96:06:ec:66:78: 96:4a:24:df:e6:54:34:fb:a0:fa:28:78:38:45:ec:70:77:be: 78:88:b0:01:07:e2:8e:57:1f:ff:0d:d8:27:92:ae:85:a4:95: e1:ac:b5:0f:09:fc:0d:e4:18:df:0e:f1:c0:d8:25:af:d8:a8: f2:db:8a:95:12:b2:1d:f3:e1:ad:8e:58:4d:bd:1a:31:b8:38: 3c:d7:d3:6f:32:27:ff:21:c8:32:71:b3:b9:7a:84:3e:35:31: 5c:ff:8d:4f:70:cd:73:47:9f:22:0a:96:bb:01:ab:01:cb:90: ad:16:1d:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEpLD5AMsUNy96nSRkirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzc4MjJkMmQxOTAxZmZkNDMyYWUyM2NhY2RjYzViOTc2NjY0NjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIhnZcBrBtWMbZ9tnogwv22LNDWp o5haUi3BTnR8zpQGPiEy12Dmp2ZLp0hwB31/WwdmJEAJ6gJB9WfBmoUuqvn26TQK olPHUjcrVhB8FvZXHkS+xO1MwyY9G/W4wAeK+n3i13R6qXsF87riu3pzjgmdSuAU 8pRIsq6iU7vazmTCOtyhDkl7ZSm4EYa1EaNbT2CPITf8ZLrP0EZsp52ijUGXXWxv UPCcDYP6VA3YczYfribwusKmNM4k5wT4UVnTWZ3dL+1F5V57tluVZSNnkiAlZCBP B7X3HA3Hl+b0f61Ky/imHkGq8fJUdx4XUtQ2jDua+R1kpS5CLSOIwrXSVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBd4ItLRkB/9QyriPKzcxbl2ZkZZMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvRjNnaTB0R1FIXzFES3VJOHJOekZ1WFptUmxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXDfGMA0G CSqGSIb3DQEBCwUAA4IBAQCAcgiPlovh/MFNeBMHQWktG91P/KsysXAkGSkPjLib lnkHaro0GfDxnZ019k5gzcT6hjQdFcfk2shcRs2wwoDmpnileVZNS8itJ1RR1enK KK3ny70IcMtSJnr1FR7Gz0Ikw08VkOAuXTAM3csvspV1LKL10jnt/Q1UwwFGxG74 qx4H8e0lNHxRDJ1llgbsZniWSiTf5lQ0+6D6KHg4Rexwd754iLABB+KOVx//Ddgn kq6FpJXhrLUPCfwN5BjfDvHA2CWv2Kjy24qVErId8+GtjlhNvRoxuDg819NvMif/ IcgycbO5eoQ+NTFc/41PcM1zR58iCpa7AasBy5CtFh2R -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:26 2026 by rpki-client