This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/3WJjV42gX3UcYyB9uPxn6ReQPNE.roa File: 3WJjV42gX3UcYyB9uPxn6ReQPNE.roa (raw, json) Hash identifier: xdAcfOJKPu9GkR2yJdt8tSxgO0xjvWuS026sQ/93JIc= Subject key identifier: DD:62:63:57:8D:A0:5F:75:1C:63:20:7D:B8:FC:67:E9:17:90:3C:D1 Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3 Certificate serial: 019B79103ECFB8C79E2A70A3F2A3CAF27E2B Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/3WJjV42gX3UcYyB9uPxn6ReQPNE.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204877 IP address blocks: 185.141.120.0/22 maxlen: 24 2a0d:ff00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3e:cf:b8:c7:9e:2a:70:a3:f2:a3:ca:f2:7e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd6263578da05f751c63207db8fc67e917903cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:ed:58:f7:46:83:8d:be:e2:3d:b1:95:0d: da:68:d3:d9:c0:33:ae:c7:c9:c6:2c:4f:65:41:75: 73:fb:8b:49:8e:25:51:37:87:ac:80:1b:a3:fd:33: 95:bd:91:85:70:ee:31:07:ac:2d:66:fb:4f:60:de: 0a:45:2b:1c:3c:3e:9e:be:f0:43:80:8e:a9:c1:22: 41:6c:54:70:57:32:c4:93:91:70:a3:7e:ff:43:16: 95:5f:11:26:99:e6:c8:6d:34:a3:53:9e:2d:3f:d5: 08:f0:c8:45:ec:1e:90:b9:14:a5:b6:d4:69:63:94: b7:d8:1d:54:5a:d4:a1:79:b1:a7:20:43:74:34:08: 0c:e1:7f:16:58:69:41:73:ea:d2:be:ff:83:fe:c6: 50:47:b7:5e:64:cb:74:12:c3:95:0e:4d:34:65:36: ea:7f:3f:4e:26:20:cf:2a:41:e7:ea:9b:08:21:42: a1:43:71:c7:b4:dd:f1:a1:b4:41:b7:93:89:a7:b1: 4d:dd:85:da:37:39:b4:44:3b:42:b9:1c:3b:bb:ea: 7f:6d:d4:59:fb:28:4f:97:39:bb:b9:4f:cd:3a:d3: 52:dc:b6:99:ad:43:8c:84:32:75:ce:67:b3:e0:e9: ef:a5:c0:bb:d8:11:80:d4:2a:35:04:a1:f3:51:e3: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:62:63:57:8D:A0:5F:75:1C:63:20:7D:B8:FC:67:E9:17:90:3C:D1 X509v3 Authority Key Identifier: keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/3WJjV42gX3UcYyB9uPxn6ReQPNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.120.0/22 IPv6: 2a0d:ff00::/29 Signature Algorithm: sha256WithRSAEncryption 3c:6f:26:e4:a4:0a:f6:af:49:26:1a:95:ce:fe:b1:65:84:e5: e7:aa:69:57:36:fc:a7:a9:e6:c1:d9:82:ec:f1:1f:11:d4:fc: 30:0f:e6:ed:c1:be:fc:cf:5a:ba:b3:ac:74:91:b1:8a:3e:45: 6c:9a:ee:b0:7e:ad:65:3d:cf:d8:55:c5:eb:64:fe:41:05:c3: 37:b1:9e:59:d9:85:38:84:e3:2f:49:76:8c:1c:df:f7:b4:31: 44:1c:55:5e:4c:d2:a7:9b:80:8a:9a:fe:ba:be:64:d6:4a:fa: fa:9d:72:01:29:eb:54:09:0c:69:4a:e2:9f:c4:57:b0:bd:89: 72:9b:60:26:b9:85:12:58:99:2a:48:ec:e7:ba:2b:78:65:8a: 73:b4:ab:d0:e2:1a:1b:24:cf:63:2d:5f:44:da:e1:3c:ea:e3: 21:6f:5f:0e:cb:3e:8d:e2:a6:7e:61:fd:2f:78:d1:87:24:9a: ab:b8:80:5f:e2:05:c1:6d:04:f0:bc:49:3d:6a:b3:5e:5c:b2: b8:1d:cc:b0:b2:b8:7e:13:2a:b0:05:ef:a9:3d:ab:d6:97:10: c2:01:ab:c5:8f:92:59:92:85:ce:b3:c4:83:55:42:7a:aa:89: 5f:7f:58:1f:01:e1:de:f0:24:18:b3:45:b2:6b:ae:1d:3b:79: b4:37:ca:fa -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ED7PuMeeKnCj8qPK8n4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YmE5YzIyMzI0MWViODBlMmJjNzE4NTNiYjdkMmU1ODI4 NmJkZDMwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDYyNjM1NzhkYTA1Zjc1MWM2MzIwN2RiOGZjNjdlOTE3OTAzY2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYTtWPdGg42+4j2xlQ3aaNPZwDOu x8nGLE9lQXVz+4tJjiVRN4esgBuj/TOVvZGFcO4xB6wtZvtPYN4KRSscPD6evvBD gI6pwSJBbFRwVzLEk5Fwo37/QxaVXxEmmebIbTSjU54tP9UI8MhF7B6QuRSlttRp Y5S32B1UWtShebGnIEN0NAgM4X8WWGlBc+rSvv+D/sZQR7deZMt0EsOVDk00ZTbq fz9OJiDPKkHn6psIIUKhQ3HHtN3xobRBt5OJp7FN3YXaNzm0RDtCuRw7u+p/bdRZ +yhPlzm7uU/NOtNS3LaZrUOMhDJ1zmez4OnvpcC72BGA1Co1BKHzUeNqEQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN1iY1eNoF91HGMgfbj8Z+kXkDzRMB8GA1UdIwQY MBaAFDS6nCIyQeuA4rxxhTu30uWChr3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzIt MTNlZTRjOGQzMDgyLzEvM1dKalY0MmdYM1VjWXlCOXVQeG42UmVRUE5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzItMTNlZTRjOGQzMDgy LzEvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY14MA0E AgACMAcDBQMqDf8AMA0GCSqGSIb3DQEBCwUAA4IBAQA8bybkpAr2r0kmGpXO/rFl hOXnqmlXNvynqebB2YLs8R8R1PwwD+btwb78z1q6s6x0kbGKPkVsmu6wfq1lPc/Y VcXrZP5BBcM3sZ5Z2YU4hOMvSXaMHN/3tDFEHFVeTNKnm4CKmv66vmTWSvr6nXIB KetUCQxpSuKfxFewvYlym2AmuYUSWJkqSOznuit4ZYpztKvQ4hobJM9jLV9E2uE8 6uMhb18Oyz6N4qZ+Yf0veNGHJJqruIBf4gXBbQTwvEk9arNeXLK4Hcywsrh+Eyqw Be+pPavWlxDCAavFj5JZkoXOs8SDVUJ6qolff1gfAeHe8CQYs0Wya64dO3m0N8r6 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:12 2026 by rpki-client