This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/B3iq0ONo7KLOXNajJEU9_fT8nMA.roa
File: B3iq0ONo7KLOXNajJEU9_fT8nMA.roa (raw, json)
Hash identifier: siU5btEhE4XbyXfdsJsLAjTiTcogO6P0/rPXIN7WNVQ=
Subject key identifier: 07:78:AA:D0:E3:68:EC:A2:CE:5C:D6:A3:24:45:3D:FD:F4:FC:9C:C0
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 019B7C7EE8AB3F8573E4209FC07C6B68714F
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/B3iq0ONo7KLOXNajJEU9_fT8nMA.roa
Signing time: Fri 02 Jan 2026 02:17:30 +0000
ROA not before: Fri 02 Jan 2026 02:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205677
IP address blocks: 89.31.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7e:e8:ab:3f:85:73:e4:20:9f:c0:7c:6b:68:71:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Jan 2 02:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0778aad0e368eca2ce5cd6a324453dfdf4fc9cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:76:9e:4e:e5:1d:b7:e3:9f:a8:f0:89:d3:
32:b1:61:15:ef:ad:3b:d8:cb:b6:b3:65:73:2e:f2:
2b:a8:c3:02:16:a4:de:c1:d5:bd:b6:48:06:88:4e:
0e:ad:d1:f2:f9:b4:15:50:d2:f6:80:0f:3d:cd:e7:
28:67:ff:7d:4d:ce:54:dc:54:5b:ec:af:4a:da:2b:
5f:e6:6a:c7:4c:c6:67:fa:58:57:02:c3:b3:2b:4b:
01:8a:1c:58:40:7b:dc:67:31:0a:6d:0a:97:d9:14:
b3:01:3a:db:cb:e6:e8:4f:0c:21:dc:c2:a9:72:fe:
a2:00:26:7a:ad:99:fe:bb:ff:10:f4:41:3d:e7:86:
37:3d:32:9b:51:73:8e:7f:47:05:bc:7a:2c:4c:50:
f8:3c:48:cc:d6:a7:ca:a7:34:1b:8a:06:87:75:01:
69:c5:cf:58:9c:42:e0:9f:cc:3a:d2:70:bb:77:6f:
8c:d4:24:f4:eb:f4:12:90:36:7c:e4:2e:fe:c4:44:
52:f2:0b:b5:eb:b4:ff:60:da:55:0f:e3:1a:48:63:
3d:f5:2b:a8:00:82:e0:9a:72:f2:a7:13:13:9c:9f:
28:33:ed:f3:81:83:3c:5f:1f:94:17:27:40:68:73:
47:aa:fd:98:e0:b1:34:e2:c2:ce:64:50:4b:88:e1:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:78:AA:D0:E3:68:EC:A2:CE:5C:D6:A3:24:45:3D:FD:F4:FC:9C:C0
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/B3iq0ONo7KLOXNajJEU9_fT8nMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2c:30:85:43:04:bd:52:fe:64:6d:a4:a0:c8:a9:1e:e7:71:
b8:38:67:d2:e9:a6:6d:ee:55:9e:f0:5a:63:ec:45:ca:db:34:
07:75:a2:f0:78:62:61:97:f9:40:fa:87:02:f8:6e:49:b6:49:
fc:ad:e2:e8:df:8b:36:12:49:21:5e:88:29:44:7d:b7:d7:07:
2e:37:17:3e:84:45:b5:66:c0:bf:85:7f:ee:35:45:55:b0:33:
c2:30:7c:11:46:5d:9a:c5:91:a8:b1:73:fc:7e:f6:a6:af:7a:
5e:1d:50:9e:7f:9d:ef:74:d1:4a:12:da:9b:18:60:fa:58:92:
95:74:8d:6c:5d:80:0a:09:90:ad:5a:16:25:a0:9f:eb:9c:70:
a2:d7:a8:a6:52:74:b6:b3:53:5f:0d:a3:d9:ef:e1:66:04:c0:
d7:8c:df:c3:77:6e:7f:e3:74:b9:16:84:41:b7:2d:f8:4f:6e:
cd:0f:e9:72:af:df:e9:76:95:31:08:c7:84:ef:2f:a2:96:8e:
20:56:b6:15:79:ce:b2:bd:35:c3:f3:cc:41:5c:6a:c2:e4:08:
e6:01:9b:db:80:c3:2b:74:70:76:16:32:f8:59:e7:14:a2:2c:
f7:8b:cf:ee:58:94:37:21:4d:33:07:3d:1d:3e:de:82:e1:74:
25:d9:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:53 2026 by rpki-client