This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/3SjeUFC4YP2hmea4QgynnyCGUKg.roa File: 3SjeUFC4YP2hmea4QgynnyCGUKg.roa (raw, json) Hash identifier: eN1xEmiUCaEx82o/WrnNDgoT+UPc2qHAHANZVD640yc= Subject key identifier: DD:28:DE:50:50:B8:60:FD:A1:99:E6:B8:42:0C:A7:9F:20:86:50:A8 Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8 Certificate serial: 019B7BA51CD171DE81C3870C93B61CFD94DD Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/3SjeUFC4YP2hmea4QgynnyCGUKg.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202761 IP address blocks: 178.19.172.0/22 maxlen: 22 178.19.172.0/23 maxlen: 23 178.19.172.0/24 maxlen: 24 178.19.173.0/24 maxlen: 24 178.19.174.0/23 maxlen: 23 178.19.174.0/24 maxlen: 24 178.19.175.0/24 maxlen: 24 185.251.124.0/22 maxlen: 22 185.251.124.0/23 maxlen: 23 185.251.124.0/24 maxlen: 24 185.251.125.0/24 maxlen: 24 185.251.126.0/23 maxlen: 23 185.251.126.0/24 maxlen: 24 185.251.127.0/24 maxlen: 24 2a07:8cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1c:d1:71:de:81:c3:87:0c:93:b6:1c:fd:94:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8 Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd28de5050b860fda199e6b8420ca79f208650a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:0c:0f:22:37:9c:57:2f:c9:3b:28:4c:be: ef:94:2e:1a:56:65:06:d4:1c:1a:e9:32:7a:94:51: 86:94:49:18:83:9a:a9:a5:94:a0:6d:f9:a0:ab:fd: 5c:af:06:23:42:d9:71:28:6b:b1:1f:49:ac:01:24: 05:af:04:27:0a:4a:92:8b:5f:07:27:41:de:ee:7c: 9e:ef:81:47:aa:45:5b:0d:3f:82:4e:c5:10:71:05: f9:de:42:12:3c:ca:f3:c5:2f:95:26:b7:40:65:cb: 2c:92:0f:17:ed:db:6c:3f:28:43:ec:e2:ce:a7:f8: 4e:62:30:c5:5e:32:b1:ba:62:d5:54:a3:b7:17:04: 7a:62:ad:6b:21:0b:8e:4c:9f:ad:04:72:9c:bf:b5: 0b:1e:e4:eb:d7:34:6e:cd:0b:0e:78:a6:02:d6:4d: f5:93:54:0b:f2:82:ea:0c:25:38:a4:e0:96:f3:a1: 26:9f:c1:d3:66:f6:cb:d4:b8:48:2b:de:0f:4a:cb: fa:64:87:b0:fb:5d:15:a6:60:38:9f:c4:3e:5a:d4: 80:33:67:79:8d:79:46:cc:e8:4c:db:68:e0:8b:c0: dd:64:2d:d8:1a:b8:94:92:ee:ba:b5:88:22:4f:f9: 43:08:26:b8:20:e5:a5:37:68:67:e5:cc:91:35:57: 96:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:28:DE:50:50:B8:60:FD:A1:99:E6:B8:42:0C:A7:9F:20:86:50:A8 X509v3 Authority Key Identifier: keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/3SjeUFC4YP2hmea4QgynnyCGUKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.19.172.0/22 185.251.124.0/22 IPv6: 2a07:8cc0::/29 Signature Algorithm: sha256WithRSAEncryption 65:8f:91:61:25:a7:2f:35:fd:a8:14:0b:da:68:ab:42:32:43: a9:09:1c:85:4a:c0:d0:c6:10:2d:db:38:b6:f5:75:51:e0:ab: aa:2f:95:b1:1f:b2:62:f3:b8:8f:fd:1c:3c:51:e2:35:2a:b1: 90:7d:98:cd:91:83:54:a7:13:34:91:e7:27:63:bc:eb:77:c6: b9:cc:93:e8:51:7c:ae:09:f3:1e:af:8b:c0:ea:85:64:16:71: df:4d:81:8f:2d:96:7a:ed:20:0d:55:55:76:3d:d8:a2:69:17: fd:d5:6e:3e:63:08:2f:ff:03:09:d6:5c:79:b6:68:d6:ac:e5: a8:53:cb:15:e7:9f:8d:9f:4f:a5:d9:17:8c:f3:3e:f1:f3:9c: 76:d5:8a:10:6d:09:71:37:57:b5:ea:97:65:34:ac:69:79:36: d7:2f:ba:82:a4:af:ad:21:77:cb:bf:18:85:13:99:b7:98:82: f1:84:8d:04:92:44:d2:4f:b4:68:87:b5:b4:e4:86:2e:d3:71: cc:89:4f:d5:91:72:f5:7b:a5:cb:f8:fa:ca:52:ba:6f:83:3a: 4e:8b:fd:f0:9c:6f:b6:87:c2:98:ed:08:23:90:07:3c:70:95: 6d:93:0b:35:50:a6:e5:fa:2b:d0:3a:70:da:d8:c5:a4:91:f4: 5e:b9:d0:f5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pRzRcd6Bw4cMk7Yc/ZTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTBjMjZmM2E0ZmFjNzAwYWM3YjBlMzQ5MGI4ZmExNzVm MDhhZDgwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDI4ZGU1MDUwYjg2MGZkYTE5OWU2Yjg0MjBjYTc5ZjIwODY1MGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfoMDyI3nFcvyTsoTL7vlC4aVmUG 1Bwa6TJ6lFGGlEkYg5qppZSgbfmgq/1crwYjQtlxKGuxH0msASQFrwQnCkqSi18H J0He7nye74FHqkVbDT+CTsUQcQX53kISPMrzxS+VJrdAZcsskg8X7dtsPyhD7OLO p/hOYjDFXjKxumLVVKO3FwR6Yq1rIQuOTJ+tBHKcv7ULHuTr1zRuzQsOeKYC1k31 k1QL8oLqDCU4pOCW86Emn8HTZvbL1LhIK94PSsv6ZIew+10VpmA4n8Q+WtSAM2d5 jXlGzOhM22jgi8DdZC3YGriUku66tYgiT/lDCCa4IOWlN2hn5cyRNVeWgQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFN0o3lBQuGD9oZnmuEIMp58ghlCoMB8GA1UdIwQY MBaAFGUQwm86T6xwCsew40kLj6F18IrYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAt MmJhOWQ1MTZmOTQ0LzEvM1NqZVVGQzRZUDJobWVhNFFneW5ueUNHVUtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAtMmJhOWQ1MTZmOTQ0 LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCshOsAwQC uft8MA0EAgACMAcDBQMqB4zAMA0GCSqGSIb3DQEBCwUAA4IBAQBlj5FhJacvNf2o FAvaaKtCMkOpCRyFSsDQxhAt2zi29XVR4KuqL5WxH7Ji87iP/Rw8UeI1KrGQfZjN kYNUpxM0kecnY7zrd8a5zJPoUXyuCfMer4vA6oVkFnHfTYGPLZZ67SANVVV2Pdii aRf91W4+Ywgv/wMJ1lx5tmjWrOWoU8sV55+Nn0+l2ReM8z7x85x21YoQbQlxN1e1 6pdlNKxpeTbXL7qCpK+tIXfLvxiFE5m3mILxhI0EkkTST7Roh7W05IYu03HMiU/V kXL1e6XL+PrKUrpvgzpOi/3wnG+2h8KY7QgjkAc8cJVtkws1UKbl+ivQOnDa2MWk kfReudD1 -----END CERTIFICATE-----Generated at Tue Jan 27 16:38:14 2026 by rpki-client