This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/3qN8EgRnuBeoXtMeqUT0z6kjHJg.roa File: 3qN8EgRnuBeoXtMeqUT0z6kjHJg.roa (raw, json) Hash identifier: RYP+kCE6mn90ehLAvdC/KeyfQc4In+6wu6IVJb4OH5c= Subject key identifier: DE:A3:7C:12:04:67:B8:17:A8:5E:D3:1E:A9:44:F4:CF:A9:23:1C:98 Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d Certificate serial: 019B7E37F25D53A51C3E62977555A9E99B0D Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/3qN8EgRnuBeoXtMeqUT0z6kjHJg.roa Signing time: Fri 02 Jan 2026 10:19:14 +0000 ROA not before: Fri 02 Jan 2026 10:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203851 IP address blocks: 185.154.50.0/24 maxlen: 24 185.154.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f2:5d:53:a5:1c:3e:62:97:75:55:a9:e9:9b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d Validity Not Before: Jan 2 10:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dea37c120467b817a85ed31ea944f4cfa9231c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:e4:34:02:97:5a:3a:0c:e8:fb:c5:06:f2: 9c:1c:3e:a0:f7:bc:1c:8d:12:0d:6e:10:5d:25:94: 39:b5:d3:50:1a:9b:3e:af:6a:88:97:5b:d4:65:ad: 6f:0a:fb:ad:93:4f:b9:58:d1:ca:e7:62:5b:1e:82: 25:b7:f4:a6:4c:85:e1:0e:7f:90:a8:33:a4:31:ff: 4e:cb:1f:41:b8:c2:4c:39:d3:69:35:5f:73:fa:af: 5a:e1:52:09:eb:62:4d:e6:44:79:59:28:3c:c4:18: 6c:ae:b7:eb:71:0f:b4:17:37:4a:b3:01:82:be:be: a9:c6:e0:9d:3a:66:af:f1:59:ff:8e:1c:44:a1:66: 87:0d:b7:65:6f:03:46:83:a2:23:80:c7:71:5a:dd: da:8f:11:06:60:d8:3e:cf:6a:79:55:f2:1e:09:6a: ef:c8:bb:a1:03:5e:c6:32:95:d8:46:67:ec:1a:da: 18:fb:7f:8a:f5:d6:52:f2:97:b1:aa:66:27:7a:6b: 01:94:3d:d3:1a:4f:b6:50:06:9d:1f:8b:96:30:18: c5:29:a7:5d:8d:c8:03:af:fe:9f:76:02:2d:94:c0: 1a:91:06:c6:09:76:34:ba:6f:1e:7c:eb:23:63:8f: 96:a2:e6:83:6b:32:42:3d:03:69:61:37:55:e4:31: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A3:7C:12:04:67:B8:17:A8:5E:D3:1E:A9:44:F4:CF:A9:23:1C:98 X509v3 Authority Key Identifier: keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/3qN8EgRnuBeoXtMeqUT0z6kjHJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.50.0/23 Signature Algorithm: sha256WithRSAEncryption 43:1c:5e:16:9a:d1:26:61:a6:6e:a0:28:60:ef:5b:ae:f9:17: 13:2c:f5:2d:59:b7:c8:79:46:61:10:f4:60:e2:f5:4e:12:c5: 34:a9:7c:ef:a3:97:50:df:00:84:b9:9e:6c:9f:75:c7:9e:52: 3f:32:fd:59:c2:88:43:dc:23:4a:33:98:d9:98:f1:2b:29:fb: a2:ea:c9:7a:f0:7a:bc:71:6d:e2:01:d7:b9:a1:11:90:d6:03: f8:60:28:98:26:6f:8b:88:3f:b9:2f:48:b0:f1:e2:2a:2b:42: 6e:71:0b:be:71:db:b7:70:bb:d1:62:12:de:08:f2:d8:c5:97: 44:cf:68:7d:71:1b:ea:ee:57:dc:3a:43:23:03:c2:98:0f:49: 41:d1:36:57:66:14:f1:02:30:4a:f3:92:1a:01:9d:6e:88:bb: e8:14:1f:3f:95:f5:b8:49:05:f4:b4:0c:bb:3b:10:61:b6:ec: e1:ec:4c:b0:93:b2:66:4e:86:0e:96:05:f2:1a:f9:88:a9:68: 00:90:e1:b1:8d:7a:58:d9:44:25:7f:be:3e:d1:cb:ae:84:52: 8c:c5:7b:a9:58:8f:b0:a3:82:0b:5a:f8:bf:2a:34:41:2f:a6: 8a:91:e0:e8:9f:6c:93:80:4f:e0:cf:77:54:95:1c:81:3e:1b: 2c:7e:3a:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/JdU6UcPmKXdVWp6ZsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MDRkYWY4NThiN2IwMGI1MWNiYjk0YWZiMjhmMDNlYTIx ZTQxMWQwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWEzN2MxMjA0NjdiODE3YTg1ZWQzMWVhOTQ0ZjRjZmE5MjMxYzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprjkNAKXWjoM6PvFBvKcHD6g97wc jRINbhBdJZQ5tdNQGps+r2qIl1vUZa1vCvutk0+5WNHK52JbHoIlt/SmTIXhDn+Q qDOkMf9Oyx9BuMJMOdNpNV9z+q9a4VIJ62JN5kR5WSg8xBhsrrfrcQ+0FzdKswGC vr6pxuCdOmav8Vn/jhxEoWaHDbdlbwNGg6IjgMdxWt3ajxEGYNg+z2p5VfIeCWrv yLuhA17GMpXYRmfsGtoY+3+K9dZS8pexqmYnemsBlD3TGk+2UAadH4uWMBjFKadd jcgDr/6fdgItlMAakQbGCXY0um8efOsjY4+WouaDazJCPQNpYTdV5DF2hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN6jfBIEZ7gXqF7THqlE9M+pIxyYMB8GA1UdIwQY MBaAFGkE2vhYt7ALUcu5Svso8D6iHkEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQt OGFkMWQwZjgwMjE3LzEvM3FOOEVnUm51QmVvWHRNZXFVVDB6NmtqSEpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQtOGFkMWQwZjgwMjE3 LzEvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZoyMA0G CSqGSIb3DQEBCwUAA4IBAQBDHF4WmtEmYaZuoChg71uu+RcTLPUtWbfIeUZhEPRg 4vVOEsU0qXzvo5dQ3wCEuZ5sn3XHnlI/Mv1ZwohD3CNKM5jZmPErKfui6sl68Hq8 cW3iAde5oRGQ1gP4YCiYJm+LiD+5L0iw8eIqK0JucQu+cdu3cLvRYhLeCPLYxZdE z2h9cRvq7lfcOkMjA8KYD0lB0TZXZhTxAjBK85IaAZ1uiLvoFB8/lfW4SQX0tAy7 OxBhtuzh7Eywk7JmToYOlgXyGvmIqWgAkOGxjXpY2UQlf74+0cuuhFKMxXupWI+w o4ILWvi/KjRBL6aKkeDon2yTgE/gz3dUlRyBPhssfjrX -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:25 2026 by rpki-client