This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/3FZlUz7uoucCzaZmPG0U58fB6SA.roa File: 3FZlUz7uoucCzaZmPG0U58fB6SA.roa (raw, json) Hash identifier: LGcv5ZIogTyxDleJRKQb2SPMT566dCH0f2NqyWLWYyA= Subject key identifier: DC:56:65:53:3E:EE:A2:E7:02:CD:A6:66:3C:6D:14:E7:C7:C1:E9:20 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB1BEB1426240AC271336301D94F40 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/3FZlUz7uoucCzaZmPG0U58fB6SA.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214172 IP address blocks: 91.108.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1b:eb:14:26:24:0a:c2:71:33:63:01:d9:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc5665533eeea2e702cda6663c6d14e7c7c1e920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2d:6a:fd:21:07:5b:d5:e6:91:3e:e3:f4:00: b1:9f:38:00:24:56:5f:6e:40:26:74:a1:a5:6b:da: f9:a8:87:4d:c0:dc:84:24:44:25:5f:1a:86:29:9f: dd:9a:11:04:e4:02:a2:9e:36:20:82:c7:d7:e4:cb: a8:e0:4c:b4:68:77:98:b4:bf:7f:ab:f9:3a:63:57: d7:fd:42:60:3c:f9:6c:4f:03:24:5e:46:4e:82:11: b6:be:c2:31:65:38:d8:23:9e:16:23:d1:de:37:d7: dd:50:d7:8b:fa:43:f1:e7:7b:8a:a8:15:3f:7c:57: b8:d6:0c:fd:7d:bc:2d:c6:3a:1c:1f:e2:88:88:1c: 5f:85:92:4e:92:61:00:a5:9b:28:ff:ec:3a:d2:35: d2:ef:00:02:35:6c:df:88:a3:e3:38:98:7b:90:82: cc:ac:66:e6:af:89:46:2a:03:73:e0:55:34:b4:3d: 27:54:a0:3f:34:9e:b1:a0:30:b9:07:fc:26:79:d1: 38:f1:5f:18:16:65:0f:19:00:30:42:d7:65:6b:fc: 24:28:08:93:db:a3:24:21:38:00:d3:67:54:01:7c: fb:68:a3:36:07:3e:b6:45:ff:89:33:b4:9c:15:96: e5:82:24:2a:79:b6:f1:b2:ca:09:6c:95:42:da:a2: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:56:65:53:3E:EE:A2:E7:02:CD:A6:66:3C:6D:14:E7:C7:C1:E9:20 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/3FZlUz7uoucCzaZmPG0U58fB6SA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.243.0/24 Signature Algorithm: sha256WithRSAEncryption 81:63:50:bc:76:09:23:74:03:74:94:4d:bb:66:f1:5f:62:45: d9:61:b9:01:6d:26:4a:0f:3b:f9:d8:9a:d2:b9:e7:4c:ff:16: ee:e8:68:21:3f:82:ba:0f:55:e0:49:fa:62:73:c6:53:eb:80: d2:7d:92:f4:63:c2:dd:84:a6:08:d4:d8:8b:02:8c:c1:06:bb: 10:1d:6e:53:47:cb:be:76:3e:7a:92:7c:39:70:a8:e3:51:31: d2:9c:7c:84:73:d6:87:41:00:9b:a3:ed:dd:04:a6:06:41:11: 44:fd:91:19:c1:c7:b5:13:b9:54:da:e5:fa:49:96:b9:e4:d5: ac:c9:b3:cb:90:78:0f:f4:24:c2:1c:53:6d:1c:51:dc:21:98: 1f:44:18:d4:26:f3:3f:54:ef:92:b9:64:2c:e3:9d:06:b8:c0: de:67:62:43:16:c5:6b:d9:86:b4:4c:82:72:0a:5a:6c:bb:e2: 9b:8e:21:83:a1:98:a5:d0:0d:eb:6a:70:a2:0b:c5:c7:c2:7f: 74:e1:ff:6a:50:cd:d8:4c:b0:60:61:68:82:8f:3a:79:7d:c8: 6f:5b:c5:96:8f:47:fb:58:6c:2c:a2:58:3d:16:1e:6d:36:cf: 49:e4:dd:91:eb:3b:13:0c:a3:2c:9a:b3:6b:7d:55:37:de:80: 1a:bb:f5:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xvrFCYkCsJxM2MB2U9AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzU2NjU1MzNlZWVhMmU3MDJjZGE2NjYzYzZkMTRlN2M3YzFlOTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S1q/SEHW9XmkT7j9ACxnzgAJFZf bkAmdKGla9r5qIdNwNyEJEQlXxqGKZ/dmhEE5AKinjYggsfX5Muo4Ey0aHeYtL9/ q/k6Y1fX/UJgPPlsTwMkXkZOghG2vsIxZTjYI54WI9HeN9fdUNeL+kPx53uKqBU/ fFe41gz9fbwtxjocH+KIiBxfhZJOkmEApZso/+w60jXS7wACNWzfiKPjOJh7kILM rGbmr4lGKgNz4FU0tD0nVKA/NJ6xoDC5B/wmedE48V8YFmUPGQAwQtdla/wkKAiT 26MkITgA02dUAXz7aKM2Bz62Rf+JM7ScFZblgiQqebbxssoJbJVC2qK3/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxWZVM+7qLnAs2mZjxtFOfHwekgMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvM0ZabFV6N3VvdWNDemFabVBHMFU1OGZCNlNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2zzMA0G CSqGSIb3DQEBCwUAA4IBAQCBY1C8dgkjdAN0lE27ZvFfYkXZYbkBbSZKDzv52JrS uedM/xbu6GghP4K6D1XgSfpic8ZT64DSfZL0Y8LdhKYI1NiLAozBBrsQHW5TR8u+ dj56knw5cKjjUTHSnHyEc9aHQQCbo+3dBKYGQRFE/ZEZwce1E7lU2uX6SZa55NWs ybPLkHgP9CTCHFNtHFHcIZgfRBjUJvM/VO+SuWQs450GuMDeZ2JDFsVr2Ya0TIJy Clpsu+KbjiGDoZil0A3ranCiC8XHwn904f9qUM3YTLBgYWiCjzp5fchvW8WWj0f7 WGwsolg9Fh5tNs9J5N2R6zsTDKMsmrNrfVU33oAau/V5 -----END CERTIFICATE-----Generated at Tue Jan 20 15:49:08 2026 by rpki-client