This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/3yqY5SvToLfZgepFACwyBjL-zFo.roa File: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (raw, json) Hash identifier: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18= Subject key identifier: DF:2A:98:E5:2B:D3:A0:B7:D9:81:EA:45:00:2C:32:06:32:FE:CC:5A Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B7910136FE97600BC597D474BF25E8B19 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/3yqY5SvToLfZgepFACwyBjL-zFo.roa Signing time: Thu 01 Jan 2026 10:17:35 +0000 ROA not before: Thu 01 Jan 2026 10:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 46.37.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:13:6f:e9:76:00:bc:59:7d:47:4b:f2:5e:8b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df2a98e52bd3a0b7d981ea45002c320632fecc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:ad:ab:52:58:24:eb:d8:cc:f3:1a:e8:5e: 79:77:5b:13:bd:8f:cf:6b:a2:37:bd:5b:a5:4a:dd: 57:68:f4:93:ac:13:88:94:c2:13:f8:d7:ed:2f:9d: 40:73:39:e4:d1:63:a7:d4:3b:db:da:0a:86:41:a4: 21:7f:18:16:e1:f5:b4:0f:da:71:e9:5f:21:fb:a2: 55:80:bf:e1:99:e6:7b:9a:04:47:d6:7e:15:cb:ab: 30:78:77:75:15:1a:98:ed:e0:6f:47:b3:64:b7:2c: 19:e3:a4:27:d3:90:6a:c6:eb:1a:a7:27:61:1a:0f: 93:15:2d:78:99:68:49:2e:16:92:36:ef:ae:3e:e1: 91:a9:8a:53:5a:01:0e:92:13:53:66:d5:ad:5e:29: 14:26:90:be:30:0d:22:c3:c2:de:2d:e2:e7:95:98: d9:34:f8:01:c5:f1:10:4a:d8:05:f1:2f:6c:42:ab: 32:65:27:11:d4:32:42:54:f6:64:81:6a:10:54:39: ee:17:2c:38:cb:86:3c:38:ef:b4:7e:07:f9:17:99: ed:a1:ca:d9:f7:f0:e5:fa:a8:26:ff:80:2d:1e:cb: 85:e1:c1:99:52:6d:ba:64:7d:68:01:24:f8:45:78: e2:4f:a0:d1:47:65:d2:d5:14:33:7e:ef:8d:af:e6: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2A:98:E5:2B:D3:A0:B7:D9:81:EA:45:00:2C:32:06:32:FE:CC:5A X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/3yqY5SvToLfZgepFACwyBjL-zFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.105.0/24 Signature Algorithm: sha256WithRSAEncryption b3:38:b4:bd:12:39:59:5d:fb:95:d7:2a:40:90:2a:29:e6:e2: a6:85:22:1c:ed:88:c3:24:0b:e0:aa:f1:e7:96:76:dc:60:ec: 99:ef:ef:ea:3c:97:eb:61:cd:6c:43:95:0b:e3:e0:1e:67:49: 4a:23:15:f4:5a:f3:27:b7:0b:f0:89:75:9c:fa:e7:86:e2:cb: f7:a7:c5:41:84:f4:89:16:78:5f:e7:2e:63:82:bd:ad:61:54: fe:11:52:62:5e:b3:8b:e1:8a:4f:29:a8:3d:ba:56:05:0b:da: a8:0b:68:ac:13:d1:21:80:86:c6:20:ef:6f:37:a8:d3:4a:cb: 1b:dd:1b:da:60:18:06:db:88:ff:05:39:3c:07:51:3b:5d:e4: ad:37:65:53:7a:55:15:6e:d9:14:31:6d:80:b0:a0:c0:21:ec: eb:38:f1:a9:41:ab:54:63:b9:61:48:a8:b9:24:74:0e:3e:06: fa:72:44:e7:0a:be:08:02:90:ba:2e:fc:7f:a0:3b:ec:4b:ca: b6:d8:0b:7e:19:7f:f7:01:3b:3a:dc:57:60:68:20:99:9d:cf: 6f:11:81:67:cc:0e:43:cd:07:cf:c6:12:7b:f5:0a:30:fe:4b: 4c:c2:dd:1e:b8:5c:55:f8:0b:83:3d:84:9c:62:17:46:1d:af: b0:d5:d3:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBNv6XYAvFl9R0vyXosZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjJhOThlNTJiZDNhMGI3ZDk4MWVhNDUwMDJjMzIwNjMyZmVjYzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5atq1JYJOvYzPMa6F55d1sTvY/P a6I3vVulSt1XaPSTrBOIlMIT+NftL51Acznk0WOn1Dvb2gqGQaQhfxgW4fW0D9px 6V8h+6JVgL/hmeZ7mgRH1n4Vy6sweHd1FRqY7eBvR7NktywZ46Qn05Bqxusapydh Gg+TFS14mWhJLhaSNu+uPuGRqYpTWgEOkhNTZtWtXikUJpC+MA0iw8LeLeLnlZjZ NPgBxfEQStgF8S9sQqsyZScR1DJCVPZkgWoQVDnuFyw4y4Y8OO+0fgf5F5ntocrZ 9/Dl+qgm/4AtHsuF4cGZUm26ZH1oAST4RXjiT6DRR2XS1RQzfu+Nr+ba6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8qmOUr06C32YHqRQAsMgYy/sxaMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvM3lxWTVTdlRvTGZaZ2VwRkFDd3lCakwtekZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVpMA0G CSqGSIb3DQEBCwUAA4IBAQCzOLS9EjlZXfuV1ypAkCop5uKmhSIc7YjDJAvgqvHn lnbcYOyZ7+/qPJfrYc1sQ5UL4+AeZ0lKIxX0WvMntwvwiXWc+ueG4sv3p8VBhPSJ Fnhf5y5jgr2tYVT+EVJiXrOL4YpPKag9ulYFC9qoC2isE9EhgIbGIO9vN6jTSssb 3RvaYBgG24j/BTk8B1E7XeStN2VTelUVbtkUMW2AsKDAIezrOPGpQatUY7lhSKi5 JHQOPgb6ckTnCr4IApC6Lvx/oDvsS8q22At+GX/3ATs63FdgaCCZnc9vEYFnzA5D zQfPxhJ79Qow/ktMwt0euFxV+AuDPYScYhdGHa+w1dNk -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:56 2026 by rpki-client