This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/3X6-pzNPY3tzlgBDaVNATe6mMS0.roa File: 3X6-pzNPY3tzlgBDaVNATe6mMS0.roa (raw, json) Hash identifier: Lu/BQkt+ELdvhSoT4WKAwNXeot2X/O3feObGQc4WzTU= Subject key identifier: DD:7E:BE:A7:33:4F:63:7B:73:96:00:43:69:53:40:4D:EE:A6:31:2D Certificate issuer: /CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d Certificate serial: 019B7A5B0FEE1B20F83D70A8DEB6E7E1DB87 Authority key identifier: 4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/3X6-pzNPY3tzlgBDaVNATe6mMS0.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199452 IP address blocks: 185.2.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0f:ee:1b:20:f8:3d:70:a8:de:b6:e7:e1:db:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd7ebea7334f637b739600436953404deea6312d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c1:9c:2c:fa:1a:f2:51:07:90:74:06:57:4e: 8f:48:ed:19:0e:c2:67:a8:8b:d2:00:0e:6c:7f:5e: 74:e2:35:a5:c6:d2:96:61:62:dd:03:5a:7d:0d:41: e3:b5:62:9b:6c:8c:14:ba:2c:92:e2:79:9e:c8:fd: 65:b9:e6:d4:69:53:31:c2:8d:cf:7d:f8:ae:ab:2d: 7f:a6:29:86:a2:40:63:41:43:db:12:54:20:af:6d: ef:15:9d:76:29:e9:3f:d8:ec:08:d4:6d:df:55:db: 33:0b:24:11:01:65:b0:a4:e0:dd:43:1d:54:dd:3c: eb:3a:f7:b5:a8:31:ef:ec:87:da:d0:1d:49:d7:36: dd:5b:3f:d0:d8:35:88:09:8c:e5:dd:2d:ad:42:14: 69:82:b6:0f:3f:8a:c6:0a:b7:49:15:23:d1:0f:6f: 8a:34:cc:80:36:14:3d:04:d9:9a:22:d4:69:65:9c: 6e:fe:c0:e0:50:5e:5c:19:9e:67:96:34:98:bf:3e: 64:b5:ec:98:5d:45:31:30:c9:80:b4:e7:a5:b3:bc: ae:c2:8c:d5:30:ed:0f:44:dd:92:d1:03:e0:39:b2: 66:e8:b4:8b:fb:31:f2:ea:e2:60:bd:90:0b:5b:82: 47:41:76:d0:4a:1b:93:86:e4:4b:2f:66:3c:49:ae: 0c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7E:BE:A7:33:4F:63:7B:73:96:00:43:69:53:40:4D:EE:A6:31:2D X509v3 Authority Key Identifier: keyid:4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/3X6-pzNPY3tzlgBDaVNATe6mMS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.2.192.0/22 Signature Algorithm: sha256WithRSAEncryption 76:bc:ad:0f:47:6c:3a:96:ba:1d:ef:42:9e:6f:85:ba:ca:e0: 36:29:06:49:9e:e2:89:e1:ce:37:32:73:44:a2:52:c6:5b:3d: 79:02:37:97:98:17:bb:e1:01:48:52:f8:cb:13:d0:ee:6b:8a: 4c:0d:06:19:1d:c1:c4:d7:5f:58:88:9d:fc:70:96:94:1f:e0: 9b:43:0c:db:f0:7c:6e:07:d0:07:d1:05:d4:65:ae:79:e9:f6: 7d:cc:83:00:d9:8e:7e:d9:64:97:20:b2:a7:d0:68:f6:e3:85: aa:22:f0:52:8d:7f:23:6e:47:15:06:bf:09:61:88:5d:f5:91: 05:11:97:70:81:5e:62:3e:f4:bd:31:20:6b:c3:96:a3:ba:95: 42:6a:17:5f:2f:42:19:f2:66:7b:2d:93:11:11:4c:52:50:2c: 12:25:ff:ce:b6:d5:bc:11:2c:d9:d3:57:6a:05:64:e6:22:85: db:9f:f6:c4:e2:fc:a1:5b:64:6c:5f:fa:ad:5a:5a:4a:4d:38: 03:38:b0:eb:54:59:3e:a5:28:56:45:65:4b:1c:7a:eb:bd:be: 08:16:73:8c:1d:7b:64:e4:cb:00:f4:4c:d0:4c:9a:0d:68:fc: 8b:ef:d9:37:db:e2:67:ca:99:3f:3b:5e:a2:05:1f:9c:dc:eb: 0c:45:19:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ww/uGyD4PXCo3rbn4duHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNzU1YTZkZTVjMTY3ODA5ZjgxOWM4NWY4YzhlNWE2ZTRj ZTEyN2QwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDdlYmVhNzMzNGY2MzdiNzM5NjAwNDM2OTUzNDA0ZGVlYTYzMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcGcLPoa8lEHkHQGV06PSO0ZDsJn qIvSAA5sf1504jWlxtKWYWLdA1p9DUHjtWKbbIwUuiyS4nmeyP1luebUaVMxwo3P ffiuqy1/pimGokBjQUPbElQgr23vFZ12Kek/2OwI1G3fVdszCyQRAWWwpODdQx1U 3TzrOve1qDHv7Ifa0B1J1zbdWz/Q2DWICYzl3S2tQhRpgrYPP4rGCrdJFSPRD2+K NMyANhQ9BNmaItRpZZxu/sDgUF5cGZ5nljSYvz5kteyYXUUxMMmAtOels7yuwozV MO0PRN2S0QPgObJm6LSL+zHy6uJgvZALW4JHQXbQShuThuRLL2Y8Sa4M0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN1+vqczT2N7c5YAQ2lTQE3upjEtMB8GA1UdIwQY MBaAFEp1Wm3lwWeAn4GchfjI5abkzhJ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NmY0MTItMGI0Yi00Yjc1LTg4ZDAt OTZjNGRjMTM3YjI3LzEvM1g2LXB6TlBZM3R6bGdCRGFWTkFUZTZtTVMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81NmY0MTItMGI0Yi00Yjc1LTg4ZDAtOTZjNGRjMTM3YjI3 LzEvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQLAMA0G CSqGSIb3DQEBCwUAA4IBAQB2vK0PR2w6lrod70Keb4W6yuA2KQZJnuKJ4c43MnNE olLGWz15AjeXmBe74QFIUvjLE9Dua4pMDQYZHcHE119YiJ38cJaUH+CbQwzb8Hxu B9AH0QXUZa556fZ9zIMA2Y5+2WSXILKn0Gj244WqIvBSjX8jbkcVBr8JYYhd9ZEF EZdwgV5iPvS9MSBrw5ajupVCahdfL0IZ8mZ7LZMREUxSUCwSJf/OttW8ESzZ01dq BWTmIoXbn/bE4vyhW2RsX/qtWlpKTTgDOLDrVFk+pShWRWVLHHrrvb4IFnOMHXtk 5MsA9EzQTJoNaPyL79k32+Jnypk/O16iBR+c3OsMRRni -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:18 2026 by rpki-client