This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/O3DthDNJHTkW6CaCtq4iGTN0kKk.roa File: O3DthDNJHTkW6CaCtq4iGTN0kKk.roa (raw, json) Hash identifier: fTCVbDqUmnvXfBttOJTrF2Z8Jv/5afPtRQV2ebBHPFs= Subject key identifier: 3B:70:ED:84:33:49:1D:39:16:E8:26:82:B6:AE:22:19:33:74:90:A9 Certificate issuer: /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3 Certificate serial: 019B7CEE4BA5419B936896DD1F7ED253C146 Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/O3DthDNJHTkW6CaCtq4iGTN0kKk.roa Signing time: Fri 02 Jan 2026 04:19:10 +0000 ROA not before: Fri 02 Jan 2026 04:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12748 IP address blocks: 5.183.20.0/22 maxlen: 22 45.137.56.0/22 maxlen: 22 185.225.140.0/22 maxlen: 22 193.104.216.0/24 maxlen: 24 194.31.198.0/24 maxlen: 24 2a0d:d400::/29 maxlen: 29 2a0e:8c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4b:a5:41:9b:93:68:96:dd:1f:7e:d2:53:c1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b70ed8433491d3916e82682b6ae2219337490a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:ea:92:66:c4:2f:cb:86:f0:fe:be:8d:64: 70:6b:90:6c:a2:5b:87:29:94:44:c5:7b:8b:39:88: f5:8f:8a:c7:0c:bd:fa:81:93:49:2c:30:b0:e7:85: 6d:7d:14:60:3b:f7:98:27:fd:17:3f:7f:12:b7:f9: 83:93:03:ea:69:ca:c8:1c:e3:4d:fc:da:91:09:9d: ac:c8:a1:95:3c:8b:fe:4c:b6:15:6c:61:a2:36:ad: 47:4f:6a:de:31:fa:b1:38:ab:1a:9a:88:e7:7e:df: be:d1:a8:0b:33:03:1c:55:dd:f2:40:29:c7:cd:5c: 30:c5:9f:61:7b:7a:62:fd:22:26:5a:5f:70:09:39: 4e:cd:6f:11:68:8c:ba:8c:c9:80:89:1d:de:8f:83: 60:f8:6f:17:72:bb:99:4c:3a:d5:14:8e:6e:97:1f: ce:2d:23:57:63:1c:de:a5:24:42:4a:8c:18:23:74: 66:de:c8:7a:ff:e6:1c:e6:2d:16:26:33:6f:9b:a6: bb:2e:70:ed:20:82:2f:e4:03:2f:78:37:62:60:85: 56:3c:24:47:e2:41:e0:19:09:f3:58:f1:23:19:5f: 82:b5:0e:57:b5:58:da:46:ed:68:a1:5b:15:3c:e5: ac:48:64:2f:aa:68:c4:56:14:56:14:94:e4:a0:99: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:70:ED:84:33:49:1D:39:16:E8:26:82:B6:AE:22:19:33:74:90:A9 X509v3 Authority Key Identifier: keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/O3DthDNJHTkW6CaCtq4iGTN0kKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.20.0/22 45.137.56.0/22 185.225.140.0/22 193.104.216.0/24 194.31.198.0/24 IPv6: 2a0d:d400::/29 2a0e:8c00::/29 Signature Algorithm: sha256WithRSAEncryption 2e:84:dd:96:81:77:0d:98:dd:e1:a7:f9:be:22:c9:72:77:b3: 28:eb:47:95:cc:47:5b:a5:30:ce:65:59:c3:79:e1:6e:bf:a5: 77:d3:0b:53:86:e0:cb:f3:08:b7:7b:34:7c:93:e0:bb:a9:a5: 56:4b:e0:11:0a:6f:dd:2a:12:0a:e1:85:65:49:09:32:22:b3: 0f:cf:13:19:4a:7e:69:36:47:69:df:55:56:79:56:72:8b:9c: ea:77:1e:71:d3:68:7a:55:5b:96:72:19:0f:9c:ca:7d:c8:85: c3:c0:dc:d2:72:93:b0:9c:38:4e:6f:85:4f:21:9d:c9:98:b2: 0e:62:99:07:f4:b2:07:fd:b7:6c:a6:da:77:34:9f:3f:e8:d8: f1:ee:41:53:cf:a5:02:e1:58:e7:0a:32:e7:b7:b0:c5:6c:97: 9d:9d:63:86:c8:47:8e:d6:f3:d5:d1:d8:dd:a0:12:9e:0e:81: ef:04:d8:b8:51:93:ea:c6:c2:b5:da:ff:53:6d:3f:da:3f:c6: 9b:89:bc:5f:24:c1:91:20:7f:6b:4c:d8:72:2e:e4:d5:c8:35: 9a:a8:ef:27:37:cd:e6:25:84:c7:6e:cc:79:2f:84:b5:5a:4e: 9f:80:fd:01:fb:e7:95:ca:ae:e5:f1:ae:6c:aa:32:05:40:84: c2:a2:17:8e -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt87kulQZuTaJbdH37SU8FGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMzc4MTJiZDQ1MjczZWEzYjJhNTNkOWU5NmY2ZGJhMjE1 ODI2ZjMwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjcwZWQ4NDMzNDkxZDM5MTZlODI2ODJiNmFlMjIxOTMzNzQ5MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHnqkmbEL8uG8P6+jWRwa5BsoluH KZRExXuLOYj1j4rHDL36gZNJLDCw54VtfRRgO/eYJ/0XP38St/mDkwPqacrIHONN /NqRCZ2syKGVPIv+TLYVbGGiNq1HT2reMfqxOKsamojnft++0agLMwMcVd3yQCnH zVwwxZ9he3pi/SImWl9wCTlOzW8RaIy6jMmAiR3ej4Ng+G8XcruZTDrVFI5ulx/O LSNXYxzepSRCSowYI3Rm3sh6/+Yc5i0WJjNvm6a7LnDtIIIv5AMveDdiYIVWPCRH 4kHgGQnzWPEjGV+CtQ5XtVjaRu1ooVsVPOWsSGQvqmjEVhRWFJTkoJnSoQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFDtw7YQzSR05FugmgrauIhkzdJCpMB8GA1UdIwQY MBaAFN43gSvUUnPqOypT2elvbbohWCbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMjZjNDQtOWQxNi00YzNkLTlmMWQt YWY2NDZjOGY0YWY2LzEvTzNEdGhETkpIVGtXNkNhQ3RxNGlHVE4wa0trLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iMjZjNDQtOWQxNi00YzNkLTlmMWQtYWY2NDZjOGY0YWY2 LzEvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQCBbcUAwQC LYk4AwQCueGMAwQAwWjYAwQAwh/GMBQEAgACMA4DBQMqDdQAAwUDKg6MADANBgkq hkiG9w0BAQsFAAOCAQEALoTdloF3DZjd4af5viLJcnezKOtHlcxHW6UwzmVZw3nh br+ld9MLU4bgy/MIt3s0fJPgu6mlVkvgEQpv3SoSCuGFZUkJMiKzD88TGUp+aTZH ad9VVnlWcouc6ncecdNoelVblnIZD5zKfciFw8Dc0nKTsJw4Tm+FTyGdyZiyDmKZ B/SyB/23bKbadzSfP+jY8e5BU8+lAuFY5woy57ewxWyXnZ1jhshHjtbz1dHY3aAS ng6B7wTYuFGT6sbCtdr/U20/2j/Gm4m8XyTBkSB/a0zYci7k1cg1mqjvJzfN5iWE x27MeS+EtVpOn4D9Afvnlcqu5fGubKoyBUCEwqIXjg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:24 2026 by rpki-client