This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/N3hVVOovM_77teroBxQL9P-gg3U.roa File: N3hVVOovM_77teroBxQL9P-gg3U.roa (raw, json) Hash identifier: 2ks0o9g54VzhWfaTpoQs/luMrk638SsVVoduuStd18k= Subject key identifier: 37:78:55:54:EA:2F:33:FE:FB:B5:EA:E8:07:14:0B:F4:FF:A0:83:75 Certificate issuer: /CN=31951e36ffd97c1d733a90a5af6fada85fd27782 Certificate serial: 019B7758E868E582CD6707FC785C2A32CAD6 Authority key identifier: 31:95:1E:36:FF:D9:7C:1D:73:3A:90:A5:AF:6F:AD:A8:5F:D2:77:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/N3hVVOovM_77teroBxQL9P-gg3U.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211934 IP address blocks: 91.212.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e8:68:e5:82:cd:67:07:fc:78:5c:2a:32:ca:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31951e36ffd97c1d733a90a5af6fada85fd27782 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37785554ea2f33fefbb5eae807140bf4ffa08375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b4:88:7e:67:a2:16:3e:fa:a2:a7:64:d9:a5: 66:12:22:67:ce:4b:36:63:1a:ed:9f:d8:d8:36:58: 0b:e7:d6:c6:f1:83:4c:9d:6e:02:f0:c7:c1:d6:57: ef:5c:bd:70:8b:9c:85:55:07:a1:9b:72:94:23:e6: 9a:0f:3c:b7:36:93:f9:a2:c4:0d:3d:76:26:b7:3a: 6c:96:14:65:8c:d7:fa:1d:2b:ae:13:a3:8b:bb:7a: 3a:a5:bc:b2:8a:f6:bc:1f:f6:40:b9:40:30:47:74: 6c:4e:63:88:12:41:53:62:6a:f1:9e:3d:d7:6f:c7: 0f:35:d3:f7:2a:c4:cb:73:91:ce:ab:ff:49:80:82: 00:68:8b:f4:b5:2a:b7:d5:0a:d8:2f:0c:62:0b:57: cd:e2:ff:f9:a4:b1:df:a8:43:8f:67:ac:6b:69:50: 39:c9:60:d5:dd:37:52:a0:b0:e3:8d:63:d6:58:d4: fd:c6:d1:e4:db:59:07:50:e7:a6:cf:88:c8:52:25: 58:1a:99:8f:14:0e:fb:d7:24:64:4a:d6:a8:6a:1f: 80:39:12:87:60:a9:6d:01:8a:29:d9:fb:d3:ac:89: 21:41:75:af:ac:99:e1:78:26:c1:61:9e:33:e8:93: b2:ad:a8:22:30:4c:9b:b0:f2:00:8a:e9:76:09:4d: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:78:55:54:EA:2F:33:FE:FB:B5:EA:E8:07:14:0B:F4:FF:A0:83:75 X509v3 Authority Key Identifier: keyid:31:95:1E:36:FF:D9:7C:1D:73:3A:90:A5:AF:6F:AD:A8:5F:D2:77:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/N3hVVOovM_77teroBxQL9P-gg3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.230.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:4f:47:34:3c:d1:03:94:9e:3c:fb:ea:74:6a:7f:e8:a2:ad: 7b:05:0c:96:ea:d2:a3:8b:e8:a1:c7:3b:a3:96:3e:39:eb:11: d4:63:73:7f:8a:62:a3:77:00:69:33:fe:e1:de:4f:ad:05:f7: 58:59:c2:76:20:8f:a1:61:fd:ed:97:55:a3:91:89:84:84:a5: 87:7d:3b:cf:38:a6:08:a6:6c:1a:87:2c:2a:ca:2e:e7:50:fb: 2f:e5:68:6b:48:5e:14:0c:24:ec:9d:39:df:84:a7:a4:2e:d7: f5:4b:e7:33:bb:57:7c:57:4d:2a:fe:f0:67:1c:52:c2:4c:96: 93:73:21:fc:d5:7e:84:07:0d:b4:36:cc:9e:a0:e6:a9:77:71: 25:cc:70:ef:b1:b8:e8:c5:d2:23:6b:3d:f2:29:ae:45:70:81: b4:d5:9b:74:c2:f8:8c:a3:ed:7b:12:10:a9:43:d3:d0:a9:bb: 61:31:f6:ad:84:bf:1b:c2:9b:00:5b:8d:bd:1e:95:76:d3:eb: 21:7e:ad:c2:01:78:32:c1:e5:99:0a:9e:e8:82:49:e9:c0:af: 94:2b:4a:59:2d:7a:80:d0:b1:b7:59:16:9f:d5:25:f6:68:4c: fe:4a:f7:4b:53:e9:7b:e5:58:6a:11:5f:ce:0a:78:03:9d:eb: b1:70:6d:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOho5YLNZwf8eFwqMsrWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOTUxZTM2ZmZkOTdjMWQ3MzNhOTBhNWFmNmZhZGE4NWZk Mjc3ODIwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzc4NTU1NGVhMmYzM2ZlZmJiNWVhZTgwNzE0MGJmNGZmYTA4Mzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57SIfmeiFj76oqdk2aVmEiJnzks2 Yxrtn9jYNlgL59bG8YNMnW4C8MfB1lfvXL1wi5yFVQehm3KUI+aaDzy3NpP5osQN PXYmtzpslhRljNf6HSuuE6OLu3o6pbyyiva8H/ZAuUAwR3RsTmOIEkFTYmrxnj3X b8cPNdP3KsTLc5HOq/9JgIIAaIv0tSq31QrYLwxiC1fN4v/5pLHfqEOPZ6xraVA5 yWDV3TdSoLDjjWPWWNT9xtHk21kHUOemz4jIUiVYGpmPFA771yRkStaoah+AORKH YKltAYop2fvTrIkhQXWvrJnheCbBYZ4z6JOyragiMEybsPIAiul2CU2EiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDd4VVTqLzP++7Xq6AcUC/T/oIN1MB8GA1UdIwQY MBaAFDGVHjb/2XwdczqQpa9vrahf0neCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVpVZU52X1pmQjF6T3BDbHIyLXRxRl9TZDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jYzAwZWItNTZmNi00MWE3LTgzMDUt YzI5OTk2NWJiYzQyLzEvTjNoVlZPb3ZNXzc3dGVyb0J4UUw5UC1nZzNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jYzAwZWItNTZmNi00MWE3LTgzMDUtYzI5OTk2NWJiYzQy LzEvTVpVZU52X1pmQjF6T3BDbHIyLXRxRl9TZDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9TmMA0G CSqGSIb3DQEBCwUAA4IBAQAPT0c0PNEDlJ48++p0an/ooq17BQyW6tKji+ihxzuj lj456xHUY3N/imKjdwBpM/7h3k+tBfdYWcJ2II+hYf3tl1WjkYmEhKWHfTvPOKYI pmwahywqyi7nUPsv5WhrSF4UDCTsnTnfhKekLtf1S+czu1d8V00q/vBnHFLCTJaT cyH81X6EBw20NsyeoOapd3ElzHDvsbjoxdIjaz3yKa5FcIG01Zt0wviMo+17EhCp Q9PQqbthMfathL8bwpsAW429HpV20+shfq3CAXgyweWZCp7ogknpwK+UK0pZLXqA 0LG3WRaf1SX2aEz+SvdLU+l75VhqEV/OCngDneuxcG1r -----END CERTIFICATE-----Generated at Tue Feb 10 02:30:40 2026 by rpki-client