This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa File: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (raw, json) Hash identifier: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY= Subject key identifier: 8B:1D:C6:EC:92:7F:FE:D8:5D:92:AC:F1:04:A8:47:4A:01:32:50:74 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019B813BDFD48DC9E4511B6826C804056218 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa Signing time: Sat 03 Jan 2026 00:22:23 +0000 ROA not before: Sat 03 Jan 2026 00:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48314 IP address blocks: 185.37.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:3b:df:d4:8d:c9:e4:51:1b:68:26:c8:04:05:62:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jan 3 00:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b1dc6ec927ffed85d92acf104a8474a01325074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:51:1c:e0:f3:ff:d4:bf:6d:89:97:4f:3b: 87:fc:1b:0b:c4:89:0b:c4:21:16:7e:e0:e7:3a:7d: 4e:e2:17:35:0e:dc:42:9d:0c:8a:1a:7c:2e:af:2f: 43:9f:ae:ed:e8:ca:56:14:cf:4e:ec:b1:29:4b:06: 50:20:46:ba:6a:1b:35:a3:87:ba:67:91:df:91:ad: 36:c5:71:f9:69:64:e0:9c:4c:bd:2f:d8:ab:4b:ed: 89:8b:c7:de:f5:b4:7d:14:b8:a9:88:49:e4:6e:71: dc:ff:61:7b:21:ef:82:ce:ca:cc:95:5b:02:1b:4e: 6a:f8:fb:3e:05:33:7c:d0:dd:d7:1d:f1:a1:73:46: e7:cb:40:de:82:5a:46:5b:e5:bc:0f:e6:55:5b:64: 03:89:e6:19:85:48:fc:f1:63:3b:42:d0:45:78:33: f5:d9:4d:73:81:f3:1c:8e:68:22:9c:90:f9:25:88: ab:c5:89:0a:e1:22:de:a5:5b:7b:fc:1f:39:1b:a0: e0:c7:39:91:85:fc:eb:fc:55:b1:88:42:52:87:dd: cd:39:0b:bf:b8:90:7c:fb:2e:80:83:f0:e1:0f:fe: 18:fd:41:b4:62:38:c0:c3:d5:0e:4f:07:7f:3a:ac: 1d:dc:10:37:87:6b:a5:35:a3:c5:36:cb:fa:c8:f4: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1D:C6:EC:92:7F:FE:D8:5D:92:AC:F1:04:A8:47:4A:01:32:50:74 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.103.0/24 Signature Algorithm: sha256WithRSAEncryption 00:b8:c2:7a:87:d5:8c:d5:2f:e2:b1:81:cc:b3:bc:71:22:e6: fc:35:78:ad:eb:9f:a7:01:84:37:1a:3e:8c:c7:00:b5:3f:bb: de:7a:a0:df:18:25:94:6c:49:e7:1a:46:fc:9e:70:85:1b:d8: d6:e1:e9:84:4d:c4:71:67:2e:30:5c:85:95:9e:9f:31:51:19: c5:9e:d0:94:cd:31:27:f5:56:cd:82:b0:ef:0d:9c:b1:f9:e9: 97:cd:32:0a:ec:98:f8:26:02:86:71:3b:76:c9:25:25:2a:25: 94:d0:18:df:c4:46:4a:54:86:1f:9e:df:1c:e3:4f:a2:16:a3: 04:8f:18:bf:10:96:59:d1:27:82:61:fe:6a:0c:a8:a6:96:41: ce:e9:9e:90:6c:7d:d7:a8:16:4c:69:0c:b1:bb:8e:25:81:07: c8:16:80:0f:2c:d9:ac:c5:40:0c:4d:f7:25:f9:2a:1f:0f:74: 83:ad:f6:cc:1d:e7:03:76:a5:be:53:88:4a:8b:f0:94:72:08: 90:94:48:5a:c8:01:a7:18:10:44:72:6a:5c:8e:1f:80:44:1b: b7:bd:01:99:b2:2b:49:78:bb:86:a0:68:9b:df:62:eb:5d:a2: 08:a4:77:08:6b:82:93:10:9b:5e:64:3b:b9:d6:59:88:71:04: 26:8d:36:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuBO9/UjcnkURtoJsgEBWIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMTAzMDAyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjFkYzZlYzkyN2ZmZWQ4NWQ5MmFjZjEwNGE4NDc0YTAxMzI1MDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrZRHODz/9S/bYmXTzuH/BsLxIkL xCEWfuDnOn1O4hc1DtxCnQyKGnwury9Dn67t6MpWFM9O7LEpSwZQIEa6ahs1o4e6 Z5Hfka02xXH5aWTgnEy9L9irS+2Ji8fe9bR9FLipiEnkbnHc/2F7Ie+CzsrMlVsC G05q+Ps+BTN80N3XHfGhc0bny0DeglpGW+W8D+ZVW2QDieYZhUj88WM7QtBFeDP1 2U1zgfMcjmginJD5JYirxYkK4SLepVt7/B85G6DgxzmRhfzr/FWxiEJSh93NOQu/ uJB8+y6Ag/DhD/4Y/UG0YjjAw9UOTwd/Oqwd3BA3h2ulNaPFNsv6yPT4CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsdxuySf/7YXZKs8QSoR0oBMlB0MB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvaXgzRzdKSl9fdGhka3F6eEJLaEhTZ0V5VUhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSVnMA0G CSqGSIb3DQEBCwUAA4IBAQAAuMJ6h9WM1S/isYHMs7xxIub8NXit65+nAYQ3Gj6M xwC1P7veeqDfGCWUbEnnGkb8nnCFG9jW4emETcRxZy4wXIWVnp8xURnFntCUzTEn 9VbNgrDvDZyx+emXzTIK7Jj4JgKGcTt2ySUlKiWU0BjfxEZKVIYfnt8c40+iFqME jxi/EJZZ0SeCYf5qDKimlkHO6Z6QbH3XqBZMaQyxu44lgQfIFoAPLNmsxUAMTfcl +SofD3SDrfbMHecDdqW+U4hKi/CUcgiQlEhayAGnGBBEcmpcjh+ARBu3vQGZsitJ eLuGoGib32LrXaIIpHcIa4KTEJteZDu51lmIcQQmjTZZ -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:49 2026 by rpki-client