This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/3ZW0arWIwTpuNGlXoMjkr_FrHoE.roa File: 3ZW0arWIwTpuNGlXoMjkr_FrHoE.roa (raw, json) Hash identifier: t4uGj4/wTSstzpMGs7YKMuCqSdG4+YDmS+F49g2Xx/s= Subject key identifier: DD:95:B4:6A:B5:88:C1:3A:6E:34:69:57:A0:C8:E4:AF:F1:6B:1E:81 Certificate issuer: /CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3 Certificate serial: 019B7BA50D39F260092E47087D263E5A9331 Authority key identifier: D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/3ZW0arWIwTpuNGlXoMjkr_FrHoE.roa Signing time: Thu 01 Jan 2026 22:19:32 +0000 ROA not before: Thu 01 Jan 2026 22:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200876 IP address blocks: 82.163.240.0/21 maxlen: 21 82.163.240.0/24 maxlen: 32 82.163.241.0/24 maxlen: 32 82.163.242.0/24 maxlen: 32 82.163.243.0/24 maxlen: 32 82.163.244.0/24 maxlen: 32 82.163.245.0/24 maxlen: 32 82.163.246.0/24 maxlen: 32 82.163.247.0/24 maxlen: 32 88.212.128.0/20 maxlen: 20 88.212.128.0/24 maxlen: 32 88.212.129.0/24 maxlen: 32 88.212.130.0/24 maxlen: 32 88.212.131.0/24 maxlen: 32 88.212.132.0/24 maxlen: 32 88.212.133.0/24 maxlen: 32 88.212.134.0/24 maxlen: 32 88.212.135.0/24 maxlen: 32 88.212.136.0/24 maxlen: 32 88.212.137.0/24 maxlen: 32 88.212.138.0/24 maxlen: 32 88.212.139.0/24 maxlen: 32 88.212.140.0/24 maxlen: 32 88.212.141.0/24 maxlen: 32 88.212.142.0/24 maxlen: 32 88.212.143.0/24 maxlen: 32 88.212.160.0/22 maxlen: 22 88.212.160.0/24 maxlen: 32 88.212.161.0/24 maxlen: 32 88.212.162.0/24 maxlen: 32 88.212.163.0/24 maxlen: 32 185.46.208.0/22 maxlen: 22 185.46.208.0/24 maxlen: 32 185.46.209.0/24 maxlen: 32 185.46.210.0/24 maxlen: 32 185.46.211.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0d:39:f2:60:09:2e:47:08:7d:26:3e:5a:93:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3 Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd95b46ab588c13a6e346957a0c8e4aff16b1e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:d1:72:7d:77:77:dd:43:44:22:d1:20:8c: 28:07:c8:1e:a2:16:ed:02:c5:b9:aa:97:fb:4c:db: 5f:91:4f:ba:85:11:03:5f:70:e9:af:1a:e1:ab:39: 1a:2f:2b:f2:c5:a1:2c:30:2f:68:49:b7:11:d0:f4: 7b:3f:b4:94:6b:6a:05:b0:de:0d:68:1c:31:a7:48: 25:91:eb:b5:8b:0d:a3:87:b2:36:80:7b:b0:7b:6d: b9:92:66:d6:c3:71:34:f1:12:cf:8c:a6:17:16:51: 4b:0e:22:b0:ab:71:96:8f:5e:89:ed:2a:e2:7c:25: 95:c6:f5:b6:3c:e1:ca:88:65:3b:c8:86:91:e1:b3: b5:ce:fe:d5:86:ee:12:ce:c6:cd:22:47:1d:68:7b: b6:86:d3:21:d6:14:b7:73:a6:9d:f7:07:1e:1f:1b: 2d:0e:65:2d:ce:f9:9e:b9:c9:53:8a:0e:b2:aa:2a: ae:b8:cc:97:de:8f:22:76:63:3f:1c:ee:1a:1a:b9: 36:97:d8:b4:ea:06:3f:f1:f1:40:dc:b2:43:9c:43: 8d:9b:21:ec:23:64:3b:3e:e5:ba:18:f5:44:88:93: 41:12:61:30:56:6d:71:0e:ea:33:f4:f9:fa:60:88: ca:04:1e:88:f7:32:d9:bc:41:99:96:0e:a2:d5:8f: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:95:B4:6A:B5:88:C1:3A:6E:34:69:57:A0:C8:E4:AF:F1:6B:1E:81 X509v3 Authority Key Identifier: keyid:D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/3ZW0arWIwTpuNGlXoMjkr_FrHoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.240.0/21 88.212.128.0/20 88.212.160.0/22 185.46.208.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:2c:13:bd:b1:5d:9d:21:cc:34:b1:d8:3d:2d:1e:d8:68:85: 89:eb:33:62:12:25:5c:d8:8c:03:73:44:1f:ac:dc:15:64:73: 8c:41:99:e3:7a:c3:c8:df:83:7e:45:d2:e7:8a:1d:7d:10:e1: b2:97:e5:5b:c9:ae:7e:da:32:a5:de:6d:bb:a1:30:ed:38:48: 78:ce:0e:b4:41:72:be:42:23:47:bf:17:ea:5c:33:f2:d7:48: f6:94:60:f4:e3:93:9f:a4:77:be:d4:33:4e:fa:9b:0c:6b:aa: e7:25:1a:ed:77:ab:f7:be:5f:ca:63:58:8e:f4:cc:93:19:45: 48:2d:16:92:22:e1:10:66:02:eb:9d:88:09:e0:51:14:aa:e2: 96:bc:21:f1:82:55:83:56:40:9d:bb:48:e3:12:68:23:ac:21: 02:f4:c8:b1:12:1e:3b:2a:89:80:46:ad:38:aa:46:4b:59:5c: 56:7a:30:de:9c:b6:43:80:98:4d:9e:c2:c9:66:84:da:62:e2: dd:ef:4a:3e:5e:98:b4:80:99:2f:52:1a:38:a4:ce:23:5e:4b: 92:f5:e5:86:33:47:8e:3e:f3:34:63:9d:ec:f2:d7:fe:49:f4: 07:0d:22:1c:7b:61:8f:e1:09:d4:07:ac:dd:66:b3:7e:6b:c2: 44:5a:b3:c0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pQ058mAJLkcIfSY+WpMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NDQyZjJjMmY4OGQ5ZjZlYjJkOWM1ZGYzNjgwYmUyMWVl N2M5YjMwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDk1YjQ2YWI1ODhjMTNhNmUzNDY5NTdhMGM4ZTRhZmYxNmIxZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXjRcn13d91DRCLRIIwoB8geohbt AsW5qpf7TNtfkU+6hREDX3DprxrhqzkaLyvyxaEsMC9oSbcR0PR7P7SUa2oFsN4N aBwxp0glkeu1iw2jh7I2gHuwe225kmbWw3E08RLPjKYXFlFLDiKwq3GWj16J7Sri fCWVxvW2POHKiGU7yIaR4bO1zv7Vhu4SzsbNIkcdaHu2htMh1hS3c6ad9wceHxst DmUtzvmeuclTig6yqiquuMyX3o8idmM/HO4aGrk2l9i06gY/8fFA3LJDnEONmyHs I2Q7PuW6GPVEiJNBEmEwVm1xDuoz9Pn6YIjKBB6I9zLZvEGZlg6i1Y8vuwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFN2VtGq1iME6bjRpV6DI5K/xax6BMB8GA1UdIwQY MBaAFNhELywviNn26y2cXfNoC+Ie58mzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNzBiODQtM2Q0Yi00ZjIyLThlNTMt MGY1NDZlMTRlYjFkLzEvM1pXMGFyV0l3VHB1TkdsWG9NamtyX0ZySG9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kNzBiODQtM2Q0Yi00ZjIyLThlNTMtMGY1NDZlMTRlYjFk LzEvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDUqPwAwQE WNSAAwQCWNSgAwQCuS7QMA0GCSqGSIb3DQEBCwUAA4IBAQBdLBO9sV2dIcw0sdg9 LR7YaIWJ6zNiEiVc2IwDc0QfrNwVZHOMQZnjesPI34N+RdLnih19EOGyl+Vbya5+ 2jKl3m27oTDtOEh4zg60QXK+QiNHvxfqXDPy10j2lGD045OfpHe+1DNO+psMa6rn JRrtd6v3vl/KY1iO9MyTGUVILRaSIuEQZgLrnYgJ4FEUquKWvCHxglWDVkCdu0jj EmgjrCEC9MixEh47KomARq04qkZLWVxWejDenLZDgJhNnsLJZoTaYuLd70o+Xpi0 gJkvUho4pM4jXkuS9eWGM0eOPvM0Y53s8tf+SfQHDSIce2GP4QnUB6zdZrN+a8JE WrPA -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:29 2026 by rpki-client