This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa File: 3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa (raw, json) Hash identifier: VopVFdZw3ER/r0OJ1FIpefADgp91rKMDyFpDZmkW2g0= Subject key identifier: DF:04:9A:49:86:FC:99:2F:CF:C6:3A:92:AD:E9:95:7F:56:4D:D0:84 Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Certificate serial: 019BDB1F57CD20387250E44D8973B11406B1 Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa Signing time: Tue 20 Jan 2026 11:17:03 +0000 ROA not before: Tue 20 Jan 2026 11:17:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206134 IP address blocks: 195.62.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:1f:57:cd:20:38:72:50:e4:4d:89:73:b1:14:06:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Validity Not Before: Jan 20 11:17:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df049a4986fc992fcfc63a92ade9957f564dd084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:1b:f2:4b:93:d7:ba:2a:30:54:5d:b7:a1: e0:81:62:c6:b3:ba:c3:06:bb:56:de:5a:4c:36:31: ae:aa:26:09:19:cf:86:30:eb:05:c9:04:93:13:2d: 89:66:9a:a9:38:d0:1c:47:d8:29:5b:bc:24:ac:20: e9:52:01:90:9c:4b:cd:85:be:d5:60:2f:95:81:0b: a7:ed:06:6f:4f:c0:3f:06:16:b2:53:a7:9d:3a:c5: 08:c3:07:f4:97:0d:4d:43:db:73:3d:71:e8:e9:64: 4c:b6:a0:f2:98:bb:27:46:60:d7:de:1f:75:29:b7: 98:d9:a1:21:df:e5:13:c9:80:ef:c7:ba:02:b1:d6: 14:9a:ce:16:05:64:fe:7c:41:ee:b4:64:e0:83:bf: 3d:7f:90:5c:f9:18:75:7e:ea:bb:19:aa:e0:ee:06: d2:56:2f:59:11:1f:b5:98:e6:57:a3:9d:f0:98:b3: b0:57:b1:b6:2c:0f:8c:33:57:af:5c:6b:e1:da:a9: 5b:b9:cf:61:94:57:ad:aa:4e:74:95:df:e8:35:78: 75:2c:0b:25:e9:cf:d1:82:c8:ed:d2:52:66:a1:c5: 50:53:a7:3f:d5:e5:07:3b:01:b4:e3:ad:35:6e:83: 49:98:3f:87:f8:71:b7:a3:40:7a:9d:25:13:7d:7d: 7d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:04:9A:49:86:FC:99:2F:CF:C6:3A:92:AD:E9:95:7F:56:4D:D0:84 X509v3 Authority Key Identifier: keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/3wSaSYb8mS_PxjqSremVf1ZN0IQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.62.48.0/23 Signature Algorithm: sha256WithRSAEncryption 35:ba:45:48:bd:4d:d6:dd:0c:22:fd:43:ad:55:5b:f9:c2:ef: 54:07:b6:c5:c2:79:f1:3c:2c:a6:bc:88:77:86:4f:59:f2:6a: 1e:07:14:f5:05:b1:65:6e:38:97:a3:a7:e8:c3:c6:97:41:c5: 3b:4c:20:6a:4d:9f:68:3c:e3:6e:9e:db:a6:5d:4a:c3:c4:77: 49:bd:46:59:f7:f7:83:f6:76:94:91:e9:4a:8e:07:3a:42:c6: ab:11:35:be:82:ba:b7:e9:bd:03:8f:b5:fe:8b:4f:25:4b:5d: da:a5:77:2d:c5:f7:43:17:59:83:68:1b:ee:bc:73:b7:fe:21: 5d:8a:11:ad:8a:0b:dc:f2:36:71:65:40:c4:33:58:c2:bd:fc: 91:ac:6f:2d:70:5e:07:e1:3c:de:61:7e:24:40:3f:e5:b4:ce: d8:4d:ce:76:31:6d:52:46:2b:ef:72:17:d8:32:2a:a1:95:4f: 04:47:e2:27:22:71:77:cc:67:46:e3:79:17:1c:92:b2:38:1c: 10:52:1d:06:ad:be:80:62:e8:bf:78:a2:20:8f:3d:97:45:99: 3c:b0:c4:f4:2c:8a:73:ce:62:f0:6c:4f:6c:79:d6:63:c5:fe: 60:1c:e5:97:38:ce:a2:87:ec:85:df:37:fe:bb:0f:ae:71:2b: 6f:83:33:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvbH1fNIDhyUORNiXOxFAaxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1Y2VjYmY4NjUxYTU2MjRmMjI4MWRjMzU2YTc3Y2QzNGJk NWJhOTYwHhcNMjYwMTIwMTExNzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjA0OWE0OTg2ZmM5OTJmY2ZjNjNhOTJhZGU5OTU3ZjU2NGRkMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xgb8kuT17oqMFRdt6HggWLGs7rD BrtW3lpMNjGuqiYJGc+GMOsFyQSTEy2JZpqpONAcR9gpW7wkrCDpUgGQnEvNhb7V YC+VgQun7QZvT8A/BhayU6edOsUIwwf0lw1NQ9tzPXHo6WRMtqDymLsnRmDX3h91 KbeY2aEh3+UTyYDvx7oCsdYUms4WBWT+fEHutGTgg789f5Bc+Rh1fuq7Garg7gbS Vi9ZER+1mOZXo53wmLOwV7G2LA+MM1evXGvh2qlbuc9hlFetqk50ld/oNXh1LAsl 6c/Rgsjt0lJmocVQU6c/1eUHOwG04601boNJmD+H+HG3o0B6nSUTfX19zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8EmkmG/Jkvz8Y6kq3plX9WTdCEMB8GA1UdIwQY MBaAFDXOy/hlGlYk8igdw1anfNNL1bqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEt NjFhNmQ3MmFjNDljLzEvM3dTYVNZYjhtU19QeGpxU3JlbVZmMVpOMElRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEtNjFhNmQ3MmFjNDlj LzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwz4wMA0G CSqGSIb3DQEBCwUAA4IBAQA1ukVIvU3W3Qwi/UOtVVv5wu9UB7bFwnnxPCymvIh3 hk9Z8moeBxT1BbFlbjiXo6fow8aXQcU7TCBqTZ9oPONuntumXUrDxHdJvUZZ9/eD 9naUkelKjgc6QsarETW+grq36b0Dj7X+i08lS13apXctxfdDF1mDaBvuvHO3/iFd ihGtigvc8jZxZUDEM1jCvfyRrG8tcF4H4TzeYX4kQD/ltM7YTc52MW1SRivvchfY MiqhlU8ER+InInF3zGdG43kXHJKyOBwQUh0Grb6AYui/eKIgjz2XRZk8sMT0LIpz zmLwbE9sedZjxf5gHOWXOM6ih+yF3zf+uw+ucStvgzNH -----END CERTIFICATE-----Generated at Wed Jan 21 19:43:44 2026 by rpki-client