This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/3W6mluySiEpKej6eN1jA5zstxy4.roa File: 3W6mluySiEpKej6eN1jA5zstxy4.roa (raw, json) Hash identifier: BnPbQOWoBcwsBllS5g956Y7roIr2qvKYxdvmXktrFbQ= Subject key identifier: DD:6E:A6:96:EC:92:88:4A:4A:7A:3E:9E:37:58:C0:E7:3B:2D:C7:2E Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3 Certificate serial: 019B7CED7A3DDCFF3A65D66943DC7AE7DE8A Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/3W6mluySiEpKej6eN1jA5zstxy4.roa Signing time: Fri 02 Jan 2026 04:18:16 +0000 ROA not before: Fri 02 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208126 IP address blocks: 185.84.227.0/24 maxlen: 24 2a12:91c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7a:3d:dc:ff:3a:65:d6:69:43:dc:7a:e7:de:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3 Validity Not Before: Jan 2 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd6ea696ec92884a4a7a3e9e3758c0e73b2dc72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7a:0f:89:39:01:a9:ee:30:72:d0:09:60:9c: e1:9a:4d:c1:ea:b3:d4:ef:0e:b2:21:fe:3a:f9:c1: d4:27:50:96:75:e6:83:96:b9:74:2a:2f:6a:bb:9a: ba:de:4a:52:22:74:b4:e3:a5:13:f2:71:cb:a9:ce: a6:75:fe:97:48:e0:31:53:86:53:54:ee:1e:e3:64: c4:75:fb:ff:8c:13:2e:75:df:1f:d5:8f:da:89:5a: ea:a6:fa:7c:f6:d4:51:14:4c:b5:6d:a9:c3:4f:18: c9:3b:6d:a7:cd:72:f1:dd:f1:2e:a3:12:b4:02:de: bb:c7:49:4a:c5:89:88:17:f2:6d:b3:c1:2f:89:32: b4:9c:10:20:c4:4b:1c:d6:87:41:71:00:44:f6:9e: 01:27:3f:71:ff:94:e0:75:ae:01:e5:6a:f7:12:20: e7:c1:6d:55:ad:ee:5c:68:ed:13:b9:d1:57:d6:3a: 5c:2b:67:86:6f:5e:40:bb:23:1e:f3:12:51:c2:d7: 6c:61:3e:23:7d:ce:8d:7f:08:a5:74:c7:9e:3a:11: e4:67:f6:f0:a9:2b:dd:db:a3:88:73:b5:bc:e1:db: bd:7c:8c:4e:b0:30:49:f9:4d:9a:48:67:f1:d9:8b: 02:5c:8b:7f:73:f6:46:64:83:17:62:22:b1:f7:3d: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6E:A6:96:EC:92:88:4A:4A:7A:3E:9E:37:58:C0:E7:3B:2D:C7:2E X509v3 Authority Key Identifier: keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/3W6mluySiEpKej6eN1jA5zstxy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.227.0/24 IPv6: 2a12:91c0::/29 Signature Algorithm: sha256WithRSAEncryption b7:ed:7b:1d:84:4e:9c:2c:ab:68:27:d2:67:17:81:50:6b:45: 87:e5:c1:36:4c:4d:d4:67:b7:99:70:54:04:1d:01:f2:3e:50: e6:f3:e3:04:ff:5c:b8:c5:e8:d9:21:e2:6b:b2:4f:28:fa:cd: fb:83:5f:33:f7:f7:5e:0a:32:80:04:5c:23:d4:ce:f2:0e:e7: 60:4b:b7:5a:0f:6d:a0:f1:e6:59:47:58:c8:11:fd:0f:05:ce: c8:4d:bc:ac:6f:46:91:7c:ff:80:04:72:04:72:63:b9:62:2b: b1:a3:dc:c9:6d:6e:72:e9:e1:2e:56:dc:81:8e:f5:3c:c6:9e: f3:a2:27:af:41:31:5b:e5:13:f4:74:68:db:05:b1:90:0a:c7: 5d:5a:1a:2a:66:38:20:18:ec:fa:86:90:da:8e:08:42:e2:a9: d8:33:fa:67:3e:ee:91:a2:42:1e:47:5b:0a:4c:65:c5:3b:08: 0c:ab:fb:a4:4b:48:94:b3:9b:28:9e:74:66:15:93:27:9f:38: 12:09:9b:50:1b:82:82:af:c3:6a:e8:ad:72:c3:d4:55:f6:af: 88:d5:3e:e9:5e:ed:f9:b8:6d:9f:9f:fc:12:3b:70:39:f8:66: b4:df:94:72:5f:42:3d:96:e4:b8:3d:e9:6d:20:7f:a0:dc:9b: 12:af:77:61 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87Xo93P86ZdZpQ9x6596KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMzYxZDdmMWY1ZjgyMzk3NzUwMjYwNjM1MWZkNDhkZmJl ZTExZTMwHhcNMjYwMTAyMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDZlYTY5NmVjOTI4ODRhNGE3YTNlOWUzNzU4YzBlNzNiMmRjNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XoPiTkBqe4wctAJYJzhmk3B6rPU 7w6yIf46+cHUJ1CWdeaDlrl0Ki9qu5q63kpSInS046UT8nHLqc6mdf6XSOAxU4ZT VO4e42TEdfv/jBMudd8f1Y/aiVrqpvp89tRRFEy1banDTxjJO22nzXLx3fEuoxK0 At67x0lKxYmIF/Jts8EviTK0nBAgxEsc1odBcQBE9p4BJz9x/5Tgda4B5Wr3EiDn wW1Vre5caO0TudFX1jpcK2eGb15AuyMe8xJRwtdsYT4jfc6NfwildMeeOhHkZ/bw qSvd26OIc7W84du9fIxOsDBJ+U2aSGfx2YsCXIt/c/ZGZIMXYiKx9z1PfwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN1uppbskohKSno+njdYwOc7LccuMB8GA1UdIwQY MBaAFB02HX8fX4I5d1AmBjUf1I377hHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEt ZTkxODhiY2VjMGM1LzEvM1c2bWx1eVNpRXBLZWo2ZU4xakE1enN0eHk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEtZTkxODhiY2VjMGM1 LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuVTjMA0E AgACMAcDBQMqEpHAMA0GCSqGSIb3DQEBCwUAA4IBAQC37XsdhE6cLKtoJ9JnF4FQ a0WH5cE2TE3UZ7eZcFQEHQHyPlDm8+ME/1y4xejZIeJrsk8o+s37g18z9/deCjKA BFwj1M7yDudgS7daD22g8eZZR1jIEf0PBc7ITbysb0aRfP+ABHIEcmO5Yiuxo9zJ bW5y6eEuVtyBjvU8xp7zoievQTFb5RP0dGjbBbGQCsddWhoqZjggGOz6hpDajghC 4qnYM/pnPu6RokIeR1sKTGXFOwgMq/ukS0iUs5sonnRmFZMnnzgSCZtQG4KCr8Nq 6K1yw9RV9q+I1T7pXu35uG2fn/wSO3A5+Ga035RyX0I9luS4PeltIH+g3JsSr3dh -----END CERTIFICATE-----Generated at Mon Feb 9 23:56:04 2026 by rpki-client