This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/3-ZRPzIcEVUi-ra3cIe_QiX4MmE.roa File: 3-ZRPzIcEVUi-ra3cIe_QiX4MmE.roa (raw, json) Hash identifier: ioG0rYT2U8xqbe9ZiKXHC8R0PXnU7MQZkccybD0LOac= Subject key identifier: DF:E6:51:3F:32:1C:11:55:22:FA:B6:B7:70:87:BF:42:25:F8:32:61 Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d Certificate serial: 019B7B36C0FFC5C4729D72941B4CC8A621DB Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/3-ZRPzIcEVUi-ra3cIe_QiX4MmE.roa Signing time: Thu 01 Jan 2026 20:19:04 +0000 ROA not before: Thu 01 Jan 2026 20:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50188 IP address blocks: 88.135.160.0/20 maxlen: 20 213.5.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c0:ff:c5:c4:72:9d:72:94:1b:4c:c8:a6:21:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d Validity Not Before: Jan 1 20:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfe6513f321c115522fab6b77087bf4225f83261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5a:8a:49:e9:ba:56:83:bb:15:56:ce:ff:40: 6d:0f:3d:4e:5c:ec:0c:43:36:f9:91:6e:a9:8e:d1: 20:93:89:95:34:7e:5b:de:bd:ad:e9:03:c4:06:59: b9:3e:16:db:85:20:2c:7f:51:84:5a:b0:12:02:3e: 98:47:b1:1d:28:c3:e2:0b:b6:77:e9:8d:7d:fe:4c: b6:c6:d0:30:34:45:17:0b:dc:45:d2:3f:2b:86:fa: cc:64:75:f6:ad:bc:ce:eb:f1:48:e9:20:5d:e0:88: 50:62:9b:fd:84:41:78:b6:d1:aa:0f:7c:f7:08:e6: a9:ea:7d:0f:73:af:29:1f:67:20:91:7f:55:f4:d3: 18:ec:a9:26:aa:25:d1:c9:f2:60:5a:a7:7e:bd:80: 2a:8d:ea:4e:1d:4c:0d:74:0b:a7:93:8b:82:b0:7b: 0d:e9:43:b3:2d:f0:88:2c:82:9d:e4:79:1c:3e:09: fc:57:f5:6d:cb:a1:5f:ba:6c:2e:f7:f7:10:d1:92: 48:72:2c:e2:28:a6:de:dd:1e:86:59:07:1d:d7:03: d3:54:dc:21:c6:a7:d5:05:3a:fa:db:58:8f:e1:08: 83:d6:46:f0:40:af:80:1b:b7:05:78:5f:c6:10:aa: 72:ce:4c:37:76:35:e7:1a:1d:e3:65:98:fd:61:06: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E6:51:3F:32:1C:11:55:22:FA:B6:B7:70:87:BF:42:25:F8:32:61 X509v3 Authority Key Identifier: keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/3-ZRPzIcEVUi-ra3cIe_QiX4MmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.160.0/20 213.5.248.0/21 Signature Algorithm: sha256WithRSAEncryption a2:c8:58:c3:e5:2d:4f:66:5c:e5:de:94:42:29:91:b1:0d:43: 80:2f:5e:d4:51:87:be:81:31:4d:39:6d:cd:86:43:e0:8b:2a: a2:1c:ab:cf:db:f6:c3:44:1a:63:10:e0:75:ee:71:e9:83:93: 3c:81:d6:f0:a4:0a:54:c7:f5:66:31:07:bc:b4:5e:94:af:55: e1:89:41:04:9f:65:00:d9:a9:5b:09:76:fc:c8:a4:f6:27:69: 4f:d0:0a:e5:9c:46:e6:00:0e:85:30:cf:ca:8b:66:42:57:bb: 4b:25:ee:9e:fa:76:15:07:94:bb:68:f1:60:65:80:ab:10:20: ba:9e:ea:c9:e9:03:ae:3d:e4:05:3f:31:a4:66:c9:6f:7d:32: c4:ae:89:04:e2:be:cb:46:00:21:0c:3a:46:f2:3c:27:84:7e: 1e:db:b2:88:03:79:ee:c8:f5:0e:d5:ca:1f:be:8e:b5:c1:00: 94:8e:a9:f1:62:fc:93:a9:08:78:b6:b7:9d:54:a4:c1:eb:e7: 64:e2:38:d6:3c:55:69:92:4c:0c:a5:e3:d3:db:d1:31:ea:22: 51:8c:fe:3f:5a:7f:bb:48:79:dd:84:19:17:92:62:1a:9d:76: 1d:63:1f:27:07:15:88:fe:ec:f2:be:ff:4c:32:67:87:9d:eb: 31:a3:78:37 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NsD/xcRynXKUG0zIpiHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YjkyYmRlYTViOTdhY2FiYzJmNjU4YzQxMmJmNzQ2ZWUw ZTIwN2QwHhcNMjYwMTAxMjAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmU2NTEzZjMyMWMxMTU1MjJmYWI2Yjc3MDg3YmY0MjI1ZjgzMjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVqKSem6VoO7FVbO/0BtDz1OXOwM Qzb5kW6pjtEgk4mVNH5b3r2t6QPEBlm5PhbbhSAsf1GEWrASAj6YR7EdKMPiC7Z3 6Y19/ky2xtAwNEUXC9xF0j8rhvrMZHX2rbzO6/FI6SBd4IhQYpv9hEF4ttGqD3z3 COap6n0Pc68pH2cgkX9V9NMY7KkmqiXRyfJgWqd+vYAqjepOHUwNdAunk4uCsHsN 6UOzLfCILIKd5HkcPgn8V/Vty6Ffumwu9/cQ0ZJIciziKKbe3R6GWQcd1wPTVNwh xqfVBTr621iP4QiD1kbwQK+AG7cFeF/GEKpyzkw3djXnGh3jZZj9YQa0MwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN/mUT8yHBFVIvq2t3CHv0Il+DJhMB8GA1UdIwQY MBaAFLe5K96luXrKvC9ljEEr90buDiB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODIt ZGQ5MDA5YjMzMTdkLzEvMy1aUlB6SWNFVlVpLXJhM2NJZV9RaVg0TW1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODItZGQ5MDA5YjMzMTdk LzEvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEWIegAwQD 1QX4MA0GCSqGSIb3DQEBCwUAA4IBAQCiyFjD5S1PZlzl3pRCKZGxDUOAL17UUYe+ gTFNOW3NhkPgiyqiHKvP2/bDRBpjEOB17nHpg5M8gdbwpApUx/VmMQe8tF6Ur1Xh iUEEn2UA2albCXb8yKT2J2lP0ArlnEbmAA6FMM/Ki2ZCV7tLJe6e+nYVB5S7aPFg ZYCrECC6nurJ6QOuPeQFPzGkZslvfTLErokE4r7LRgAhDDpG8jwnhH4e27KIA3nu yPUO1cofvo61wQCUjqnxYvyTqQh4tredVKTB6+dk4jjWPFVpkkwMpePT29Ex6iJR jP4/Wn+7SHndhBkXkmIanXYdYx8nBxWI/uzyvv9MMmeHnesxo3g3 -----END CERTIFICATE-----Generated at Tue Feb 10 08:41:27 2026 by rpki-client