This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/3LKBFi7qK9-mH9zvi-Ys8DrPyCc.roa File: 3LKBFi7qK9-mH9zvi-Ys8DrPyCc.roa (raw, json) Hash identifier: 3n/tlWwRztOB/Yu2+sFP0seUelZYfaMtfMJ5VRgA2p0= Subject key identifier: DC:B2:81:16:2E:EA:2B:DF:A6:1F:DC:EF:8B:E6:2C:F0:3A:CF:C8:27 Certificate issuer: /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b Certificate serial: 019B7D5C7CA991E314153663F9BAD55220C3 Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/3LKBFi7qK9-mH9zvi-Ys8DrPyCc.roa Signing time: Fri 02 Jan 2026 06:19:31 +0000 ROA not before: Fri 02 Jan 2026 06:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 78.138.44.0/24 maxlen: 24 185.106.204.0/24 maxlen: 24 185.106.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7c:a9:91:e3:14:15:36:63:f9:ba:d5:52:20:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b Validity Not Before: Jan 2 06:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcb281162eea2bdfa61fdcef8be62cf03acfc827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:60:36:a2:06:34:5b:c6:65:d2:89:bf:96: fa:1d:45:9e:cb:d6:5d:f7:fe:2c:2e:ac:0a:7d:4c: 3f:15:d6:4c:27:56:df:1a:e4:ec:a6:98:5e:21:31: 71:a6:23:f3:07:98:51:68:77:1a:cc:91:92:9a:dc: b5:96:9d:3a:72:8e:e5:64:24:90:9e:50:99:5e:86: 3b:1e:9f:93:7f:c5:19:08:07:5b:c1:6a:63:1d:e5: 33:68:10:ab:6a:5c:06:1a:f6:51:f9:41:f3:17:2e: c1:70:f4:93:78:44:f2:f0:2e:f2:bf:ea:a8:c6:22: 0b:0b:73:89:c6:aa:6a:29:cf:63:12:3f:41:70:e0: ec:fe:4b:03:5d:5c:eb:29:f0:97:84:a1:e6:bb:99: eb:ca:19:67:bc:4e:9d:ba:0c:da:fe:86:61:12:c2: b6:5b:c0:d8:91:89:71:10:1b:a4:b8:70:b8:14:34: ed:35:09:67:7c:ca:0d:6c:56:25:9b:59:5a:9f:0f: 75:0f:a9:fa:44:b4:4c:1a:2f:0c:74:61:36:94:67: 9a:64:b2:ed:12:66:70:95:13:46:d3:87:fc:28:72: 8c:8d:5a:e5:6d:05:7e:5f:bf:c7:cd:31:49:6e:f5: a1:9b:9d:77:48:8d:9d:5e:16:8e:cf:a2:ad:28:5d: d1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B2:81:16:2E:EA:2B:DF:A6:1F:DC:EF:8B:E6:2C:F0:3A:CF:C8:27 X509v3 Authority Key Identifier: keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/3LKBFi7qK9-mH9zvi-Ys8DrPyCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.138.44.0/24 185.106.204.0/24 185.106.207.0/24 Signature Algorithm: sha256WithRSAEncryption 32:73:00:9f:be:01:2c:d1:58:6d:9c:de:26:da:80:dc:80:96: 4b:72:f8:c5:3b:aa:66:02:71:d3:3d:66:2d:d6:f5:49:1d:40: 1c:3e:80:10:7e:4a:d5:9d:cc:27:c4:45:fe:ea:55:af:d2:7f: cc:79:11:bc:ef:7d:fa:a2:88:fb:e4:bd:c0:84:de:0d:7a:4a: 9f:ec:0f:f8:5a:58:68:89:61:66:ae:46:f2:df:5f:d0:f3:a7: bc:93:6c:e2:d8:37:55:ab:c0:a2:a8:0b:74:cc:d6:05:be:c4: 14:e9:68:33:44:63:c1:05:10:e7:83:ad:07:0d:91:77:31:0d: b1:9c:4b:c2:fd:bc:26:07:1e:62:15:c3:a9:31:d1:ee:b1:53: b2:0e:cc:6f:21:63:56:84:a3:bc:bc:25:7c:f3:32:60:c6:52: 3e:a8:e0:71:70:20:b2:12:1d:32:a2:f5:4b:4e:e9:e2:97:83: b2:26:b1:c5:38:5c:7a:7f:df:a8:0f:9e:75:d1:df:4c:5f:96: a6:ae:9c:62:21:d6:d5:a3:38:4c:09:07:9b:f6:36:da:de:47: 54:f8:ef:da:fd:1d:3d:ee:97:c2:a6:e3:4f:76:3e:89:ab:4f: 3d:a8:92:73:a3:f9:42:e3:48:51:30:07:c7:7a:9d:07:61:e1: 79:0b:1e:d3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XHypkeMUFTZj+brVUiDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Y2Q1NjNhMmFlNjUyOWM5ZjQzZmU0YjVjNjdkYjcwZTc3 OWEwOWIwHhcNMjYwMTAyMDYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2IyODExNjJlZWEyYmRmYTYxZmRjZWY4YmU2MmNmMDNhY2ZjODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/9gNqIGNFvGZdKJv5b6HUWey9Zd 9/4sLqwKfUw/FdZMJ1bfGuTsppheITFxpiPzB5hRaHcazJGSmty1lp06co7lZCSQ nlCZXoY7Hp+Tf8UZCAdbwWpjHeUzaBCralwGGvZR+UHzFy7BcPSTeETy8C7yv+qo xiILC3OJxqpqKc9jEj9BcODs/ksDXVzrKfCXhKHmu5nryhlnvE6dugza/oZhEsK2 W8DYkYlxEBukuHC4FDTtNQlnfMoNbFYlm1lanw91D6n6RLRMGi8MdGE2lGeaZLLt EmZwlRNG04f8KHKMjVrlbQV+X7/HzTFJbvWhm513SI2dXhaOz6KtKF3RtwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNyygRYu6ivfph/c74vmLPA6z8gnMB8GA1UdIwQY MBaAFFjNVjoq5lKcn0P+S1xn23DneaCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAt NDdhNWY0ODFlNmY1LzEvM0xLQkZpN3FLOS1tSDl6dmktWXM4RHJQeUNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAtNDdhNWY0ODFlNmY1 LzEvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAToosAwQA uWrMAwQAuWrPMA0GCSqGSIb3DQEBCwUAA4IBAQAycwCfvgEs0VhtnN4m2oDcgJZL cvjFO6pmAnHTPWYt1vVJHUAcPoAQfkrVncwnxEX+6lWv0n/MeRG87336ooj75L3A hN4Nekqf7A/4WlhoiWFmrkby31/Q86e8k2zi2DdVq8CiqAt0zNYFvsQU6WgzRGPB BRDng60HDZF3MQ2xnEvC/bwmBx5iFcOpMdHusVOyDsxvIWNWhKO8vCV88zJgxlI+ qOBxcCCyEh0yovVLTunil4OyJrHFOFx6f9+oD5510d9MX5amrpxiIdbVozhMCQeb 9jba3kdU+O/a/R097pfCpuNPdj6Jq089qJJzo/lC40hRMAfHep0HYeF5Cx7T -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:55 2026 by rpki-client