This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/3bAp3q_3awus_cxtdm3xlCp_Kro.roa File: 3bAp3q_3awus_cxtdm3xlCp_Kro.roa (raw, json) Hash identifier: MeFCYRnaLN9vGZ2yrhZuS6ZkusuOmCKGC/cofWy68Cw= Subject key identifier: DD:B0:29:DE:AF:F7:6B:0B:AC:FD:CC:6D:76:6D:F1:94:2A:7F:2A:BA Certificate issuer: /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5 Certificate serial: 019B7E37D3CFC7859388A67450A9B954EE80 Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/3bAp3q_3awus_cxtdm3xlCp_Kro.roa Signing time: Fri 02 Jan 2026 10:19:06 +0000 ROA not before: Fri 02 Jan 2026 10:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39544 IP address blocks: 109.203.32.0/19 maxlen: 19 178.211.224.0/19 maxlen: 19 185.20.200.0/22 maxlen: 22 185.137.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d3:cf:c7:85:93:88:a6:74:50:a9:b9:54:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5 Validity Not Before: Jan 2 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddb029deaff76b0bacfdcc6d766df1942a7f2aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:12:08:78:42:ed:a6:f0:ca:11:c7:07:55: c4:54:cf:c7:63:13:9e:2e:25:62:9b:31:ee:1a:a3: 23:09:12:2a:02:ee:9d:3a:39:0b:98:7f:d2:58:7c: 8e:dc:46:30:71:ae:a0:be:99:11:75:ce:21:3e:1a: ad:af:dc:68:7e:e1:ec:f3:4d:9f:35:53:e4:ee:7b: 81:12:2c:b8:43:ad:9d:04:5f:3c:8f:15:de:e5:35: f4:27:a7:b1:7e:12:01:0e:c6:14:61:ac:99:fe:51: 15:b9:81:8c:6d:df:2b:7f:4c:0b:42:02:76:c2:87: e7:ca:a5:18:6e:1f:01:e2:e5:1e:cb:d3:a8:c8:ab: 07:d6:29:54:17:78:5f:ba:ef:43:57:33:0c:a1:7c: 0c:55:75:e2:a3:f1:10:01:f2:d9:8c:15:b9:99:f7: bb:15:57:18:9d:3e:41:90:36:79:08:8a:0a:62:20: e9:c5:fe:a9:10:7e:5c:98:9a:19:7b:52:c8:29:80: e1:9f:fb:09:bb:96:31:56:0c:ca:30:97:8b:f0:ff: b1:e4:2f:c2:55:8d:ac:c7:17:16:1a:2d:2c:ef:8c: 06:44:92:0c:dd:71:1b:57:e3:ee:30:fb:3a:a5:67: 81:c0:b1:05:dd:d9:b0:a5:f8:d2:12:8b:63:a0:45: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B0:29:DE:AF:F7:6B:0B:AC:FD:CC:6D:76:6D:F1:94:2A:7F:2A:BA X509v3 Authority Key Identifier: keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/3bAp3q_3awus_cxtdm3xlCp_Kro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.203.32.0/19 178.211.224.0/19 185.20.200.0/22 185.137.236.0/22 Signature Algorithm: sha256WithRSAEncryption 54:6a:34:ae:ab:a0:0b:ab:e8:81:51:d9:3f:bb:e2:19:0a:e2: 73:4c:cd:d6:51:e8:d0:53:86:12:ea:ce:fb:34:41:79:7e:fe: f2:56:93:67:30:2f:f7:8e:24:f1:25:47:d6:19:9f:03:12:23: 6c:33:80:9b:ee:79:eb:5d:29:9e:ff:7c:07:ac:a9:b3:3a:94: 83:87:28:b0:e0:89:63:09:e4:41:99:71:3a:07:33:98:23:4a: 2c:8a:a2:2a:99:03:15:a1:0d:e3:6a:06:e0:78:d0:40:f3:8f: df:12:1d:c6:28:70:15:87:70:47:f4:7f:fb:c9:2e:20:53:35: 52:d5:c9:64:3e:f2:82:23:b1:93:9a:2a:2d:52:62:e4:ed:24: 77:61:58:41:b6:cd:b5:26:30:e5:ed:e7:05:0e:78:b7:36:90: 70:b0:7d:38:cf:1c:62:0a:d7:a0:7b:ae:42:a0:4d:5c:92:ea: 71:e9:e8:f6:37:64:70:60:ca:ce:26:1f:8b:74:cf:9a:03:5c: 3e:43:0c:df:04:b6:cb:07:71:82:a0:1c:40:d0:48:1d:60:1d: bc:7b:bb:4d:50:8f:71:03:21:9a:d2:bf:18:a6:a3:32:bd:46: c8:46:2f:bf:79:12:49:0f:7a:dc:ab:d6:22:1b:3f:20:b3:9e: c1:72:44:ae -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+N9PPx4WTiKZ0UKm5VO6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDJmYTRmYjI4ZmFmMjhhMThlOGFkZDRjMTBjOTYzMzdj M2M0YzUwHhcNMjYwMTAyMTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGIwMjlkZWFmZjc2YjBiYWNmZGNjNmQ3NjZkZjE5NDJhN2YyYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VcSCHhC7abwyhHHB1XEVM/HYxOe LiVimzHuGqMjCRIqAu6dOjkLmH/SWHyO3EYwca6gvpkRdc4hPhqtr9xofuHs802f NVPk7nuBEiy4Q62dBF88jxXe5TX0J6exfhIBDsYUYayZ/lEVuYGMbd8rf0wLQgJ2 wofnyqUYbh8B4uUey9OoyKsH1ilUF3hfuu9DVzMMoXwMVXXio/EQAfLZjBW5mfe7 FVcYnT5BkDZ5CIoKYiDpxf6pEH5cmJoZe1LIKYDhn/sJu5YxVgzKMJeL8P+x5C/C VY2sxxcWGi0s74wGRJIM3XEbV+PuMPs6pWeBwLEF3dmwpfjSEotjoEXbxQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFN2wKd6v92sLrP3MbXZt8ZQqfyq6MB8GA1UdIwQY MBaAFNdC+k+yj68ooY6K3UwQyWM3w8TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBMNlQ3S1ByeWloam9yZFRCREpZemZEeE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MDNiZDYtMWIyZi00MDgzLWIxZTct N2E1ZjYwMTg5YzUxLzEvM2JBcDNxXzNhd3VzX2N4dGRtM3hsQ3BfS3JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83MDNiZDYtMWIyZi00MDgzLWIxZTctN2E1ZjYwMTg5YzUx LzEvMTBMNlQ3S1ByeWloam9yZFRCREpZemZEeE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFbcsgAwQF stPgAwQCuRTIAwQCuYnsMA0GCSqGSIb3DQEBCwUAA4IBAQBUajSuq6ALq+iBUdk/ u+IZCuJzTM3WUejQU4YS6s77NEF5fv7yVpNnMC/3jiTxJUfWGZ8DEiNsM4Cb7nnr XSme/3wHrKmzOpSDhyiw4IljCeRBmXE6BzOYI0osiqIqmQMVoQ3jagbgeNBA84/f Eh3GKHAVh3BH9H/7yS4gUzVS1clkPvKCI7GTmiotUmLk7SR3YVhBts21JjDl7ecF Dni3NpBwsH04zxxiCtege65CoE1ckupx6ej2N2RwYMrOJh+LdM+aA1w+QwzfBLbL B3GCoBxA0EgdYB28e7tNUI9xAyGa0r8YpqMyvUbIRi+/eRJJD3rcq9YiGz8gs57B ckSu -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:42 2026 by rpki-client