This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/3I73d1fm-asEDdpF_Iaed-Rn4iU.roa File: 3I73d1fm-asEDdpF_Iaed-Rn4iU.roa (raw, json) Hash identifier: JVQe5Bz0aKgNMVzD3MTnR/M1jsbAbCwUE1ywEqxkXqI= Subject key identifier: DC:8E:F7:77:57:E6:F9:AB:04:0D:DA:45:FC:86:9E:77:E4:67:E2:25 Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8 Certificate serial: 019B77C6813DD25B58F49B4A332EE30EFDF7 Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/3I73d1fm-asEDdpF_Iaed-Rn4iU.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202672 IP address blocks: 185.157.180.0/24 maxlen: 24 185.157.181.0/24 maxlen: 24 185.157.182.0/24 maxlen: 24 185.157.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:81:3d:d2:5b:58:f4:9b:4a:33:2e:e3:0e:fd:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8 Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc8ef77757e6f9ab040dda45fc869e77e467e225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:26:92:9c:fa:a5:bb:e0:1e:7d:1d:6a:31:97: 99:8b:17:1e:68:84:f5:ae:fb:1a:b3:f5:15:04:c4: 59:c2:0e:83:7c:08:9c:dd:47:f0:79:4f:8f:05:7c: 5e:6f:75:36:cb:48:a2:68:3e:79:98:d2:3c:3f:fd: 36:57:a3:20:9a:f6:88:29:80:98:64:66:cc:5a:fb: 7c:a3:ae:5e:a8:44:4f:c0:7d:36:b3:93:6c:09:f9: 7c:90:3a:85:0c:7d:5e:8e:4e:0a:f4:53:fe:13:5f: 75:22:2f:9c:ec:8c:1a:1f:0a:a8:1a:82:36:ac:92: af:a8:7a:1d:48:67:f8:89:51:23:73:32:4f:82:79: 2a:90:ed:79:bd:f9:d7:09:75:90:40:de:ed:fe:9c: 60:0d:3f:e5:fd:75:2c:d0:a4:f1:d6:34:33:77:b8: ea:69:9a:32:52:8a:d5:3c:64:d7:fe:8f:d8:bd:d1: cc:a2:1e:e1:c4:29:38:58:61:94:e6:e4:37:92:34: c4:ce:f2:27:c2:3e:5c:cc:a8:13:a5:e0:74:79:c5: 9e:5b:e2:c7:3f:2e:81:db:dc:e6:b6:9e:36:8a:a4: 4a:a0:4b:76:5a:b0:a2:c7:2b:be:ff:0a:74:d0:c2: 96:da:a9:47:f2:62:ea:a8:54:72:7f:95:80:65:c9: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8E:F7:77:57:E6:F9:AB:04:0D:DA:45:FC:86:9E:77:E4:67:E2:25 X509v3 Authority Key Identifier: keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/3I73d1fm-asEDdpF_Iaed-Rn4iU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.180.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:74:63:23:56:ec:b3:cf:94:18:e5:6b:9c:32:21:2d:6f:8c: 8b:ed:9f:51:34:2f:92:bb:7a:2f:98:5a:2a:6d:83:1a:b0:10: 10:ab:5b:83:d9:a9:5c:9a:64:e6:47:28:02:f7:c9:59:b7:65: b0:fe:dd:ac:73:25:9d:80:a5:b6:3e:63:9d:0a:aa:5b:99:da: a0:15:08:9c:39:7c:a6:c3:df:94:3e:52:48:24:2b:bb:4e:4c: 1d:26:b4:19:bf:63:70:62:69:87:33:26:ae:f0:71:44:ff:c9: 04:ee:4c:e4:50:23:96:f3:47:78:48:af:83:7f:53:bd:0d:74: 31:b0:1f:bc:ff:8c:53:34:87:75:60:01:57:45:cc:1c:0c:b6: 37:da:da:fa:3e:d8:ab:de:f1:fd:16:3d:78:70:2e:cc:21:f1: 8e:50:cf:ec:1d:99:55:13:ab:1f:5f:9e:06:45:d0:43:3e:9d: ef:c1:67:d3:ab:0e:f7:2a:4d:62:2b:df:e8:23:92:e1:c0:f2: 76:e7:c5:ca:6b:be:41:55:66:ea:4b:76:38:12:71:cf:3c:3f: f5:64:04:2f:36:ef:17:24:9b:ac:8a:61:b9:91:15:3c:01:2b: ad:71:92:65:f8:53:15:34:4a:25:23:73:43:e0:bb:50:e9:3a: 92:01:45:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xoE90ltY9JtKMy7jDv33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzliYWE0NDI5ZGE3ODY1OTFiNzI1MjU4NTJlNmQ5N2Iz MmMxZTgwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzhlZjc3NzU3ZTZmOWFiMDQwZGRhNDVmYzg2OWU3N2U0NjdlMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCaSnPqlu+AefR1qMZeZixceaIT1 rvsas/UVBMRZwg6DfAic3UfweU+PBXxeb3U2y0iiaD55mNI8P/02V6MgmvaIKYCY ZGbMWvt8o65eqERPwH02s5NsCfl8kDqFDH1ejk4K9FP+E191Ii+c7IwaHwqoGoI2 rJKvqHodSGf4iVEjczJPgnkqkO15vfnXCXWQQN7t/pxgDT/l/XUs0KTx1jQzd7jq aZoyUorVPGTX/o/YvdHMoh7hxCk4WGGU5uQ3kjTEzvInwj5czKgTpeB0ecWeW+LH Py6B29zmtp42iqRKoEt2WrCixyu+/wp00MKW2qlH8mLqqFRyf5WAZcnRuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNyO93dX5vmrBA3aRfyGnnfkZ+IlMB8GA1UdIwQY MBaAFPTJuqRCnaeGWRtyUlhS5tl7MsHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzIt YWY3ZGEyYjZlZGM1LzEvM0k3M2QxZm0tYXNFRGRwRl9JYWVkLVJuNGlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzItYWY3ZGEyYjZlZGM1 LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ20MA0G CSqGSIb3DQEBCwUAA4IBAQAKdGMjVuyzz5QY5WucMiEtb4yL7Z9RNC+Su3ovmFoq bYMasBAQq1uD2alcmmTmRygC98lZt2Ww/t2scyWdgKW2PmOdCqpbmdqgFQicOXym w9+UPlJIJCu7TkwdJrQZv2NwYmmHMyau8HFE/8kE7kzkUCOW80d4SK+Df1O9DXQx sB+8/4xTNId1YAFXRcwcDLY32tr6Ptir3vH9Fj14cC7MIfGOUM/sHZlVE6sfX54G RdBDPp3vwWfTqw73Kk1iK9/oI5LhwPJ258XKa75BVWbqS3Y4EnHPPD/1ZAQvNu8X JJusimG5kRU8ASutcZJl+FMVNEolI3ND4LtQ6TqSAUXd -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:20 2026 by rpki-client