This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/P3KJe-KpvIfVnSus9dYEd9IB5is.roa File: P3KJe-KpvIfVnSus9dYEd9IB5is.roa (raw, json) Hash identifier: yzKFnPXT/yf225Fng2cCAnIlvWFQn++5Nl5/aoZu65M= Subject key identifier: 3F:72:89:7B:E2:A9:BC:87:D5:9D:2B:AC:F5:D6:04:77:D2:01:E6:2B Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463 Certificate serial: 019B79ED63690DC2E8747BF09D921492206F Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/P3KJe-KpvIfVnSus9dYEd9IB5is.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201767 IP address blocks: 84.54.114.0/24 maxlen: 24 92.63.204.0/24 maxlen: 24 92.63.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:63:69:0d:c2:e8:74:7b:f0:9d:92:14:92:20:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f72897be2a9bc87d59d2bacf5d60477d201e62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:ba:8f:3b:ea:8a:f0:33:0f:1b:cd:bf:1d: 64:6e:69:2b:59:b7:17:55:e6:03:60:82:8d:2e:55: 54:0f:e7:9a:45:06:35:32:a9:7b:99:a9:20:79:ef: 59:d9:b0:b0:ed:30:44:60:43:be:29:68:cd:3c:7c: 44:0f:ac:9a:49:27:f7:91:e5:ce:bf:39:1c:10:42: 8c:2d:0e:57:59:7b:b4:34:45:ae:41:0a:15:ac:59: 5c:4b:27:4b:1d:22:13:58:11:31:64:d9:4c:6e:5e: 6a:74:65:71:b6:3c:b8:3a:70:6a:f9:8c:04:d4:6a: 71:af:57:67:e7:62:a9:fa:09:17:9d:b4:4f:7f:21: b9:51:c7:5c:9a:49:c6:37:e1:2c:33:ce:a6:98:2e: af:ed:48:26:46:cd:15:6a:39:ef:9c:d4:e3:24:44: 3f:f0:77:bd:99:ae:11:17:ec:7d:9e:6c:04:e6:9f: 55:fb:d6:bd:fb:5b:a9:c4:a9:94:f8:54:59:bd:f3: 3d:5c:11:9b:24:5b:26:19:c7:de:9b:39:d9:48:1e: b0:67:73:37:a3:8a:bc:c2:a9:81:a4:10:c4:ee:5a: d1:d7:0b:9a:e8:8d:70:50:cb:a6:e5:b4:0e:8b:fd: a5:59:c3:d5:89:b2:b8:59:4d:be:69:f7:57:a4:22: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:72:89:7B:E2:A9:BC:87:D5:9D:2B:AC:F5:D6:04:77:D2:01:E6:2B X509v3 Authority Key Identifier: keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/P3KJe-KpvIfVnSus9dYEd9IB5is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.114.0/24 92.63.204.0/23 Signature Algorithm: sha256WithRSAEncryption a8:12:7f:b2:73:43:60:7e:cb:56:da:66:b6:4a:f4:ea:fc:7f: 29:a4:59:83:a3:b1:bb:74:ac:da:9b:8a:72:d6:6f:f7:8d:fa: 72:e6:d9:2f:f8:9b:bc:96:91:6c:e8:36:25:cb:56:1f:29:8e: ea:cc:c9:1d:fc:06:d4:b8:50:a1:04:2b:1c:1d:59:f6:19:9b: d5:50:ba:2c:4b:9e:72:15:dd:7f:a6:d1:58:d8:af:b2:ed:36: fd:35:21:42:e0:c0:b8:8d:0c:0d:a4:36:53:66:5e:1a:a8:75: e7:fa:ba:40:9f:8d:b7:1f:2c:74:e4:a0:29:58:87:8a:6e:30: 7a:d1:db:a2:f5:40:e4:14:35:91:48:a5:e4:4b:ec:43:b0:5d: 58:e9:fd:a4:db:18:2a:22:c1:7f:a4:f6:76:ff:cc:e7:4c:c6: 8f:f2:47:ab:14:91:25:d1:b1:7f:82:39:2d:08:e5:91:6f:84: fd:2c:30:00:ea:b1:22:ea:dd:28:2a:94:5d:37:f9:e6:72:75: fc:80:af:af:ab:11:16:17:1f:67:1c:32:b5:d7:4d:7b:2a:2d: b5:db:95:c4:51:97:f3:79:5e:a8:67:71:36:78:a7:e6:b3:b1: 02:48:81:4a:66:54:c3:2d:84:1f:5a:3f:3c:26:5e:3c:7b:f3: a1:fb:ca:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57WNpDcLodHvwnZIUkiBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4 YzQ0NjMwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjcyODk3YmUyYTliYzg3ZDU5ZDJiYWNmNWQ2MDQ3N2QyMDFlNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+S6jzvqivAzDxvNvx1kbmkrWbcX VeYDYIKNLlVUD+eaRQY1Mql7makgee9Z2bCw7TBEYEO+KWjNPHxED6yaSSf3keXO vzkcEEKMLQ5XWXu0NEWuQQoVrFlcSydLHSITWBExZNlMbl5qdGVxtjy4OnBq+YwE 1Gpxr1dn52Kp+gkXnbRPfyG5UcdcmknGN+EsM86mmC6v7UgmRs0VajnvnNTjJEQ/ 8He9ma4RF+x9nmwE5p9V+9a9+1upxKmU+FRZvfM9XBGbJFsmGcfemznZSB6wZ3M3 o4q8wqmBpBDE7lrR1wua6I1wUMum5bQOi/2lWcPVibK4WU2+afdXpCJdSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD9yiXviqbyH1Z0rrPXWBHfSAeYrMB8GA1UdIwQY MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct NzRkZTI1OGE3NmY4LzEvUDNLSmUtS3B2SWZWblN1czlkWUVkOUlCNWlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4 LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVDZyAwQB XD/MMA0GCSqGSIb3DQEBCwUAA4IBAQCoEn+yc0NgfstW2ma2SvTq/H8ppFmDo7G7 dKzam4py1m/3jfpy5tkv+Ju8lpFs6DYly1YfKY7qzMkd/AbUuFChBCscHVn2GZvV ULosS55yFd1/ptFY2K+y7Tb9NSFC4MC4jQwNpDZTZl4aqHXn+rpAn423Hyx05KAp WIeKbjB60dui9UDkFDWRSKXkS+xDsF1Y6f2k2xgqIsF/pPZ2/8znTMaP8kerFJEl 0bF/gjktCOWRb4T9LDAA6rEi6t0oKpRdN/nmcnX8gK+vqxEWFx9nHDK11017Ki21 25XEUZfzeV6oZ3E2eKfms7ECSIFKZlTDLYQfWj88Jl48e/Oh+8qX -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:30 2026 by rpki-client