This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/b3m-2mGJNe4d4cYhhMKL2hutIBY.roa File: b3m-2mGJNe4d4cYhhMKL2hutIBY.roa (raw, json) Hash identifier: VFpxrLor0/kl7tjGcbBC6hfUr2SDw3xOvK2qT2usj7g= Subject key identifier: 6F:79:BE:DA:61:89:35:EE:1D:E1:C6:21:84:C2:8B:DA:1B:AD:20:16 Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463 Certificate serial: 019B79ED63CF183C2A5949B427643EC45F50 Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/b3m-2mGJNe4d4cYhhMKL2hutIBY.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202175 IP address blocks: 84.54.100.0/24 maxlen: 24 84.54.101.0/24 maxlen: 24 84.54.102.0/24 maxlen: 24 84.54.105.0/24 maxlen: 24 84.54.106.0/24 maxlen: 24 84.54.107.0/24 maxlen: 24 84.54.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:63:cf:18:3c:2a:59:49:b4:27:64:3e:c4:5f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f79beda618935ee1de1c62184c28bda1bad2016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:84:13:25:bd:4c:f8:a4:5e:e8:eb:87:6f: 5f:03:dd:4e:13:d2:70:cf:74:36:3a:09:c1:88:35: 15:f5:98:b0:0b:54:14:3a:0e:45:34:c3:bc:15:34: c9:b9:9e:97:61:03:88:1e:75:94:b2:cd:93:fe:5a: cd:23:a0:e8:64:7a:13:4a:04:38:11:82:46:29:d2: 32:42:49:a2:20:d4:19:dc:2b:da:a8:1e:74:ce:47: 06:ca:1c:f8:14:9a:76:1b:4f:38:81:7f:10:5c:9b: 36:5a:c6:4a:11:38:61:ac:e4:f2:f3:52:e9:8f:d3: 5d:28:29:5a:e3:19:1c:68:b2:6d:92:3c:5c:14:05: b2:61:19:50:c6:aa:66:f9:df:60:7c:31:ac:23:a8: 40:62:f1:19:d1:de:4a:78:8a:3a:9f:87:a6:df:ad: b0:c1:30:d7:a4:90:05:de:38:d3:ef:12:e2:1a:97: f5:98:3b:40:2a:2e:ae:20:1d:3d:14:cf:86:0b:43: 58:0e:e0:4a:9a:5c:58:d2:40:d1:20:f1:7e:8f:9d: 55:94:95:a3:77:8c:5c:d2:13:d4:07:2a:8e:3f:e7: dc:1f:7e:c1:b2:25:bf:18:44:e8:fd:c6:65:cf:fc: e2:46:f0:bc:c0:69:fa:b2:4f:a6:f6:d9:a5:cd:67: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:79:BE:DA:61:89:35:EE:1D:E1:C6:21:84:C2:8B:DA:1B:AD:20:16 X509v3 Authority Key Identifier: keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/b3m-2mGJNe4d4cYhhMKL2hutIBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.100.0-84.54.102.255 84.54.105.0-84.54.108.255 Signature Algorithm: sha256WithRSAEncryption 45:3b:33:00:ff:dc:65:95:0f:2a:46:ae:b9:60:bd:ac:8b:de: af:f5:f5:51:62:e5:44:1a:cd:05:ae:f5:53:3b:6b:94:3f:61: 3f:eb:63:c1:89:ed:e9:c2:3e:8d:f4:33:4d:58:a6:5e:79:a9: 09:47:c6:77:2c:d3:84:01:c7:f5:f2:a9:86:75:5c:47:c4:51: 40:e2:17:6a:b3:97:5e:05:6c:82:77:32:49:cd:ed:62:9d:f1: 88:be:a8:08:09:a3:89:ca:c5:ef:f2:bb:25:54:77:cf:20:ef: 31:06:86:47:1c:6b:c2:1d:69:9e:62:f7:d7:7d:c1:a7:1c:40: 6b:ad:2c:a8:49:45:40:53:41:07:97:90:b9:74:76:ba:1a:8d: de:33:d7:72:c2:aa:c5:c5:23:c0:85:d4:c7:5d:39:f1:d9:54: 5b:16:6d:ce:6a:06:40:4d:42:f9:75:a3:60:df:68:bf:f5:50: 57:5e:07:87:3e:7e:7f:f5:5f:41:a6:11:91:77:da:eb:f9:5a: 76:90:12:5e:f8:38:74:3f:71:3f:5e:64:ed:b2:34:43:0c:3b: 88:50:f3:41:8b:67:95:60:4b:32:d8:2f:1a:07:b7:e9:ea:35: 8a:3d:31:ea:87:d1:31:a0:36:64:ef:a2:f7:72:07:c5:d8:9f: f6:25:2c:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt57WPPGDwqWUm0J2Q+xF9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4 YzQ0NjMwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Zjc5YmVkYTYxODkzNWVlMWRlMWM2MjE4NGMyOGJkYTFiYWQyMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLiEEyW9TPikXujrh29fA91OE9Jw z3Q2OgnBiDUV9ZiwC1QUOg5FNMO8FTTJuZ6XYQOIHnWUss2T/lrNI6DoZHoTSgQ4 EYJGKdIyQkmiINQZ3CvaqB50zkcGyhz4FJp2G084gX8QXJs2WsZKEThhrOTy81Lp j9NdKCla4xkcaLJtkjxcFAWyYRlQxqpm+d9gfDGsI6hAYvEZ0d5KeIo6n4em362w wTDXpJAF3jjT7xLiGpf1mDtAKi6uIB09FM+GC0NYDuBKmlxY0kDRIPF+j51VlJWj d4xc0hPUByqOP+fcH37BsiW/GETo/cZlz/ziRvC8wGn6sk+m9tmlzWeyXQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFG95vtphiTXuHeHGIYTCi9obrSAWMB8GA1UdIwQY MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct NzRkZTI1OGE3NmY4LzEvYjNtLTJtR0pOZTRkNGNZaGhNS0wyaHV0SUJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4 LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAJUNmQD BABUNmYwDAMEAFQ2aQMEAFQ2bDANBgkqhkiG9w0BAQsFAAOCAQEARTszAP/cZZUP KkauuWC9rIver/X1UWLlRBrNBa71UztrlD9hP+tjwYnt6cI+jfQzTVimXnmpCUfG dyzThAHH9fKphnVcR8RRQOIXarOXXgVsgncySc3tYp3xiL6oCAmjicrF7/K7JVR3 zyDvMQaGRxxrwh1pnmL3133BpxxAa60sqElFQFNBB5eQuXR2uhqN3jPXcsKqxcUj wIXUx1058dlUWxZtzmoGQE1C+XWjYN9ov/VQV14Hhz5+f/VfQaYRkXfa6/ladpAS Xvg4dD9xP15k7bI0Qww7iFDzQYtnlWBLMtgvGge36eo1ij0x6ofRMaA2ZO+i93IH xdif9iUsyQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:29 2026 by rpki-client