This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3bMwKPGkCpUYdK3M6gxRPzbeOlE.roa File: 3bMwKPGkCpUYdK3M6gxRPzbeOlE.roa (raw, json) Hash identifier: 79Ubn1LP4gtqzeIby6w27GXFentkt53aRIvCQoznPKw= Subject key identifier: DD:B3:30:28:F1:A4:0A:95:18:74:AD:CC:EA:0C:51:3F:36:DE:3A:51 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CDA33114A907C05FB88F4167CE96A Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3bMwKPGkCpUYdK3M6gxRPzbeOlE.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 89.23.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:da:33:11:4a:90:7c:05:fb:88:f4:16:7c:e9:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddb33028f1a40a951874adccea0c513f36de3a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:95:ac:2e:9e:bc:23:a5:d8:31:39:b9:57: 4c:14:9a:01:e3:ad:49:71:6c:71:18:ba:72:d5:28: bd:84:4a:b1:4f:33:06:57:ff:f9:47:3a:9e:c1:fc: 10:9c:4f:b7:5e:17:73:4a:42:fd:bc:02:d8:5c:53: 64:ef:e9:2e:75:ff:0d:88:7e:29:c4:09:bd:dd:89: b4:76:c0:cc:da:b7:e0:6b:e6:3b:c2:59:c7:f8:21: 31:45:82:e5:60:aa:b0:17:2e:68:a8:2f:d6:bf:57: 9d:aa:e2:71:a0:f0:ee:11:46:cc:66:a0:df:54:bb: 45:7f:df:6a:e7:04:68:67:23:5b:be:69:56:e1:ff: 84:dc:ed:7b:11:e1:f8:02:e9:31:72:7c:73:e1:94: 8f:ec:36:74:e7:ff:69:fe:87:ca:ce:5b:42:b3:4e: 41:2c:13:b3:2e:85:45:a0:f7:19:46:49:56:53:f6: c0:aa:4e:9c:b6:96:f9:16:f0:72:d2:09:72:bc:f4: cc:45:08:fc:43:07:ca:83:10:d6:54:c7:d7:3e:ce: a7:f2:2b:32:38:f8:b1:b7:f8:1c:2d:60:c0:8c:db: 49:04:75:a5:42:67:b2:28:56:d6:fd:64:32:c3:c6: 97:74:76:5f:13:9e:8c:7f:14:19:a0:45:73:e4:49: 48:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B3:30:28:F1:A4:0A:95:18:74:AD:CC:EA:0C:51:3F:36:DE:3A:51 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3bMwKPGkCpUYdK3M6gxRPzbeOlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.119.0/24 Signature Algorithm: sha256WithRSAEncryption 33:dc:27:f3:76:1d:c3:86:f1:c5:06:fb:3f:6e:bb:60:af:53: b4:0c:f9:96:32:ff:03:1b:19:cc:a4:57:5f:36:8c:22:c8:3c: 1f:f5:9d:03:f9:91:8e:63:58:ac:7d:a2:a8:ce:82:a7:57:df: d1:8a:5d:d1:d9:62:12:b8:a3:11:5c:8e:1b:0d:59:73:d5:ae: 36:99:9a:9a:d0:0f:9a:da:1c:bd:c4:03:6b:39:4d:e3:9b:fa: 6a:97:46:08:42:35:26:8e:39:41:91:cb:d0:16:8f:c2:24:62: 3e:0a:d5:01:30:45:0f:04:ba:6e:50:6c:3b:35:d0:b9:d4:be: 3e:e7:f9:ec:89:d3:1a:29:84:32:94:b4:8d:2e:4c:1f:2a:7d: 07:95:46:ec:2e:5b:a5:5f:52:e0:95:46:fe:3c:17:4e:f2:27: 7a:9d:fe:45:0a:b8:f2:0f:9a:45:1e:d2:9c:11:e2:51:b7:9b: ec:d1:8c:9b:45:b1:4a:fe:ac:ad:c6:27:43:67:df:25:b7:cc: cb:e1:aa:9b:ad:39:22:15:7b:6a:57:d6:b4:c6:58:2b:76:ef: e1:57:f3:f5:1c:7d:f3:4e:af:94:70:ab:c5:d2:19:e4:00:d4: a0:3e:fd:fc:25:f4:07:93:6d:d0:cc:64:48:22:81:2e:b6:82: 17:72:98:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNozEUqQfAX7iPQWfOlqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGIzMzAyOGYxYTQwYTk1MTg3NGFkY2NlYTBjNTEzZjM2ZGUzYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkmVrC6evCOl2DE5uVdMFJoB461J cWxxGLpy1Si9hEqxTzMGV//5RzqewfwQnE+3XhdzSkL9vALYXFNk7+kudf8NiH4p xAm93Ym0dsDM2rfga+Y7wlnH+CExRYLlYKqwFy5oqC/Wv1edquJxoPDuEUbMZqDf VLtFf99q5wRoZyNbvmlW4f+E3O17EeH4Aukxcnxz4ZSP7DZ05/9p/ofKzltCs05B LBOzLoVFoPcZRklWU/bAqk6ctpb5FvBy0glyvPTMRQj8QwfKgxDWVMfXPs6n8isy OPixt/gcLWDAjNtJBHWlQmeyKFbW/WQyw8aXdHZfE56MfxQZoEVz5ElI8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN2zMCjxpAqVGHStzOoMUT823jpRMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvM2JNd0tQR2tDcFVZZEszTTZneFJQemJlT2xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRd3MA0G CSqGSIb3DQEBCwUAA4IBAQAz3Cfzdh3DhvHFBvs/brtgr1O0DPmWMv8DGxnMpFdf NowiyDwf9Z0D+ZGOY1isfaKozoKnV9/Ril3R2WISuKMRXI4bDVlz1a42mZqa0A+a 2hy9xANrOU3jm/pql0YIQjUmjjlBkcvQFo/CJGI+CtUBMEUPBLpuUGw7NdC51L4+ 5/nsidMaKYQylLSNLkwfKn0HlUbsLlulX1LglUb+PBdO8id6nf5FCrjyD5pFHtKc EeJRt5vs0YybRbFK/qytxidDZ98lt8zL4aqbrTkiFXtqV9a0xlgrdu/hV/P1HH3z Tq+UcKvF0hnkANSgPv38JfQHk23QzGRIIoEutoIXcphs -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:25 2026 by rpki-client