This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/a3vqBzTeMihaLI7nX3YXTwT9QXM.roa File: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (raw, json) Hash identifier: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE= Subject key identifier: 6B:7B:EA:07:34:DE:32:28:5A:2C:8E:E7:5F:76:17:4F:04:FD:41:73 Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb Certificate serial: 019B7758CF057F75DADF0F531FD465A51DE2 Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/a3vqBzTeMihaLI7nX3YXTwT9QXM.roa Signing time: Thu 01 Jan 2026 02:17:47 +0000 ROA not before: Thu 01 Jan 2026 02:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8283 IP address blocks: 91.208.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cf:05:7f:75:da:df:0f:53:1f:d4:65:a5:1d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb Validity Not Before: Jan 1 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b7bea0734de32285a2c8ee75f76174f04fd4173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:69:6f:d9:92:ea:dc:ec:2e:be:3f:f8:28: da:2e:b7:d7:24:dc:90:6d:63:64:f7:58:a7:66:12: dd:1d:b9:38:b8:59:71:38:c5:cf:07:c7:74:e1:d2: 00:13:ac:92:1d:42:13:5f:2b:4c:db:a3:e8:22:ab: c6:0c:35:61:d4:01:92:ce:2a:a4:44:16:92:6c:11: d7:fa:d6:d7:56:ed:2b:ac:af:50:a6:ce:a0:1e:ac: 1e:76:74:17:fa:75:1b:44:18:fe:ad:62:17:a9:09: 77:71:cb:da:7e:a5:53:33:4f:6a:89:04:c6:67:33: d3:da:96:d8:ee:86:26:38:06:e2:d2:bd:09:18:7d: 60:f6:e2:5c:8c:2a:79:5b:27:6f:04:86:6b:57:85: 9c:20:8a:5d:b3:38:21:9e:f8:c5:51:6e:72:70:05: b9:cd:ca:e5:ba:74:49:01:28:33:90:64:56:9f:6f: 57:74:48:94:80:f4:fe:68:76:0a:ec:82:01:64:3b: f7:02:9c:a5:ab:c4:6b:76:6f:01:89:7f:27:09:ad: 5e:7b:eb:7e:dd:ee:db:56:14:8f:1f:e8:2d:e5:ba: ab:73:61:4e:9b:e6:77:75:81:3e:3f:0f:87:46:2a: 5f:a9:0c:c8:4b:70:71:f0:f9:59:25:ae:c3:f2:01: 81:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7B:EA:07:34:DE:32:28:5A:2C:8E:E7:5F:76:17:4F:04:FD:41:73 X509v3 Authority Key Identifier: keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/a3vqBzTeMihaLI7nX3YXTwT9QXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.34.0/24 Signature Algorithm: sha256WithRSAEncryption 92:f8:2c:74:ce:df:fb:d6:70:ba:18:fe:a7:0e:ca:76:93:b7: 62:51:cc:74:76:7a:cd:d3:74:df:37:4d:e5:b1:c2:5a:28:32: 73:fc:0b:ea:4f:0f:0f:44:ae:e1:8a:4e:fd:93:39:4f:11:54: 61:95:5c:b1:b4:b8:ec:10:31:cd:26:66:a4:e7:95:39:f9:67: 64:e2:71:1b:e3:bb:6d:d5:6e:fb:1f:03:a0:3a:09:2c:c4:2c: e0:47:69:74:29:17:84:dc:ff:d4:c2:02:e0:65:85:49:b0:b8: 87:09:fa:93:d8:f4:1d:1f:a0:cd:45:a2:cc:8a:80:5a:84:21: 5f:ae:17:4b:0c:f7:d6:b8:47:44:e7:f4:94:50:8f:76:bd:71: 96:e1:73:f3:3b:2d:e3:20:35:9e:86:97:ae:7f:d6:1a:2c:45: 1e:cd:b2:d1:a8:f5:a5:db:1f:c3:7f:0d:4d:3e:cf:6d:f1:5b: 14:6c:0d:79:20:6a:18:3f:31:85:b9:16:86:70:b7:ab:f6:76: 6a:a2:77:8e:d6:12:24:be:a5:b5:1b:db:60:ac:91:dd:52:57: 98:b6:d1:02:1f:b2:2e:d9:1d:bf:86:b0:40:30:a5:03:c7:34: fb:70:7b:93:5e:36:e2:0f:79:39:db:71:2f:c7:c3:45:7a:21: 44:83:b3:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WM8Ff3Xa3w9TH9RlpR3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTAxOWNiNTRkNzAwYTFiMWM1MGU4ZjkwZWJlZTJhNWVl YTU3YmIwHhcNMjYwMTAxMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjdiZWEwNzM0ZGUzMjI4NWEyYzhlZTc1Zjc2MTc0ZjA0ZmQ0MTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaxpb9mS6tzsLr4/+CjaLrfXJNyQ bWNk91inZhLdHbk4uFlxOMXPB8d04dIAE6ySHUITXytM26PoIqvGDDVh1AGSziqk RBaSbBHX+tbXVu0rrK9Qps6gHqwednQX+nUbRBj+rWIXqQl3ccvafqVTM09qiQTG ZzPT2pbY7oYmOAbi0r0JGH1g9uJcjCp5WydvBIZrV4WcIIpdszghnvjFUW5ycAW5 zcrlunRJASgzkGRWn29XdEiUgPT+aHYK7IIBZDv3Apylq8Rrdm8BiX8nCa1ee+t+ 3e7bVhSPH+gt5bqrc2FOm+Z3dYE+Pw+HRipfqQzIS3Bx8PlZJa7D8gGBLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGt76gc03jIoWiyO5192F08E/UFzMB8GA1UdIwQY MBaAFMWgGctU1wChscUOj5Dr7ipe6le7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQt MzFhM2VjZjFiZGI2LzEvYTN2cUJ6VGVNaWhhTEk3blgzWVhUd1Q5UVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQtMzFhM2VjZjFiZGI2 LzEveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AiMA0G CSqGSIb3DQEBCwUAA4IBAQCS+Cx0zt/71nC6GP6nDsp2k7diUcx0dnrN03TfN03l scJaKDJz/AvqTw8PRK7hik79kzlPEVRhlVyxtLjsEDHNJmak55U5+Wdk4nEb47tt 1W77HwOgOgksxCzgR2l0KReE3P/UwgLgZYVJsLiHCfqT2PQdH6DNRaLMioBahCFf rhdLDPfWuEdE5/SUUI92vXGW4XPzOy3jIDWehpeuf9YaLEUezbLRqPWl2x/Dfw1N Ps9t8VsUbA15IGoYPzGFuRaGcLer9nZqoneO1hIkvqW1G9tgrJHdUleYttECH7Iu 2R2/hrBAMKUDxzT7cHuTXjbiD3k523Evx8NFeiFEg7Oc -----END CERTIFICATE-----Generated at Tue Jan 6 10:25:40 2026 by rpki-client