This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/3GOUf5zM72xHW-KizqGmfejZI-I.roa File: 3GOUf5zM72xHW-KizqGmfejZI-I.roa (raw, json) Hash identifier: 7Jjry34OgvJlCQgmEgxo8SwsDK8ifphC6Z5s0sCqAbk= Subject key identifier: DC:63:94:7F:9C:CC:EF:6C:47:5B:E2:A2:CE:A1:A6:7D:E8:D9:23:E2 Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f Certificate serial: 019B7EA71FA605BECF73068997F721F16C8E Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/3GOUf5zM72xHW-KizqGmfejZI-I.roa Signing time: Fri 02 Jan 2026 12:20:40 +0000 ROA not before: Fri 02 Jan 2026 12:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199391 IP address blocks: 185.38.200.0/24 maxlen: 24 185.38.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1f:a6:05:be:cf:73:06:89:97:f7:21:f1:6c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc63947f9cccef6c475be2a2cea1a67de8d923e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ee:5d:cb:99:5f:0b:31:5b:c9:f1:f6:97:ae: 4a:23:aa:26:95:2b:5b:74:8b:fd:9b:70:be:98:cf: 21:84:59:18:b9:37:b7:20:60:0b:7b:bd:b4:ca:f4: bd:99:03:f0:90:a5:f8:d1:eb:44:9f:65:3f:8d:15: 9b:97:28:27:f4:48:f7:ed:57:ac:d7:72:4f:6a:35: 6d:22:e2:d6:a3:9d:d8:0e:ec:da:ef:5b:bf:a5:32: 5e:f1:24:f9:57:01:50:94:9e:c4:9c:ef:d7:ab:a6: 46:17:d3:b6:0f:54:e2:02:f8:5d:60:e3:dd:c1:63: f4:5b:dc:46:da:e2:36:91:a5:5d:a8:23:d7:25:b4: 7d:ab:61:3d:40:8d:e9:9d:c4:5b:a8:fe:79:d5:f8: cc:2e:8a:f2:97:04:6f:b5:f9:b2:2d:34:81:67:5c: 3e:9f:ac:29:c3:52:b0:09:44:61:ba:e8:90:30:fd: 92:5f:d8:6a:96:5d:32:be:c1:1b:32:c4:7c:4f:f7: 66:b5:3a:db:52:b3:e4:c6:81:08:a3:b3:eb:92:0a: c3:af:04:43:58:12:9a:e7:6d:7b:17:fe:b5:b4:a4: 2c:55:9c:6d:a4:14:a5:c5:10:62:61:2a:36:52:cb: 0d:a2:47:12:e6:4e:21:f7:68:d3:76:08:d0:10:48: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:63:94:7F:9C:CC:EF:6C:47:5B:E2:A2:CE:A1:A6:7D:E8:D9:23:E2 X509v3 Authority Key Identifier: keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/3GOUf5zM72xHW-KizqGmfejZI-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.200.0/23 Signature Algorithm: sha256WithRSAEncryption 56:37:73:13:f4:ce:bd:91:8b:b4:2e:6d:d0:d1:d8:b5:35:df: 40:be:da:59:75:7d:10:06:e6:64:c5:57:69:58:35:4e:55:4f: 35:ed:41:8a:4a:f6:64:71:3f:0a:89:05:e8:ec:27:d1:fa:6c: 2b:9f:7f:e3:b7:99:a3:4d:9a:aa:70:17:97:c8:27:88:a9:c0: 30:a0:eb:4a:0f:07:32:11:e8:04:a6:27:38:38:7f:35:75:f1: 69:3e:5d:ab:f9:3b:d2:c8:e0:da:de:2e:b7:38:db:5c:b2:ff: 77:44:f4:61:40:55:af:53:a3:bb:bb:e1:79:49:a7:d6:c3:06: af:e3:92:6d:c8:e3:1c:26:52:ca:f6:cf:15:9a:3e:9a:60:58: f6:a3:7a:d3:a4:aa:33:39:36:09:37:95:d4:c9:27:e3:b5:f2: cc:57:eb:27:65:fa:f3:00:ad:23:ff:c3:05:13:44:d7:ea:86: 2b:46:11:85:5e:3b:1c:9a:c8:ec:e9:a4:24:4d:a1:00:7c:2b: 94:f8:eb:31:f5:69:e8:3a:e7:77:18:1c:5f:41:17:18:4a:b4: 60:df:37:1a:b6:ff:e0:30:a7:f3:72:a5:ce:18:98:48:85:43: 83:26:e3:9d:26:0b:eb:ca:43:a7:4a:49:3c:f3:19:b8:e1:09: 1e:8b:23:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+px+mBb7PcwaJl/ch8WyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTdlYzRjNDAyNWFkYWI4OGI5MjA3NGFkNDYwNTZlOWY5 MzA5OWYwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzYzOTQ3ZjljY2NlZjZjNDc1YmUyYTJjZWExYTY3ZGU4ZDkyM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle5dy5lfCzFbyfH2l65KI6omlStb dIv9m3C+mM8hhFkYuTe3IGALe720yvS9mQPwkKX40etEn2U/jRWblygn9Ej37Ves 13JPajVtIuLWo53YDuza71u/pTJe8ST5VwFQlJ7EnO/Xq6ZGF9O2D1TiAvhdYOPd wWP0W9xG2uI2kaVdqCPXJbR9q2E9QI3pncRbqP551fjMLorylwRvtfmyLTSBZ1w+ n6wpw1KwCURhuuiQMP2SX9hqll0yvsEbMsR8T/dmtTrbUrPkxoEIo7PrkgrDrwRD WBKa5217F/61tKQsVZxtpBSlxRBiYSo2UssNokcS5k4h92jTdgjQEEg7VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxjlH+czO9sR1vios6hpn3o2SPiMB8GA1UdIwQY MBaAFM1X7ExAJa2riLkgdK1GBW6fkwmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUt NzYyNDMyZmRkNGRkLzEvM0dPVWY1ek03MnhIVy1LaXpxR21mZWpaSS1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUtNzYyNDMyZmRkNGRk LzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSbIMA0G CSqGSIb3DQEBCwUAA4IBAQBWN3MT9M69kYu0Lm3Q0di1Nd9AvtpZdX0QBuZkxVdp WDVOVU817UGKSvZkcT8KiQXo7CfR+mwrn3/jt5mjTZqqcBeXyCeIqcAwoOtKDwcy EegEpic4OH81dfFpPl2r+TvSyODa3i63ONtcsv93RPRhQFWvU6O7u+F5SafWwwav 45JtyOMcJlLK9s8Vmj6aYFj2o3rTpKozOTYJN5XUySfjtfLMV+snZfrzAK0j/8MF E0TX6oYrRhGFXjscmsjs6aQkTaEAfCuU+Osx9WnoOud3GBxfQRcYSrRg3zcatv/g MKfzcqXOGJhIhUODJuOdJgvrykOnSkk88xm44QkeiyMJ -----END CERTIFICATE-----Generated at Fri Jan 2 19:42:56 2026 by rpki-client