This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/3FX3dROebXazZ9k_8-Lo5o1qkkI.roa File: 3FX3dROebXazZ9k_8-Lo5o1qkkI.roa (raw, json) Hash identifier: iLVy4lChJ6R/aX19zh/vuVIS2qDiRo8xZfWhdwKLT/E= Subject key identifier: DC:55:F7:75:13:9E:6D:76:B3:67:D9:3F:F3:E2:E8:E6:8D:6A:92:42 Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f Certificate serial: 019B7E38D043DA0605ABCB88A5423F0D80B1 Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/3FX3dROebXazZ9k_8-Lo5o1qkkI.roa Signing time: Fri 02 Jan 2026 10:20:11 +0000 ROA not before: Fri 02 Jan 2026 10:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25244 IP address blocks: 212.126.224.0/19 maxlen: 19 212.126.240.0/21 maxlen: 21 212.126.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d0:43:da:06:05:ab:cb:88:a5:42:3f:0d:80:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc55f775139e6d76b367d93ff3e2e8e68d6a9242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:e4:e9:46:10:cc:2f:37:69:4e:d1:56:f4: 14:34:db:ec:b9:70:6e:41:36:cf:77:6f:32:16:38: 6d:bc:ea:32:ec:63:ff:45:df:2e:4b:f9:e2:2d:a4: 52:9b:9d:f0:70:c8:8f:ea:33:bc:bf:c6:36:c8:43: 04:dd:3f:3b:5b:be:26:32:43:19:00:eb:b1:c8:f5: c4:f6:6a:64:d6:a0:cc:2e:7c:54:a3:86:12:68:0d: a9:48:47:a9:63:4f:29:13:92:21:65:68:6b:9b:f9: 97:2e:d1:36:90:5d:4a:72:67:d9:e5:85:6b:21:1c: 20:73:41:5f:f2:d7:4d:df:90:03:cf:fb:37:23:d0: 84:99:96:73:c2:33:e2:37:41:10:06:cf:27:08:41: 2e:16:dc:28:03:9e:d5:a3:53:6a:c0:64:97:7e:f2: b9:0c:1f:70:72:21:90:3f:b8:b6:43:12:63:85:8a: 6c:6e:f1:90:51:b3:81:c8:ae:39:3f:97:a3:c6:eb: 72:c7:50:76:9c:88:f8:69:7d:d8:9e:aa:69:21:6b: cc:a7:ce:65:7e:c5:44:fc:5f:43:70:0d:74:4c:93: 71:1c:7c:25:74:a1:ac:d6:0f:2d:b5:43:39:44:7b: 55:53:3b:cf:ea:46:f2:39:6a:ed:04:1d:35:85:35: 6d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:55:F7:75:13:9E:6D:76:B3:67:D9:3F:F3:E2:E8:E6:8D:6A:92:42 X509v3 Authority Key Identifier: keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/3FX3dROebXazZ9k_8-Lo5o1qkkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.126.224.0/19 Signature Algorithm: sha256WithRSAEncryption 28:95:43:87:20:e6:00:9b:e8:2a:e1:89:d4:a0:16:56:f2:b8: b9:a2:79:6e:69:c5:d9:11:f9:5e:fc:9e:b0:ce:42:84:72:14: cb:f3:cd:83:c1:ab:fd:4d:a6:8a:36:a1:33:97:3e:ca:39:eb: c9:a5:11:7e:c6:57:67:40:1d:fb:e1:88:3c:14:5e:32:32:36: 41:42:05:41:a4:59:73:ff:62:84:79:9a:3a:e9:bb:b5:6d:bc: 64:c9:18:c0:68:56:b2:b4:56:1b:da:69:42:25:e8:e4:ca:1c: c4:9b:f8:29:ca:e2:c4:e8:6f:cf:9d:d9:5f:bc:47:ad:0d:24: bc:6a:7a:2f:e2:0b:8c:0b:6b:b0:40:c3:b2:41:74:c2:c9:63: 7c:7d:20:91:6d:a8:01:d9:0a:95:f1:81:01:7e:08:6a:41:d0: 7d:e0:ba:56:c4:e4:86:56:5e:ca:86:a5:90:27:8c:05:72:54: d9:01:9b:96:b5:56:46:db:ac:0e:4a:3a:52:24:03:4c:6e:91: 93:dc:0a:1b:b7:19:81:77:b1:ef:37:df:52:52:5f:38:90:4b: 39:57:92:06:9c:a5:75:e5:8f:fc:da:c1:22:80:17:df:74:04: 0a:59:99:e8:53:11:fb:fd:f8:47:62:7d:3e:96:fe:42:79:87: 03:74:d3:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ONBD2gYFq8uIpUI/DYCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDkxODgzY2I0YzUwMTIyZmRiMjc1NGI2MjUyZmRkNmZj OWQ1MWYwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzU1Zjc3NTEzOWU2ZDc2YjM2N2Q5M2ZmM2UyZThlNjhkNmE5MjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK/k6UYQzC83aU7RVvQUNNvsuXBu QTbPd28yFjhtvOoy7GP/Rd8uS/niLaRSm53wcMiP6jO8v8Y2yEME3T87W74mMkMZ AOuxyPXE9mpk1qDMLnxUo4YSaA2pSEepY08pE5IhZWhrm/mXLtE2kF1KcmfZ5YVr IRwgc0Ff8tdN35ADz/s3I9CEmZZzwjPiN0EQBs8nCEEuFtwoA57Vo1NqwGSXfvK5 DB9wciGQP7i2QxJjhYpsbvGQUbOByK45P5ejxutyx1B2nIj4aX3YnqppIWvMp85l fsVE/F9DcA10TJNxHHwldKGs1g8ttUM5RHtVUzvP6kbyOWrtBB01hTVtqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxV93UTnm12s2fZP/Pi6OaNapJCMB8GA1UdIwQY MBaAFGZJGIPLTFASL9snVLYlL91vydUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEt NzVkNmJlNGU1YzM3LzEvM0ZYM2RST2ViWGF6WjlrXzgtTG81bzFxa2tJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEtNzVkNmJlNGU1YzM3 LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1H7gMA0G CSqGSIb3DQEBCwUAA4IBAQAolUOHIOYAm+gq4YnUoBZW8ri5onluacXZEfle/J6w zkKEchTL882Dwav9TaaKNqEzlz7KOevJpRF+xldnQB374Yg8FF4yMjZBQgVBpFlz /2KEeZo66bu1bbxkyRjAaFaytFYb2mlCJejkyhzEm/gpyuLE6G/PndlfvEetDSS8 anov4guMC2uwQMOyQXTCyWN8fSCRbagB2QqV8YEBfghqQdB94LpWxOSGVl7KhqWQ J4wFclTZAZuWtVZG26wOSjpSJANMbpGT3AobtxmBd7HvN99SUl84kEs5V5IGnKV1 5Y/82sEigBffdAQKWZnoUxH7/fhHYn0+lv5CeYcDdNOW -----END CERTIFICATE-----Generated at Mon Jan 12 15:27:10 2026 by rpki-client