This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/3X66D8rd_nYfhEI9M4q9SKmLMaM.roa File: 3X66D8rd_nYfhEI9M4q9SKmLMaM.roa (raw, json) Hash identifier: hH7Y3DCETnMnnmJRKV+CQ8Ci7Hnqb3mZqszadLViFz4= Subject key identifier: DD:7E:BA:0F:CA:DD:FE:76:1F:84:42:3D:33:8A:BD:48:A9:8B:31:A3 Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa Certificate serial: 019B77C697EAC0C3D6883138833A9F662871 Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/3X66D8rd_nYfhEI9M4q9SKmLMaM.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49642 IP address blocks: 193.109.95.0/24 maxlen: 24 194.33.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:97:ea:c0:c3:d6:88:31:38:83:3a:9f:66:28:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd7eba0fcaddfe761f84423d338abd48a98b31a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:0a:fa:f9:94:81:eb:de:0d:3d:33:5b:84: a1:fa:cd:b7:38:53:3e:64:35:fe:1a:8c:35:69:bf: 38:ab:cb:b4:20:bf:f8:fb:36:6d:a2:1f:12:97:45: e4:b1:1f:7a:76:e1:79:b6:d8:a0:4b:b8:66:f8:29: fa:ff:c4:cd:c3:1e:ef:95:ce:df:5a:cf:ff:e4:d1: c5:43:ae:3b:98:20:01:49:36:bf:83:9c:7f:59:6f: 9b:fc:b6:08:c1:7a:38:6a:f0:fa:57:b4:dc:57:cc: c9:5d:74:64:ae:53:9c:c1:1a:38:39:21:eb:a1:86: 23:f2:27:f3:73:99:2a:00:f4:06:bd:4c:b3:e5:9f: 0b:10:fa:b8:d0:de:97:e8:ac:c7:d2:59:13:b1:04: 03:83:57:04:8d:07:09:70:44:b1:ff:65:be:96:8d: a7:5f:26:f8:27:11:ae:e0:c3:96:73:68:01:bc:07: ac:23:38:bb:e3:fa:e3:3a:19:11:23:d1:bd:c8:04: 80:cc:12:ae:6c:ea:93:72:6c:95:a6:24:d8:19:fd: 4b:e1:cb:be:6c:ae:c1:58:bc:d7:c6:7e:60:63:ad: 86:2b:e4:34:fb:82:f4:69:42:fc:d1:8c:47:43:13: 7c:20:14:e4:27:00:ac:c9:31:2b:73:a2:3a:85:07: 7e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7E:BA:0F:CA:DD:FE:76:1F:84:42:3D:33:8A:BD:48:A9:8B:31:A3 X509v3 Authority Key Identifier: keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/3X66D8rd_nYfhEI9M4q9SKmLMaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.95.0/24 194.33.152.0/22 Signature Algorithm: sha256WithRSAEncryption 74:0e:2c:60:6f:f8:09:d8:22:bb:e8:0f:1d:b2:55:d4:27:7d: de:9e:a0:cc:93:2d:61:f1:a7:93:4d:59:81:79:d8:39:43:57: f0:cc:8e:f5:c2:f9:4c:d3:8e:75:c0:b5:28:d4:a1:fc:04:96: f7:83:8a:16:bf:46:e4:dc:1f:20:09:43:6a:da:6a:b5:1c:18: 76:fb:cf:f0:a9:a7:15:10:e6:7d:2f:80:b4:91:f7:a8:e3:88: c0:88:9b:54:c8:5c:c6:c5:a8:30:5e:1d:78:76:74:1e:89:f2: ca:da:09:66:b3:6e:be:7e:dc:e8:76:9f:c4:a5:3a:4c:a0:40: 4a:f2:b3:cd:f6:78:7f:aa:ce:82:4a:56:50:81:9e:6f:e2:0d: 13:87:55:cf:cf:bc:d1:9c:55:a5:80:88:9b:56:ab:97:83:b7: 27:9c:3e:d6:2d:b5:2e:52:ce:09:4f:c9:0d:a1:4d:b0:b6:65: 96:65:f6:8e:78:e5:7d:33:a4:21:9f:78:47:64:eb:a5:4d:f6: 38:eb:51:7a:7b:5d:39:7f:15:46:91:9c:1b:df:86:7a:a5:43: 8c:61:1b:c3:45:85:40:95:54:1c:a3:6c:70:60:9d:ef:65:00: bd:4a:d9:c0:40:31:19:b8:ef:96:d4:23:f9:1d:62:51:7c:c0: c9:88:68:08 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xpfqwMPWiDE4gzqfZihxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZmQxNmMyNDdjZjQ2NmVlZDMxYTMwNGJiOGYxN2ZhMzIx NWFhYWEwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDdlYmEwZmNhZGRmZTc2MWY4NDQyM2QzMzhhYmQ0OGE5OGIzMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYAK+vmUgeveDT0zW4Sh+s23OFM+ ZDX+Gow1ab84q8u0IL/4+zZtoh8Sl0XksR96duF5ttigS7hm+Cn6/8TNwx7vlc7f Ws//5NHFQ647mCABSTa/g5x/WW+b/LYIwXo4avD6V7TcV8zJXXRkrlOcwRo4OSHr oYYj8ifzc5kqAPQGvUyz5Z8LEPq40N6X6KzH0lkTsQQDg1cEjQcJcESx/2W+lo2n Xyb4JxGu4MOWc2gBvAesIzi74/rjOhkRI9G9yASAzBKubOqTcmyVpiTYGf1L4cu+ bK7BWLzXxn5gY62GK+Q0+4L0aUL80YxHQxN8IBTkJwCsyTErc6I6hQd+LQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN1+ug/K3f52H4RCPTOKvUipizGjMB8GA1UdIwQY MBaAFKH9FsJHz0Zu7TGjBLuPF/oyFaqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2YwV3drZlBSbTd0TWFNRXU0OFgtaklWcXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lMzAzN2YtMzM4Yi00NmYyLThmOTct NmNlZjFhYmFiM2ZjLzEvM1g2NkQ4cmRfbllmaEVJOU00cTlTS21MTWFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lMzAzN2YtMzM4Yi00NmYyLThmOTctNmNlZjFhYmFiM2Zj LzEvb2YwV3drZlBSbTd0TWFNRXU0OFgtaklWcXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwW1fAwQC wiGYMA0GCSqGSIb3DQEBCwUAA4IBAQB0Dixgb/gJ2CK76A8dslXUJ33enqDMky1h 8aeTTVmBedg5Q1fwzI71wvlM0451wLUo1KH8BJb3g4oWv0bk3B8gCUNq2mq1HBh2 +8/wqacVEOZ9L4C0kfeo44jAiJtUyFzGxagwXh14dnQeifLK2glms26+ftzodp/E pTpMoEBK8rPN9nh/qs6CSlZQgZ5v4g0Th1XPz7zRnFWlgIibVquXg7cnnD7WLbUu Us4JT8kNoU2wtmWWZfaOeOV9M6Qhn3hHZOulTfY461F6e105fxVGkZwb34Z6pUOM YRvDRYVAlVQco2xwYJ3vZQC9StnAQDEZuO+W1CP5HWJRfMDJiGgI -----END CERTIFICATE-----Generated at Fri Jan 9 08:00:31 2026 by rpki-client