This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/3zDXj12FVAF9XeXyFE67e6JY6lg.roa File: 3zDXj12FVAF9XeXyFE67e6JY6lg.roa (raw, json) Hash identifier: yDL38rTQ8XpaiZahcdQcgu5FHofBAzcqqnIqz6pUsPE= Subject key identifier: DF:30:D7:8F:5D:85:54:01:7D:5D:E5:F2:14:4E:BB:7B:A2:58:EA:58 Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413 Certificate serial: 019B76EB5473980133D47D976B59B998CF32 Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/3zDXj12FVAF9XeXyFE67e6JY6lg.roa Signing time: Thu 01 Jan 2026 00:18:12 +0000 ROA not before: Thu 01 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.220.160.0/22 maxlen: 24 2a0b:f940:1af2::/48 maxlen: 48 2a0b:f940:2af2::/48 maxlen: 48 2a0b:f940:3af2::/48 maxlen: 48 2a0b:f940:4af2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:54:73:98:01:33:d4:7d:97:6b:59:b9:98:cf:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df30d78f5d8554017d5de5f2144ebb7ba258ea58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:36:c9:73:2b:23:f3:80:c2:9c:2b:76:b0:43: 05:1f:f4:b2:1e:f6:ba:21:58:86:fb:3f:99:dc:71: 7f:80:3f:46:f9:fd:d4:85:49:70:ff:78:d2:bb:86: 2d:b5:b3:79:7d:5a:35:5b:df:74:33:d3:bf:22:0b: 60:25:1c:9d:f8:92:ac:11:3e:a5:22:a6:a1:4f:ce: e1:a7:18:30:b3:6d:9c:e6:bf:79:4d:71:02:75:ce: 66:dc:67:58:c1:90:b9:17:d1:d4:e8:c6:44:ab:f4: 0e:a6:ce:db:6a:c5:19:e3:90:d3:33:e0:07:c0:8f: ee:52:bf:5f:64:56:c2:d1:cb:b4:63:24:fc:2c:e4: 7c:a7:56:4a:28:b9:c6:63:83:90:51:c7:8b:72:55: 66:c3:57:17:91:a2:a8:3e:26:53:36:49:6b:0c:58: 1e:63:ae:6b:aa:b6:ba:32:10:ad:2a:97:a8:96:49: 28:f5:f1:a0:c5:50:8a:44:9e:cd:1a:cd:3a:26:16: 05:ba:75:b1:83:27:41:4b:d4:7a:ad:b8:c2:b1:0a: 97:0c:e6:13:72:7d:6d:d6:59:29:86:99:40:16:e6: 9c:a3:e4:8c:e8:c4:78:b7:e7:0e:33:b7:c1:b0:bd: db:35:36:91:4f:21:34:3a:af:62:66:95:7a:43:7d: 38:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:30:D7:8F:5D:85:54:01:7D:5D:E5:F2:14:4E:BB:7B:A2:58:EA:58 X509v3 Authority Key Identifier: keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/3zDXj12FVAF9XeXyFE67e6JY6lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.160.0/22 IPv6: 2a0b:f940:1af2::/48 2a0b:f940:2af2::/48 2a0b:f940:3af2::/48 2a0b:f940:4af2::/48 Signature Algorithm: sha256WithRSAEncryption 5d:5c:16:c7:3f:21:c4:fa:81:cc:66:72:cf:f2:61:be:5e:f3: 31:13:81:47:45:8c:fd:e7:17:2c:e1:c6:8c:76:7a:d4:ab:2b: 17:21:1c:95:ca:ac:d9:94:06:fe:ad:5a:f1:ac:f5:4c:60:a9: 35:81:bc:71:2b:07:d3:88:df:74:fd:07:e2:ee:3b:a5:8e:10: 95:a2:94:af:ec:bc:f2:c1:3a:21:06:65:6d:09:1c:06:37:38: c2:b3:3c:d3:c8:8d:51:d4:33:9b:3b:fb:23:e1:5a:fb:af:47: 74:8b:ac:c0:d4:67:7b:65:c9:74:1c:eb:8f:b2:45:ff:94:c0: 87:c6:8b:e0:af:8a:96:e8:19:4d:69:40:a7:26:0b:74:25:c8: b9:25:24:09:a3:a8:3c:40:da:e4:69:d8:a1:1c:e6:09:cd:2b: 13:31:6a:a5:51:a6:d3:6a:5c:97:46:ca:41:dd:e8:50:41:3f: 69:5d:42:49:86:bb:91:0c:ea:ea:37:ab:01:93:9d:65:b0:06: 85:59:15:c0:51:66:9e:e1:5c:de:2b:49:3e:9a:72:c5:16:44: ca:96:58:ac:c9:ae:3d:3a:a1:ae:da:28:bb:59:aa:35:ee:5c: da:7e:89:6b:81:0a:88:3e:d8:76:56:7f:fa:7a:b2:d3:45:cf: 7a:eb:70:96 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt261RzmAEz1H2Xa1m5mM8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYTg4MmIxMGYxYmE5ZWE0YmExZmE3NzA2ZGI2NDc0N2U2 MmE0MTMwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjMwZDc4ZjVkODU1NDAxN2Q1ZGU1ZjIxNDRlYmI3YmEyNThlYTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjbJcysj84DCnCt2sEMFH/SyHva6 IViG+z+Z3HF/gD9G+f3UhUlw/3jSu4YttbN5fVo1W990M9O/IgtgJRyd+JKsET6l IqahT87hpxgws22c5r95TXECdc5m3GdYwZC5F9HU6MZEq/QOps7basUZ45DTM+AH wI/uUr9fZFbC0cu0YyT8LOR8p1ZKKLnGY4OQUceLclVmw1cXkaKoPiZTNklrDFge Y65rqra6MhCtKpeolkko9fGgxVCKRJ7NGs06JhYFunWxgydBS9R6rbjCsQqXDOYT cn1t1lkphplAFuaco+SM6MR4t+cOM7fBsL3bNTaRTyE0Oq9iZpV6Q304cwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFN8w149dhVQBfV3l8hROu3uiWOpYMB8GA1UdIwQY MBaAFMOogrEPG6nqS6H6dwbbZHR+YqQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTIt Yzc4NTdhMDMzOTYyLzEvM3pEWGoxMkZWQUY5WGVYeUZFNjdlNkpZNmxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTItYzc4NTdhMDMzOTYy LzEvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQCudygMCoE AgACMCQDBwAqC/lAGvIDBwAqC/lAKvIDBwAqC/lAOvIDBwAqC/lASvIwDQYJKoZI hvcNAQELBQADggEBAF1cFsc/IcT6gcxmcs/yYb5e8zETgUdFjP3nFyzhxox2etSr KxchHJXKrNmUBv6tWvGs9UxgqTWBvHErB9OI33T9B+LuO6WOEJWilK/svPLBOiEG ZW0JHAY3OMKzPNPIjVHUM5s7+yPhWvuvR3SLrMDUZ3tlyXQc64+yRf+UwIfGi+Cv ipboGU1pQKcmC3QlyLklJAmjqDxA2uRp2KEc5gnNKxMxaqVRptNqXJdGykHd6FBB P2ldQkmGu5EM6uo3qwGTnWWwBoVZFcBRZp7hXN4rST6acsUWRMqWWKzJrj06oa7a KLtZqjXuXNp+iWuBCog+2HZWf/p6stNFz3rrcJY= -----END CERTIFICATE-----Generated at Thu Jan 1 12:27:30 2026 by rpki-client