This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3I2edYJrYoeFcz0TWUD4A5twMAk.roa File: 3I2edYJrYoeFcz0TWUD4A5twMAk.roa (raw, json) Hash identifier: 7eATp6OAvu1ti9mEbzxHFKb4Yd3ggCI7E8nE1YlQcI0= Subject key identifier: DC:8D:9E:75:82:6B:62:87:85:73:3D:13:59:40:F8:03:9B:70:30:09 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37BB052F562609D3892B790CD8FD1C Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3I2edYJrYoeFcz0TWUD4A5twMAk.roa Signing time: Fri 02 Jan 2026 10:19:00 +0000 ROA not before: Fri 02 Jan 2026 10:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50049 IP address blocks: 158.173.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:bb:05:2f:56:26:09:d3:89:2b:79:0c:d8:fd:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc8d9e75826b628785733d135940f8039b703009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c8:27:f0:00:0e:b4:ad:c3:95:00:88:16:3c: ad:15:78:36:49:3f:9d:40:c8:5b:55:af:4a:be:75: d3:e0:68:fa:36:8a:60:f2:6e:9d:ad:5f:98:73:20: 39:39:cf:6f:39:05:dc:c5:93:3e:d0:b3:de:a2:4d: 47:d0:b8:a4:20:59:2a:28:08:e5:1f:d6:76:f5:ec: 09:e1:e7:92:51:0e:34:62:3b:a8:24:c9:90:7a:68: a5:20:e7:d1:ab:fa:12:4b:0c:3a:d5:1b:fe:85:ec: 71:86:cf:e1:f6:7f:d8:93:f5:d0:d2:33:9f:ed:dc: 2a:a2:3c:04:c9:c1:e3:de:0f:d4:e3:38:f5:b0:13: d8:f9:80:71:91:c5:88:71:fd:23:7a:56:41:3b:43: 83:87:c8:70:40:76:45:35:34:7c:30:22:12:99:18: b7:2c:af:17:7f:df:28:f7:33:57:f4:6c:4d:12:45: ea:72:a9:79:18:2e:d6:2b:04:d9:9a:0a:10:3a:f5: 88:3a:5a:50:b1:94:ec:b6:6a:ae:40:47:cd:8e:9e: 7c:96:9c:f7:c6:01:2a:75:9f:0a:48:b8:bd:25:3e: 7f:b9:f7:9b:3c:f5:56:8e:cf:7d:b7:05:fa:9e:d9: 0c:10:37:e0:e8:fe:0b:60:83:55:08:20:26:50:f2: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8D:9E:75:82:6B:62:87:85:73:3D:13:59:40:F8:03:9B:70:30:09 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3I2edYJrYoeFcz0TWUD4A5twMAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.226.0/24 Signature Algorithm: sha256WithRSAEncryption 57:ed:1e:87:d5:8e:8a:57:09:5e:47:70:b1:42:ea:ef:12:c4: a4:b5:78:bf:47:f6:de:b6:5d:1e:89:94:c6:0a:af:07:90:a0: 1c:ee:42:b2:fc:9c:21:87:62:01:98:4b:24:06:34:46:62:e6: 51:ff:55:3c:b4:9a:9f:75:b1:a6:b9:40:e5:13:61:bc:f3:26: 37:6a:ef:c9:e1:42:a7:ae:d0:33:41:e3:08:87:70:25:0e:46: ca:ca:c1:4f:8a:51:e9:11:ac:c3:2f:f8:08:b5:0f:52:c4:28: e6:d4:3c:c3:7d:ef:38:04:2f:e2:c5:05:a6:01:dc:58:9a:97: bb:53:2f:5d:ca:cc:fa:bb:81:6d:6a:d9:0e:37:19:d1:35:c7: 83:62:48:8d:77:16:39:82:b4:99:b3:ab:13:49:c9:26:e0:3a: f8:1b:0c:03:2a:90:c5:09:b9:fa:dc:36:4f:97:0f:a3:16:ab: 1d:c3:59:b1:b0:ee:6c:82:4b:94:36:10:f9:4e:6c:96:3a:0b: fa:43:72:fd:4f:9a:14:d4:7f:3b:21:bc:93:f1:4e:c3:12:d0: f5:0a:ce:e6:b8:69:2b:cc:ff:b6:d2:40:0f:cd:65:40:9f:97: c0:58:d0:cb:26:23:6e:1a:89:a8:27:8c:e2:06:22:b3:29:9c: 03:3c:ff:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N7sFL1YmCdOJK3kM2P0cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzhkOWU3NTgyNmI2Mjg3ODU3MzNkMTM1OTQwZjgwMzliNzAzMDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcgn8AAOtK3DlQCIFjytFXg2ST+d QMhbVa9KvnXT4Gj6Nopg8m6drV+YcyA5Oc9vOQXcxZM+0LPeok1H0LikIFkqKAjl H9Z29ewJ4eeSUQ40YjuoJMmQemilIOfRq/oSSww61Rv+hexxhs/h9n/Yk/XQ0jOf 7dwqojwEycHj3g/U4zj1sBPY+YBxkcWIcf0jelZBO0ODh8hwQHZFNTR8MCISmRi3 LK8Xf98o9zNX9GxNEkXqcql5GC7WKwTZmgoQOvWIOlpQsZTstmquQEfNjp58lpz3 xgEqdZ8KSLi9JT5/ufebPPVWjs99twX6ntkMEDfg6P4LYINVCCAmUPIwPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNyNnnWCa2KHhXM9E1lA+AObcDAJMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvM0kyZWRZSnJZb2VGY3owVFdVRDRBNXR3TUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq3iMA0G CSqGSIb3DQEBCwUAA4IBAQBX7R6H1Y6KVwleR3CxQurvEsSktXi/R/betl0eiZTG Cq8HkKAc7kKy/Jwhh2IBmEskBjRGYuZR/1U8tJqfdbGmuUDlE2G88yY3au/J4UKn rtAzQeMIh3AlDkbKysFPilHpEazDL/gItQ9SxCjm1DzDfe84BC/ixQWmAdxYmpe7 Uy9dysz6u4FtatkONxnRNceDYkiNdxY5grSZs6sTSckm4Dr4GwwDKpDFCbn63DZP lw+jFqsdw1mxsO5sgkuUNhD5TmyWOgv6Q3L9T5oU1H87IbyT8U7DEtD1Cs7muGkr zP+20kAPzWVAn5fAWNDLJiNuGomoJ4ziBiKzKZwDPP/s -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:16 2026 by rpki-client