This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C3bUEev5GcSroOExlOn4jFa1l9c.roa File: C3bUEev5GcSroOExlOn4jFa1l9c.roa (raw, json) Hash identifier: kEOpT7w7SNYRN7EWfJxAVIZM536URNRy+Hbj31OvzkQ= Subject key identifier: 0B:76:D4:11:EB:F9:19:C4:AB:A0:E1:31:94:E9:F8:8C:56:B5:97:D7 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F01C301AA939A458F7EC91B308BD Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C3bUEev5GcSroOExlOn4jFa1l9c.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34295 IP address blocks: 2.58.92.0/24 maxlen: 32 91.92.68.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f0:1c:30:1a:a9:39:a4:58:f7:ec:91:b3:08:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b76d411ebf919c4aba0e13194e9f88c56b597d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:92:f2:71:15:fb:92:3e:24:66:83:71:ed: 7c:d0:fe:b8:fc:90:23:2b:6c:93:17:b0:c7:b0:73: b7:c6:5d:a8:64:27:2d:d7:a9:d7:0e:4d:49:c0:44: 69:73:8e:14:7b:f8:b5:f3:c6:c4:96:62:c6:a2:fc: d1:32:8c:61:cd:6e:75:4e:92:cf:0f:82:b3:40:aa: b3:bb:6a:9c:e2:23:9f:c0:69:d8:b1:5e:02:fa:23: 48:7f:0a:ee:af:ca:39:1f:58:ea:15:b3:6b:d6:c8: f5:ba:46:0f:77:12:18:eb:16:a1:85:c0:a1:27:a1: 94:ca:f7:5c:75:28:79:9f:6d:51:41:fc:42:e2:50: 33:e5:16:90:e8:42:89:d1:be:44:6c:83:e1:85:51: bc:8f:8f:93:f7:be:fe:4e:5d:4f:be:86:50:cf:5b: a2:21:d6:08:68:bd:e3:19:db:5e:79:13:e2:44:fa: 86:09:96:a1:5e:34:a7:d6:f3:62:b2:64:ce:83:33: aa:54:5a:30:89:78:ef:b7:52:28:ff:06:df:c8:0f: 7f:b8:e3:15:10:6d:af:d0:f2:3b:94:7c:55:f3:b0: ba:e0:cb:c4:bf:2d:7a:29:5c:c2:2d:46:27:a9:ab: 3e:4e:65:8c:30:bb:11:4a:6f:a2:bd:bb:a2:4a:ad: b5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:76:D4:11:EB:F9:19:C4:AB:A0:E1:31:94:E9:F8:8C:56:B5:97:D7 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C3bUEev5GcSroOExlOn4jFa1l9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.92.0/24 91.92.68.0/23 Signature Algorithm: sha256WithRSAEncryption 87:67:f4:a4:d4:3c:7f:d1:86:6a:c8:e8:c3:4a:0f:f0:59:24: 22:49:9f:09:9f:ad:ce:ce:39:20:4e:16:af:9b:a7:68:b3:6c: a6:98:a7:0c:7b:2b:56:c8:a6:df:ae:08:dd:dd:2a:e4:33:a4: 58:9f:25:cc:1e:00:56:83:0c:69:bb:1a:c7:de:5c:9f:d6:f7: 1b:ba:21:3a:ef:ef:b8:96:43:22:7c:37:c5:70:f4:11:30:29: ba:55:0e:ad:26:88:1c:52:5c:f6:e6:34:86:ce:9b:1d:86:e5: 78:b1:5d:cd:ee:92:ad:0e:c9:24:ad:24:38:c6:fa:e5:d5:be: 2a:f5:e9:b1:49:5e:d8:95:6a:17:56:50:0a:9e:ab:fc:2e:d0: 01:93:1a:d6:e6:cc:d5:c3:8f:91:e1:50:6d:4d:b8:dd:c4:54: 33:00:41:d5:e3:68:b5:a1:aa:3c:a7:97:f7:ed:51:42:bf:2e: 69:5f:8a:5d:12:21:93:69:c0:cf:e5:58:db:21:40:c6:92:3d: 5d:23:de:a8:17:c2:f3:da:a3:87:4f:ac:52:01:c2:76:7d:75: 60:3b:dd:ac:46:3a:e3:1f:60:0c:69:66:0c:ca:33:e4:39:a0: 85:18:b2:fd:a8:8d:70:2a:b0:a8:4f:6d:c1:0e:9d:c1:96:86: 79:d4:40:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ovAcMBqpOaRY9+yRswi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjc2ZDQxMWViZjkxOWM0YWJhMGUxMzE5NGU5Zjg4YzU2YjU5N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHeS8nEV+5I+JGaDce180P64/JAj K2yTF7DHsHO3xl2oZCct16nXDk1JwERpc44Ue/i188bElmLGovzRMoxhzW51TpLP D4KzQKqzu2qc4iOfwGnYsV4C+iNIfwrur8o5H1jqFbNr1sj1ukYPdxIY6xahhcCh J6GUyvdcdSh5n21RQfxC4lAz5RaQ6EKJ0b5EbIPhhVG8j4+T977+Tl1PvoZQz1ui IdYIaL3jGdteeRPiRPqGCZahXjSn1vNismTOgzOqVFowiXjvt1Io/wbfyA9/uOMV EG2v0PI7lHxV87C64MvEvy16KVzCLUYnqas+TmWMMLsRSm+ivbuiSq21zwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAt21BHr+RnEq6DhMZTp+IxWtZfXMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQzNiVUVldjVHY1Nyb09FeGxPbjRqRmExbDljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjpcAwQB W1xEMA0GCSqGSIb3DQEBCwUAA4IBAQCHZ/Sk1Dx/0YZqyOjDSg/wWSQiSZ8Jn63O zjkgThavm6dos2ymmKcMeytWyKbfrgjd3SrkM6RYnyXMHgBWgwxpuxrH3lyf1vcb uiE67++4lkMifDfFcPQRMCm6VQ6tJogcUlz25jSGzpsdhuV4sV3N7pKtDskkrSQ4 xvrl1b4q9emxSV7YlWoXVlAKnqv8LtABkxrW5szVw4+R4VBtTbjdxFQzAEHV42i1 oao8p5f37VFCvy5pX4pdEiGTacDP5VjbIUDGkj1dI96oF8Lz2qOHT6xSAcJ2fXVg O92sRjrjH2AMaWYMyjPkOaCFGLL9qI1wKrCoT23BDp3BloZ51EDP -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:03 2026 by rpki-client