This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/rp3l1DRMo7bxNlcekPEumkx_Cu4.roa File: rp3l1DRMo7bxNlcekPEumkx_Cu4.roa (raw, json) Hash identifier: cvH000yVT30CU4NGwC5k2pFAaWGJcYLG4wfqKOyLWIU= Subject key identifier: AE:9D:E5:D4:34:4C:A3:B6:F1:36:57:1E:90:F1:2E:9A:4C:7F:0A:EE Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019B7B35CC33AF7EE29AE98CBAFB56AB1F90 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/rp3l1DRMo7bxNlcekPEumkx_Cu4.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397373 IP address blocks: 5.182.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cc:33:af:7e:e2:9a:e9:8c:ba:fb:56:ab:1f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae9de5d4344ca3b6f136571e90f12e9a4c7f0aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:97:e4:5e:1a:e4:9f:a3:15:26:45:96:50: 77:97:3e:5f:54:48:22:4f:fb:e7:53:7d:67:a1:3e: 92:38:20:21:ce:71:48:1b:f8:a3:95:8d:d3:f1:e1: bb:3b:b1:d7:2e:3d:f0:c2:01:96:d6:97:2e:b1:25: 10:c0:6a:de:70:43:14:13:32:ee:06:85:c7:47:aa: 06:56:bc:02:9d:93:5d:28:54:43:ed:f3:07:0b:64: e7:2c:56:92:77:e6:a6:21:cc:c0:8c:05:a4:b4:6c: fe:25:2f:ed:75:c2:dd:54:4b:4f:f8:3b:c8:1b:cb: 74:ee:57:32:83:97:cf:f8:f5:d4:5d:74:23:43:c1: 44:73:a9:15:40:8a:b1:ae:4c:1a:83:83:17:e2:5f: 55:04:33:3d:a0:55:e0:32:6b:94:79:cb:ba:ae:75: 7d:57:1b:73:17:99:f0:4e:d7:a3:34:27:59:b9:e7: e7:fd:63:ff:19:dc:e9:53:fc:8f:ed:51:9e:e2:47: 7a:f5:0d:74:41:be:de:47:29:e0:d3:5c:60:30:55: 78:22:b5:94:95:16:c6:53:35:b4:30:e5:45:66:a2: cd:99:eb:ea:4a:f0:88:00:db:cf:24:fe:49:7d:00: aa:0e:63:01:ef:bd:6a:d6:2b:fc:01:86:46:c7:82: 71:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9D:E5:D4:34:4C:A3:B6:F1:36:57:1E:90:F1:2E:9A:4C:7F:0A:EE X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/rp3l1DRMo7bxNlcekPEumkx_Cu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.120.0/22 Signature Algorithm: sha256WithRSAEncryption a9:ee:ce:e1:62:20:15:74:b0:e5:cf:30:e9:e2:16:77:51:03: ac:be:35:66:1d:a6:60:3d:fb:fb:a6:e1:9a:33:40:86:69:38: c2:80:e7:a4:85:42:4c:43:2b:b5:46:47:04:0d:73:27:fe:80: 1b:9b:0a:0f:00:62:a5:a5:2c:4e:d8:51:bc:42:93:5a:09:d0: 60:d7:c6:12:c1:ba:19:de:5d:0f:0e:03:b9:a9:34:c8:f6:d7: 97:b2:c9:26:24:41:27:2c:73:77:d3:44:eb:a6:0d:86:80:a0: 4d:96:54:e9:82:78:45:94:f5:bf:ca:89:68:c9:cc:6f:05:d3: e5:55:99:22:a6:c1:3f:03:ec:8e:13:5d:53:58:3a:98:3f:1c: 43:0a:a4:75:ea:90:d0:58:88:af:3c:cb:bb:62:e0:a4:8c:46: 9a:a9:bb:a5:89:03:31:46:90:e1:9a:dc:7b:56:d6:79:50:a2: 73:f6:08:f9:20:27:6f:fc:be:4b:7a:95:3d:8d:1b:d1:c0:64: 7e:0f:37:9c:1a:d6:8d:0f:49:95:79:bb:42:d9:e5:67:16:0c: 6d:25:50:1a:65:50:1d:38:74:76:a7:68:3d:84:38:0e:2f:32: b8:54:59:70:34:fc:92:ea:e1:35:9b:ab:0a:05:29:f4:ca:66: 8a:15:a5:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ncwzr37imumMuvtWqx+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTlkZTVkNDM0NGNhM2I2ZjEzNjU3MWU5MGYxMmU5YTRjN2YwYWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wKX5F4a5J+jFSZFllB3lz5fVEgi T/vnU31noT6SOCAhznFIG/ijlY3T8eG7O7HXLj3wwgGW1pcusSUQwGrecEMUEzLu BoXHR6oGVrwCnZNdKFRD7fMHC2TnLFaSd+amIczAjAWktGz+JS/tdcLdVEtP+DvI G8t07lcyg5fP+PXUXXQjQ8FEc6kVQIqxrkwag4MX4l9VBDM9oFXgMmuUecu6rnV9 VxtzF5nwTtejNCdZuefn/WP/GdzpU/yP7VGe4kd69Q10Qb7eRyng01xgMFV4IrWU lRbGUzW0MOVFZqLNmevqSvCIANvPJP5JfQCqDmMB771q1iv8AYZGx4JxMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK6d5dQ0TKO28TZXHpDxLppMfwruMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvcnAzbDFEUk1vN2J4TmxjZWtQRXVta3hfQ3U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbZ4MA0G CSqGSIb3DQEBCwUAA4IBAQCp7s7hYiAVdLDlzzDp4hZ3UQOsvjVmHaZgPfv7puGa M0CGaTjCgOekhUJMQyu1RkcEDXMn/oAbmwoPAGKlpSxO2FG8QpNaCdBg18YSwboZ 3l0PDgO5qTTI9teXsskmJEEnLHN300Trpg2GgKBNllTpgnhFlPW/yoloycxvBdPl VZkipsE/A+yOE11TWDqYPxxDCqR16pDQWIivPMu7YuCkjEaaqbuliQMxRpDhmtx7 VtZ5UKJz9gj5ICdv/L5LepU9jRvRwGR+DzecGtaND0mVebtC2eVnFgxtJVAaZVAd OHR2p2g9hDgOLzK4VFlwNPyS6uE1m6sKBSn0ymaKFaUf -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:59 2026 by rpki-client