This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/3L4WcN7gzhBNpVVNiXU_dlpvE-U.roa File: 3L4WcN7gzhBNpVVNiXU_dlpvE-U.roa (raw, json) Hash identifier: fWfFsGbI8ZEJSeb49tnQpRdHMLtKv9wl/8H4rcMy248= Subject key identifier: DC:BE:16:70:DE:E0:CE:10:4D:A5:55:4D:89:75:3F:76:5A:6F:13:E5 Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b Certificate serial: 019B7EA48A98E68ADD4AA4596E7319D373A1 Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/3L4WcN7gzhBNpVVNiXU_dlpvE-U.roa Signing time: Fri 02 Jan 2026 12:17:51 +0000 ROA not before: Fri 02 Jan 2026 12:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49813 IP address blocks: 5.63.128.0/21 maxlen: 21 5.63.131.0/24 maxlen: 24 5.63.132.0/22 maxlen: 24 5.63.134.0/24 maxlen: 24 109.105.128.0/20 maxlen: 24 109.105.129.0/24 maxlen: 24 109.105.133.0/24 maxlen: 24 109.105.135.0/24 maxlen: 24 109.105.137.0/24 maxlen: 24 109.105.138.0/24 maxlen: 24 109.105.139.0/24 maxlen: 24 109.105.140.0/24 maxlen: 24 109.105.144.0/21 maxlen: 24 109.105.144.0/23 maxlen: 24 109.105.144.0/24 maxlen: 24 109.105.146.0/24 maxlen: 24 109.105.147.0/24 maxlen: 24 109.105.148.0/24 maxlen: 24 109.105.150.0/24 maxlen: 24 109.105.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:8a:98:e6:8a:dd:4a:a4:59:6e:73:19:d3:73:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b Validity Not Before: Jan 2 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcbe1670dee0ce104da5554d89753f765a6f13e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:07:f3:76:73:8c:47:53:ca:17:5e:1a:4c:db: 68:0c:dc:fa:29:46:b6:74:6d:c8:7b:a5:87:21:49: 63:1b:05:c4:f5:05:47:cb:1f:74:ef:47:52:b1:70: a1:a2:ca:94:52:41:17:37:f2:21:ca:5e:09:fc:64: 5d:07:88:18:84:ea:41:e8:fa:00:08:f6:2d:0a:86: f2:b9:10:78:b2:ff:64:1c:87:ae:3c:b9:dd:49:78: 1c:5a:5a:24:b9:81:fb:67:4b:0a:83:c9:db:c5:8a: e6:42:cb:ae:df:c5:ee:2e:85:a9:9e:dd:5d:57:5a: 9a:ab:7b:51:65:bb:f7:88:9f:e7:0d:e9:65:97:25: 38:4a:16:b7:51:0b:99:44:77:28:15:c2:5d:4d:ba: 89:bd:32:0c:51:d1:4a:6e:b0:23:d5:db:c1:e8:96: d6:38:48:6f:63:51:8d:fe:85:66:a6:49:eb:75:b2: de:eb:8e:f9:62:9f:e7:fd:b2:2a:3c:0d:07:35:13: 83:98:37:90:c2:b3:87:f7:c6:7d:73:88:e7:33:43: 43:68:8f:8b:c0:e9:55:b0:08:37:a4:23:96:3a:e2: 90:31:df:85:b6:67:f1:c4:79:f9:00:48:e5:4f:7e: 99:07:3f:62:8c:8b:d0:66:61:1c:f0:ce:06:79:3f: 2e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BE:16:70:DE:E0:CE:10:4D:A5:55:4D:89:75:3F:76:5A:6F:13:E5 X509v3 Authority Key Identifier: keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/3L4WcN7gzhBNpVVNiXU_dlpvE-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.128.0/21 109.105.128.0-109.105.151.255 Signature Algorithm: sha256WithRSAEncryption c5:81:c1:6b:eb:e3:c5:d2:91:ad:f6:91:ac:9b:22:38:ad:74: ba:ad:cb:31:e7:09:33:d6:1d:c3:a4:78:41:66:06:dc:70:4c: ba:3c:c7:4e:e7:82:9d:66:1d:1b:64:d3:da:c3:0a:ab:ed:c1: ba:23:58:72:27:8b:d8:97:b8:f7:85:bd:5e:ff:93:cb:da:36: 28:73:4d:30:1d:31:d0:a3:9d:82:e3:63:09:8a:e0:d3:f7:3e: 86:f4:29:97:0d:77:e8:c2:f4:49:27:1c:0f:b0:93:af:7a:5d: d1:52:17:ef:0f:7e:59:0c:8f:10:8e:c9:69:88:c2:37:a9:63: 13:0c:46:ec:62:55:dd:ce:ae:17:23:c5:74:65:1a:e3:76:48: 3d:94:22:cc:be:52:03:23:4a:9e:55:95:38:e9:e4:08:e9:0d: d1:9d:fd:be:82:e3:5c:bc:ab:95:fd:36:ac:e7:c3:8d:68:a8: 91:0d:84:98:5d:00:69:70:32:d8:65:27:f8:9a:95:77:dc:b8: a3:37:d8:cc:fc:8a:16:f3:6a:cf:31:93:ff:a3:2c:f1:01:28: 8f:72:95:3e:90:45:75:eb:fc:cd:b9:29:c7:ab:87:b8:ef:5e: 77:fd:ea:6e:91:2f:68:a0:7f:0c:63:00:34:a0:c9:0b:6d:54: 91:e8:18:79 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+pIqY5ordSqRZbnMZ03OhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZWIyM2UyYzVkOWYyYzczNDQ4ODkwNDUwNTgzNWVmMjgw OWZiM2IwHhcNMjYwMTAyMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2JlMTY3MGRlZTBjZTEwNGRhNTU1NGQ4OTc1M2Y3NjVhNmYxM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgfzdnOMR1PKF14aTNtoDNz6KUa2 dG3Ie6WHIUljGwXE9QVHyx9070dSsXChosqUUkEXN/Ihyl4J/GRdB4gYhOpB6PoA CPYtCobyuRB4sv9kHIeuPLndSXgcWlokuYH7Z0sKg8nbxYrmQsuu38XuLoWpnt1d V1qaq3tRZbv3iJ/nDelllyU4Sha3UQuZRHcoFcJdTbqJvTIMUdFKbrAj1dvB6JbW OEhvY1GN/oVmpknrdbLe6475Yp/n/bIqPA0HNRODmDeQwrOH98Z9c4jnM0NDaI+L wOlVsAg3pCOWOuKQMd+FtmfxxHn5AEjlT36ZBz9ijIvQZmEc8M4GeT8uNQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNy+FnDe4M4QTaVVTYl1P3ZabxPlMB8GA1UdIwQY MBaAFIzrI+LF2fLHNEiJBFBYNe8oCfs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82OTkyOTItM2RhMC00NzcyLWFmODIt ODMzNGUzNjIyMzZkLzEvM0w0V2NON2d6aEJOcFZWTmlYVV9kbHB2RS1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82OTkyOTItM2RhMC00NzcyLWFmODItODMzNGUzNjIyMzZk LzEvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDBT+AMAwD BAdtaYADBANtaZAwDQYJKoZIhvcNAQELBQADggEBAMWBwWvr48XSka32kaybIjit dLqtyzHnCTPWHcOkeEFmBtxwTLo8x07ngp1mHRtk09rDCqvtwbojWHIni9iXuPeF vV7/k8vaNihzTTAdMdCjnYLjYwmK4NP3Pob0KZcNd+jC9EknHA+wk696XdFSF+8P flkMjxCOyWmIwjepYxMMRuxiVd3OrhcjxXRlGuN2SD2UIsy+UgMjSp5VlTjp5Ajp DdGd/b6C41y8q5X9Nqznw41oqJENhJhdAGlwMthlJ/ialXfcuKM32Mz8ihbzas8x k/+jLPEBKI9ylT6QRXXr/M25Kcerh7jvXnf96m6RL2igfwxjADSgyQttVJHoGHk= -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:25 2026 by rpki-client