This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3wZXJbCOgitMlUqcbwF180H0x0A.roa File: 3wZXJbCOgitMlUqcbwF180H0x0A.roa (raw, json) Hash identifier: E4cZLWAl/ksx9/RK+RYcd9yub2DrARebzWf9Ay2Aszo= Subject key identifier: DF:06:57:25:B0:8E:82:2B:4C:95:4A:9C:6F:01:75:F3:41:F4:C7:40 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E382EB2F2FDB2FF72FFAEBDE765B936 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3wZXJbCOgitMlUqcbwF180H0x0A.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200391 IP address blocks: 5.188.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2e:b2:f2:fd:b2:ff:72:ff:ae:bd:e7:65:b9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df065725b08e822b4c954a9c6f0175f341f4c740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:46:a5:df:dc:af:1f:f6:97:b8:44:26:d5:9f: b5:1d:c7:f5:ca:53:8a:ad:11:be:71:d7:98:d3:79: 44:76:58:68:1b:df:e3:df:a5:2e:16:b1:73:00:47: 3a:14:1f:a0:ee:54:98:29:7d:8e:cb:29:f9:19:d4: 4b:82:f1:c2:59:69:ff:03:99:44:71:d7:5f:f1:ec: ce:7d:28:18:65:0e:40:8a:2b:bc:ce:a6:86:34:37: 49:e2:ef:d3:20:13:0e:79:6e:af:2e:a2:57:ea:99: 79:b7:7a:80:3d:6f:1f:40:bd:0c:0a:bc:28:20:54: 63:f7:e7:e5:43:85:ef:32:5a:f8:51:f9:63:55:9c: d4:89:93:8b:20:ea:e7:f6:c6:02:07:33:50:ae:bb: aa:54:65:75:cf:3f:e7:8e:62:4e:ad:ca:34:96:77: 12:56:86:e7:74:3c:83:c7:9c:88:62:71:68:0f:7d: d0:74:b5:80:23:b0:9d:e7:2a:ba:03:46:e9:ab:f6: f0:82:8c:e4:9b:1d:e2:4f:a3:13:bd:38:1b:5a:c3: a7:c8:93:ce:49:2d:6d:27:7e:1d:b6:ad:bd:f1:3b: de:9a:df:e0:63:66:75:3a:ac:fc:3e:ef:08:b0:7e: e9:56:a9:ea:6c:90:b9:27:11:46:5f:25:45:f8:30: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:06:57:25:B0:8E:82:2B:4C:95:4A:9C:6F:01:75:F3:41:F4:C7:40 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3wZXJbCOgitMlUqcbwF180H0x0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.206.0/24 Signature Algorithm: sha256WithRSAEncryption 11:69:ba:02:80:ba:8c:a6:9a:12:74:41:47:cf:71:cd:f6:c7: 09:16:99:8c:ff:7e:f9:47:74:f7:3e:92:9b:a0:12:23:13:23: 8d:fe:8a:e2:88:17:2b:10:fb:d1:ae:45:d0:23:a1:1c:d5:3b: ec:37:d6:c1:6b:8a:60:df:0f:81:33:8e:3c:e9:61:4d:fd:da: 49:e0:f6:f3:82:2d:e9:e7:8f:e9:1a:90:b6:48:7d:6e:d9:15: 8a:ed:c4:88:2e:34:2c:b4:72:5f:89:d9:7a:fd:65:6c:75:08: ec:f6:e0:fc:bf:bc:30:ad:ce:bc:96:96:a9:03:4a:0a:f1:33: b6:60:06:ce:3a:4d:95:3c:31:93:01:12:e5:84:1f:b8:b3:e6: 0d:be:f1:3b:f9:b3:55:b4:27:30:05:26:ec:e1:34:51:f3:71: 83:f9:10:49:9a:9e:1f:69:c8:b9:2d:03:ed:ec:22:e2:92:cf: 27:22:4d:a2:d3:a3:71:8f:5d:87:a5:4a:36:47:2b:7d:c2:fd: 90:54:fb:a5:9b:e9:df:4b:8e:87:73:3c:9b:05:91:9d:e1:c6: a7:16:42:bb:d8:46:99:25:b6:a0:2d:40:c1:29:16:0c:90:f0: 9f:7f:f8:cb:41:6f:be:87:a1:10:de:e1:fa:e6:e6:d8:ad:4c: 1d:f6:c4:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OC6y8v2y/3L/rr3nZbk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjA2NTcyNWIwOGU4MjJiNGM5NTRhOWM2ZjAxNzVmMzQxZjRjNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0al39yvH/aXuEQm1Z+1Hcf1ylOK rRG+cdeY03lEdlhoG9/j36UuFrFzAEc6FB+g7lSYKX2Oyyn5GdRLgvHCWWn/A5lE cddf8ezOfSgYZQ5Aiiu8zqaGNDdJ4u/TIBMOeW6vLqJX6pl5t3qAPW8fQL0MCrwo IFRj9+flQ4XvMlr4UfljVZzUiZOLIOrn9sYCBzNQrruqVGV1zz/njmJOrco0lncS VobndDyDx5yIYnFoD33QdLWAI7Cd5yq6A0bpq/bwgozkmx3iT6MTvTgbWsOnyJPO SS1tJ34dtq298Tvemt/gY2Z1Oqz8Pu8IsH7pVqnqbJC5JxFGXyVF+DBnRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8GVyWwjoIrTJVKnG8BdfNB9MdAMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvM3daWEpiQ09naXRNbFVxY2J3RjE4MEgweDBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbzOMA0G CSqGSIb3DQEBCwUAA4IBAQARaboCgLqMppoSdEFHz3HN9scJFpmM/375R3T3PpKb oBIjEyON/oriiBcrEPvRrkXQI6Ec1TvsN9bBa4pg3w+BM4486WFN/dpJ4Pbzgi3p 54/pGpC2SH1u2RWK7cSILjQstHJfidl6/WVsdQjs9uD8v7wwrc68lpapA0oK8TO2 YAbOOk2VPDGTARLlhB+4s+YNvvE7+bNVtCcwBSbs4TRR83GD+RBJmp4faci5LQPt 7CLiks8nIk2i06Nxj12HpUo2Ryt9wv2QVPulm+nfS46HczybBZGd4canFkK72EaZ JbagLUDBKRYMkPCff/jLQW++h6EQ3uH65ubYrUwd9sRS -----END CERTIFICATE-----Generated at Tue Jan 20 09:20:27 2026 by rpki-client