This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/pP3Gylt_cXScwQG05O-i7ZbberI.roa File: pP3Gylt_cXScwQG05O-i7ZbberI.roa (raw, json) Hash identifier: D1R0gSpuoCuRFT+1LOp+3fEZGMYLA7llVr4974Zw4U4= Subject key identifier: A4:FD:C6:CA:5B:7F:71:74:9C:C1:01:B4:E4:EF:A2:ED:96:DB:7A:B2 Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d Certificate serial: 019B79ED403B366CFA10D041EFEC41A4A23F Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/pP3Gylt_cXScwQG05O-i7ZbberI.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 143.55.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:40:3b:36:6c:fa:10:d0:41:ef:ec:41:a4:a2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4fdc6ca5b7f71749cc101b4e4efa2ed96db7ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:b0:6a:95:a4:b5:4d:74:56:be:1c:d2:9c: b1:cc:fa:7c:64:6a:0d:7b:97:1c:80:4e:68:72:fc: 23:de:2c:83:a0:7c:ec:fd:1f:49:f5:67:1a:c2:3f: a7:37:d0:cb:71:67:51:25:84:fc:cd:61:9a:d2:7a: 45:02:7d:4e:d8:33:02:45:71:3c:27:ff:65:4d:16: 14:9b:63:e9:fc:be:e6:05:c8:77:bc:b5:bc:ff:46: da:61:bb:94:37:ff:32:db:a9:60:d7:4c:db:9b:7b: fb:24:9c:9c:64:47:5f:f1:7a:69:5c:22:97:32:0b: 92:c4:5a:cd:48:2e:d3:3b:92:8e:2d:69:fb:4d:1a: ed:d4:76:98:ee:ea:13:43:f8:b5:fc:67:0f:06:13: 14:42:5b:0f:27:fd:5a:f2:07:e7:33:7f:73:20:66: 49:e5:43:1c:af:73:23:db:8c:5c:51:c1:f5:69:9f: 30:58:ee:ba:bb:11:66:bb:83:cc:ab:5e:f0:fa:fe: 05:5e:ac:70:e3:ca:fb:af:73:21:0c:1b:16:dc:cb: 05:8f:87:8d:dd:5d:d8:ae:30:e9:50:a2:40:f8:3d: 46:9e:5d:ed:a8:69:69:66:4a:32:bc:9d:be:94:1c: b5:f7:4f:c5:f7:46:f4:45:79:c2:31:75:44:99:3f: 44:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FD:C6:CA:5B:7F:71:74:9C:C1:01:B4:E4:EF:A2:ED:96:DB:7A:B2 X509v3 Authority Key Identifier: keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/pP3Gylt_cXScwQG05O-i7ZbberI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.55.151.0/24 Signature Algorithm: sha256WithRSAEncryption a8:85:c4:2a:3f:4d:20:d7:82:60:b3:72:0d:26:3b:95:13:d9: 3a:5f:32:cb:1e:15:13:4a:1e:15:eb:76:a4:fa:41:b8:52:79: 9a:22:29:a5:95:2d:97:21:79:88:31:a2:a4:47:58:50:bd:10: 9e:1f:62:5c:de:ac:0a:1d:cf:64:83:d8:74:30:15:6f:70:98: 50:14:54:e6:ae:bf:07:c2:75:1c:fd:fe:1e:42:6c:b9:a4:8a: 55:c0:09:c3:a7:d0:c7:b6:0e:28:a6:fa:d8:c4:3a:c3:d4:8a: ff:7b:71:ec:40:90:3a:d5:97:9f:9a:39:2b:c4:19:7c:32:9a: 20:91:59:7f:15:e1:c9:7d:75:c7:c2:f6:ba:e2:c8:99:76:58: 80:db:ce:0d:3f:0f:1a:a6:31:c5:9a:4b:0e:94:37:19:3a:fc: 1f:bd:bf:34:36:10:df:20:10:67:0e:f3:74:9b:2d:c2:dc:d5: 0e:c4:20:12:c2:25:37:01:2f:1e:1a:25:61:2e:8a:d7:ac:b8: 84:32:2d:9d:cd:ba:ec:29:28:71:da:f0:f0:46:be:87:de:58: 70:0e:7e:53:b0:9d:f8:56:42:24:9a:b2:b6:2d:00:81:c5:10: 72:12:5a:4b:e2:7c:5f:f4:3e:00:79:20:16:90:93:60:50:95: 9f:fa:2f:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UA7Nmz6ENBB7+xBpKI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NmE5ZDU0MjI5NzU3N2IzN2FhMGM0MjMxOTVhZmUyYTk4 ZTEzNWQwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGZkYzZjYTViN2Y3MTc0OWNjMTAxYjRlNGVmYTJlZDk2ZGI3YWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ+wapWktU10Vr4c0pyxzPp8ZGoN e5ccgE5ocvwj3iyDoHzs/R9J9Wcawj+nN9DLcWdRJYT8zWGa0npFAn1O2DMCRXE8 J/9lTRYUm2Pp/L7mBch3vLW8/0baYbuUN/8y26lg10zbm3v7JJycZEdf8XppXCKX MguSxFrNSC7TO5KOLWn7TRrt1HaY7uoTQ/i1/GcPBhMUQlsPJ/1a8gfnM39zIGZJ 5UMcr3Mj24xcUcH1aZ8wWO66uxFmu4PMq17w+v4FXqxw48r7r3MhDBsW3MsFj4eN 3V3YrjDpUKJA+D1Gnl3tqGlpZkoyvJ2+lBy190/F90b0RXnCMXVEmT9EUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKT9xspbf3F0nMEBtOTvou2W23qyMB8GA1UdIwQY MBaAFDZqnVQil1d7N6oMQjGVr+KpjhNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4Mzkt ZDE4NWRlYzA2MDEyLzEvcFAzR3lsdF9jWFNjd1FHMDVPLWk3WmJiZXJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4MzktZDE4NWRlYzA2MDEy LzEvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjzeXMA0G CSqGSIb3DQEBCwUAA4IBAQCohcQqP00g14Jgs3INJjuVE9k6XzLLHhUTSh4V63ak +kG4UnmaIimllS2XIXmIMaKkR1hQvRCeH2Jc3qwKHc9kg9h0MBVvcJhQFFTmrr8H wnUc/f4eQmy5pIpVwAnDp9DHtg4opvrYxDrD1Ir/e3HsQJA61ZefmjkrxBl8Mpog kVl/FeHJfXXHwva64siZdliA284NPw8apjHFmksOlDcZOvwfvb80NhDfIBBnDvN0 my3C3NUOxCASwiU3AS8eGiVhLorXrLiEMi2dzbrsKShx2vDwRr6H3lhwDn5TsJ34 VkIkmrK2LQCBxRByElpL4nxf9D4AeSAWkJNgUJWf+i/3 -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:45 2026 by rpki-client