This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/ja3xbYHhCypT2kKyeAbUDM6JjaI.roa File: ja3xbYHhCypT2kKyeAbUDM6JjaI.roa (raw, json) Hash identifier: 97d7xvyjN2GHwh42t3hRtYWBfO2mX62sHwBd8SOvXh4= Subject key identifier: 8D:AD:F1:6D:81:E1:0B:2A:53:DA:42:B2:78:06:D4:0C:CE:89:8D:A2 Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e Certificate serial: 019B76EB7CAE597A480A4D44BD375940383D Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/ja3xbYHhCypT2kKyeAbUDM6JjaI.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25591 IP address blocks: 31.3.24.0/22 maxlen: 22 31.3.28.0/22 maxlen: 22 37.75.216.0/22 maxlen: 22 37.75.220.0/22 maxlen: 22 80.242.96.0/20 maxlen: 20 80.242.96.0/22 maxlen: 22 80.242.100.0/22 maxlen: 22 80.242.104.0/22 maxlen: 22 80.242.108.0/22 maxlen: 22 93.190.176.0/22 maxlen: 22 93.190.180.0/22 maxlen: 22 185.14.16.0/22 maxlen: 22 217.175.0.0/22 maxlen: 22 217.175.4.0/22 maxlen: 22 217.175.8.0/22 maxlen: 22 217.175.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7c:ae:59:7a:48:0a:4d:44:bd:37:59:40:38:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dadf16d81e10b2a53da42b27806d40cce898da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:95:21:fa:17:25:45:e6:6f:30:8f:10:29: 9c:eb:ea:ea:14:e0:57:7b:9b:31:ec:25:92:45:9b: 45:38:f4:b3:64:b5:38:87:e3:1b:6c:d6:bd:a9:de: d9:e4:23:e6:e9:df:4f:11:4c:64:45:fa:ce:2a:df: 11:05:70:1c:96:1b:81:6c:1c:42:e5:5b:ba:09:46: 98:b7:cb:c0:5e:01:13:1d:d7:37:e5:c2:66:97:61: 9f:c4:41:84:8c:b0:01:47:a0:06:33:88:aa:91:38: 8c:90:d3:27:17:88:2f:49:8b:a5:e6:e4:05:49:b7: 6f:82:2d:22:1e:a9:48:f3:77:35:50:7d:8d:6e:4d: 82:06:0f:e2:dd:9f:37:5e:a6:d6:8d:db:71:40:7d: 22:c1:c5:34:b2:34:70:44:74:8d:50:7e:73:e5:2d: e2:f6:c1:3b:36:51:f1:95:58:d8:fc:e3:71:f9:63: 96:da:bb:b2:37:f4:90:99:8a:b5:48:af:da:d4:03: 39:c5:30:0c:b4:06:38:cb:a7:4d:37:21:e9:38:e3: 04:14:4e:ee:53:e3:e8:87:e6:7a:cf:08:1d:b7:b0: 3c:90:47:fa:21:91:d7:da:6b:98:d3:63:83:5b:9c: 46:d5:ea:c6:89:1e:77:b2:e9:56:dc:9e:3c:ab:e9: b8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AD:F1:6D:81:E1:0B:2A:53:DA:42:B2:78:06:D4:0C:CE:89:8D:A2 X509v3 Authority Key Identifier: keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/ja3xbYHhCypT2kKyeAbUDM6JjaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.24.0/21 37.75.216.0/21 80.242.96.0/20 93.190.176.0/21 185.14.16.0/22 217.175.0.0/20 Signature Algorithm: sha256WithRSAEncryption 87:68:13:a3:07:be:d2:13:4f:50:76:04:f9:9c:c2:44:b4:9e: 27:bd:c2:60:47:15:89:b8:03:f1:20:1d:f5:aa:fc:3f:a6:c2: 67:65:12:47:54:41:79:8c:be:a4:5c:db:70:32:b2:e7:a1:54: 4a:16:fe:fd:78:84:45:8d:9c:59:01:9d:dc:21:4a:8d:b2:4a: 23:00:d2:5e:5e:4a:c9:12:df:33:c7:97:58:36:4d:69:9b:15: c0:77:7c:3d:97:04:c7:33:24:85:3c:f8:44:cf:3f:88:96:2b: 7c:53:29:1e:0a:da:83:49:6f:7a:b4:1a:df:68:ef:c7:cd:cb: ae:9c:8a:fb:82:cd:14:69:3f:79:e1:2a:05:88:ef:95:de:81: f6:d7:b7:49:28:72:eb:48:99:a5:ff:73:ad:28:20:a5:06:1a: 50:98:04:34:42:7f:cc:4b:64:2d:66:b7:2b:ef:63:68:e5:96: 52:cb:16:31:f2:97:2a:03:cf:ec:45:aa:c7:40:d3:37:63:25: b6:b1:6f:3b:a2:b8:30:28:e9:a5:12:b2:5f:41:d7:7a:9f:63: 94:a8:6e:70:0f:3a:2a:2d:34:66:c8:23:17:4b:5f:03:de:a9: 5d:1e:d9:78:e6:f3:c4:2b:24:32:9d:3a:f0:98:83:a9:3b:ac: 23:31:06:5f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt263yuWXpICk1EvTdZQDg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYmYzNmViMThlZjlhNTdjNWZiNjAzYWRhNDAwZmU2YjY2 ODhlNmUwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGFkZjE2ZDgxZTEwYjJhNTNkYTQyYjI3ODA2ZDQwY2NlODk4ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK6VIfoXJUXmbzCPECmc6+rqFOBX e5sx7CWSRZtFOPSzZLU4h+MbbNa9qd7Z5CPm6d9PEUxkRfrOKt8RBXAclhuBbBxC 5Vu6CUaYt8vAXgETHdc35cJml2GfxEGEjLABR6AGM4iqkTiMkNMnF4gvSYul5uQF Sbdvgi0iHqlI83c1UH2Nbk2CBg/i3Z83XqbWjdtxQH0iwcU0sjRwRHSNUH5z5S3i 9sE7NlHxlVjY/ONx+WOW2ruyN/SQmYq1SK/a1AM5xTAMtAY4y6dNNyHpOOMEFE7u U+Poh+Z6zwgdt7A8kEf6IZHX2muY02ODW5xG1erGiR53sulW3J48q+m4TQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFI2t8W2B4QsqU9pCsngG1AzOiY2iMB8GA1UdIwQY MBaAFIO/NusY75pXxftgOtpAD+a2aI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMt ZTBkMmExYjZlOGFjLzEvamEzeGJZSGhDeXBUMmtLeWVBYlVETTZKamFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMtZTBkMmExYjZlOGFj LzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDHwMYAwQD JUvYAwQEUPJgAwQDXb6wAwQCuQ4QAwQE2a8AMA0GCSqGSIb3DQEBCwUAA4IBAQCH aBOjB77SE09QdgT5nMJEtJ4nvcJgRxWJuAPxIB31qvw/psJnZRJHVEF5jL6kXNtw MrLnoVRKFv79eIRFjZxZAZ3cIUqNskojANJeXkrJEt8zx5dYNk1pmxXAd3w9lwTH MySFPPhEzz+Ilit8UykeCtqDSW96tBrfaO/HzcuunIr7gs0UaT954SoFiO+V3oH2 17dJKHLrSJml/3OtKCClBhpQmAQ0Qn/MS2QtZrcr72No5ZZSyxYx8pcqA8/sRarH QNM3YyW2sW87orgwKOmlErJfQdd6n2OUqG5wDzoqLTRmyCMXS18D3qldHtl45vPE KyQynTrwmIOpO6wjMQZf -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:44 2026 by rpki-client