This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/3xGw1rop8564t3-bxbU_RkP9FKQ.roa File: 3xGw1rop8564t3-bxbU_RkP9FKQ.roa (raw, json) Hash identifier: yfLjzKJGeMwVRP+KK+Z2T+JHoQEZVG5MrcsyFlDcLWA= Subject key identifier: DF:11:B0:D6:BA:29:F3:9E:B8:B7:7F:9B:C5:B5:3F:46:43:FD:14:A4 Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff Certificate serial: 019B7E38CDE2DC51180B760899C7F41D7761 Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/3xGw1rop8564t3-bxbU_RkP9FKQ.roa Signing time: Fri 02 Jan 2026 10:20:10 +0000 ROA not before: Fri 02 Jan 2026 10:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214112 IP address blocks: 62.169.138.0/24 maxlen: 24 62.169.156.0/24 maxlen: 24 178.16.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:cd:e2:dc:51:18:0b:76:08:99:c7:f4:1d:77:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff Validity Not Before: Jan 2 10:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df11b0d6ba29f39eb8b77f9bc5b53f4643fd14a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:5c:90:5c:be:63:75:fa:2c:0c:f8:de:4d: 18:57:38:c8:c5:fd:ce:88:d6:8c:30:06:15:d2:50: 43:5b:ab:1b:85:ab:9b:b5:e6:20:b6:f8:03:72:62: 1e:3a:be:22:4d:0a:4c:73:6f:94:4f:af:a8:83:43: 70:a5:f7:ca:fa:2d:0e:72:41:b5:eb:26:26:35:a0: a9:80:2f:91:b0:5f:32:4e:c1:4f:6a:4d:2e:89:b3: e0:96:8e:f5:a8:d6:5a:06:c9:f0:1e:8a:ff:ff:77: 89:13:c7:46:e7:97:2d:b7:22:4e:22:68:67:ab:b8: 8c:fa:49:12:24:71:b2:21:3b:2f:d7:08:e8:92:7f: 44:5d:20:a0:f1:79:d6:47:ce:a7:38:2e:71:b7:48: c1:c9:69:90:b3:e4:be:39:da:e9:c9:83:74:67:ea: 3b:0b:89:57:87:ae:6a:b4:87:c6:e4:e3:7e:f8:c5: e3:59:7b:30:cf:3b:ee:03:24:2d:c5:b8:71:1b:95: b6:2d:c3:20:60:a6:39:0d:df:ed:4a:e6:b4:79:27: 09:53:95:ba:28:61:ae:f6:b6:56:b9:50:21:dd:2d: 24:0c:a6:c9:18:96:90:05:98:f5:56:1d:38:22:ef: 32:59:d7:a7:b1:86:3a:88:a8:ea:fd:3e:2a:fb:c5: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:11:B0:D6:BA:29:F3:9E:B8:B7:7F:9B:C5:B5:3F:46:43:FD:14:A4 X509v3 Authority Key Identifier: keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/3xGw1rop8564t3-bxbU_RkP9FKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.138.0/24 62.169.156.0/24 178.16.229.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:ec:91:1e:0d:a9:03:0a:f8:f0:3e:5f:a8:fd:84:20:45:ab: 13:c8:33:15:7f:73:f3:df:a3:26:0e:eb:db:19:cc:01:88:b9: 1a:77:bd:54:9c:08:f7:ec:86:ee:cb:e8:63:8c:24:77:6b:77: c8:91:ba:01:c5:b1:ab:9b:90:9d:73:96:de:28:fc:03:01:dc: 0f:4f:23:9d:d6:b0:e2:6f:d4:5e:33:6b:99:57:7e:9d:59:65: bd:25:5b:5d:48:f5:1b:16:67:78:48:53:69:fa:ac:3c:85:1f: 31:a6:74:eb:fe:a5:cf:7b:d4:1d:52:4f:7e:ea:25:11:fc:89: 6a:74:53:31:0e:fe:39:7e:cf:ea:2f:a5:ad:81:6a:29:5c:82: b6:de:b5:90:90:13:26:1e:54:3e:72:f7:11:56:55:76:de:b4: 59:93:f8:00:32:7b:9f:0b:c6:73:45:0e:3e:e0:2a:01:02:56: b6:28:4e:1e:4f:be:b3:8a:43:67:49:d6:c8:1a:16:7b:8f:4e: 4a:86:d2:38:9b:b5:c1:a1:17:b9:07:66:c5:b0:be:d4:6e:a5: e6:21:5f:9c:6e:c8:b9:39:27:3d:b4:51:63:e8:60:0d:c1:88: 98:30:77:94:1e:40:7d:ed:d1:4e:58:a0:ab:25:2b:aa:6e:22: ba:f3:f7:f4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OM3i3FEYC3YImcf0HXdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMThmNTVhNmIwMzNiMjQ0Zjg2MTQ1YmQ5ZjBhNmYxNDAw YzFiZmYwHhcNMjYwMTAyMTAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjExYjBkNmJhMjlmMzllYjhiNzdmOWJjNWI1M2Y0NjQzZmQxNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhpckFy+Y3X6LAz43k0YVzjIxf3O iNaMMAYV0lBDW6sbhaubteYgtvgDcmIeOr4iTQpMc2+UT6+og0NwpffK+i0OckG1 6yYmNaCpgC+RsF8yTsFPak0uibPglo71qNZaBsnwHor//3eJE8dG55cttyJOImhn q7iM+kkSJHGyITsv1wjokn9EXSCg8XnWR86nOC5xt0jByWmQs+S+OdrpyYN0Z+o7 C4lXh65qtIfG5ON++MXjWXswzzvuAyQtxbhxG5W2LcMgYKY5Dd/tSua0eScJU5W6 KGGu9rZWuVAh3S0kDKbJGJaQBZj1Vh04Iu8yWdensYY6iKjq/T4q+8WZoQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN8RsNa6KfOeuLd/m8W1P0ZD/RSkMB8GA1UdIwQY MBaAFEAY9VprAzskT4YUW9nwpvFADBv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83ODc5NWUtNDIzZS00YTFjLTgxZTAt NmUxNjlkNjVjOTExLzEvM3hHdzFyb3A4NTY0dDMtYnhiVV9Sa1A5RktRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83ODc5NWUtNDIzZS00YTFjLTgxZTAtNmUxNjlkNjVjOTEx LzEvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPqmKAwQA PqmcAwQAshDlMA0GCSqGSIb3DQEBCwUAA4IBAQBa7JEeDakDCvjwPl+o/YQgRasT yDMVf3Pz36MmDuvbGcwBiLkad71UnAj37Ibuy+hjjCR3a3fIkboBxbGrm5Cdc5be KPwDAdwPTyOd1rDib9ReM2uZV36dWWW9JVtdSPUbFmd4SFNp+qw8hR8xpnTr/qXP e9QdUk9+6iUR/IlqdFMxDv45fs/qL6WtgWopXIK23rWQkBMmHlQ+cvcRVlV23rRZ k/gAMnufC8ZzRQ4+4CoBAla2KE4eT76zikNnSdbIGhZ7j05KhtI4m7XBoRe5B2bF sL7UbqXmIV+cbsi5OSc9tFFj6GANwYiYMHeUHkB97dFOWKCrJSuqbiK68/f0 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:59 2026 by rpki-client