This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa File: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (raw, json) Hash identifier: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI= Subject key identifier: B4:6D:FF:5B:1D:50:FA:99:2E:96:A1:2A:53:21:57:CE:2B:C3:85:15 Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d Certificate serial: 019B7C11D2AED7EC4A3F7E930A9EF2DAD9FA Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa Signing time: Fri 02 Jan 2026 00:18:21 +0000 ROA not before: Fri 02 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44927 IP address blocks: 62.84.104.0/21 maxlen: 21 91.203.80.0/22 maxlen: 22 91.224.76.0/23 maxlen: 23 185.15.117.0/24 maxlen: 24 185.15.118.0/24 maxlen: 24 185.15.119.0/24 maxlen: 24 185.48.36.0/22 maxlen: 22 193.201.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d2:ae:d7:ec:4a:3f:7e:93:0a:9e:f2:da:d9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d Validity Not Before: Jan 2 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b46dff5b1d50fa992e96a12a532157ce2bc38515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:21:40:bc:77:ab:04:f1:eb:cd:1a:7d:38:32: 93:47:e1:eb:ff:94:d6:a4:c9:5d:04:88:c1:d2:9c: 64:ed:fc:20:9f:4f:32:61:b2:d9:80:a2:86:26:f4: d6:dc:e0:23:72:49:bc:ee:8c:b8:b0:08:20:36:d9: e3:95:53:b9:4a:08:e2:c6:0b:91:39:8d:0f:b3:c5: e4:7a:42:d0:05:d2:24:f0:b7:ac:9b:99:57:21:39: 04:19:d1:2e:05:5c:5a:54:68:48:01:2b:d8:ee:d6: 75:b4:2b:2e:e2:27:c3:98:ae:66:3b:01:19:59:9f: df:19:e6:fe:2f:f6:cf:01:95:d0:51:5e:17:db:ce: 3f:9c:ad:08:5c:9f:1d:7a:b7:ef:05:f7:b6:83:70: 03:9d:4e:f4:1a:3e:09:99:23:dc:d8:f1:99:24:e3: 61:ce:29:4e:e8:eb:9c:76:40:60:c0:44:bc:78:3b: d9:7a:22:b3:59:e7:c4:37:93:2a:3c:73:6c:1f:36: c4:b0:26:93:09:ed:f8:96:0a:9d:06:8a:e3:42:91: 0d:67:18:c0:68:0c:97:54:e5:22:31:fb:53:75:e1: 8f:f8:ff:10:52:ea:75:4e:8d:39:2c:1c:27:aa:b9: a0:77:f4:f4:35:13:f3:36:13:0f:fc:ef:d7:65:a5: 13:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6D:FF:5B:1D:50:FA:99:2E:96:A1:2A:53:21:57:CE:2B:C3:85:15 X509v3 Authority Key Identifier: keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.84.104.0/21 91.203.80.0/22 91.224.76.0/23 185.15.117.0-185.15.119.255 185.48.36.0/22 193.201.88.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:f3:79:8f:bd:24:10:81:50:69:22:c2:8b:fd:2e:59:e7:66: e8:45:6b:48:f5:7f:c0:e7:f5:37:3b:ab:82:50:bb:73:b0:a4: ea:4f:c5:6f:6a:75:da:3f:08:4f:81:4d:92:c9:5a:42:c9:0a: 91:94:96:b7:14:b9:6d:5d:73:36:a7:9b:16:4f:97:80:a0:0b: 7d:89:a2:3a:f6:e0:75:02:f5:ef:5f:88:d2:07:5e:a4:f1:ac: 80:81:c1:f7:08:fd:e8:47:8c:98:f4:2e:9a:f8:3b:48:9e:61: 71:fa:ad:6f:2f:6c:9e:14:cf:f5:c6:da:96:3a:10:f2:9b:f8: 4c:09:43:6b:18:45:ec:07:c8:bc:7d:02:96:ac:5f:56:e5:fc: 0a:2a:96:f9:28:72:b6:0a:40:db:8c:50:c5:84:3f:61:f2:97: 28:3a:c3:6f:13:70:7b:d3:13:f0:0b:3f:5e:8d:c7:a1:69:ee: 4e:12:95:d1:a3:75:8a:f0:43:c7:f6:9b:e2:3d:28:7d:3c:26: 0a:f0:1f:49:94:43:65:1f:19:2f:6a:66:0e:fc:34:c0:93:9b: 65:dc:75:93:87:88:de:8f:e7:ed:a9:81:45:c0:d2:34:e6:1b: 57:58:fb:33:0d:2e:9a:82:36:50:20:f7:76:c4:74:15:1e:be: d5:d9:b3:90 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt8EdKu1+xKP36TCp7y2tn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNDMyMDRlOTdhZDc5YWQ2YTFmMDk0MGVmNDFiMTZmMjA3 YjQ4OWQwHhcNMjYwMTAyMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDZkZmY1YjFkNTBmYTk5MmU5NmExMmE1MzIxNTdjZTJiYzM4NTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCFAvHerBPHrzRp9ODKTR+Hr/5TW pMldBIjB0pxk7fwgn08yYbLZgKKGJvTW3OAjckm87oy4sAggNtnjlVO5SgjixguR OY0Ps8XkekLQBdIk8Lesm5lXITkEGdEuBVxaVGhIASvY7tZ1tCsu4ifDmK5mOwEZ WZ/fGeb+L/bPAZXQUV4X284/nK0IXJ8derfvBfe2g3ADnU70Gj4JmSPc2PGZJONh zilO6OucdkBgwES8eDvZeiKzWefEN5MqPHNsHzbEsCaTCe34lgqdBorjQpENZxjA aAyXVOUiMftTdeGP+P8QUup1To05LBwnqrmgd/T0NRPzNhMP/O/XZaUTWQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFLRt/1sdUPqZLpahKlMhV84rw4UVMB8GA1UdIwQY MBaAFMFDIE6XrXmtah8JQO9BsW8ge0idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2Yt ZDI5YTVkOTE4ZmQ4LzEvdEczX1d4MVEtcGt1bHFFcVV5Rlh6aXZEaFJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2YtZDI5YTVkOTE4ZmQ4 LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQDPlRoAwQC W8tQAwQBW+BMMAwDBAC5D3UDBAO5D3ADBAK5MCQDBALByVgwDQYJKoZIhvcNAQEL BQADggEBAJrzeY+9JBCBUGkiwov9LlnnZuhFa0j1f8Dn9Tc7q4JQu3OwpOpPxW9q ddo/CE+BTZLJWkLJCpGUlrcUuW1dczanmxZPl4CgC32Jojr24HUC9e9fiNIHXqTx rICBwfcI/ehHjJj0Lpr4O0ieYXH6rW8vbJ4Uz/XG2pY6EPKb+EwJQ2sYRewHyLx9 ApasX1bl/AoqlvkocrYKQNuMUMWEP2Hylyg6w28TcHvTE/ALP16Nx6Fp7k4SldGj dYrwQ8f2m+I9KH08JgrwH0mUQ2UfGS9qZg78NMCTm2XcdZOHiN6P5+2pgUXA0jTm G1dY+zMNLpqCNlAg93bEdBUevtXZs5A= -----END CERTIFICATE-----Generated at Mon Jan 26 13:32:50 2026 by rpki-client