This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/3H8BLKzmkCfljUjNrQGOgxtelOg.roa File: 3H8BLKzmkCfljUjNrQGOgxtelOg.roa (raw, json) Hash identifier: v8PSaEUxks+gqrCM9n7vdattQCJR6qYVTo0H/ICFPWs= Subject key identifier: DC:7F:01:2C:AC:E6:90:27:E5:8D:48:CD:AD:01:8E:83:1B:5E:94:E8 Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df Certificate serial: 019B78A2FFF850F78F44CCB7EC0FD375D418 Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/3H8BLKzmkCfljUjNrQGOgxtelOg.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 132.64.1.0/24 maxlen: 24 132.64.2.0/24 maxlen: 24 132.64.3.0/24 maxlen: 24 132.64.5.0/24 maxlen: 24 132.64.6.0/24 maxlen: 24 132.64.7.0/24 maxlen: 24 132.64.16.0/24 maxlen: 24 132.64.17.0/24 maxlen: 24 132.64.24.0/22 maxlen: 22 132.64.40.0/24 maxlen: 24 132.64.43.0/24 maxlen: 24 132.64.44.0/24 maxlen: 24 132.64.45.0/24 maxlen: 24 132.64.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ff:f8:50:f7:8f:44:cc:b7:ec:0f:d3:75:d4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc7f012cace69027e58d48cdad018e831b5e94e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:83:ff:37:3d:41:0e:0c:35:53:93:5c:b2:01: 58:fb:85:4e:06:ea:49:d9:3c:4b:90:24:9f:1c:52: 29:04:13:c4:31:34:18:20:76:af:cb:ee:a3:cc:a6: c1:2e:d6:65:6d:81:bd:73:d1:05:dd:8d:2d:ec:e8: e0:51:8f:96:fc:da:5c:0a:74:4b:97:20:63:58:6d: 89:ac:b4:bb:a0:b0:3d:c3:d6:b0:ae:f6:d1:2a:fa: 2b:63:e4:d0:65:47:c7:71:5b:de:7f:6b:1f:ff:29: 3f:47:f5:28:6a:21:56:95:7c:e0:e8:c4:11:80:8a: 4b:81:2b:d8:3c:42:30:ac:a7:c9:70:f0:d7:71:42: cd:18:d2:49:46:11:74:e6:09:ab:30:d3:6e:68:c5: b0:66:e0:b6:2f:67:63:45:83:97:24:de:d3:d1:d9: 30:8e:c0:30:7f:e6:42:5a:41:4a:45:58:d7:9c:c2: 5f:ab:3c:6b:71:63:68:8c:2b:60:ec:01:81:19:bc: df:cd:53:cc:a6:85:03:34:b1:22:98:df:c9:fd:d0: ef:d7:1a:15:09:5c:66:88:fb:ba:c1:c5:51:14:29: 93:2a:ef:77:e6:4b:50:fe:f8:fc:42:19:5a:3b:6d: d2:07:71:c5:dd:5f:64:ef:bf:d1:25:4f:f4:bf:25: db:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7F:01:2C:AC:E6:90:27:E5:8D:48:CD:AD:01:8E:83:1B:5E:94:E8 X509v3 Authority Key Identifier: keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/3H8BLKzmkCfljUjNrQGOgxtelOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.64.1.0-132.64.3.255 132.64.5.0-132.64.7.255 132.64.16.0/23 132.64.24.0/22 132.64.40.0/24 132.64.43.0-132.64.45.255 132.64.254.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:85:24:3c:86:51:14:5a:e5:f6:8e:79:0c:21:36:35:fb:9b: b4:60:7d:77:72:6c:5e:70:86:a5:92:57:58:8a:02:23:b1:56: 64:8a:ca:c1:bf:cf:46:ce:6a:6c:51:09:f3:6b:6c:0a:3a:88: a8:45:7a:aa:c8:be:0d:49:85:6b:1d:82:15:1d:2d:b1:6b:6e: 04:07:d9:b2:64:83:0f:35:1b:4b:88:7e:86:46:5f:97:fb:07: 34:94:d8:6f:77:fb:c2:47:a0:3f:3a:19:e2:2b:c8:4b:a7:31: 04:87:98:5b:37:15:99:45:84:bc:b7:8b:f5:bd:1a:29:23:c8: 5a:bd:3b:7d:51:97:f6:0f:6f:9a:50:68:ca:63:c8:7d:c3:dd: e5:89:e8:cb:5f:1c:a5:f8:fa:51:b0:e5:b0:d4:d0:66:5a:f7: 4a:6a:6d:ae:ad:b5:8d:0c:60:2d:75:dc:f9:98:00:46:4a:d3: 95:e5:82:4f:5d:33:d3:0a:86:7b:1f:3d:11:27:e7:93:a5:8d: 94:ba:8a:a3:1d:cd:15:0e:2b:12:75:a4:52:92:91:5e:5f:c8: 73:a7:ec:1e:fe:a1:6e:cb:da:9f:13:a8:f5:9f:0d:f0:d1:3b: 08:0a:55:b8:5a:b6:9e:38:db:dc:45:7d:a4:b2:df:27:b8:31: 5d:c4:a1:1b -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt4ov/4UPePRMy37A/TddQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2 M2MwZGYwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzdmMDEyY2FjZTY5MDI3ZTU4ZDQ4Y2RhZDAxOGU4MzFiNWU5NGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoP/Nz1BDgw1U5NcsgFY+4VOBupJ 2TxLkCSfHFIpBBPEMTQYIHavy+6jzKbBLtZlbYG9c9EF3Y0t7OjgUY+W/NpcCnRL lyBjWG2JrLS7oLA9w9awrvbRKvorY+TQZUfHcVvef2sf/yk/R/UoaiFWlXzg6MQR gIpLgSvYPEIwrKfJcPDXcULNGNJJRhF05gmrMNNuaMWwZuC2L2djRYOXJN7T0dkw jsAwf+ZCWkFKRVjXnMJfqzxrcWNojCtg7AGBGbzfzVPMpoUDNLEimN/J/dDv1xoV CVxmiPu6wcVRFCmTKu935ktQ/vj8QhlaO23SB3HF3V9k77/RJU/0vyXbqQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFNx/ASys5pAn5Y1Iza0BjoMbXpToMB8GA1UdIwQY MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt YTJlMjRmOTgwYjNmLzEvM0g4QkxLem1rQ2ZsalVqTnJRR09neHRlbE9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCMAwDBACEQAED BAKEQAAwDAMEAIRABQMEA4RAAAMEAYRAEAMEAoRAGAMEAIRAKDAMAwQAhEArAwQB hEAsAwQAhED+MA0GCSqGSIb3DQEBCwUAA4IBAQBahSQ8hlEUWuX2jnkMITY1+5u0 YH13cmxecIalkldYigIjsVZkisrBv89GzmpsUQnza2wKOoioRXqqyL4NSYVrHYIV HS2xa24EB9myZIMPNRtLiH6GRl+X+wc0lNhvd/vCR6A/OhniK8hLpzEEh5hbNxWZ RYS8t4v1vRopI8havTt9UZf2D2+aUGjKY8h9w93liejLXxyl+PpRsOWw1NBmWvdK am2urbWNDGAtddz5mABGStOV5YJPXTPTCoZ7Hz0RJ+eTpY2UuoqjHc0VDisSdaRS kpFeX8hzp+we/qFuy9qfE6j1nw3w0TsIClW4WraeONvcRX2kst8nuDFdxKEb -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:58 2026 by rpki-client