This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/x3r5MAGnwo9sJOqgqq7L5j88SZc.roa File: x3r5MAGnwo9sJOqgqq7L5j88SZc.roa (raw, json) Hash identifier: PdGQVPWLQTL/E0T0LOBkbwg2HWh9KKOf2sd5PHKTZpg= Subject key identifier: C7:7A:F9:30:01:A7:C2:8F:6C:24:EA:A0:AA:AE:CB:E6:3F:3C:49:97 Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Certificate serial: 019B7D5C082AF50EA83672261FF69307539F Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/x3r5MAGnwo9sJOqgqq7L5j88SZc.roa Signing time: Fri 02 Jan 2026 06:19:01 +0000 ROA not before: Fri 02 Jan 2026 06:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.143.40.0/24 maxlen: 24 185.143.41.0/24 maxlen: 24 185.143.42.0/24 maxlen: 24 185.143.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:08:2a:f5:0e:a8:36:72:26:1f:f6:93:07:53:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Validity Not Before: Jan 2 06:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c77af93001a7c28f6c24eaa0aaaecbe63f3c4997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:32:18:ac:ef:15:dc:98:93:08:2d:bf:39: d0:d2:67:c6:67:18:e0:b0:e4:6b:1d:e9:ed:d7:62: f6:c2:eb:67:89:25:5d:eb:38:f7:1a:c3:18:e4:2b: 0a:5a:49:78:9d:06:df:30:fb:14:d3:da:70:12:2d: 6e:d5:77:72:9b:c1:aa:37:a9:b4:88:5b:ae:c2:e2: 82:54:86:5f:6c:06:de:f9:9f:c8:df:82:0a:44:de: 9a:10:39:e1:24:03:f1:76:c4:20:7f:96:26:5f:e4: a9:d2:58:7e:82:04:2d:91:2c:2a:21:f4:66:49:b5: 47:09:00:39:c4:ab:0c:e9:ea:22:a1:f6:db:d9:80: 42:61:d0:e1:92:ab:28:e3:9a:35:55:26:56:93:39: 04:c9:a2:db:f6:56:fb:a0:1e:9b:d6:62:71:92:17: bd:47:32:b2:66:19:48:f8:24:b4:65:dc:54:a0:ed: 35:fd:8e:c1:24:89:62:d9:c2:e0:5d:6e:16:e6:57: 9f:93:4d:d5:56:8a:42:b4:67:2c:22:94:6c:cd:64: 22:7f:2f:f8:83:b6:26:67:66:86:2e:5d:61:c7:fc: 64:48:9e:c2:2a:81:70:43:80:a0:5d:30:c9:30:cf: 07:be:02:d7:fc:23:e5:34:b2:58:4f:1b:f5:51:5a: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7A:F9:30:01:A7:C2:8F:6C:24:EA:A0:AA:AE:CB:E6:3F:3C:49:97 X509v3 Authority Key Identifier: keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/x3r5MAGnwo9sJOqgqq7L5j88SZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.40.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:9b:53:73:36:24:4d:12:7b:28:32:29:13:fd:8f:13:00:ca: 20:3d:51:01:ef:1a:35:b6:53:dd:02:93:8e:ec:8a:72:58:db: b3:a9:3a:75:40:bd:c9:49:07:3e:cb:88:77:4f:89:a3:6e:d9: c9:09:8c:32:ff:16:ed:04:55:64:b5:77:e6:46:51:9f:b2:72: 5e:56:17:c3:e3:18:3a:09:ea:e2:22:1b:32:59:fd:16:20:4e: 6d:6b:ed:01:3d:e5:16:49:1d:9d:29:44:5c:a4:1b:cb:24:1c: 23:da:be:64:3d:71:e4:25:98:2a:76:2c:18:04:42:d7:8f:8c: 18:36:aa:91:fe:ab:9f:57:b7:e2:ee:5e:dc:3a:23:9e:77:23: cc:68:c3:eb:43:f1:32:bc:a1:dc:77:35:9b:70:ac:0e:cd:7e: 77:fb:05:16:21:5e:fa:ed:d2:56:27:cb:ee:0b:9b:52:0d:6b: 74:df:7b:37:5e:f7:73:ed:d9:46:ae:e8:35:b4:7e:1a:07:37: cf:2e:66:dd:b0:e9:7d:45:07:82:4d:b4:69:40:92:20:d4:e3: de:f8:8c:37:f8:3b:77:5d:23:d4:b9:d4:96:e3:50:e2:fa:c7: 85:1e:72:77:ef:76:6c:b6:39:fa:e4:4c:fc:c8:61:fa:f7:e8: c3:37:57:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XAgq9Q6oNnImH/aTB1OfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2MxNzY2ZmJiZGNmZjY4YmJjMzRhM2M2YmU2OWEwYzhh MDNhYjkwHhcNMjYwMTAyMDYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzdhZjkzMDAxYTdjMjhmNmMyNGVhYTBhYWFlY2JlNjNmM2M0OTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3EyGKzvFdyYkwgtvznQ0mfGZxjg sORrHent12L2wutniSVd6zj3GsMY5CsKWkl4nQbfMPsU09pwEi1u1Xdym8GqN6m0 iFuuwuKCVIZfbAbe+Z/I34IKRN6aEDnhJAPxdsQgf5YmX+Sp0lh+ggQtkSwqIfRm SbVHCQA5xKsM6eoiofbb2YBCYdDhkqso45o1VSZWkzkEyaLb9lb7oB6b1mJxkhe9 RzKyZhlI+CS0ZdxUoO01/Y7BJIli2cLgXW4W5lefk03VVopCtGcsIpRszWQify/4 g7YmZ2aGLl1hx/xkSJ7CKoFwQ4CgXTDJMM8HvgLX/CPlNLJYTxv1UVrWqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMd6+TABp8KPbCTqoKquy+Y/PEmXMB8GA1UdIwQY MBaAFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQt MzU2OGUxZDI5ZDRhLzEveDNyNU1BR253bzlzSk9xZ3FxN0w1ajg4U1pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQtMzU2OGUxZDI5ZDRh LzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY8oMA0G CSqGSIb3DQEBCwUAA4IBAQBqm1NzNiRNEnsoMikT/Y8TAMogPVEB7xo1tlPdApOO 7IpyWNuzqTp1QL3JSQc+y4h3T4mjbtnJCYwy/xbtBFVktXfmRlGfsnJeVhfD4xg6 CeriIhsyWf0WIE5ta+0BPeUWSR2dKURcpBvLJBwj2r5kPXHkJZgqdiwYBELXj4wY NqqR/qufV7fi7l7cOiOedyPMaMPrQ/EyvKHcdzWbcKwOzX53+wUWIV767dJWJ8vu C5tSDWt033s3Xvdz7dlGrug1tH4aBzfPLmbdsOl9RQeCTbRpQJIg1OPe+Iw3+Dt3 XSPUudSW41Di+seFHnJ373Zstjn65Ez8yGH69+jDN1fH -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:04 2026 by rpki-client