This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3OTHeUu7b7n33NYqzyxjWA-qYc4.roa File: 3OTHeUu7b7n33NYqzyxjWA-qYc4.roa (raw, json) Hash identifier: MiVW63viUQ4doSpuymTIKUZwdZpVrCsZvROGcsDofKU= Subject key identifier: DC:E4:C7:79:4B:BB:6F:B9:F7:DC:D6:2A:CF:2C:63:58:0F:AA:61:CE Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C133A9ADB40BE286689FAD567072A2C Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3OTHeUu7b7n33NYqzyxjWA-qYc4.roa Signing time: Fri 02 Jan 2026 00:19:53 +0000 ROA not before: Fri 02 Jan 2026 00:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 270026 IP address blocks: 141.136.56.0/23 maxlen: 23 141.136.56.0/24 maxlen: 24 141.136.57.0/24 maxlen: 24 181.41.152.0/24 maxlen: 24 181.41.153.0/24 maxlen: 24 181.41.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3a:9a:db:40:be:28:66:89:fa:d5:67:07:2a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dce4c7794bbb6fb9f7dcd62acf2c63580faa61ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3f:79:e2:ca:5a:2c:12:57:ee:df:7e:13:62: 42:6e:e9:d6:38:72:e9:02:18:46:cc:48:24:c5:ec: e0:01:d6:50:97:9e:4d:dd:d2:ea:7e:aa:9d:eb:0f: 4e:4f:1c:b3:2e:72:db:c6:ac:7e:fb:bd:e7:2f:05: c7:94:af:59:9f:fe:89:c1:a5:dc:0a:ff:89:cc:c5: 01:f3:4e:77:0a:f1:38:c4:aa:2a:d2:99:8b:c6:c2: d7:30:05:cd:93:6a:e3:2b:ce:fa:e5:a1:e9:85:3e: 43:d6:07:fa:de:74:06:da:ff:c7:6b:a0:89:92:d0: 90:d7:86:89:58:ba:4b:dc:08:aa:ee:ea:8d:c5:60: c0:20:90:d8:53:a5:a7:9d:c8:d4:e7:db:73:56:d5: 5a:ce:c2:b3:2f:0e:b6:b9:cd:a3:70:a9:35:de:eb: 94:a5:43:37:18:00:e8:6b:b6:57:f6:74:66:0d:b0: e8:b1:75:2a:a3:e9:85:f1:99:e4:33:db:dc:88:f0: 4d:bc:72:e7:4a:5e:aa:40:be:e2:b8:e7:57:ce:81: 68:93:dc:ed:52:62:d6:a0:27:6d:fd:da:8c:99:7b: da:0c:f8:4d:e9:1e:b0:bb:fa:d7:a0:6b:1d:34:fb: a6:fe:eb:b2:b8:3a:26:58:ff:8b:47:43:82:ad:ee: 99:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E4:C7:79:4B:BB:6F:B9:F7:DC:D6:2A:CF:2C:63:58:0F:AA:61:CE X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3OTHeUu7b7n33NYqzyxjWA-qYc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.136.56.0/23 181.41.152.0/23 181.41.155.0/24 Signature Algorithm: sha256WithRSAEncryption b9:d3:fe:c5:79:c0:ae:a9:61:08:11:c8:bb:61:7e:5c:a3:55: 3f:f6:f9:3f:63:6b:fb:1e:9d:32:84:0a:59:d7:52:e6:f6:17: 8f:0f:cc:a7:da:9b:1b:94:7e:0a:1f:61:15:e2:57:14:3f:fe: 67:05:df:8e:0e:35:c8:30:f0:f2:1e:ee:36:9f:d3:58:23:37: f6:92:2f:3a:30:80:3d:e0:56:ad:f4:3e:ae:89:92:9c:77:ff: 72:76:63:a6:45:12:06:b0:3b:42:16:40:dd:7f:86:a4:39:27: b1:f2:5b:53:69:e2:fa:38:7a:2a:f2:a8:2c:fe:e3:22:de:7f: 21:b2:42:8e:d2:85:a1:c3:a5:a0:d7:14:36:8d:44:22:17:d4: 14:0e:4d:ee:73:9f:5b:d1:cf:14:40:d4:74:bc:ac:d7:8f:c3: fc:78:7a:f2:74:1e:94:a5:d3:f7:d6:4d:a6:d9:96:4d:0a:89: 2d:96:57:0f:fd:e3:ea:27:c6:f5:fa:05:85:14:1f:93:16:bc: b6:8f:0b:c9:e0:4c:f2:57:d1:16:3e:8e:2d:04:2a:55:f7:fb: 98:c2:04:2e:65:14:bd:dc:fc:2d:d2:2f:8d:ae:28:12:41:d6: 81:ee:db:66:b7:05:69:90:f1:30:f4:f3:1d:33:f2:06:3b:c7: 42:8d:89:93 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8Ezqa20C+KGaJ+tVnByosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2U0Yzc3OTRiYmI2ZmI5ZjdkY2Q2MmFjZjJjNjM1ODBmYWE2MWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz954spaLBJX7t9+E2JCbunWOHLp AhhGzEgkxezgAdZQl55N3dLqfqqd6w9OTxyzLnLbxqx++73nLwXHlK9Zn/6JwaXc Cv+JzMUB8053CvE4xKoq0pmLxsLXMAXNk2rjK8765aHphT5D1gf63nQG2v/Ha6CJ ktCQ14aJWLpL3Aiq7uqNxWDAIJDYU6WnncjU59tzVtVazsKzLw62uc2jcKk13uuU pUM3GADoa7ZX9nRmDbDosXUqo+mF8ZnkM9vciPBNvHLnSl6qQL7iuOdXzoFok9zt UmLWoCdt/dqMmXvaDPhN6R6wu/rXoGsdNPum/uuyuDomWP+LR0OCre6ZzQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNzkx3lLu2+599zWKs8sY1gPqmHOMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvM09USGVVdTdiN24zM05ZcXp5eGpXQS1xWWM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBjYg4AwQB tSmYAwQAtSmbMA0GCSqGSIb3DQEBCwUAA4IBAQC50/7FecCuqWEIEci7YX5co1U/ 9vk/Y2v7Hp0yhApZ11Lm9hePD8yn2psblH4KH2EV4lcUP/5nBd+ODjXIMPDyHu42 n9NYIzf2ki86MIA94Fat9D6uiZKcd/9ydmOmRRIGsDtCFkDdf4akOSex8ltTaeL6 OHoq8qgs/uMi3n8hskKO0oWhw6Wg1xQ2jUQiF9QUDk3uc59b0c8UQNR0vKzXj8P8 eHrydB6UpdP31k2m2ZZNCoktllcP/ePqJ8b1+gWFFB+TFry2jwvJ4EzyV9EWPo4t BCpV9/uYwgQuZRS93Pwt0i+NrigSQdaB7ttmtwVpkPEw9PMdM/IGO8dCjYmT -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:38 2026 by rpki-client