This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3npLuo2stuqQxBE8euV86SU9uvk.roa File: 3npLuo2stuqQxBE8euV86SU9uvk.roa (raw, json) Hash identifier: Yp47C0mXn257Kz0FIcBFeG0l/PDsh1P9gTwZ9TFmfUU= Subject key identifier: DE:7A:4B:BA:8D:AC:B6:EA:90:C4:11:3C:7A:E5:7C:E9:25:3D:BA:F9 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B791159012620E36D18C5AF75007643C3 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3npLuo2stuqQxBE8euV86SU9uvk.roa Signing time: Thu 01 Jan 2026 10:18:58 +0000 ROA not before: Thu 01 Jan 2026 10:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 329225 IP address blocks: 64.137.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:59:01:26:20:e3:6d:18:c5:af:75:00:76:43:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de7a4bba8dacb6ea90c4113c7ae57ce9253dbaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:9e:20:1a:67:d0:f1:cb:8d:68:03:9e:52: 6d:5c:b9:52:89:f2:a2:cd:e1:03:07:00:09:c4:b9: a4:d6:4b:c6:57:c1:5c:92:88:5a:27:de:82:6a:2b: 15:58:60:55:51:3f:9b:f9:22:a1:04:6e:2d:cb:0b: e5:04:d6:c3:10:7f:eb:3b:e9:b8:2e:58:bd:86:b7: 71:6b:0d:26:de:dd:df:09:d9:25:d1:6f:0f:66:ef: 9b:4d:db:20:f0:17:ae:75:ee:d5:0b:6f:4c:3f:c9: e3:0c:c3:77:3d:4c:26:2c:be:e1:11:82:39:31:ea: 03:7c:42:ba:b3:27:8c:aa:b0:fd:67:7f:36:97:ff: 01:b5:93:fc:16:28:cd:65:a6:ce:1f:11:5d:88:df: ed:df:f4:15:c3:98:e0:dd:bd:c3:5f:fe:2d:0a:67: cb:7c:12:51:aa:1b:ae:39:60:20:91:58:92:6d:7d: 71:42:13:72:a6:7d:16:ad:c0:51:54:07:dc:a9:97: fd:27:1d:7d:8d:ce:98:06:21:e7:a0:d7:a1:6c:bc: d7:7d:9c:2a:38:e8:93:23:e0:5d:e5:2b:7e:49:75: cf:90:84:d2:57:b8:f5:52:12:ca:26:30:88:0b:40: 21:64:1d:02:92:19:f5:75:85:91:81:39:3a:51:4a: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7A:4B:BA:8D:AC:B6:EA:90:C4:11:3C:7A:E5:7C:E9:25:3D:BA:F9 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3npLuo2stuqQxBE8euV86SU9uvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.137.30.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:dd:97:bd:0f:d6:cf:17:31:89:fd:a3:20:4b:a5:55:a3:17: 6e:c8:7a:45:f7:78:76:1f:97:86:8d:b2:e5:40:28:2b:8f:64: 2d:58:45:37:a3:5f:4a:d5:47:b6:07:21:70:fc:95:19:a5:97: 6a:6f:ca:db:a9:53:da:c5:36:90:ac:1a:1b:02:bf:18:71:08: ed:03:64:1f:08:77:9a:0a:82:35:a5:05:b4:c9:fc:d1:5c:4d: 72:1d:26:5b:a8:bb:b4:c5:12:6a:2e:4f:7c:86:7b:7c:15:44: ba:15:c8:21:fc:14:3c:24:73:26:81:6e:09:4a:e4:8f:b4:46: ce:6f:f8:f1:df:82:56:ce:32:a4:3b:f4:67:c8:eb:14:a3:c1: 22:ee:d9:ba:81:47:ae:1d:fe:c7:30:53:95:03:63:37:0d:09: 0b:fd:03:2c:39:72:1d:be:16:83:09:53:66:c2:cd:40:23:11: 4d:63:fe:21:d8:dd:94:4b:af:c9:ee:7d:2b:e3:3f:e5:05:52: 7d:22:8f:03:9e:52:95:15:12:7f:c7:d9:79:de:08:2d:a0:55: c5:b6:32:47:e8:e2:c1:f8:f2:8e:ea:4f:5c:1d:fd:fa:cd:35: 2f:30:4b:ea:46:3e:94:a5:30:e4:20:0a:0d:8c:01:80:ab:85: 68:35:05:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EVkBJiDjbRjFr3UAdkPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTdhNGJiYThkYWNiNmVhOTBjNDExM2M3YWU1N2NlOTI1M2RiYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa+eIBpn0PHLjWgDnlJtXLlSifKi zeEDBwAJxLmk1kvGV8FckohaJ96CaisVWGBVUT+b+SKhBG4tywvlBNbDEH/rO+m4 Lli9hrdxaw0m3t3fCdkl0W8PZu+bTdsg8Beude7VC29MP8njDMN3PUwmLL7hEYI5 MeoDfEK6syeMqrD9Z382l/8BtZP8FijNZabOHxFdiN/t3/QVw5jg3b3DX/4tCmfL fBJRqhuuOWAgkViSbX1xQhNypn0WrcBRVAfcqZf9Jx19jc6YBiHnoNehbLzXfZwq OOiTI+Bd5St+SXXPkITSV7j1UhLKJjCIC0AhZB0Ckhn1dYWRgTk6UUpZXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN56S7qNrLbqkMQRPHrlfOklPbr5MB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvM25wTHVvMnN0dXFReEJFOGV1Vjg2U1U5dXZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQIkeMA0G CSqGSIb3DQEBCwUAA4IBAQBf3Ze9D9bPFzGJ/aMgS6VVoxduyHpF93h2H5eGjbLl QCgrj2QtWEU3o19K1Ue2ByFw/JUZpZdqb8rbqVPaxTaQrBobAr8YcQjtA2QfCHea CoI1pQW0yfzRXE1yHSZbqLu0xRJqLk98hnt8FUS6Fcgh/BQ8JHMmgW4JSuSPtEbO b/jx34JWzjKkO/RnyOsUo8Ei7tm6gUeuHf7HMFOVA2M3DQkL/QMsOXIdvhaDCVNm ws1AIxFNY/4h2N2US6/J7n0r4z/lBVJ9Io8DnlKVFRJ/x9l53ggtoFXFtjJH6OLB +PKO6k9cHf36zTUvMEvqRj6UpTDkIAoNjAGAq4VoNQUh -----END CERTIFICATE-----Generated at Fri Jan 2 02:40:53 2026 by rpki-client