This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/h3XzoPFfg0gkRoipfz3NniWqbBo.roa File: h3XzoPFfg0gkRoipfz3NniWqbBo.roa (raw, json) Hash identifier: 3e1bCONRavVxKgYjsVVvn/uxm+lMafD/7rWQ2nWWrL4= Subject key identifier: 87:75:F3:A0:F1:5F:83:48:24:46:88:A9:7F:3D:CD:9E:25:AA:6C:1A Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B7911406CB4B56418E71B619AD95B2B1E Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/h3XzoPFfg0gkRoipfz3NniWqbBo.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20853 IP address blocks: 104.222.161.0/24 maxlen: 24 104.222.167.0/24 maxlen: 24 104.222.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:40:6c:b4:b5:64:18:e7:1b:61:9a:d9:5b:2b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8775f3a0f15f8348244688a97f3dcd9e25aa6c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:05:e1:ad:ed:93:e5:f3:dd:31:58:13:5e: a3:fd:06:a9:7c:74:f5:e7:fe:0d:b2:79:64:ae:2e: 5c:36:8d:ca:1b:ae:ac:52:3b:9b:60:7b:26:6b:8a: 3a:00:32:1e:e8:50:23:ec:0f:8c:1b:b0:56:b5:e3: 51:38:13:1c:86:9b:67:47:2a:c8:43:2d:48:f3:5e: a1:89:f6:79:48:a9:c2:0a:a3:b8:04:b9:ca:a2:3d: fd:93:31:4c:4f:e8:a5:31:ef:5f:bb:5e:ab:87:d1: c2:f7:16:26:b5:36:6b:8e:76:dd:33:36:29:7e:db: ab:c7:f2:41:25:e9:1b:d4:6b:f2:a0:d5:44:fa:e6: fe:98:92:30:61:e6:b1:54:3d:52:fa:3f:d6:9c:09: 32:45:f9:20:37:a3:66:1f:aa:7f:f0:94:66:74:cd: ae:aa:85:ad:9b:75:c8:05:f0:30:69:f0:50:87:91: 3c:a2:2e:9d:71:db:da:f1:38:c4:9b:0e:10:55:0c: 1d:f7:c1:fd:ac:fa:29:4e:90:72:f2:20:30:4f:82: d4:ba:7f:f3:f2:b1:8e:cd:fb:e3:ec:65:10:f9:05: dd:c7:75:d4:76:83:37:43:93:d1:a6:64:19:a1:b6: 82:b4:9c:6e:0e:15:d4:40:9b:1d:2b:4b:74:ad:0e: 38:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:75:F3:A0:F1:5F:83:48:24:46:88:A9:7F:3D:CD:9E:25:AA:6C:1A X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/h3XzoPFfg0gkRoipfz3NniWqbBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.222.161.0/24 104.222.167.0-104.222.168.255 Signature Algorithm: sha256WithRSAEncryption 92:21:6e:39:dc:5d:f0:12:16:98:1e:c2:bb:6b:59:63:65:3f: 5c:e5:06:79:e6:81:e9:1e:66:4c:c3:e8:99:b2:6e:de:9d:0d: a2:e4:80:b5:71:34:6e:35:96:01:ab:37:36:b8:af:b3:79:81: b7:8e:d1:a4:25:e7:ca:68:e1:5b:83:1f:f1:7e:0a:c5:2c:fd: ce:36:a4:ed:8e:94:ac:e0:1a:b8:84:02:6d:4a:15:5d:f2:ce: 0c:80:3e:6f:eb:86:50:e5:26:b8:fd:a9:2a:bc:c3:e0:5d:bc: be:a4:36:87:fe:64:a9:6d:3f:ac:e0:ad:90:6f:50:cb:6d:f2: 3e:85:04:fe:d8:94:46:14:0c:1e:05:bf:87:bc:35:c0:4e:36: fa:b5:68:df:75:c7:48:01:69:d9:6e:b3:2d:14:34:a2:45:47: 3b:c1:fc:10:90:fe:f1:ac:89:31:07:dc:99:75:9d:d0:6a:98: 6d:c8:74:67:7f:00:6f:11:89:fb:db:a6:19:74:58:38:ab:ba: 2e:b6:8b:88:dc:dc:0a:de:75:46:d9:ba:a5:55:42:64:a5:27: 38:be:c1:c6:8a:7d:db:8c:37:f8:5c:38:a5:73:53:f0:6c:cb: 4a:78:39:22:e8:1c:b5:6b:72:04:1b:07:0c:90:44:da:a1:e5: f4:c1:80:c7 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5EUBstLVkGOcbYZrZWyseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzc1ZjNhMGYxNWY4MzQ4MjQ0Njg4YTk3ZjNkY2Q5ZTI1YWE2YzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFEF4a3tk+Xz3TFYE16j/QapfHT1 5/4Nsnlkri5cNo3KG66sUjubYHsma4o6ADIe6FAj7A+MG7BWteNROBMchptnRyrI Qy1I816hifZ5SKnCCqO4BLnKoj39kzFMT+ilMe9fu16rh9HC9xYmtTZrjnbdMzYp fturx/JBJekb1GvyoNVE+ub+mJIwYeaxVD1S+j/WnAkyRfkgN6NmH6p/8JRmdM2u qoWtm3XIBfAwafBQh5E8oi6dcdva8TjEmw4QVQwd98H9rPopTpBy8iAwT4LUun/z 8rGOzfvj7GUQ+QXdx3XUdoM3Q5PRpmQZobaCtJxuDhXUQJsdK0t0rQ44NQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFId186DxX4NIJEaIqX89zZ4lqmwaMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvaDNYem9QRmZnMGdrUm9pcGZ6M05uaVdxYkJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAaN6hMAwD BABo3qcDBABo3qgwDQYJKoZIhvcNAQELBQADggEBAJIhbjncXfASFpgewrtrWWNl P1zlBnnmgekeZkzD6Jmybt6dDaLkgLVxNG41lgGrNza4r7N5gbeO0aQl58po4VuD H/F+CsUs/c42pO2OlKzgGriEAm1KFV3yzgyAPm/rhlDlJrj9qSq8w+BdvL6kNof+ ZKltP6zgrZBvUMtt8j6FBP7YlEYUDB4Fv4e8NcBONvq1aN91x0gBadlusy0UNKJF RzvB/BCQ/vGsiTEH3Jl1ndBqmG3IdGd/AG8Rifvbphl0WDirui62i4jc3AredUbZ uqVVQmSlJzi+wcaKfduMN/hcOKVzU/Bsy0p4OSLoHLVrcgQbBwyQRNqh5fTBgMc= -----END CERTIFICATE-----Generated at Fri Jan 2 02:42:28 2026 by rpki-client