This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa File: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (raw, json) Hash identifier: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw= Subject key identifier: DF:1F:8D:2A:7B:38:58:AD:84:8E:93:8C:10:9A:09:A4:85:A3:F4:29 Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019B76EAF02B0EB055DE6F11D1F92D8B528C Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216246 IP address blocks: 138.124.13.0/24 maxlen: 24 138.124.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f0:2b:0e:b0:55:de:6f:11:d1:f9:2d:8b:52:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df1f8d2a7b3858ad848e938c109a09a485a3f429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:56:b8:e6:8a:4b:2b:9b:3f:2b:ad:30:83: 4f:53:a9:d2:1f:0f:76:6f:78:bc:46:11:06:51:43: 81:c4:46:e2:4a:70:7e:74:57:cd:86:19:c4:bb:14: 0b:03:3a:9d:3e:31:e8:f2:44:a5:8a:0b:cf:d3:c1: d7:c2:d9:34:60:5c:31:a3:0d:9b:92:96:10:4a:a4: 5b:9b:65:70:05:7e:75:d9:80:dd:57:96:6e:d7:21: 42:37:3f:fc:71:e8:f0:9b:cb:62:1a:f6:50:80:a0: e2:0d:31:2e:a4:6b:1e:ef:cc:37:95:55:4c:63:55: 53:4e:c6:17:68:29:1a:f6:ed:eb:fd:1e:ce:ed:94: f0:34:26:9a:db:30:ac:1b:9c:58:78:04:bc:7a:85: 80:c9:6a:e5:a4:4a:39:91:6b:64:43:09:4b:19:70: 4b:30:7e:12:4c:73:65:38:0d:f2:a2:83:07:f5:1c: 4e:71:d9:16:97:e9:c6:b6:47:3e:53:9e:a7:25:b9: b5:71:0c:88:16:58:77:ba:4f:f5:1e:13:c5:08:15: 96:87:44:c1:e9:66:3d:98:1a:29:f5:32:08:e5:1e: 87:88:59:2e:bc:7d:e9:dc:99:8b:02:45:b6:bf:10: 86:45:53:ef:0d:fc:08:ad:b1:c7:c1:53:aa:0a:d1: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1F:8D:2A:7B:38:58:AD:84:8E:93:8C:10:9A:09:A4:85:A3:F4:29 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.13.0-138.124.14.255 Signature Algorithm: sha256WithRSAEncryption 0d:14:9d:9b:4a:a1:eb:9e:e5:47:91:d1:4b:65:3c:09:c5:e6: db:8b:9c:80:cf:76:9e:fb:05:28:15:01:b9:78:06:7c:74:fa: ef:dc:c1:16:1a:9b:43:aa:90:82:31:16:f2:42:ab:f6:cb:00: 9c:15:ce:8a:67:37:99:cf:c7:f1:64:0d:49:7f:83:87:50:35: ab:a0:d5:be:f7:b6:dd:d2:8f:36:48:a5:1c:c9:8b:a5:58:a5: 4a:27:6c:a0:94:cd:92:1b:79:01:6a:79:19:16:3b:c3:0c:d8: 60:cc:a4:aa:b0:74:16:aa:e1:ba:4f:91:e5:10:9d:f3:4e:f3: 77:8f:97:b1:d3:dc:f9:96:f0:ce:ca:47:09:9d:2c:e5:a8:11: b5:79:3e:c6:50:2d:7a:3c:58:ae:aa:82:ab:c2:bc:b8:4d:ac: f6:74:41:fe:49:34:97:49:71:00:59:8c:c0:c6:32:7d:87:63: c1:88:33:90:98:97:7e:7d:06:27:08:5c:a1:1f:ea:fa:f7:51: 25:3c:52:23:54:8b:cd:ae:84:15:be:ab:36:e8:ec:f3:67:bb: 2e:e5:02:49:96:71:5c:87:a3:59:cd:4e:98:9c:f7:ff:52:16: d7:0e:1c:74:a1:32:6b:8d:f8:f2:22:17:3b:8a:44:44:25:e9: 7b:60:82:60 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt26vArDrBV3m8R0fkti1KMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjFmOGQyYTdiMzg1OGFkODQ4ZTkzOGMxMDlhMDlhNDg1YTNmNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ZWuOaKSyubPyutMINPU6nSHw92 b3i8RhEGUUOBxEbiSnB+dFfNhhnEuxQLAzqdPjHo8kSligvP08HXwtk0YFwxow2b kpYQSqRbm2VwBX512YDdV5Zu1yFCNz/8cejwm8tiGvZQgKDiDTEupGse78w3lVVM Y1VTTsYXaCka9u3r/R7O7ZTwNCaa2zCsG5xYeAS8eoWAyWrlpEo5kWtkQwlLGXBL MH4STHNlOA3yooMH9RxOcdkWl+nGtkc+U56nJbm1cQyIFlh3uk/1HhPFCBWWh0TB 6WY9mBop9TII5R6HiFkuvH3p3JmLAkW2vxCGRVPvDfwIrbHHwVOqCtF+IwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFN8fjSp7OFithI6TjBCaCaSFo/QpMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvM3gtTktuczRXSzJFanBPTUVKb0pwSVdqOUNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACKfA0D BACKfA4wDQYJKoZIhvcNAQELBQADggEBAA0UnZtKoeue5UeR0UtlPAnF5tuLnIDP dp77BSgVAbl4Bnx0+u/cwRYam0OqkIIxFvJCq/bLAJwVzopnN5nPx/FkDUl/g4dQ Naug1b73tt3SjzZIpRzJi6VYpUonbKCUzZIbeQFqeRkWO8MM2GDMpKqwdBaq4bpP keUQnfNO83ePl7HT3PmW8M7KRwmdLOWoEbV5PsZQLXo8WK6qgqvCvLhNrPZ0Qf5J NJdJcQBZjMDGMn2HY8GIM5CYl359BicIXKEf6vr3USU8UiNUi82uhBW+qzbo7PNn uy7lAkmWcVyHo1nNTpic9/9SFtcOHHShMmuN+PIiFzuKREQl6XtggmA= -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:48 2026 by rpki-client