This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/P3DASKxbE4fNritsmNWOMr9fVp0.roa File: P3DASKxbE4fNritsmNWOMr9fVp0.roa (raw, json) Hash identifier: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ= Subject key identifier: 3F:70:C0:48:AC:5B:13:87:CD:AE:2B:6C:98:D5:8E:32:BF:5F:56:9D Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B77C6F69AC911F5EDCA46A6CA51E3D540 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/P3DASKxbE4fNritsmNWOMr9fVp0.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136897 IP address blocks: 31.24.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f6:9a:c9:11:f5:ed:ca:46:a6:ca:51:e3:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f70c048ac5b1387cdae2b6c98d58e32bf5f569d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:14:48:78:23:0e:23:57:0a:8c:44:2f:de: 18:f2:fc:a5:58:52:4a:be:78:c7:89:07:3e:e7:2a: 44:9f:2d:85:97:c3:39:eb:44:52:74:b5:60:68:01: ca:09:06:84:f6:26:19:59:2d:93:47:b6:83:af:11: 30:58:f7:a6:01:fd:fd:0a:76:6a:60:69:3b:5e:c1: de:30:2c:b9:7b:2b:39:bc:c3:87:23:5e:84:88:60: 20:10:89:4d:6a:af:03:8b:23:7a:66:cd:0c:6d:d9: e6:56:11:b8:eb:37:da:17:cf:88:8a:b1:87:c1:51: 02:60:6d:dc:f4:31:d5:07:65:c1:91:f7:6f:33:ad: 67:14:77:89:1f:cd:d0:29:93:aa:61:1a:0a:6c:38: 1b:79:bb:2a:d6:7b:75:b6:a7:6e:7f:2a:78:20:18: 56:b7:12:e7:45:50:81:52:16:25:8e:0f:6a:d8:2c: e5:c5:35:2e:c2:51:5f:bf:20:3a:5d:b7:83:ee:27: ae:45:23:76:65:07:25:43:97:85:92:2e:77:2d:5f: 97:d8:ce:de:fd:89:29:5c:bf:51:49:b6:b5:db:aa: 3b:18:25:3c:f2:03:35:85:8f:f7:27:df:6a:c3:2c: 82:4f:eb:02:8d:b5:0f:4c:96:db:2b:a1:0f:60:eb: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:70:C0:48:AC:5B:13:87:CD:AE:2B:6C:98:D5:8E:32:BF:5F:56:9D X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/P3DASKxbE4fNritsmNWOMr9fVp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.86.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:f4:2e:3a:aa:50:6d:78:21:c1:ce:2d:e4:f4:91:e0:f8:c7: bd:ce:53:19:9a:36:5d:4a:89:7a:14:6d:b7:17:80:62:15:ea: 62:2a:7b:97:c4:67:87:6a:88:7f:0e:ca:9b:29:ce:65:dd:2f: 9e:df:6f:6b:b6:ce:b4:ab:5a:5b:44:dc:36:8a:94:31:3f:b0: a2:2d:21:8c:b5:77:95:5a:f3:56:bb:4c:48:56:cc:12:fb:54: 03:7e:d4:72:43:e5:b5:af:91:52:18:3d:f6:33:fe:82:03:49: c9:85:60:57:67:ab:0a:fd:9d:d1:11:80:72:2e:aa:e2:5a:c4: c9:7b:b0:78:b7:1c:8f:2a:4c:4a:fe:10:5c:37:48:c8:92:da: 24:1f:4d:dd:06:b3:3b:10:8c:f6:65:9a:15:77:2f:ca:6a:0e: 86:cd:cf:49:c0:f0:a4:8e:ad:2e:71:56:05:58:22:71:82:bb: 26:a1:93:be:bc:ab:49:ef:e9:57:8a:cc:44:45:c9:63:cd:ff: 76:ec:ec:74:95:af:98:86:5c:67:82:de:0d:b1:3e:64:01:53: fd:96:67:5f:01:e1:a0:a2:8c:ff:99:54:2d:d9:08:ea:69:ab: 89:bb:cc:d5:15:26:52:eb:35:1f:f0:c5:fb:e5:da:7b:76:59: 86:d1:f3:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvaayRH17cpGpspR49VAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjcwYzA0OGFjNWIxMzg3Y2RhZTJiNmM5OGQ1OGUzMmJmNWY1NjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIEUSHgjDiNXCoxEL94Y8vylWFJK vnjHiQc+5ypEny2Fl8M560RSdLVgaAHKCQaE9iYZWS2TR7aDrxEwWPemAf39CnZq YGk7XsHeMCy5eys5vMOHI16EiGAgEIlNaq8DiyN6Zs0MbdnmVhG46zfaF8+IirGH wVECYG3c9DHVB2XBkfdvM61nFHeJH83QKZOqYRoKbDgbebsq1nt1tqdufyp4IBhW txLnRVCBUhYljg9q2CzlxTUuwlFfvyA6XbeD7ieuRSN2ZQclQ5eFki53LV+X2M7e /YkpXL9RSba126o7GCU88gM1hY/3J99qwyyCT+sCjbUPTJbbK6EPYOtI4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD9wwEisWxOHza4rbJjVjjK/X1adMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvUDNEQVNLeGJFNGZOcml0c21OV09NcjlmVnAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxhWMA0G CSqGSIb3DQEBCwUAA4IBAQAa9C46qlBteCHBzi3k9JHg+Me9zlMZmjZdSol6FG23 F4BiFepiKnuXxGeHaoh/DsqbKc5l3S+e329rts60q1pbRNw2ipQxP7CiLSGMtXeV WvNWu0xIVswS+1QDftRyQ+W1r5FSGD32M/6CA0nJhWBXZ6sK/Z3REYByLqriWsTJ e7B4txyPKkxK/hBcN0jIktokH03dBrM7EIz2ZZoVdy/Kag6Gzc9JwPCkjq0ucVYF WCJxgrsmoZO+vKtJ7+lXisxERcljzf927Ox0la+Yhlxngt4NsT5kAVP9lmdfAeGg ooz/mVQt2QjqaauJu8zVFSZS6zUf8MX75dp7dlmG0fMZ -----END CERTIFICATE-----Generated at Sun Jan 18 06:32:55 2026 by rpki-client