This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/b3x9MgXvL3PTr4don27jJ7KcZ-U.roa File: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (raw, json) Hash identifier: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0= Subject key identifier: 6F:7C:7D:32:05:EF:2F:73:D3:AF:87:68:9F:6E:E3:27:B2:9C:67:E5 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED9E111804ED11633CFF6243B78E17 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/b3x9MgXvL3PTr4don27jJ7KcZ-U.roa Signing time: Fri 02 Jan 2026 04:18:25 +0000 ROA not before: Fri 02 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205650 IP address blocks: 147.234.18.0/24 maxlen: 24 147.234.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9e:11:18:04:ed:11:63:3c:ff:62:43:b7:8e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f7c7d3205ef2f73d3af87689f6ee327b29c67e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:c6:f3:d6:74:dc:5e:6d:19:fb:fe:60:6b: fa:8e:48:06:0b:ab:30:87:ff:28:e9:a2:e2:d9:c5: bc:f8:05:6e:b3:f4:82:11:4c:1a:98:4f:f7:fd:01: 23:11:27:e8:c0:ec:91:94:05:95:a4:22:98:b0:50: c2:61:e8:c2:30:4f:00:94:a9:66:da:a3:28:b2:a3: 3c:56:7d:f9:46:54:70:99:e3:27:34:ec:a3:23:32: 98:ac:15:ba:4e:97:93:cc:fa:a8:63:54:67:15:bd: 54:af:ec:49:3c:47:26:4a:30:1d:bc:95:ef:0c:f2: 82:ec:20:78:3d:a3:c9:40:46:d2:34:b8:ba:fc:f0: 63:2f:e7:d5:61:83:62:06:4d:fc:ac:1a:58:69:fd: bc:d4:7b:25:42:51:b5:c8:dd:5b:15:9c:5b:04:6d: 32:1b:b9:c4:91:4b:7a:7f:59:b2:1b:bb:e8:fc:a6: 66:fd:d9:31:10:58:93:ec:63:47:83:c9:52:7f:17: 9b:c3:17:fc:0d:58:db:1d:55:57:a6:02:98:6e:c1: a9:56:7f:20:af:a1:07:64:4b:09:6a:f7:00:48:e5: 7c:cf:ab:f7:10:c4:59:55:35:af:57:8f:b0:f8:b1: e4:20:ae:c9:dd:17:11:b5:2f:70:4e:e7:89:ec:e1: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7C:7D:32:05:EF:2F:73:D3:AF:87:68:9F:6E:E3:27:B2:9C:67:E5 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/b3x9MgXvL3PTr4don27jJ7KcZ-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.18.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:6b:94:68:d0:3e:d1:f7:7e:35:09:88:7b:71:c5:c7:b4:b3: 82:3b:d7:eb:ab:5f:de:e0:a1:f0:60:8b:3d:94:14:79:e1:ce: 8d:d4:04:19:3b:0b:84:d2:ab:ba:25:cc:f4:bd:96:75:26:3a: 49:03:4b:49:76:fc:27:6e:95:8b:43:84:5f:35:b4:33:90:a7: fa:7e:14:6c:80:1d:b8:4c:30:b3:dc:c1:f7:fa:a1:8c:fd:e0: 86:09:81:a1:74:1e:b5:f8:12:d0:f7:2f:fe:b1:f0:41:06:78: 62:6c:f6:a7:a7:7d:a6:d7:3f:98:63:28:84:5f:96:96:7e:1b: 75:dc:88:f7:d3:7c:70:ef:67:79:5c:f1:f2:45:18:d3:73:68: ba:6e:5c:63:10:bf:ae:2a:1e:9a:be:d1:4a:c6:bc:c1:69:d2: 80:b2:7b:e7:c5:4c:3c:84:71:e0:fd:cc:fe:51:c4:ec:b3:26: 74:dd:0a:2c:8c:84:d6:b9:78:e5:6e:f9:f2:39:8e:c9:3c:ef: 41:13:7f:99:40:e5:16:d3:86:55:80:87:cb:60:36:a9:9d:76: 39:59:c6:6c:1f:e4:0c:a3:d1:4c:27:ac:5f:30:8e:11:73:75: ba:72:dd:2e:98:0e:fb:38:d3:bc:0c:b5:d4:dd:ac:d5:cc:8f: 28:d4:d6:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Z4RGATtEWM8/2JDt44XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjdjN2QzMjA1ZWYyZjczZDNhZjg3Njg5ZjZlZTMyN2IyOWM2N2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqPG89Z03F5tGfv+YGv6jkgGC6sw h/8o6aLi2cW8+AVus/SCEUwamE/3/QEjESfowOyRlAWVpCKYsFDCYejCME8AlKlm 2qMosqM8Vn35RlRwmeMnNOyjIzKYrBW6TpeTzPqoY1RnFb1Ur+xJPEcmSjAdvJXv DPKC7CB4PaPJQEbSNLi6/PBjL+fVYYNiBk38rBpYaf281HslQlG1yN1bFZxbBG0y G7nEkUt6f1myG7vo/KZm/dkxEFiT7GNHg8lSfxebwxf8DVjbHVVXpgKYbsGpVn8g r6EHZEsJavcASOV8z6v3EMRZVTWvV4+w+LHkIK7J3RcRtS9wTueJ7OGlewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG98fTIF7y9z06+HaJ9u4yeynGflMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvYjN4OU1nWHZMM1BUcjRkb24yN2pKN0tjWi1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk+oSMA0G CSqGSIb3DQEBCwUAA4IBAQALa5Ro0D7R9341CYh7ccXHtLOCO9frq1/e4KHwYIs9 lBR54c6N1AQZOwuE0qu6Jcz0vZZ1JjpJA0tJdvwnbpWLQ4RfNbQzkKf6fhRsgB24 TDCz3MH3+qGM/eCGCYGhdB61+BLQ9y/+sfBBBnhibPanp32m1z+YYyiEX5aWfht1 3Ij303xw72d5XPHyRRjTc2i6blxjEL+uKh6avtFKxrzBadKAsnvnxUw8hHHg/cz+ UcTssyZ03QosjITWuXjlbvnyOY7JPO9BE3+ZQOUW04ZVgIfLYDapnXY5WcZsH+QM o9FMJ6xfMI4Rc3W6ct0umA77ONO8DLXU3azVzI8o1NZT -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:59 2026 by rpki-client