This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3-5cXi68-qSm19-cw47NGAFOvm8.roa File: 3-5cXi68-qSm19-cw47NGAFOvm8.roa (raw, json) Hash identifier: XrRH7OLHbaRdmy5YCkOe6Qv7KHjP22uCrnuGqMCfIPc= Subject key identifier: DF:EE:5C:5E:2E:BC:FA:A4:A6:D7:DF:9C:C3:8E:CD:18:01:4E:BE:6F Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDE657388B47471647BA6230A80791 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3-5cXi68-qSm19-cw47NGAFOvm8.roa Signing time: Fri 02 Jan 2026 04:18:44 +0000 ROA not before: Fri 02 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200131 IP address blocks: 176.57.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e6:57:38:8b:47:47:16:47:ba:62:30:a8:07:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfee5c5e2ebcfaa4a6d7df9cc38ecd18014ebe6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:79:a5:c9:62:c3:fb:9f:5e:5f:0f:d5:08:bf: a5:50:d2:a0:90:81:b9:71:e2:86:c5:cb:52:80:1f: 63:61:dd:5b:3d:3b:9e:d6:0b:84:d8:3c:fc:a8:55: 7b:06:55:b3:72:8b:9b:70:f1:d3:da:db:b7:04:d6: 75:70:b0:9d:d7:00:fb:68:04:96:cd:9c:35:7d:8d: c0:f6:b4:2e:29:4e:20:29:6c:13:46:a2:f0:15:8b: 98:53:73:f0:4b:3e:a6:7d:f2:c0:4b:46:a3:95:4d: 35:b3:a5:51:4c:dd:bc:56:03:a1:f1:b9:7f:e2:9f: 6e:16:58:f5:2e:61:51:e4:03:cc:1b:da:72:96:ea: a7:a8:6c:ed:01:e5:d6:36:30:77:e9:9d:3a:6d:65: ab:40:e2:0e:98:24:3a:0f:44:55:b7:60:91:ce:53: 9e:83:7c:a3:be:85:af:69:85:f0:48:06:18:e3:4b: 5e:62:13:e1:4f:76:5a:5f:a5:b2:30:d1:ec:e3:08: 7a:9e:5e:69:8f:8b:35:37:76:ad:46:e2:2a:fc:fe: 10:3a:3c:bc:bd:05:bc:8d:e5:94:13:3a:06:45:f9: 5e:c1:64:84:26:3a:e7:dd:c8:9b:ed:4d:13:ba:d7: 89:1b:43:5c:59:13:72:d3:ff:a6:6a:03:93:de:04: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EE:5C:5E:2E:BC:FA:A4:A6:D7:DF:9C:C3:8E:CD:18:01:4E:BE:6F X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3-5cXi68-qSm19-cw47NGAFOvm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.50.0/24 Signature Algorithm: sha256WithRSAEncryption 80:88:44:bb:2c:37:1e:2b:b9:82:63:dc:a3:70:bf:77:50:87: 9d:09:ac:75:2b:a3:88:c2:63:57:7f:84:5f:be:10:d9:ce:f8: 8a:6f:71:b3:99:55:0b:d5:1c:26:a2:ea:1c:9d:11:8b:d4:f2: 5c:48:2e:75:2b:41:9c:e0:36:59:d9:e8:d3:0e:b2:33:22:97: b5:73:2d:b2:08:ea:a3:fd:34:e4:2d:c8:95:96:3b:75:3f:33: 55:65:b7:f5:73:48:f6:40:d0:6e:a0:7e:57:50:7f:31:93:36: 8e:e1:a5:ea:ca:21:ae:1e:96:42:0f:2b:07:ba:56:40:d2:ec: 67:85:b8:08:73:7f:98:0c:21:34:79:d7:23:c9:3c:c4:f7:f5: 84:bc:4b:ab:fa:32:7f:d3:92:99:bc:cf:fd:55:11:e9:6f:94: 78:c3:bc:af:e1:7e:9e:8e:97:fe:27:2e:b9:93:07:29:21:ed: 24:b4:ec:73:3a:82:6d:10:12:7f:a2:1e:8e:50:1f:63:73:ed: 5f:41:e5:30:3f:7f:1e:26:38:f4:5c:5d:94:fc:70:69:33:dc: 69:a2:ea:80:e1:af:4b:e2:df:5f:c1:1a:94:f9:f9:d4:27:67: 0c:5c:4c:d2:e3:c8:29:e6:7c:8f:ab:28:4f:3a:a1:83:06:fc: d2:49:2e:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87eZXOItHRxZHumIwqAeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmVlNWM1ZTJlYmNmYWE0YTZkN2RmOWNjMzhlY2QxODAxNGViZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXmlyWLD+59eXw/VCL+lUNKgkIG5 ceKGxctSgB9jYd1bPTue1guE2Dz8qFV7BlWzcoubcPHT2tu3BNZ1cLCd1wD7aASW zZw1fY3A9rQuKU4gKWwTRqLwFYuYU3PwSz6mffLAS0ajlU01s6VRTN28VgOh8bl/ 4p9uFlj1LmFR5APMG9pyluqnqGztAeXWNjB36Z06bWWrQOIOmCQ6D0RVt2CRzlOe g3yjvoWvaYXwSAYY40teYhPhT3ZaX6WyMNHs4wh6nl5pj4s1N3atRuIq/P4QOjy8 vQW8jeWUEzoGRflewWSEJjrn3cib7U0TuteJG0NcWRNy0/+magOT3gQvnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/uXF4uvPqkptffnMOOzRgBTr5vMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvMy01Y1hpNjgtcVNtMTktY3c0N05HQUZPdm04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDkyMA0G CSqGSIb3DQEBCwUAA4IBAQCAiES7LDceK7mCY9yjcL93UIedCax1K6OIwmNXf4Rf vhDZzviKb3GzmVUL1RwmouocnRGL1PJcSC51K0Gc4DZZ2ejTDrIzIpe1cy2yCOqj /TTkLciVljt1PzNVZbf1c0j2QNBuoH5XUH8xkzaO4aXqyiGuHpZCDysHulZA0uxn hbgIc3+YDCE0edcjyTzE9/WEvEur+jJ/05KZvM/9VRHpb5R4w7yv4X6ejpf+Jy65 kwcpIe0ktOxzOoJtEBJ/oh6OUB9jc+1fQeUwP38eJjj0XF2U/HBpM9xpouqA4a9L 4t9fwRqU+fnUJ2cMXEzS48gp5nyPqyhPOqGDBvzSSS45 -----END CERTIFICATE-----Generated at Fri Jan 2 17:50:50 2026 by rpki-client