This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/3Sa9Kx4jBDmo5jtW7GaM0_gfhKA.roa File: 3Sa9Kx4jBDmo5jtW7GaM0_gfhKA.roa (raw, json) Hash identifier: /sVeW84q9rhPewHjLVxPlH+fof763wHK2dWeimWhb68= Subject key identifier: DD:26:BD:2B:1E:23:04:39:A8:E6:3B:56:EC:66:8C:D3:F8:1F:84:A0 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6BD0284F73C4DE9D3706A3C139268 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/3Sa9Kx4jBDmo5jtW7GaM0_gfhKA.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214975 IP address blocks: 109.248.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bd:02:84:f7:3c:4d:e9:d3:70:6a:3c:13:92:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd26bd2b1e230439a8e63b56ec668cd3f81f84a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:bb:e9:32:0a:96:c3:45:22:c3:49:e0:d4: 41:59:e6:c8:e7:ef:de:66:74:6a:aa:91:cf:61:fa: 69:9e:97:07:9f:84:d3:f9:5e:32:c5:c0:0b:f5:91: db:a8:1b:f6:93:1f:40:a9:c9:17:55:57:1d:eb:06: e9:24:a5:f6:71:f9:94:f7:e0:ae:17:38:d9:d8:c8: 4e:69:72:d7:11:69:af:5f:2e:2e:eb:4b:71:b5:c0: 12:7f:1f:e4:63:fc:32:5a:4d:d1:f7:2d:1e:ff:54: e3:77:09:65:6a:ea:89:59:bf:77:80:99:14:f7:32: 20:9f:d4:9d:88:c5:1b:09:6b:e6:cd:18:97:ab:9e: 41:19:55:b8:01:fa:4f:2a:ab:d7:ec:9f:94:ce:5c: fd:46:c0:aa:e3:6d:a2:f1:9e:f5:10:b3:e9:4d:ff: 5f:4c:4f:07:12:54:de:86:dc:c7:8d:6a:16:a2:aa: d4:e1:fb:18:74:cf:29:48:ee:1f:83:d5:2b:d4:49: b9:ea:a0:30:13:a3:6c:16:79:eb:d1:6e:70:a4:fc: b6:ad:d1:ed:ad:6f:00:4f:a0:dc:83:68:50:a2:14: 97:62:4f:55:56:e0:6d:07:bb:db:68:d1:51:15:c0: 08:a2:d7:10:74:9c:6a:9c:31:74:49:72:c9:b1:55: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:26:BD:2B:1E:23:04:39:A8:E6:3B:56:EC:66:8C:D3:F8:1F:84:A0 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/3Sa9Kx4jBDmo5jtW7GaM0_gfhKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.248.47.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:75:4c:53:c5:26:1d:57:9e:52:94:e3:40:68:cd:82:72:79: e7:a8:c7:50:54:77:cb:7c:4b:14:b1:a8:60:b5:94:76:29:e6: a5:74:cb:59:6b:a8:6c:f7:e4:79:b1:d1:d5:35:c2:2f:e6:58: 1b:8e:9f:fa:9c:78:09:be:6c:22:f8:11:76:7c:38:ef:ab:80: ce:57:57:15:ac:16:38:fc:d6:89:11:3a:38:e1:c0:a0:b6:46: 0b:52:6d:87:59:a5:dc:e2:b1:43:d8:43:81:70:b6:06:24:74: fd:fa:aa:3c:b9:ff:f6:0c:85:0d:a5:9e:5d:53:ee:63:05:34: 37:b7:cc:a9:ee:a1:21:19:71:11:b3:61:65:d3:eb:6f:15:7c: 2a:f7:ed:35:98:0b:e5:7b:7b:83:cc:fc:a0:fe:d0:b1:ee:eb: ff:71:c9:c6:42:ca:04:f7:a1:a7:95:eb:47:fa:8d:51:ea:32: b7:cc:a2:4a:29:45:e9:58:c6:19:57:de:c0:40:a4:fb:84:c8: d3:f2:2c:49:a7:5b:39:aa:19:05:bd:5c:d6:b6:43:f8:a2:49: 20:8f:d1:3f:b2:31:99:d1:2f:79:b5:7e:f0:28:68:ef:4d:c7: 19:cb:31:55:ca:db:e2:c5:fb:18:88:c8:9e:05:24:d7:8b:6e: e3:33:94:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xr0ChPc8TenTcGo8E5JoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDI2YmQyYjFlMjMwNDM5YThlNjNiNTZlYzY2OGNkM2Y4MWY4NGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEe76TIKlsNFIsNJ4NRBWebI5+/e ZnRqqpHPYfppnpcHn4TT+V4yxcAL9ZHbqBv2kx9AqckXVVcd6wbpJKX2cfmU9+Cu FzjZ2MhOaXLXEWmvXy4u60txtcASfx/kY/wyWk3R9y0e/1TjdwllauqJWb93gJkU 9zIgn9SdiMUbCWvmzRiXq55BGVW4AfpPKqvX7J+Uzlz9RsCq422i8Z71ELPpTf9f TE8HElTehtzHjWoWoqrU4fsYdM8pSO4fg9Ur1Em56qAwE6NsFnnr0W5wpPy2rdHt rW8AT6Dcg2hQohSXYk9VVuBtB7vbaNFRFcAIotcQdJxqnDF0SXLJsVUIPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN0mvSseIwQ5qOY7VuxmjNP4H4SgMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvM1NhOUt4NGpCRG1vNWp0VzdHYU0wX2dmaEtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbfgvMA0G CSqGSIb3DQEBCwUAA4IBAQAPdUxTxSYdV55SlONAaM2CcnnnqMdQVHfLfEsUsahg tZR2KealdMtZa6hs9+R5sdHVNcIv5lgbjp/6nHgJvmwi+BF2fDjvq4DOV1cVrBY4 /NaJETo44cCgtkYLUm2HWaXc4rFD2EOBcLYGJHT9+qo8uf/2DIUNpZ5dU+5jBTQ3 t8yp7qEhGXERs2Fl0+tvFXwq9+01mAvle3uDzPyg/tCx7uv/ccnGQsoE96GnletH +o1R6jK3zKJKKUXpWMYZV97AQKT7hMjT8ixJp1s5qhkFvVzWtkP4okkgj9E/sjGZ 0S95tX7wKGjvTccZyzFVytvixfsYiMieBSTXi27jM5R3 -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:42 2026 by rpki-client