This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/3j6WlgdxqAXoRQPRjR6UJD1LhPw.roa File: 3j6WlgdxqAXoRQPRjR6UJD1LhPw.roa (raw, json) Hash identifier: T1exYoW+fjUwfB54PefmCuoIsw95ypDAm+V+z9pSMEQ= Subject key identifier: DE:3E:96:96:07:71:A8:05:E8:45:03:D1:8D:1E:94:24:3D:4B:84:FC Certificate issuer: /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79 Certificate serial: 019B797F028B327FF440799D4A5E4AAB8E1F Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/3j6WlgdxqAXoRQPRjR6UJD1LhPw.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198904 IP address blocks: 5.32.184.0/21 maxlen: 21 5.32.184.0/22 maxlen: 22 5.32.184.0/24 maxlen: 24 5.32.185.0/24 maxlen: 24 5.32.186.0/24 maxlen: 24 5.32.187.0/24 maxlen: 24 5.32.188.0/22 maxlen: 22 5.32.188.0/24 maxlen: 24 5.32.189.0/24 maxlen: 24 5.32.190.0/24 maxlen: 24 5.32.191.0/24 maxlen: 24 2a01:6ec0::/32 maxlen: 32 2a01:6ec0::/36 maxlen: 36 2a01:6ec0::/48 maxlen: 48 2a01:6ec0:1000::/36 maxlen: 36 2a01:6ec0:2000::/36 maxlen: 36 2a01:6ec0:3000::/36 maxlen: 36 2a01:6ec0:4000::/36 maxlen: 36 2a01:6ec0:5000::/36 maxlen: 36 2a01:6ec0:6000::/36 maxlen: 36 2a01:6ec0:7000::/36 maxlen: 36 2a01:6ec0:8000::/36 maxlen: 36 2a01:6ec0:9000::/36 maxlen: 36 2a01:6ec0:a000::/36 maxlen: 36 2a01:6ec0:b000::/36 maxlen: 36 2a01:6ec0:c000::/36 maxlen: 36 2a01:6ec0:d000::/36 maxlen: 36 2a01:6ec0:e000::/36 maxlen: 36 2a01:6ec0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:02:8b:32:7f:f4:40:79:9d:4a:5e:4a:ab:8e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79 Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de3e96960771a805e84503d18d1e94243d4b84fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:52:db:4c:31:84:75:a9:21:dc:81:0e:c9:5a: 98:2d:03:73:5f:cc:c7:c5:58:e9:60:cd:91:8d:bc: ce:aa:44:4b:93:7d:bf:ec:13:0e:e6:e8:3a:c7:5b: 79:b7:4e:9f:53:3b:58:dd:bf:79:12:c9:06:dc:3c: e8:c7:d4:0f:5e:78:0c:a8:36:a5:21:e1:26:4e:b6: b9:25:1f:09:d0:00:d3:44:7f:22:ea:97:a4:ae:82: 1a:f1:b7:bf:03:e8:93:4a:18:08:f0:91:47:00:aa: 96:95:19:83:1a:d3:45:a8:09:4f:3b:a8:5b:76:f7: bc:93:63:cf:62:24:b5:c2:93:06:2d:59:03:8b:cd: 44:e0:80:b2:b4:68:44:ac:c1:f1:90:7b:f9:01:18: 53:63:b6:17:cd:ae:88:d2:ac:5b:ef:59:b1:de:37: 32:51:7c:15:d4:c2:28:4d:b7:68:fb:8e:47:b3:d6: 8b:94:b9:48:15:05:4c:8a:8f:bc:4e:26:a9:8e:73: 8e:74:25:dd:c3:b6:e0:41:49:b2:14:2b:6a:5c:2b: d1:c4:85:c1:61:ae:4c:37:f9:09:56:f7:3c:a3:9c: 1c:2a:6c:fb:d3:e1:0d:df:18:7b:95:de:00:76:1b: d3:2c:23:4b:d0:81:81:0f:80:fd:e6:5e:5c:90:a3: c6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3E:96:96:07:71:A8:05:E8:45:03:D1:8D:1E:94:24:3D:4B:84:FC X509v3 Authority Key Identifier: keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/3j6WlgdxqAXoRQPRjR6UJD1LhPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.32.184.0/21 IPv6: 2a01:6ec0::/32 Signature Algorithm: sha256WithRSAEncryption 47:d8:0d:e0:49:ee:2f:7e:2a:1a:b9:6a:7d:66:bf:b7:4d:db: 94:3e:15:f9:8b:32:ab:5c:38:89:19:44:96:97:2e:54:27:17: 89:f6:d5:b4:e3:e5:9d:31:5d:47:19:e5:39:99:c0:cf:08:df: ca:7d:84:c8:51:38:42:4b:9c:b3:f8:08:36:a7:93:f9:92:92: af:b7:7e:d6:9b:d7:20:71:00:c5:6c:4d:9d:f4:35:09:3f:25: d8:31:bf:47:90:a3:5d:dd:36:24:c8:3a:3f:0f:18:38:b0:7e: 20:55:10:c5:44:64:ae:ff:ee:69:86:fa:d4:c8:f7:50:87:0e: e9:81:3e:e5:1c:dd:d3:3a:b4:b7:9b:51:78:df:a4:29:2b:86: 25:42:28:74:8f:45:e1:fc:e7:02:c7:48:d6:95:00:33:10:74: f9:8d:b1:63:bd:bb:11:22:dc:44:11:cd:e8:15:2f:d4:5c:34: b5:41:c3:aa:f0:81:b1:ae:6d:56:03:86:b5:c0:12:bd:51:9a: e1:f2:d7:09:0b:69:16:3e:db:85:9e:55:ac:a4:cc:26:1a:87: af:15:7d:3e:f1:19:79:55:1b:92:85:d8:c6:47:40:6c:32:19: 3e:70:e5:16:4f:f5:21:0b:91:66:de:e8:b3:29:50:43:d4:88: 9b:7f:80:b8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fwKLMn/0QHmdSl5Kq44fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjA5M2JiOGU4YWQxMWM0YzgzNGVkZmQyZGY1NGQ0MWNi NDlmNzkwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTNlOTY5NjA3NzFhODA1ZTg0NTAzZDE4ZDFlOTQyNDNkNGI4NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VLbTDGEdakh3IEOyVqYLQNzX8zH xVjpYM2RjbzOqkRLk32/7BMO5ug6x1t5t06fUztY3b95EskG3Dzox9QPXngMqDal IeEmTra5JR8J0ADTRH8i6pekroIa8be/A+iTShgI8JFHAKqWlRmDGtNFqAlPO6hb dve8k2PPYiS1wpMGLVkDi81E4ICytGhErMHxkHv5ARhTY7YXza6I0qxb71mx3jcy UXwV1MIoTbdo+45Hs9aLlLlIFQVMio+8TiapjnOOdCXdw7bgQUmyFCtqXCvRxIXB Ya5MN/kJVvc8o5wcKmz70+EN3xh7ld4AdhvTLCNL0IGBD4D95l5ckKPG6QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN4+lpYHcagF6EUD0Y0elCQ9S4T8MB8GA1UdIwQY MBaAFEnwk7uOitEcTINO39LfVNQctJ95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZDVHU0NkswUnhNZzA3ZjB0OVUxQnkwbjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80ZmZlOTItMDBjZS00ZmFhLTg4NWMt ZTk2MTdkNjZhNzRiLzEvM2o2V2xnZHhxQVhvUlFQUmpSNlVKRDFMaFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS80ZmZlOTItMDBjZS00ZmFhLTg4NWMtZTk2MTdkNjZhNzRi LzEvU2ZDVHU0NkswUnhNZzA3ZjB0OVUxQnkwbjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDBSC4MA0E AgACMAcDBQAqAW7AMA0GCSqGSIb3DQEBCwUAA4IBAQBH2A3gSe4vfioauWp9Zr+3 TduUPhX5izKrXDiJGUSWly5UJxeJ9tW04+WdMV1HGeU5mcDPCN/KfYTIUThCS5yz +Ag2p5P5kpKvt37Wm9cgcQDFbE2d9DUJPyXYMb9HkKNd3TYkyDo/Dxg4sH4gVRDF RGSu/+5phvrUyPdQhw7pgT7lHN3TOrS3m1F436QpK4YlQih0j0Xh/OcCx0jWlQAz EHT5jbFjvbsRItxEEc3oFS/UXDS1QcOq8IGxrm1WA4a1wBK9UZrh8tcJC2kWPtuF nlWspMwmGoevFX0+8Rl5VRuShdjGR0BsMhk+cOUWT/UhC5Fm3uizKVBD1Iibf4C4 -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:07 2026 by rpki-client