This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/g3ftKCOekd6MZAoyD7J4SL4FblQ.roa File: g3ftKCOekd6MZAoyD7J4SL4FblQ.roa (raw, json) Hash identifier: s+hLkIL+pR6iQslHmvl1kgMv8MT83YoyoUr7i6yvI1M= Subject key identifier: 83:77:ED:28:23:9E:91:DE:8C:64:0A:32:0F:B2:78:48:BE:05:6E:54 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE450AD7B631D6F352100A85ACD453 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/g3ftKCOekd6MZAoyD7J4SL4FblQ.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 37.218.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:45:0a:d7:b6:31:d6:f3:52:10:0a:85:ac:d4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8377ed28239e91de8c640a320fb27848be056e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:0d:96:a3:32:06:fb:8a:aa:19:5a:db:34: d3:cc:aa:eb:8c:26:72:b1:68:98:b8:02:7c:59:24: 63:93:16:68:d1:66:2a:ff:a1:92:20:04:9a:42:cd: 22:fb:72:f4:a1:8a:b6:ad:70:2a:05:70:71:d9:6e: 41:30:1a:ba:2a:74:ec:53:83:2d:91:7b:bf:52:50: 23:ec:88:c3:a2:d3:6a:d3:91:1b:b3:1b:00:10:1f: 51:05:da:b0:88:73:7c:a7:d7:95:05:af:a3:a7:db: 9d:48:71:6a:c0:57:5d:22:55:03:c9:83:ba:96:4b: 88:46:3d:ec:e0:92:f3:da:2b:3b:37:00:cb:16:bf: ad:a4:b2:29:c4:bd:37:75:8e:ec:17:3d:6e:b7:ce: 3e:0c:46:c1:80:0f:07:9f:84:71:bb:5c:b1:0c:1b: d6:02:89:2e:25:e2:43:dc:d4:d1:f9:f8:21:6b:95: fa:a7:f0:c5:8a:06:21:ea:fa:10:e6:87:40:7f:61: 05:1a:01:26:64:18:15:2a:e4:ed:42:51:ae:72:b2: ff:2b:f1:a7:22:87:df:93:b2:2d:a3:24:03:f6:bc: 6a:68:7b:0a:67:2b:7a:56:ae:9d:1c:ff:a2:2e:6d: 33:59:5b:3b:2f:af:7d:4c:d0:56:22:c4:8f:be:7b: 3d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:77:ED:28:23:9E:91:DE:8C:64:0A:32:0F:B2:78:48:BE:05:6E:54 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/g3ftKCOekd6MZAoyD7J4SL4FblQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.218.208.0/21 Signature Algorithm: sha256WithRSAEncryption 36:4c:56:28:53:a5:39:5d:81:ba:b6:aa:88:b7:b9:95:b4:d6: fb:56:38:8a:11:dd:13:1c:74:4f:80:b6:5b:4d:df:83:15:2a: 00:53:8b:79:32:df:4c:8d:13:11:15:13:80:9f:9d:f3:66:0f: c6:89:dc:7d:99:25:f1:61:9d:1b:91:e5:b1:09:20:ff:d5:a7: 17:ce:02:1f:36:82:80:86:54:ab:e2:0b:d3:73:95:b4:3a:99: af:0c:98:b2:33:9f:17:b1:bc:4f:0b:ce:c3:4c:53:3f:8a:e9: 66:f8:93:a0:e7:7b:ba:46:0c:c4:21:da:89:69:9b:92:cf:01: 25:d8:83:5c:18:8c:4d:4e:50:eb:39:d1:26:c8:7c:a4:1e:4e: b4:cf:17:20:f7:9d:c5:e7:83:08:82:80:b1:85:70:63:83:26: 98:85:91:7e:29:04:f1:bf:26:07:e8:74:93:a5:63:b4:19:49: 8c:d9:51:58:de:d6:27:8d:23:94:eb:39:d3:24:63:52:0a:47: 9b:ee:fa:b9:d5:e7:01:e2:78:52:bf:54:4b:e8:35:fb:ad:45: 6b:ed:ea:42:69:16:88:3c:96:31:97:4d:7e:58:96:b8:00:bc: 91:29:b3:88:38:c5:20:01:59:b5:f3:61:90:08:8d:a9:71:5b: 66:68:63:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kUK17Yx1vNSEAqFrNRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzc3ZWQyODIzOWU5MWRlOGM2NDBhMzIwZmIyNzg0OGJlMDU2ZTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlUNlqMyBvuKqhla2zTTzKrrjCZy sWiYuAJ8WSRjkxZo0WYq/6GSIASaQs0i+3L0oYq2rXAqBXBx2W5BMBq6KnTsU4Mt kXu/UlAj7IjDotNq05EbsxsAEB9RBdqwiHN8p9eVBa+jp9udSHFqwFddIlUDyYO6 lkuIRj3s4JLz2is7NwDLFr+tpLIpxL03dY7sFz1ut84+DEbBgA8Hn4Rxu1yxDBvW AokuJeJD3NTR+fgha5X6p/DFigYh6voQ5odAf2EFGgEmZBgVKuTtQlGucrL/K/Gn Ioffk7ItoyQD9rxqaHsKZyt6Vq6dHP+iLm0zWVs7L699TNBWIsSPvns9WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIN37SgjnpHejGQKMg+yeEi+BW5UMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvZzNmdEtDT2VrZDZNWkFveUQ3SjRTTDRGYmxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJdrQMA0G CSqGSIb3DQEBCwUAA4IBAQA2TFYoU6U5XYG6tqqIt7mVtNb7VjiKEd0THHRPgLZb Td+DFSoAU4t5Mt9MjRMRFROAn53zZg/Gidx9mSXxYZ0bkeWxCSD/1acXzgIfNoKA hlSr4gvTc5W0OpmvDJiyM58XsbxPC87DTFM/iulm+JOg53u6RgzEIdqJaZuSzwEl 2INcGIxNTlDrOdEmyHykHk60zxcg953F54MIgoCxhXBjgyaYhZF+KQTxvyYH6HST pWO0GUmM2VFY3tYnjSOU6znTJGNSCkeb7vq51ecB4nhSv1RL6DX7rUVr7epCaRaI PJYxl01+WJa4ALyRKbOIOMUgAVm182GQCI2pcVtmaGNJ -----END CERTIFICATE-----Generated at Wed Jan 21 05:19:29 2026 by rpki-client