This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/3MFj15oSeUJYuJbY2U542UoSXGM.roa File: 3MFj15oSeUJYuJbY2U542UoSXGM.roa (raw, json) Hash identifier: j9Y9LVF9WUhE5Tw8LMdWTvxog1CGJJ1rf8AUNlTnbFI= Subject key identifier: DC:C1:63:D7:9A:12:79:42:58:B8:96:D8:D9:4E:78:D9:4A:12:5C:63 Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e Certificate serial: 019B7D5C9EEE90D0D539EEC3366D9E5B3548 Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/3MFj15oSeUJYuJbY2U542UoSXGM.roa Signing time: Fri 02 Jan 2026 06:19:40 +0000 ROA not before: Fri 02 Jan 2026 06:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208972 IP address blocks: 46.235.14.0/24 maxlen: 24 178.210.180.0/24 maxlen: 24 217.70.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9e:ee:90:d0:d5:39:ee:c3:36:6d:9e:5b:35:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e Validity Not Before: Jan 2 06:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcc163d79a12794258b896d8d94e78d94a125c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:a4:0e:f9:b5:1a:47:e2:1c:98:bf:93:03: 5b:f0:15:57:6e:7d:94:29:b0:18:46:43:9e:62:0d: 25:c3:ab:58:2d:3e:54:30:d3:f0:00:ef:62:e0:00: 56:82:4d:59:80:6c:c7:d5:77:38:df:5b:b3:d3:3f: be:57:e4:2d:5e:36:8f:f2:36:cf:9c:65:b9:68:65: 17:19:f1:57:81:9f:1e:c6:32:06:53:fd:e4:7e:61: 01:7f:60:6a:c8:8d:1e:4c:fb:52:72:6b:c0:df:fc: 6d:34:1b:7f:41:19:f7:8f:24:20:a7:43:66:bc:ac: 68:d8:a6:72:22:10:4f:f8:3c:63:a3:85:e8:73:31: 75:65:0f:d3:cd:51:85:0b:b2:f0:fb:07:99:2e:f7: 1e:9f:c2:ff:6c:b8:87:3d:21:7b:63:50:f7:cd:c8: 68:ee:04:e1:37:f1:3e:f8:61:91:58:5f:62:aa:15: ae:bf:7e:a3:8e:8d:c4:f0:03:04:08:f1:15:8e:f4: c2:33:1c:70:87:5c:9f:5b:38:d2:b3:0e:f3:60:db: 66:8f:52:d7:30:ec:a9:2e:5a:0e:04:a2:7c:39:21: f4:a2:13:0b:b6:21:eb:7c:6f:d7:cd:70:99:a5:01: 50:45:ee:99:07:04:f2:af:97:a2:84:67:70:f1:61: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C1:63:D7:9A:12:79:42:58:B8:96:D8:D9:4E:78:D9:4A:12:5C:63 X509v3 Authority Key Identifier: keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/3MFj15oSeUJYuJbY2U542UoSXGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.14.0/24 178.210.180.0/24 217.70.11.0/24 Signature Algorithm: sha256WithRSAEncryption 90:73:c6:41:c1:1a:74:ab:e6:56:ff:2a:d9:bc:da:bc:53:93: cf:19:98:24:83:c5:a3:e8:b2:c3:f9:cb:a9:ea:23:ce:f5:25: 88:90:bd:8f:99:8e:ed:95:b9:fe:8b:97:5e:3c:e4:77:c4:9c: 99:fb:98:e3:03:53:d4:d2:a0:a6:d1:2e:05:aa:af:f7:7c:00: 1d:43:e7:9a:6d:eb:f0:52:fb:b6:30:ee:31:af:09:98:de:73: e7:22:25:61:df:b0:c7:63:12:c1:09:31:d9:d9:25:54:8a:79: 90:a9:aa:01:4c:46:e3:88:b6:c6:8d:b9:a9:ed:c7:1b:a2:03: 44:be:da:01:14:4e:29:15:ff:d1:1b:b4:99:b2:f8:3c:57:00: 47:c2:9b:dc:0d:a6:64:21:82:ba:be:07:d5:2e:55:60:57:56: 0b:07:24:01:86:08:93:6c:e3:d5:7e:21:a5:50:eb:11:01:40: 6e:b7:3c:5d:b3:0a:20:ec:33:68:ff:43:b4:ce:59:47:26:06: 30:7a:96:1d:99:7a:11:a5:6a:bf:93:52:00:3e:c0:27:f9:cb: d1:6a:a5:ca:a3:19:9c:67:af:4f:50:6c:b8:f0:34:bf:f0:42: c5:2d:73:6b:f4:cf:57:4b:24:79:1f:5d:42:45:14:40:2b:2f: 98:a1:22:92 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XJ7ukNDVOe7DNm2eWzVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZjFiMjJiMjA1NDUwMmJmZDM4ODkxMzgyOTExMDNkODNi NmE1MGUwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2MxNjNkNzlhMTI3OTQyNThiODk2ZDhkOTRlNzhkOTRhMTI1YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHSkDvm1GkfiHJi/kwNb8BVXbn2U KbAYRkOeYg0lw6tYLT5UMNPwAO9i4ABWgk1ZgGzH1Xc431uz0z++V+QtXjaP8jbP nGW5aGUXGfFXgZ8exjIGU/3kfmEBf2BqyI0eTPtScmvA3/xtNBt/QRn3jyQgp0Nm vKxo2KZyIhBP+Dxjo4XoczF1ZQ/TzVGFC7Lw+weZLvcen8L/bLiHPSF7Y1D3zcho 7gThN/E++GGRWF9iqhWuv36jjo3E8AMECPEVjvTCMxxwh1yfWzjSsw7zYNtmj1LX MOypLloOBKJ8OSH0ohMLtiHrfG/XzXCZpQFQRe6ZBwTyr5eihGdw8WFafwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNzBY9eaEnlCWLiW2NlOeNlKElxjMB8GA1UdIwQY MBaAFKPxsisgVFAr/TiJE4KRED2DtqUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQt MjRkMjcyY2UxMWUzLzEvM01GajE1b1NlVUpZdUpiWTJVNTQyVW9TWEdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQtMjRkMjcyY2UxMWUz LzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALusOAwQA stK0AwQA2UYLMA0GCSqGSIb3DQEBCwUAA4IBAQCQc8ZBwRp0q+ZW/yrZvNq8U5PP GZgkg8Wj6LLD+cup6iPO9SWIkL2PmY7tlbn+i5dePOR3xJyZ+5jjA1PU0qCm0S4F qq/3fAAdQ+eabevwUvu2MO4xrwmY3nPnIiVh37DHYxLBCTHZ2SVUinmQqaoBTEbj iLbGjbmp7ccbogNEvtoBFE4pFf/RG7SZsvg8VwBHwpvcDaZkIYK6vgfVLlVgV1YL ByQBhgiTbOPVfiGlUOsRAUButzxdswog7DNo/0O0zllHJgYwepYdmXoRpWq/k1IA PsAn+cvRaqXKoxmcZ69PUGy48DS/8ELFLXNr9M9XSyR5H11CRRRAKy+YoSKS -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:21 2026 by rpki-client