This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3Ds4zZAJUF0cjZhALuMpG22X0u0.roa File: 3Ds4zZAJUF0cjZhALuMpG22X0u0.roa (raw, json) Hash identifier: hdxLVTr432F0/Gc54vamOSEe48bayp1q0IVNTDC2i94= Subject key identifier: DC:3B:38:CD:90:09:50:5D:1C:8D:98:40:2E:E3:29:1B:6D:97:D2:ED Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB575777933DD2D33A626FD47C7FFC Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3Ds4zZAJUF0cjZhALuMpG22X0u0.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150249 IP address blocks: 151.242.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:57:57:77:93:3d:d2:d3:3a:62:6f:d4:7c:7f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc3b38cd9009505d1c8d98402ee3291b6d97d2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:d9:c1:a4:28:ca:3b:44:98:1b:9f:28:72: 9f:fa:b2:e0:fb:1c:87:9d:67:58:2f:0e:ef:96:2c: af:06:1f:45:cf:a1:6b:b1:cc:97:f6:b9:30:f5:61: 92:9e:4e:f0:88:a0:4f:9f:c3:4e:e2:ab:ff:e0:32: 26:99:5e:50:38:b2:89:15:f7:47:09:fd:2e:5d:61: 0e:b5:5b:c7:4d:8e:04:fc:7a:65:27:09:ff:85:f0: b9:90:40:34:dd:50:5c:04:2a:eb:ac:3f:36:4f:0b: b1:94:c8:fe:40:c9:cb:a2:54:ac:bc:f6:8a:0b:1e: 9b:9d:97:19:7b:84:d0:d4:d2:52:cb:75:a5:dd:7f: 00:90:d6:bd:da:07:7b:99:28:a8:3e:29:c8:51:90: d2:a2:ac:a5:71:eb:bb:af:3f:a6:eb:70:4a:60:da: 59:bd:56:bb:7c:68:33:45:48:2b:44:9a:bf:01:38: 7f:5d:d1:cf:e8:46:0f:99:a5:20:a9:6c:57:1c:97: 88:6e:9f:15:2a:5c:99:87:bd:97:e1:96:4c:73:65: d3:09:44:61:10:08:e7:dd:1f:40:98:64:4d:93:9d: 45:79:2a:8a:19:39:74:4e:ca:e1:a8:4d:dd:79:f3: 84:fe:28:f6:27:d7:9d:3a:c3:49:96:da:61:24:81: a7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3B:38:CD:90:09:50:5D:1C:8D:98:40:2E:E3:29:1B:6D:97:D2:ED X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3Ds4zZAJUF0cjZhALuMpG22X0u0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.133.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:c7:5d:f3:27:fa:5b:a9:1c:be:de:f9:c7:50:4b:b4:d0:0c: 2a:33:d9:d6:21:98:df:14:13:fc:bb:5e:60:46:ce:2e:f1:60: 01:b0:f4:f6:3c:59:9d:7e:bb:0f:6f:41:09:5e:59:68:5f:67: 79:04:19:82:27:ec:2f:84:d2:97:9f:f0:ab:f4:6d:f2:2d:ee: d3:07:7c:e2:65:8c:24:31:90:a9:e4:51:66:9c:8e:52:f6:e4: 3e:c3:a0:18:e0:3f:63:c2:2f:29:2d:55:2d:2b:e8:43:a0:3e: 94:7a:2d:88:b7:ad:f0:4a:71:f5:fd:c6:d9:8d:3b:65:ac:71: 1e:09:94:cb:55:95:3a:d7:99:fa:0c:00:cd:ba:74:1c:a8:18: b3:1d:fe:2e:67:02:72:34:5c:35:2d:ea:88:7b:a1:52:4e:fb: d3:43:67:ff:fa:b1:8c:d3:2d:e7:f4:36:30:05:b1:08:73:ea: c0:07:aa:8e:8b:2f:fc:7e:32:d9:ab:98:55:5b:82:c1:67:2a: 89:47:d6:8a:1c:b6:44:b9:c3:a1:6d:b5:2f:ec:e9:86:7d:b3: 60:ca:57:cd:8c:3c:22:8f:8e:0a:77:7b:82:e2:a1:ed:77:c7: 78:56:88:12:39:cd:81:49:8a:74:00:18:9d:d2:cf:17:6b:0b: d7:1d:86:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1dXd5M90tM6Ym/UfH/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzNiMzhjZDkwMDk1MDVkMWM4ZDk4NDAyZWUzMjkxYjZkOTdkMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDDZwaQoyjtEmBufKHKf+rLg+xyH nWdYLw7vliyvBh9Fz6FrscyX9rkw9WGSnk7wiKBPn8NO4qv/4DImmV5QOLKJFfdH Cf0uXWEOtVvHTY4E/HplJwn/hfC5kEA03VBcBCrrrD82TwuxlMj+QMnLolSsvPaK Cx6bnZcZe4TQ1NJSy3Wl3X8AkNa92gd7mSioPinIUZDSoqylceu7rz+m63BKYNpZ vVa7fGgzRUgrRJq/ATh/XdHP6EYPmaUgqWxXHJeIbp8VKlyZh72X4ZZMc2XTCURh EAjn3R9AmGRNk51FeSqKGTl0TsrhqE3defOE/ij2J9edOsNJltphJIGn/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNw7OM2QCVBdHI2YQC7jKRttl9LtMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvM0RzNHpaQUpVRjBjalpoQUx1TXBHMjJYMHUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/KFMA0G CSqGSIb3DQEBCwUAA4IBAQBdx13zJ/pbqRy+3vnHUEu00AwqM9nWIZjfFBP8u15g Rs4u8WABsPT2PFmdfrsPb0EJXlloX2d5BBmCJ+wvhNKXn/Cr9G3yLe7TB3ziZYwk MZCp5FFmnI5S9uQ+w6AY4D9jwi8pLVUtK+hDoD6Uei2It63wSnH1/cbZjTtlrHEe CZTLVZU615n6DADNunQcqBizHf4uZwJyNFw1LeqIe6FSTvvTQ2f/+rGM0y3n9DYw BbEIc+rAB6qOiy/8fjLZq5hVW4LBZyqJR9aKHLZEucOhbbUv7OmGfbNgylfNjDwi j44Kd3uC4qHtd8d4VogSOc2BSYp0ABid0s8XawvXHYYY -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:39 2026 by rpki-client