This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3hU7jV2R4KxJUVs3apKaWSHgZEU.roa File: 3hU7jV2R4KxJUVs3apKaWSHgZEU.roa (raw, json) Hash identifier: Sazr3X4fqzP0deNoCnNq9ftmkS0yAO4sk6wqjs70zmA= Subject key identifier: DE:15:3B:8D:5D:91:E0:AC:49:51:5B:37:6A:92:9A:59:21:E0:64:45 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB29CDA1D8E6382CB3D162182B0724 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3hU7jV2R4KxJUVs3apKaWSHgZEU.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33487 IP address blocks: 37.202.198.0/24 maxlen: 24 151.240.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:29:cd:a1:d8:e6:38:2c:b3:d1:62:18:2b:07:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de153b8d5d91e0ac49515b376a929a5921e06445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:5e:41:8e:12:4a:31:84:e0:33:c7:7a:c7: b8:41:8a:b9:83:61:55:bf:c3:9a:36:ad:12:65:1a: 7e:e7:af:72:6c:2a:8b:98:7d:b5:04:9c:e5:7e:0a: 5e:31:f1:11:0f:83:39:05:86:73:17:f9:8f:80:74: 21:33:49:ba:ac:1b:3c:85:80:60:f8:c7:49:9e:8f: 22:05:15:b4:37:ef:92:8f:db:8c:57:77:9f:cc:4b: 04:7f:66:7c:7b:e3:82:13:20:ab:5e:69:33:e6:ac: c2:4c:07:56:81:3a:b4:58:d2:7f:61:ae:e8:ee:c6: 00:3f:aa:e6:20:b7:98:e0:ff:6a:95:4c:2c:30:2c: a1:62:c5:05:62:c1:f7:32:e7:7f:62:9d:49:7e:0c: 41:a6:11:8b:5b:91:dd:b2:45:d1:1b:43:c2:d5:b5: 39:56:73:48:ff:87:1a:28:29:30:a3:96:3c:4e:e2: 8a:32:03:95:7e:a2:7e:92:9b:1f:2e:4a:ae:27:08: 0f:b5:1c:a9:67:77:37:5d:4d:8b:ce:6a:9e:3e:58: fd:b3:67:5a:35:25:7e:e4:d0:9d:15:8d:54:89:52: d5:d4:dd:d4:b6:ca:d1:eb:d3:cc:0e:f8:c5:e9:38: 1c:fb:3c:e1:bd:9e:3c:17:bd:0a:9b:ec:ef:c3:a1: dd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:15:3B:8D:5D:91:E0:AC:49:51:5B:37:6A:92:9A:59:21:E0:64:45 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3hU7jV2R4KxJUVs3apKaWSHgZEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.198.0/24 151.240.75.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:f8:14:26:dc:af:86:53:48:d9:96:04:df:7e:99:30:fb:2b: 82:61:88:6d:f2:95:85:15:10:d9:70:1b:a2:53:26:93:d2:b7: 1e:f6:90:f5:1f:a4:cd:76:ae:c3:bf:cf:b5:60:15:db:e2:eb: 1a:b5:19:fe:cc:c4:bb:fe:05:95:8e:5a:90:0c:ac:20:7a:1b: 15:db:0e:c3:49:d9:e4:cf:2b:e0:71:0c:6d:cf:1a:31:06:13: 66:42:e0:9e:de:3f:f4:8f:3d:59:84:18:fc:a2:1e:15:91:c6: 5e:91:34:0d:6b:a7:90:78:cf:f5:76:77:f4:fc:37:22:bb:bc: 87:f3:4a:78:88:29:22:04:2d:33:64:1a:d3:30:d2:e2:86:d1: b7:ca:bb:62:96:ee:9b:91:17:1a:75:39:37:86:bb:24:3d:21: 50:de:c3:26:d6:dc:23:0d:9d:b9:40:8f:49:65:a2:e4:0d:c3: aa:f3:4c:b1:b7:dd:1b:21:e7:a1:90:d9:b1:95:79:f0:ed:3a: 31:58:6b:e8:4f:e0:9d:ae:c4:c5:d4:e8:93:3b:13:ef:de:2f: 88:41:36:85:4c:1e:b9:bb:04:32:f7:cc:d0:11:71:11:75:69: c4:20:35:8f:2d:fa:f9:35:99:bc:01:12:08:71:ee:24:51:0c: 83:29:25:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yynNodjmOCyz0WIYKwckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTE1M2I4ZDVkOTFlMGFjNDk1MTViMzc2YTkyOWE1OTIxZTA2NDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6xeQY4SSjGE4DPHese4QYq5g2FV v8OaNq0SZRp+569ybCqLmH21BJzlfgpeMfERD4M5BYZzF/mPgHQhM0m6rBs8hYBg +MdJno8iBRW0N++Sj9uMV3efzEsEf2Z8e+OCEyCrXmkz5qzCTAdWgTq0WNJ/Ya7o 7sYAP6rmILeY4P9qlUwsMCyhYsUFYsH3Mud/Yp1JfgxBphGLW5HdskXRG0PC1bU5 VnNI/4caKCkwo5Y8TuKKMgOVfqJ+kpsfLkquJwgPtRypZ3c3XU2LzmqePlj9s2da NSV+5NCdFY1UiVLV1N3UtsrR69PMDvjF6Tgc+zzhvZ48F70Km+zvw6HdvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN4VO41dkeCsSVFbN2qSmlkh4GRFMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvM2hVN2pWMlI0S3hKVVZzM2FwS2FXU0hnWkVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrGAwQA l/BLMA0GCSqGSIb3DQEBCwUAA4IBAQBs+BQm3K+GU0jZlgTffpkw+yuCYYht8pWF FRDZcBuiUyaT0rce9pD1H6TNdq7Dv8+1YBXb4usatRn+zMS7/gWVjlqQDKwgehsV 2w7DSdnkzyvgcQxtzxoxBhNmQuCe3j/0jz1ZhBj8oh4VkcZekTQNa6eQeM/1dnf0 /Dciu7yH80p4iCkiBC0zZBrTMNLihtG3yrtilu6bkRcadTk3hrskPSFQ3sMm1twj DZ25QI9JZaLkDcOq80yxt90bIeehkNmxlXnw7ToxWGvoT+CdrsTF1OiTOxPv3i+I QTaFTB65uwQy98zQEXERdWnEIDWPLfr5NZm8ARIIce4kUQyDKSXR -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:57 2026 by rpki-client