This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3o-NkxvxgtzTB8Zn3wDkBdLMTMI.roa File: 3o-NkxvxgtzTB8Zn3wDkBdLMTMI.roa (raw, json) Hash identifier: tLgZUzp5X3xRf1MA6G/Bl5c0JVmUvLKr68hzCIybcV8= Subject key identifier: DE:8F:8D:93:1B:F1:82:DC:D3:07:C6:67:DF:00:E4:05:D2:CC:4C:C2 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB60A565E05DE58362034D85393FD3 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3o-NkxvxgtzTB8Zn3wDkBdLMTMI.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199524 IP address blocks: 37.202.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:60:a5:65:e0:5d:e5:83:62:03:4d:85:39:3f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de8f8d931bf182dcd307c667df00e405d2cc4cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:a1:8f:d9:9f:4e:67:07:bf:44:7f:c0:a0: 6c:5e:83:54:bf:a5:cc:01:47:99:8e:08:0e:8a:5f: 94:7e:06:0d:86:99:e9:43:c0:76:c0:0b:8a:cc:fb: d5:cd:ea:de:a4:82:a0:97:a5:ad:39:dc:9e:42:b8: 6f:3c:a9:90:7f:1e:a0:26:4f:25:8e:9a:84:b1:07: 4d:56:c7:e6:29:86:32:31:16:1b:25:95:b2:fb:10: 16:47:55:31:28:6e:11:ff:e8:6e:66:22:7e:94:2a: af:1a:65:a1:4f:11:c2:3a:dd:f7:ec:50:d2:44:1c: 3d:ee:f2:17:ce:0a:82:da:d3:96:bf:c3:71:ca:56: a4:13:42:c7:cd:c3:82:42:be:92:a6:b3:c3:a3:07: a8:60:c2:ca:50:50:73:b6:96:3a:6a:de:f0:d5:85: 63:94:1f:28:5c:7a:16:aa:61:0b:32:1c:ec:ff:6c: 1e:0c:ca:0c:4b:cd:9f:6a:e0:9b:38:e0:70:f3:38: 19:c6:9b:5f:6d:c0:06:0a:23:3e:a9:10:02:f6:c7: 8a:b5:1b:f0:0f:54:d1:9a:d8:26:42:74:59:8c:0c: 72:13:c1:15:23:84:3f:2f:cf:60:7d:d2:2c:96:ab: 5b:75:c3:8d:98:3a:e1:8f:36:5d:b7:47:b9:c1:44: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8F:8D:93:1B:F1:82:DC:D3:07:C6:67:DF:00:E4:05:D2:CC:4C:C2 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3o-NkxvxgtzTB8Zn3wDkBdLMTMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.196.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:80:59:fa:78:af:db:24:f0:df:f9:79:84:11:e9:a5:f5:4e: 98:eb:8e:0f:21:fd:db:b2:6b:d5:84:32:62:8f:53:35:73:40: ec:33:fc:af:df:21:a3:06:04:e3:8c:8d:34:52:42:3c:6f:37: 5b:4b:54:62:d9:88:55:e9:18:85:00:cb:69:d9:97:13:d3:46: fb:7b:ed:ba:52:44:5b:19:2d:40:31:65:3c:ec:40:6f:5d:0c: 62:24:9c:5b:30:ec:72:e1:ea:5d:90:c4:31:26:c3:4f:0c:06: 32:4d:65:93:b2:4f:eb:fb:c3:a8:ef:a7:38:17:b5:54:52:5b: 23:2b:12:38:85:81:93:d8:cb:c5:ec:36:ca:d3:60:9c:07:c2: d8:94:26:6d:79:8b:b2:bd:14:a3:5b:74:dc:25:62:aa:f3:c8: b3:04:e0:cf:1d:8c:db:79:b8:4d:b9:ce:54:5d:39:99:18:e1: b9:5d:ee:50:74:6e:1f:0d:99:df:1d:e5:fa:44:2c:6c:45:10: b3:2c:c1:ad:39:01:d8:e0:c0:68:a8:da:e8:61:a8:94:9e:3a: 3b:28:81:09:f9:65:b6:f8:b9:7b:6a:1f:89:ba:31:aa:d0:f0: e2:f8:76:d4:51:c7:0e:e4:22:d8:ac:32:1d:f4:06:54:11:3b: fa:d9:64:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2ClZeBd5YNiA02FOT/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZThmOGQ5MzFiZjE4MmRjZDMwN2M2NjdkZjAwZTQwNWQyY2M0Y2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqShj9mfTmcHv0R/wKBsXoNUv6XM AUeZjggOil+UfgYNhpnpQ8B2wAuKzPvVzerepIKgl6WtOdyeQrhvPKmQfx6gJk8l jpqEsQdNVsfmKYYyMRYbJZWy+xAWR1UxKG4R/+huZiJ+lCqvGmWhTxHCOt337FDS RBw97vIXzgqC2tOWv8NxylakE0LHzcOCQr6SprPDoweoYMLKUFBztpY6at7w1YVj lB8oXHoWqmELMhzs/2weDMoMS82fauCbOOBw8zgZxptfbcAGCiM+qRAC9seKtRvw D1TRmtgmQnRZjAxyE8EVI4Q/L89gfdIslqtbdcONmDrhjzZdt0e5wUSmSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN6PjZMb8YLc0wfGZ98A5AXSzEzCMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvM28tTmt4dnhndHpUQjhabjN3RGtCZExNVE1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrEMA0G CSqGSIb3DQEBCwUAA4IBAQCLgFn6eK/bJPDf+XmEEeml9U6Y644PIf3bsmvVhDJi j1M1c0DsM/yv3yGjBgTjjI00UkI8bzdbS1Ri2YhV6RiFAMtp2ZcT00b7e+26UkRb GS1AMWU87EBvXQxiJJxbMOxy4epdkMQxJsNPDAYyTWWTsk/r+8Oo76c4F7VUUlsj KxI4hYGT2MvF7DbK02CcB8LYlCZteYuyvRSjW3TcJWKq88izBODPHYzbebhNuc5U XTmZGOG5Xe5QdG4fDZnfHeX6RCxsRRCzLMGtOQHY4MBoqNroYaiUnjo7KIEJ+WW2 +Ll7ah+JujGq0PDi+HbUUccO5CLYrDId9AZUETv62WQA -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:28 2026 by rpki-client