This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3wX5_oELwnZKbzg4rU8jo-jchOg.roa File: 3wX5_oELwnZKbzg4rU8jo-jchOg.roa (raw, json) Hash identifier: WDZhntrwbaZVH5RMCv/fMKnQSqTnAxgeXZwstaHkhV4= Subject key identifier: DF:05:F9:FE:81:0B:C2:76:4A:6F:38:38:AD:4F:23:A3:E8:DC:84:E8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB063B94EC717F01D716143E29CAC8 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3wX5_oELwnZKbzg4rU8jo-jchOg.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 151.244.194.0/24 maxlen: 24 151.244.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:06:3b:94:ec:71:7f:01:d7:16:14:3e:29:ca:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df05f9fe810bc2764a6f3838ad4f23a3e8dc84e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c6:41:7a:fc:92:61:e7:dd:e9:9b:ea:42:fe: b5:9b:1b:18:48:e5:8a:ec:03:f6:fb:0b:80:2e:6f: 8d:be:72:04:31:c5:f1:6d:76:ae:f9:ed:83:6b:b8: da:2d:c9:b8:21:b8:2e:e4:bb:c2:c4:69:a3:54:b6: a1:34:7d:64:43:1c:b3:5e:50:6c:8f:55:af:82:a3: 22:21:64:29:5e:9b:71:8b:58:37:89:44:ab:9f:b8: 54:01:fe:b1:01:36:cb:50:83:3b:6f:60:b6:33:18: a6:ac:d2:e5:8d:d2:08:0e:8a:ed:b5:ad:66:b2:e7: e5:be:10:d9:22:9b:ab:9f:49:fe:61:85:62:43:81: 52:41:90:0b:17:fd:e8:76:7e:3d:14:b9:b9:b3:04: 3a:49:70:88:ee:45:36:2f:87:54:ad:22:f2:09:52: be:98:3b:73:52:3a:6d:f9:8c:3f:e1:d8:7a:6a:2d: b6:a7:55:3b:01:41:25:8c:de:19:80:ec:1f:36:87: c8:9e:59:44:d0:c8:49:da:c6:92:da:bd:9f:02:06: 8d:5d:6d:39:9c:35:f7:cd:a5:db:bc:69:ad:c3:24: 2c:7b:2d:8b:32:8d:bf:d9:af:01:22:a9:ec:92:ac: 58:e2:0c:a3:93:80:50:57:d2:86:5f:c7:be:aa:a2: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:05:F9:FE:81:0B:C2:76:4A:6F:38:38:AD:4F:23:A3:E8:DC:84:E8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3wX5_oELwnZKbzg4rU8jo-jchOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.194.0/23 Signature Algorithm: sha256WithRSAEncryption 87:7c:aa:37:a9:10:61:db:d5:c5:b9:a5:0a:26:13:b8:bb:09: 83:b4:74:93:8d:7f:30:2b:57:91:21:8e:0e:84:30:28:5d:8a: 51:18:c1:e6:0b:c5:62:50:17:a7:fb:64:44:fe:7e:05:39:28: a9:5c:f7:f7:09:e1:11:a0:52:7d:a3:77:44:4d:56:5a:80:5a: 73:ce:68:b7:83:41:4a:18:03:57:6c:1a:c6:17:c9:06:09:44: 74:e9:0a:a8:20:ef:99:ba:da:10:5c:20:70:8f:35:94:1b:d4: 5d:48:dc:04:bd:80:66:4c:90:a4:bd:0e:1e:e8:11:79:95:02: 31:55:4e:d3:6a:a6:aa:af:d4:0b:f6:f5:5f:f3:65:e4:b0:15: 11:7d:f4:c4:4a:37:cf:8b:7c:69:c7:9b:7c:0c:a4:4e:6b:69: 9f:31:ec:fb:f5:3c:21:18:4a:eb:b0:57:7d:48:76:b5:d1:61: 7f:c9:d2:47:f9:dc:a8:59:be:90:98:c9:36:66:da:2c:a0:87: bb:17:b8:1e:ea:e9:81:ba:7d:08:1a:f8:6b:7c:32:9e:e8:c7: ef:56:7f:48:71:6c:b5:05:46:24:b8:1d:56:3b:d0:ea:5b:06: c2:37:42:d6:ff:f9:12:51:fc:10:10:e9:fc:dc:80:7b:91:78: 01:df:2d:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ywY7lOxxfwHXFhQ+KcrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjA1ZjlmZTgxMGJjMjc2NGE2ZjM4MzhhZDRmMjNhM2U4ZGM4NGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsZBevySYefd6ZvqQv61mxsYSOWK 7AP2+wuALm+NvnIEMcXxbXau+e2Da7jaLcm4Ibgu5LvCxGmjVLahNH1kQxyzXlBs j1WvgqMiIWQpXptxi1g3iUSrn7hUAf6xATbLUIM7b2C2MximrNLljdIIDortta1m suflvhDZIpurn0n+YYViQ4FSQZALF/3odn49FLm5swQ6SXCI7kU2L4dUrSLyCVK+ mDtzUjpt+Yw/4dh6ai22p1U7AUEljN4ZgOwfNofInllE0MhJ2saS2r2fAgaNXW05 nDX3zaXbvGmtwyQsey2LMo2/2a8BIqnskqxY4gyjk4BQV9KGX8e+qqIW8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8F+f6BC8J2Sm84OK1PI6Po3IToMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvM3dYNV9vRUx3blpLYnpnNHJVOGpvLWpjaE9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/TCMA0G CSqGSIb3DQEBCwUAA4IBAQCHfKo3qRBh29XFuaUKJhO4uwmDtHSTjX8wK1eRIY4O hDAoXYpRGMHmC8ViUBen+2RE/n4FOSipXPf3CeERoFJ9o3dETVZagFpzzmi3g0FK GANXbBrGF8kGCUR06QqoIO+ZutoQXCBwjzWUG9RdSNwEvYBmTJCkvQ4e6BF5lQIx VU7Taqaqr9QL9vVf82XksBURffTESjfPi3xpx5t8DKROa2mfMez79TwhGErrsFd9 SHa10WF/ydJH+dyoWb6QmMk2ZtosoIe7F7ge6umBun0IGvhrfDKe6MfvVn9IcWy1 BUYkuB1WO9DqWwbCN0LW//kSUfwQEOn83IB7kXgB3y2N -----END CERTIFICATE-----Generated at Thu Jan 8 00:11:49 2026 by rpki-client