This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/3PqCBsnwrek6Q6n5klUn2vxcEVE.roa File: 3PqCBsnwrek6Q6n5klUn2vxcEVE.roa (raw, json) Hash identifier: SqGyC3AtR5IMiR3v88dUPZnBKw3fI3oEx2k+/NhUD6Y= Subject key identifier: DC:FA:82:06:C9:F0:AD:E9:3A:43:A9:F9:92:55:27:DA:FC:5C:11:51 Certificate issuer: /CN=4103292068ea3fb85bc5895379e20edbd0bc6506 Certificate serial: 019B7C80568450381AD561F9956A8D9B18AB Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/3PqCBsnwrek6Q6n5klUn2vxcEVE.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58084 IP address blocks: 37.221.184.0/24 maxlen: 24 37.221.185.0/24 maxlen: 24 37.221.186.0/24 maxlen: 24 37.221.187.0/24 maxlen: 24 37.221.188.0/24 maxlen: 24 37.221.189.0/24 maxlen: 24 37.221.190.0/24 maxlen: 24 37.221.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:56:84:50:38:1a:d5:61:f9:95:6a:8d:9b:18:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506 Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcfa8206c9f0ade93a43a9f9925527dafc5c1151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7c:48:3b:d5:10:e6:11:04:9e:0e:f4:e2:59: 74:b0:b7:b1:05:c0:f8:22:11:c9:ce:cb:46:45:78: f6:ff:83:c8:47:4d:71:c4:64:3a:44:ca:95:75:c0: 60:1b:8d:d4:a3:1a:5c:7b:13:eb:76:4e:d5:48:7d: 7d:4c:72:f2:27:e9:47:f6:3f:7a:9d:87:ff:0e:b7: 82:77:f8:bd:cb:6e:4a:21:c9:46:06:ef:77:90:94: fa:cd:99:94:fc:c7:fb:99:af:e2:da:e0:04:58:a6: 64:6a:0d:81:5d:91:b5:02:44:c2:8e:0a:18:49:ea: 80:65:72:c6:9f:7f:b0:78:cd:d4:ca:b8:53:01:be: c0:1b:76:9f:58:f1:f5:76:3b:ae:51:0b:21:b9:ef: e2:7d:63:31:25:4d:50:f7:50:1c:cd:97:d0:eb:b8: 9b:90:80:65:17:cb:4a:12:fb:ba:4d:9f:88:e0:fa: 57:72:88:18:59:cd:08:f2:09:b4:d9:1d:53:d7:d4: 3e:87:86:32:08:64:31:bf:00:05:39:11:89:82:47: 5a:05:41:e0:35:02:94:78:f2:5b:3a:09:66:3b:81: dd:54:6a:46:fd:54:e3:9c:0c:82:b1:5c:bf:c4:ca: 33:cb:81:88:14:a2:7d:2c:9f:d5:b3:ef:be:2e:7d: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FA:82:06:C9:F0:AD:E9:3A:43:A9:F9:92:55:27:DA:FC:5C:11:51 X509v3 Authority Key Identifier: keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/3PqCBsnwrek6Q6n5klUn2vxcEVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.184.0/21 Signature Algorithm: sha256WithRSAEncryption 65:96:5b:f0:e6:27:9a:ec:fa:df:74:ad:dd:ed:e1:12:79:a7: 29:bf:02:58:5e:99:ba:43:c4:16:12:5a:8d:82:64:72:df:ed: a3:af:ee:ae:90:d2:5f:45:65:0e:a3:3c:f5:cb:a5:e4:0f:aa: 7c:79:67:2c:19:f7:74:d9:97:bf:de:da:b6:8b:ac:02:97:83: 0d:9c:a7:10:7b:d4:83:bb:7d:00:54:bb:c4:ba:f1:08:10:4e: f2:b3:40:72:18:4d:dc:f6:1b:e8:9f:5f:4c:4a:31:53:97:fc: bb:2d:87:84:04:92:3a:e1:d2:7a:bd:21:2f:ba:42:46:34:ae: 3c:cf:16:82:1d:10:02:51:c4:f9:5f:1c:ba:e9:22:16:e5:0c: 45:e4:05:d7:43:da:46:57:0a:d5:b2:ca:e3:b2:b4:32:a8:91: ab:c3:de:d1:6e:d0:22:07:72:c6:e9:1a:b0:33:1a:57:d0:e6: ea:08:8e:38:a4:91:19:10:1e:21:8b:73:98:01:e3:55:74:35: 9b:ff:b0:aa:46:79:28:67:c8:8f:93:c0:ba:d1:be:ac:b2:1e: e2:9a:61:12:3f:ec:7f:99:fc:13:89:78:eb:77:5f:fe:9a:7c: d2:bb:75:e6:e9:e3:57:53:3c:05:e0:c2:b9:87:6d:d2:80:6d: 52:7d:8c:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFaEUDga1WH5lWqNmxirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDMyOTIwNjhlYTNmYjg1YmM1ODk1Mzc5ZTIwZWRiZDBi YzY1MDYwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2ZhODIwNmM5ZjBhZGU5M2E0M2E5Zjk5MjU1MjdkYWZjNWMxMTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3xIO9UQ5hEEng704ll0sLexBcD4 IhHJzstGRXj2/4PIR01xxGQ6RMqVdcBgG43UoxpcexPrdk7VSH19THLyJ+lH9j96 nYf/DreCd/i9y25KIclGBu93kJT6zZmU/Mf7ma/i2uAEWKZkag2BXZG1AkTCjgoY SeqAZXLGn3+weM3UyrhTAb7AG3afWPH1djuuUQshue/ifWMxJU1Q91AczZfQ67ib kIBlF8tKEvu6TZ+I4PpXcogYWc0I8gm02R1T19Q+h4YyCGQxvwAFORGJgkdaBUHg NQKUePJbOglmO4HdVGpG/VTjnAyCsVy/xMozy4GIFKJ9LJ/Vs+++Ln2YzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNz6ggbJ8K3pOkOp+ZJVJ9r8XBFRMB8GA1UdIwQY MBaAFEEDKSBo6j+4W8WJU3niDtvQvGUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFNcElHanFQN2hieFlsVGVlSU8yOUM4WlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yNGM1NjYtYzc0ZS00MjMyLWEzNDQt NjA3MmJiOGIyYmMwLzEvM1BxQ0JzbndyZWs2UTZuNWtsVW4ydnhjRVZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8yNGM1NjYtYzc0ZS00MjMyLWEzNDQtNjA3MmJiOGIyYmMw LzEvUVFNcElHanFQN2hieFlsVGVlSU8yOUM4WlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJd24MA0G CSqGSIb3DQEBCwUAA4IBAQBlllvw5iea7PrfdK3d7eESeacpvwJYXpm6Q8QWElqN gmRy3+2jr+6ukNJfRWUOozz1y6XkD6p8eWcsGfd02Ze/3tq2i6wCl4MNnKcQe9SD u30AVLvEuvEIEE7ys0ByGE3c9hvon19MSjFTl/y7LYeEBJI64dJ6vSEvukJGNK48 zxaCHRACUcT5Xxy66SIW5QxF5AXXQ9pGVwrVssrjsrQyqJGrw97RbtAiB3LG6Rqw MxpX0ObqCI44pJEZEB4hi3OYAeNVdDWb/7CqRnkoZ8iPk8C60b6ssh7immESP+x/ mfwTiXjrd1/+mnzSu3Xm6eNXUzwF4MK5h23SgG1SfYyx -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:20 2026 by rpki-client