This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa File: 3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa (raw, json) Hash identifier: hXLyK65nAY5+Ut+o0gb/BjxofeYx4PkadbFG04BKn8s= Subject key identifier: DD:4B:BA:F8:A9:B4:B7:BA:65:D8:62:CC:11:B4:88:F7:F4:CB:C5:A8 Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Certificate serial: 019B76EAD153E65F61861A98FA6A7FCD627A Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa Signing time: Thu 01 Jan 2026 00:17:38 +0000 ROA not before: Thu 01 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202016 IP address blocks: 5.159.32.0/21 maxlen: 21 194.145.244.0/22 maxlen: 22 2a03:bec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d1:53:e6:5f:61:86:1a:98:fa:6a:7f:cd:62:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd4bbaf8a9b4b7ba65d862cc11b488f7f4cbc5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:c2:75:39:fb:bc:e8:b8:14:f5:84:42:4b: 0d:29:1c:89:e1:bd:7a:a9:e9:06:70:2b:06:6b:f9: ee:3e:88:72:eb:52:be:0d:d1:8e:d3:0f:30:b3:8c: 82:cf:69:6a:39:e0:99:70:80:95:d7:f8:dc:66:fa: 87:67:4c:a9:7f:2f:76:a2:bb:70:cd:6b:fb:f2:58: 8b:ad:f8:c1:3b:9b:13:c6:6d:9d:bb:35:0f:74:94: 42:99:7b:32:da:5d:f5:a9:b7:2d:80:3f:7d:a4:e8: 56:ec:66:98:e2:2a:06:9a:c1:70:1a:8c:3c:34:ec: 6c:b7:e7:71:c9:d6:cf:50:96:9b:a7:a9:97:4b:3c: 79:42:73:96:20:40:81:7e:cb:ea:ae:e0:68:72:28: 4f:14:2b:4c:a1:12:d4:ae:1b:77:d1:10:4f:6c:57: 3e:5e:ef:59:c9:2e:ca:b1:1f:8b:29:e8:45:10:ab: c0:8f:38:5e:9f:7c:b7:4f:d5:d8:64:05:88:2a:0c: e2:70:6c:69:8c:08:98:f9:f0:f5:b4:1a:6f:82:1f: 79:3e:ae:67:cd:d6:af:ce:0f:ae:25:70:93:30:d2: 5f:8d:b3:26:e3:75:59:17:1e:05:4b:c6:84:41:5e: 4a:44:c3:c3:c1:a5:7e:68:a5:b7:f6:21:c9:8e:80: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4B:BA:F8:A9:B4:B7:BA:65:D8:62:CC:11:B4:88:F7:F4:CB:C5:A8 X509v3 Authority Key Identifier: keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.159.32.0/21 194.145.244.0/22 IPv6: 2a03:bec0::/32 Signature Algorithm: sha256WithRSAEncryption 3b:e1:92:d0:b6:81:16:73:73:b5:fd:dd:38:e2:ff:55:c6:36: 6b:c8:b2:4d:6e:2b:a5:c3:41:aa:48:09:91:6f:df:28:84:e8: 01:af:b7:ac:75:97:64:30:b6:d8:fd:d9:c3:f6:29:fa:ed:05: 12:e5:24:4f:ea:ad:c6:15:12:17:89:73:1f:c2:91:60:83:9a: df:cb:08:84:a3:9b:3d:a5:fc:1e:20:38:3d:cd:ee:ba:1b:9b: 65:2a:c3:97:5f:bf:8c:ad:21:20:0c:94:ea:84:e7:25:3d:6d: 2f:4f:7c:94:f5:f8:19:2b:66:99:c1:05:6d:98:47:b2:f6:6c: 6c:fc:d3:a9:c0:85:7c:a2:41:26:82:ff:35:35:a8:81:68:c8: c1:2c:d3:1d:12:1b:14:1d:fd:5c:7a:01:2b:eb:59:97:24:9d: 5a:64:30:72:f9:4b:82:2c:9b:64:ea:a3:9f:fd:55:d7:81:5f: 9c:d0:d6:c3:e6:6a:df:97:b3:68:3f:72:c9:51:b5:2d:8b:1a: 01:59:3c:42:4b:4c:76:fb:14:0f:5e:17:fd:3e:7b:87:5e:a9: 17:58:ee:23:fb:ad:f4:43:88:bb:59:97:ca:07:81:9d:a4:14: 99:09:1b:dc:7a:c6:c6:44:3f:90:c4:b8:d8:62:c2:c6:8b:d6: 36:68:1d:a5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26tFT5l9hhhqY+mp/zWJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm ODdjMDAwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDRiYmFmOGE5YjRiN2JhNjVkODYyY2MxMWI0ODhmN2Y0Y2JjNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3rCdTn7vOi4FPWEQksNKRyJ4b16 qekGcCsGa/nuPohy61K+DdGO0w8ws4yCz2lqOeCZcICV1/jcZvqHZ0ypfy92ortw zWv78liLrfjBO5sTxm2duzUPdJRCmXsy2l31qbctgD99pOhW7GaY4ioGmsFwGow8 NOxst+dxydbPUJabp6mXSzx5QnOWIECBfsvqruBocihPFCtMoRLUrht30RBPbFc+ Xu9ZyS7KsR+LKehFEKvAjzhen3y3T9XYZAWIKgzicGxpjAiY+fD1tBpvgh95Pq5n zdavzg+uJXCTMNJfjbMm43VZFx4FS8aEQV5KRMPDwaV+aKW39iHJjoDIyQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFN1LuviptLe6ZdhizBG0iPf0y8WoMB8GA1UdIwQY MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt OTNiM2EzNjk2ZDk2LzEvM1V1Ni1LbTB0N3BsMkdMTUViU0k5X1RMeGFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2 LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBZ8gAwQC wpH0MA0EAgACMAcDBQAqA77AMA0GCSqGSIb3DQEBCwUAA4IBAQA74ZLQtoEWc3O1 /d044v9VxjZryLJNbiulw0GqSAmRb98ohOgBr7esdZdkMLbY/dnD9in67QUS5SRP 6q3GFRIXiXMfwpFgg5rfywiEo5s9pfweIDg9ze66G5tlKsOXX7+MrSEgDJTqhOcl PW0vT3yU9fgZK2aZwQVtmEey9mxs/NOpwIV8okEmgv81NaiBaMjBLNMdEhsUHf1c egEr61mXJJ1aZDBy+UuCLJtk6qOf/VXXgV+c0NbD5mrfl7NoP3LJUbUtixoBWTxC S0x2+xQPXhf9PnuHXqkXWO4j+630Q4i7WZfKB4GdpBSZCRvcesbGRD+QxLjYYsLG i9Y2aB2l -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:43 2026 by rpki-client