This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/3AW5BjScGKAvdrK1Tz5bl8xJnoc.roa File: 3AW5BjScGKAvdrK1Tz5bl8xJnoc.roa (raw, json) Hash identifier: AnfSRJoJBQHSsw5wKN0U0W2kl6uSdHO9bTTKS8nGB5c= Subject key identifier: DC:05:B9:06:34:9C:18:A0:2F:76:B2:B5:4F:3E:5B:97:CC:49:9E:87 Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419 Certificate serial: 019B7C80B382A4F6194E261B4488F13B2676 Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/3AW5BjScGKAvdrK1Tz5bl8xJnoc.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212172 IP address blocks: 217.23.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b3:82:a4:f6:19:4e:26:1b:44:88:f1:3b:26:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc05b906349c18a02f76b2b54f3e5b97cc499e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:10:e8:06:cd:5c:37:c4:be:9d:64:4d:44:f7: 2e:d2:53:26:25:e2:9e:4f:48:ed:82:aa:d1:56:d4: 90:82:c5:eb:72:c1:ab:d8:43:a1:e1:98:ed:d4:85: 5e:d4:4f:36:62:8a:04:7d:ce:db:c7:43:d5:e9:c0: ad:0c:0d:26:ab:5d:96:b2:47:12:56:9c:71:87:12: 54:60:03:ba:11:0a:44:74:07:19:02:f5:7c:49:9c: 94:2f:38:54:bb:44:87:a1:5b:28:aa:83:8e:85:3e: ed:4a:7e:58:e1:91:c9:54:97:92:40:8e:1d:a5:4c: 5d:0e:29:0e:a6:8d:1c:0b:6c:61:df:c5:7b:c3:e3: a5:04:e3:af:fb:05:f2:33:86:ac:65:d1:06:f2:ca: de:e5:3d:41:8b:3c:fb:13:d1:13:35:03:b0:fd:3a: 0e:1d:01:f2:55:a1:df:9c:56:30:9a:aa:e7:4b:e9: 53:4d:89:15:20:a4:e6:e5:e4:75:15:2b:57:7f:e0: 90:a5:49:6b:76:4c:9b:15:ab:cc:a6:69:d5:08:42: dd:65:4d:5b:87:cb:a4:75:78:3d:c1:ee:21:db:66: a1:b0:2c:c3:6e:17:7d:0c:fc:a7:bb:ca:0f:2e:d2: d1:32:ab:39:01:65:90:0e:65:36:e6:86:db:72:2a: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:05:B9:06:34:9C:18:A0:2F:76:B2:B5:4F:3E:5B:97:CC:49:9E:87 X509v3 Authority Key Identifier: keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/3AW5BjScGKAvdrK1Tz5bl8xJnoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.23.118.0/24 Signature Algorithm: sha256WithRSAEncryption a4:c6:01:b0:d4:d1:43:5f:72:a7:b5:4f:52:ad:f2:ef:b0:80: 09:0f:4c:bf:06:7b:9a:71:6b:22:c3:ba:f7:5a:90:62:b0:c9: 5c:2d:ab:de:ac:15:30:ef:b0:88:4e:1b:c4:ed:9b:4e:22:78: b3:80:df:78:5c:ae:b4:f2:4e:b1:fc:09:79:01:3e:4a:d8:19: 0f:f5:66:89:4f:9e:37:64:0c:e3:4e:a4:06:27:d0:32:0d:4c: cc:d2:c2:d4:af:65:98:49:f4:a6:c7:79:bc:66:a7:1f:cf:50: 30:ee:3e:a0:0d:86:1d:52:9a:37:f5:ec:28:f6:f1:24:e4:a9: 18:c9:a3:3f:ea:9b:6f:a3:08:47:d3:69:2e:fd:33:ac:fa:a3: 4f:11:51:65:4e:b5:bc:e0:06:dd:d1:28:70:fa:86:26:26:2f: 65:60:b4:31:97:cd:1d:99:14:e0:a6:2c:a1:56:24:28:7a:4f: d6:e1:c1:5b:01:06:00:ae:78:dc:07:f0:99:b2:ae:a9:b8:b8: df:53:67:5c:bc:3c:ea:8a:7b:70:d4:6b:b1:68:4a:5c:67:d7: b4:16:ae:18:84:ca:53:0a:e0:26:9e:2b:e3:d0:28:b3:aa:33: f1:5b:17:13:d0:0a:0e:b5:bd:6c:21:0c:01:7a:75:82:4a:fc: f5:79:20:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLOCpPYZTiYbRIjxOyZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw Yjg0MTkwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzA1YjkwNjM0OWMxOGEwMmY3NmIyYjU0ZjNlNWI5N2NjNDk5ZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RDoBs1cN8S+nWRNRPcu0lMmJeKe T0jtgqrRVtSQgsXrcsGr2EOh4Zjt1IVe1E82YooEfc7bx0PV6cCtDA0mq12WskcS VpxxhxJUYAO6EQpEdAcZAvV8SZyULzhUu0SHoVsoqoOOhT7tSn5Y4ZHJVJeSQI4d pUxdDikOpo0cC2xh38V7w+OlBOOv+wXyM4asZdEG8sre5T1Bizz7E9ETNQOw/ToO HQHyVaHfnFYwmqrnS+lTTYkVIKTm5eR1FStXf+CQpUlrdkybFavMpmnVCELdZU1b h8ukdXg9we4h22ahsCzDbhd9DPynu8oPLtLRMqs5AWWQDmU25obbcipYKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwFuQY0nBigL3aytU8+W5fMSZ6HMB8GA1UdIwQY MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt MGNjODNiMDBmYzU4LzEvM0FXNUJqU2NHS0F2ZHJLMVR6NWJsOHhKbm9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4 LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Rd2MA0G CSqGSIb3DQEBCwUAA4IBAQCkxgGw1NFDX3KntU9SrfLvsIAJD0y/BnuacWsiw7r3 WpBisMlcLaverBUw77CIThvE7ZtOInizgN94XK608k6x/Al5AT5K2BkP9WaJT543 ZAzjTqQGJ9AyDUzM0sLUr2WYSfSmx3m8Zqcfz1Aw7j6gDYYdUpo39ewo9vEk5KkY yaM/6ptvowhH02ku/TOs+qNPEVFlTrW84Abd0Shw+oYmJi9lYLQxl80dmRTgpiyh ViQoek/W4cFbAQYArnjcB/CZsq6puLjfU2dcvDzqintw1GuxaEpcZ9e0Fq4YhMpT CuAmnivj0CizqjPxWxcT0AoOtb1sIQwBenWCSvz1eSDI -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:37 2026 by rpki-client