This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/3WBao4FkX8D-JaaDlye4M6OWSBY.roa File: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (raw, json) Hash identifier: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ= Subject key identifier: DD:60:5A:A3:81:64:5F:C0:FE:25:A6:83:97:27:B8:33:A3:96:48:16 Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019B7A5B9EF40F1C1507D737D016E0D961A4 Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/3WBao4FkX8D-JaaDlye4M6OWSBY.roa Signing time: Thu 01 Jan 2026 16:19:43 +0000 ROA not before: Thu 01 Jan 2026 16:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 168.222.252.0/24 maxlen: 24 168.222.253.0/24 maxlen: 24 168.222.255.0/24 maxlen: 24 208.92.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9e:f4:0f:1c:15:07:d7:37:d0:16:e0:d9:61:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd605aa381645fc0fe25a6839727b833a3964816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b6:cf:31:5b:59:37:68:05:7b:91:86:e9:70: 5d:41:1a:b2:c5:92:1a:a6:df:e6:01:e6:02:4d:4e: fa:20:71:6c:ef:47:24:e4:55:e5:55:d9:a0:a2:f1: b9:68:0d:34:9f:23:cf:70:9c:96:30:df:4d:d5:c6: 79:32:74:34:8c:41:b1:1d:1e:5c:e0:49:02:7b:c9: 82:2c:d9:04:d4:c0:d0:86:e8:29:b1:81:68:35:22: 03:0d:2e:a7:a8:a1:43:9d:90:6a:f3:25:e1:1d:fe: 11:b0:b7:1e:ae:8e:20:12:44:4a:85:7f:de:4c:59: d2:15:f8:33:92:4e:89:a5:e9:90:3b:f3:73:46:62: 01:d4:67:1f:f4:7e:e1:3c:55:16:da:a6:45:c9:72: 8f:c9:6a:7c:c1:74:98:d2:53:fb:3b:83:83:3a:fb: 4a:1c:c3:f3:98:2e:43:1e:e3:06:5b:98:63:00:23: 5f:68:a7:e2:ea:5b:89:db:9b:ac:df:4c:cc:3c:86: ac:1a:63:68:57:88:a4:40:8f:e0:73:d6:24:36:e2: 24:aa:85:97:d6:ec:66:74:de:a4:15:4c:68:4b:63: dd:88:4f:0b:47:3d:1f:a2:d6:48:d5:2c:8b:16:e3: 20:c7:eb:04:74:d8:bf:31:ab:d9:b3:74:e3:00:be: c1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:60:5A:A3:81:64:5F:C0:FE:25:A6:83:97:27:B8:33:A3:96:48:16 X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/3WBao4FkX8D-JaaDlye4M6OWSBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.222.252.0/23 168.222.255.0/24 208.92.226.0/24 Signature Algorithm: sha256WithRSAEncryption 47:27:00:af:17:96:8f:08:5b:c4:61:b0:da:43:6f:c7:b2:5e: e3:88:a7:1a:f2:eb:41:0b:97:1c:27:02:a7:45:0e:5b:ae:0c: 0a:b9:20:07:ab:57:6c:97:38:88:30:df:e0:34:08:51:e1:11: 19:a5:81:9f:7b:2b:60:bb:aa:f6:61:93:b6:43:be:5b:cc:9e: 2e:96:a6:56:f9:86:44:83:11:f2:5d:8b:a3:f7:e8:61:27:5b: 15:2f:dd:63:cf:7d:59:76:2d:ce:53:d9:15:56:95:f9:d7:cd: 75:e9:d8:40:59:1d:a5:2d:48:6a:55:46:c7:0c:0e:05:d9:4d: 8a:66:23:97:48:94:fd:78:9f:0b:07:98:45:81:84:1e:97:fd: 7c:52:ad:02:af:4d:06:35:b6:45:29:75:4a:c9:c6:30:57:59: 3b:3e:26:7f:92:f5:68:33:0f:c6:e9:74:f4:73:98:7d:81:57: 87:90:67:1f:e4:c1:1c:83:4a:8c:7b:f7:5e:82:8f:98:6c:fe: 02:1f:ef:8d:09:cc:9c:ca:b3:1e:4f:1f:d7:5a:91:5e:9d:eb: 7d:ab:e5:b9:ba:e7:59:e3:67:4c:92:36:d2:6f:f8:ad:95:20: df:d3:66:f8:6d:52:48:62:48:27:6f:12:00:46:58:7f:2d:c8: 37:b1:60:88 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6W570DxwVB9c30Bbg2WGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDYwNWFhMzgxNjQ1ZmMwZmUyNWE2ODM5NzI3YjgzM2EzOTY0ODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77bPMVtZN2gFe5GG6XBdQRqyxZIa pt/mAeYCTU76IHFs70ck5FXlVdmgovG5aA00nyPPcJyWMN9N1cZ5MnQ0jEGxHR5c 4EkCe8mCLNkE1MDQhugpsYFoNSIDDS6nqKFDnZBq8yXhHf4RsLcero4gEkRKhX/e TFnSFfgzkk6JpemQO/NzRmIB1Gcf9H7hPFUW2qZFyXKPyWp8wXSY0lP7O4ODOvtK HMPzmC5DHuMGW5hjACNfaKfi6luJ25us30zMPIasGmNoV4ikQI/gc9YkNuIkqoWX 1uxmdN6kFUxoS2PdiE8LRz0fotZI1SyLFuMgx+sEdNi/MavZs3TjAL7BPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN1gWqOBZF/A/iWmg5cnuDOjlkgWMB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvM1dCYW80RmtYOEQtSmFhRGx5ZTRNNk9XU0JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBqN78AwQA qN7/AwQA0FziMA0GCSqGSIb3DQEBCwUAA4IBAQBHJwCvF5aPCFvEYbDaQ2/Hsl7j iKca8utBC5ccJwKnRQ5brgwKuSAHq1dslziIMN/gNAhR4REZpYGfeytgu6r2YZO2 Q75bzJ4ulqZW+YZEgxHyXYuj9+hhJ1sVL91jz31Zdi3OU9kVVpX518116dhAWR2l LUhqVUbHDA4F2U2KZiOXSJT9eJ8LB5hFgYQel/18Uq0Cr00GNbZFKXVKycYwV1k7 PiZ/kvVoMw/G6XT0c5h9gVeHkGcf5MEcg0qMe/dego+YbP4CH++NCcycyrMeTx/X WpFenet9q+W5uudZ42dMkjbSb/itlSDf02b4bVJIYkgnbxIARlh/Lcg3sWCI -----END CERTIFICATE-----Generated at Thu Jan 1 21:35:22 2026 by rpki-client