This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/3wUwuQwTXV5aCQTU82rWSfa5LEM.roa File: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (raw, json) Hash identifier: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk= Subject key identifier: DF:05:30:B9:0C:13:5D:5E:5A:09:04:D4:F3:6A:D6:49:F6:B9:2C:43 Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce Certificate serial: 019B7BA38D498F63B9183925EA1EC531C182 Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/3wUwuQwTXV5aCQTU82rWSfa5LEM.roa Signing time: Thu 01 Jan 2026 22:17:54 +0000 ROA not before: Thu 01 Jan 2026 22:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208708 IP address blocks: 109.110.192.0/20 maxlen: 20 109.110.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8d:49:8f:63:b9:18:39:25:ea:1e:c5:31:c1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce Validity Not Before: Jan 1 22:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df0530b90c135d5e5a0904d4f36ad649f6b92c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:21:11:60:ad:9f:74:9d:e0:cd:36:c0:25: 15:d1:39:c0:2f:a9:88:6f:e3:15:b6:9b:60:07:52: 3d:37:0a:5b:bb:4a:67:3a:93:7c:8d:fe:07:5e:b7: e6:d3:e9:20:9c:39:b1:9b:f6:de:39:5b:0e:f3:a2: 15:d7:30:f3:a8:ae:d9:36:0b:94:ae:39:a6:18:64: f8:2c:8c:77:6b:e4:51:1f:8b:ce:21:8d:55:d5:62: b8:e3:e5:53:49:5c:58:2c:24:23:39:f8:1e:3e:86: ad:3e:43:58:84:98:52:07:97:72:03:7f:76:30:02: c9:7a:53:f7:04:b8:70:58:07:49:51:81:bb:0c:b1: b9:67:ef:7f:41:bf:e0:26:57:11:5a:d0:d3:25:f5: cf:8a:aa:46:c1:71:17:ee:36:83:28:2a:e2:b4:44: d7:a9:5f:2a:21:57:77:fc:82:03:39:3e:9a:e4:77: a4:69:73:0e:58:c4:db:c3:52:66:5a:4b:d1:96:ed: 72:33:54:4e:9c:82:a3:24:5e:f0:61:1c:9b:36:a0: 55:35:a8:1c:0f:7c:cd:27:84:f0:84:53:02:de:03: 80:c1:45:25:f3:15:b9:20:2d:17:82:68:71:31:56: 70:b3:4f:ba:82:a5:55:27:ed:9b:78:b0:f6:19:d1: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:05:30:B9:0C:13:5D:5E:5A:09:04:D4:F3:6A:D6:49:F6:B9:2C:43 X509v3 Authority Key Identifier: keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/3wUwuQwTXV5aCQTU82rWSfa5LEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.192.0/19 Signature Algorithm: sha256WithRSAEncryption 0b:56:d4:74:6a:06:dc:b2:2b:61:0e:26:2f:3c:42:ee:c3:87: a3:7a:5e:c3:50:ee:7a:93:31:b0:29:46:1e:e2:5c:40:bc:b5: 66:ef:7c:b3:75:74:0d:21:e2:0b:23:f1:4e:56:c6:44:07:6c: 0c:5d:40:c3:ac:44:3b:68:a0:04:51:a4:ba:0d:2a:45:af:3c: 9c:b1:19:17:bd:5e:c3:d8:93:68:79:81:bd:24:a1:a5:4b:99: d5:09:41:01:10:5b:e9:04:65:29:be:ac:08:7b:96:af:4b:17: 19:7a:df:58:de:f8:b1:c6:d9:c1:c0:21:35:77:86:5e:24:6b: 4b:ee:97:df:d6:cf:b9:3e:da:af:04:2f:9f:8f:38:3d:1b:fd: 11:fd:d0:5a:6a:39:e7:f8:d5:f5:07:cd:43:4a:64:41:a8:0f: d4:ef:36:d1:56:ce:8f:37:a0:8a:f3:7c:88:ff:71:22:6c:7f: 9a:1f:7d:cf:3b:07:f7:c2:c5:7c:2d:86:7f:5a:f6:82:5e:41: 25:d0:0b:19:71:76:96:0b:0e:c8:94:d6:20:1b:36:8e:18:e5: 0f:04:ff:2b:65:5a:87:bf:89:7f:2c:7c:92:23:42:a6:5b:39: c3:ad:2d:b5:58:f8:42:a5:b2:62:73:e8:7e:1c:a7:34:9e:fa: 42:62:1e:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o41Jj2O5GDkl6h7FMcGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWM1ODFhZmYzZDBhOTAxNzhjZmFiNTY1YTM4OGNjZDli YzAxY2UwHhcNMjYwMTAxMjIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjA1MzBiOTBjMTM1ZDVlNWEwOTA0ZDRmMzZhZDY0OWY2YjkyYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEghEWCtn3Sd4M02wCUV0TnAL6mI b+MVtptgB1I9Nwpbu0pnOpN8jf4HXrfm0+kgnDmxm/beOVsO86IV1zDzqK7ZNguU rjmmGGT4LIx3a+RRH4vOIY1V1WK44+VTSVxYLCQjOfgePoatPkNYhJhSB5dyA392 MALJelP3BLhwWAdJUYG7DLG5Z+9/Qb/gJlcRWtDTJfXPiqpGwXEX7jaDKCritETX qV8qIVd3/IIDOT6a5HekaXMOWMTbw1JmWkvRlu1yM1ROnIKjJF7wYRybNqBVNagc D3zNJ4TwhFMC3gOAwUUl8xW5IC0XgmhxMVZws0+6gqVVJ+2beLD2GdGNIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8FMLkME11eWgkE1PNq1kn2uSxDMB8GA1UdIwQY MBaAFGmcWBr/PQqQF4z6tWWjiMzZvAHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUt ZTVkZGQyYmI1MWM1LzEvM3dVd3VRd1RYVjVhQ1FUVTgycldTZmE1TEVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUtZTVkZGQyYmI1MWM1 LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbW7AMA0G CSqGSIb3DQEBCwUAA4IBAQALVtR0agbcsithDiYvPELuw4ejel7DUO56kzGwKUYe 4lxAvLVm73yzdXQNIeILI/FOVsZEB2wMXUDDrEQ7aKAEUaS6DSpFrzycsRkXvV7D 2JNoeYG9JKGlS5nVCUEBEFvpBGUpvqwIe5avSxcZet9Y3vixxtnBwCE1d4ZeJGtL 7pff1s+5PtqvBC+fjzg9G/0R/dBaajnn+NX1B81DSmRBqA/U7zbRVs6PN6CK83yI /3EibH+aH33POwf3wsV8LYZ/WvaCXkEl0AsZcXaWCw7IlNYgGzaOGOUPBP8rZVqH v4l/LHySI0KmWznDrS21WPhCpbJic+h+HKc0nvpCYh7L -----END CERTIFICATE-----Generated at Mon Jan 12 07:36:09 2026 by rpki-client