This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jiLj3J5Bo3BCH5suARVlgU11bTo.roa File: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (raw, json) Hash identifier: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE= Subject key identifier: 8E:22:E3:DC:9E:41:A3:70:42:1F:9B:2E:01:15:65:81:4D:75:6D:3A Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A27ABC604C31679BD977F9A3CEFFDF Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jiLj3J5Bo3BCH5suARVlgU11bTo.roa Signing time: Thu 01 Jan 2026 08:17:52 +0000 ROA not before: Thu 01 Jan 2026 08:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46562 IP address blocks: 104.232.36.0/24 maxlen: 24 2a07:c6c0:35::/48 maxlen: 48 2a07:c6c0:36::/48 maxlen: 48 2a07:c6c0:37::/48 maxlen: 48 2a07:c6c0:38::/48 maxlen: 48 2a0c:3ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7a:bc:60:4c:31:67:9b:d9:77:f9:a3:ce:ff:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e22e3dc9e41a370421f9b2e011565814d756d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f5:d6:a1:36:56:4a:62:72:85:ad:3f:fb:c5: b3:bd:bd:b2:77:e7:44:a3:49:06:50:bf:37:5d:cb: cb:b5:ae:62:15:66:e0:a7:04:e3:17:0f:3c:f6:f9: 51:3e:06:2e:a8:6d:23:35:f4:c5:a8:ea:89:9a:58: 3b:8e:4e:63:52:3a:10:84:d3:f8:af:4e:b5:fb:b3: 3e:97:c4:b0:dd:c7:cc:94:53:e0:3c:e5:b8:73:5f: d3:60:c6:47:53:a4:b2:fc:aa:04:3f:37:05:77:dc: e0:33:a3:74:e0:3a:76:1c:59:72:5b:ed:73:98:cc: f6:a3:8d:05:a9:03:74:ed:b1:4a:ee:d6:6f:9f:5e: ae:9b:c8:3b:3d:e8:f4:28:51:c9:1d:00:79:1e:2d: 14:b3:6e:e1:58:12:ec:0e:bd:c5:a7:12:c7:a0:9e: 65:65:a2:fc:af:e2:4d:e0:f7:3f:52:d8:06:5d:0c: f8:12:0e:41:97:32:9f:ff:7e:22:29:66:30:db:02: 92:1b:ac:47:d7:cf:cd:e0:f1:fc:8b:6c:21:49:8b: 29:0f:e1:e8:f2:f3:37:18:07:ab:de:10:97:c4:ed: a6:66:90:96:b2:9c:5a:2c:62:73:95:d7:ac:47:d6: 1e:38:f0:42:d6:f5:81:aa:7e:14:84:19:88:e5:bb: d2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:22:E3:DC:9E:41:A3:70:42:1F:9B:2E:01:15:65:81:4D:75:6D:3A X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jiLj3J5Bo3BCH5suARVlgU11bTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.232.36.0/24 IPv6: 2a07:c6c0:35::-2a07:c6c0:38:ffff:ffff:ffff:ffff:ffff 2a0c:3ac0::/48 Signature Algorithm: sha256WithRSAEncryption 44:60:d2:cb:41:30:cf:4c:21:1b:f4:4a:62:0f:48:33:0a:44: cf:40:d8:69:84:73:de:fe:7d:a0:d8:cf:74:27:6b:c4:57:83: eb:5c:9a:50:da:8f:b6:38:52:94:61:f8:e2:ed:a7:23:22:d7: 3b:0f:df:f8:86:df:b6:f9:75:75:5c:76:cb:e5:60:55:ed:14: 4b:cc:b0:90:9a:e3:e2:8c:01:4c:79:5c:db:c6:ef:30:ac:1f: b0:0a:b0:b1:98:b2:64:47:e0:25:94:fd:79:cf:01:9a:97:2c: 45:3b:3b:27:33:3b:36:f8:9d:bd:84:97:9e:da:0a:aa:d9:e7: 61:a7:63:96:63:4e:fc:80:ff:2d:9f:0b:45:d4:cf:33:ba:a8: ee:45:93:95:07:ee:c8:30:2b:14:fb:35:ab:54:40:7e:a8:1e: 00:d3:85:04:aa:c0:72:06:9f:d7:1d:e4:3b:3c:bc:0d:0d:de: c2:18:8f:e2:6d:eb:35:d8:44:41:a8:cd:0a:5d:09:de:cf:0e: 74:29:d4:61:5b:21:65:e4:c3:32:4a:f5:64:7f:6c:fe:f5:a1: 98:55:a1:cc:28:89:ae:01:cc:fb:c1:f9:14:b2:b9:45:55:ba: 99:d2:59:54:a6:fe:7b:16:46:f6:24:31:cf:44:5a:de:bd:9b: b0:39:e1:74 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt4onq8YEwxZ5vZd/mjzv/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTIyZTNkYzllNDFhMzcwNDIxZjliMmUwMTE1NjU4MTRkNzU2ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fXWoTZWSmJyha0/+8Wzvb2yd+dE o0kGUL83XcvLta5iFWbgpwTjFw889vlRPgYuqG0jNfTFqOqJmlg7jk5jUjoQhNP4 r061+7M+l8Sw3cfMlFPgPOW4c1/TYMZHU6Sy/KoEPzcFd9zgM6N04Dp2HFlyW+1z mMz2o40FqQN07bFK7tZvn16um8g7Pej0KFHJHQB5Hi0Us27hWBLsDr3FpxLHoJ5l ZaL8r+JN4Pc/UtgGXQz4Eg5BlzKf/34iKWYw2wKSG6xH18/N4PH8i2whSYspD+Ho 8vM3GAer3hCXxO2mZpCWspxaLGJzldesR9YeOPBC1vWBqn4UhBmI5bvS2wIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFI4i49yeQaNwQh+bLgEVZYFNdW06MB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvamlMajNKNUJvM0JDSDVzdUFSVmxnVTExYlRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAMBAIAATAGAwQAaOgkMCME AgACMB0wEgMHACoHxsAANQMHACoHxsAAOAMHACoMOsAAADANBgkqhkiG9w0BAQsF AAOCAQEARGDSy0Ewz0whG/RKYg9IMwpEz0DYaYRz3v59oNjPdCdrxFeD61yaUNqP tjhSlGH44u2nIyLXOw/f+Ibftvl1dVx2y+VgVe0US8ywkJrj4owBTHlc28bvMKwf sAqwsZiyZEfgJZT9ec8BmpcsRTs7JzM7NvidvYSXntoKqtnnYadjlmNO/ID/LZ8L RdTPM7qo7kWTlQfuyDArFPs1q1RAfqgeANOFBKrAcgaf1x3kOzy8DQ3ewhiP4m3r NdhEQajNCl0J3s8OdCnUYVshZeTDMkr1ZH9s/vWhmFWhzCiJrgHM+8H5FLK5RVW6 mdJZVKb+exZG9iQxz0Ra3r2bsDnhdA== -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:03 2026 by rpki-client