This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/s9crL-h4A3fkSwdexuXqPbkXvCA.roa File: s9crL-h4A3fkSwdexuXqPbkXvCA.roa (raw, json) Hash identifier: CRLXsrde8vjqG70/Av7AifgLW8Uoo74tzTc6Om20qok= Subject key identifier: B3:D7:2B:2F:E8:78:03:77:E4:4B:07:5E:C6:E5:EA:3D:B9:17:BC:20 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A27C52EED46713381F25BB1807B177 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/s9crL-h4A3fkSwdexuXqPbkXvCA.roa Signing time: Thu 01 Jan 2026 08:17:53 +0000 ROA not before: Thu 01 Jan 2026 08:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64249 IP address blocks: 5.182.199.0/24 maxlen: 24 45.67.142.0/24 maxlen: 24 45.67.143.0/24 maxlen: 24 45.67.144.0/24 maxlen: 24 63.246.128.0/24 maxlen: 24 63.246.156.0/24 maxlen: 24 63.246.157.0/24 maxlen: 24 79.98.181.0/24 maxlen: 24 92.249.28.0/24 maxlen: 24 94.154.168.0/23 maxlen: 23 94.154.176.0/24 maxlen: 24 94.154.179.0/24 maxlen: 24 193.148.94.0/24 maxlen: 24 2a0c:3ac1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7c:52:ee:d4:67:13:38:1f:25:bb:18:07:b1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3d72b2fe8780377e44b075ec6e5ea3db917bc20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:65:51:c8:3e:0c:ad:34:e6:93:01:98:8f:76: 75:f2:b4:c2:b1:40:a6:4b:71:e4:b0:7b:4c:76:f6: df:13:af:f1:ad:2d:a6:1c:ef:39:ff:d5:e1:c3:bf: a2:45:45:83:30:ca:20:ac:d4:95:fb:f7:d4:a9:ef: 9f:e0:7b:f0:6d:fa:a6:72:57:df:a2:8b:20:85:7f: 4f:48:5e:84:20:4c:3c:47:7c:af:69:ec:e1:70:e3: 3d:f0:39:03:6e:11:cc:a6:ae:21:71:95:97:61:2a: f7:a4:33:19:68:83:38:ef:8b:fd:86:4d:1d:6d:1d: fe:3d:d8:a1:1a:23:a4:d8:ea:54:91:71:4b:68:cd: dc:48:05:88:a1:15:f9:ab:50:65:7e:f9:18:b0:07: 8c:d0:c7:a0:b0:48:b1:f0:8e:02:62:11:b7:21:f3: b9:48:b6:fc:55:8a:0b:8b:c0:6e:8c:d7:b3:65:77: 7c:0f:92:bd:12:62:6d:9e:ce:2f:7c:48:44:2c:c0: ad:6a:8b:76:35:c0:33:f0:92:32:e1:ab:ed:d3:30: 73:fe:3b:a6:35:2c:da:15:f0:b4:7d:98:6b:96:44: 7c:8c:a0:02:6f:30:41:21:d5:2c:9d:e3:51:ba:e6: e2:c9:41:d1:26:37:81:e3:8a:e5:62:83:64:da:4e: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D7:2B:2F:E8:78:03:77:E4:4B:07:5E:C6:E5:EA:3D:B9:17:BC:20 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/s9crL-h4A3fkSwdexuXqPbkXvCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.199.0/24 45.67.142.0-45.67.144.255 63.246.128.0/24 63.246.156.0/23 79.98.181.0/24 92.249.28.0/24 94.154.168.0/23 94.154.176.0/24 94.154.179.0/24 193.148.94.0/24 IPv6: 2a0c:3ac1::/32 Signature Algorithm: sha256WithRSAEncryption 78:7f:53:98:8d:fe:4a:11:36:05:09:d4:cd:48:90:08:67:c7: 96:b6:2e:a9:e8:6a:8a:f9:14:d9:6a:f0:23:c2:29:4b:af:a8: 89:4b:3c:42:c2:e4:c6:f7:b3:6d:22:2d:5e:43:0d:a8:b0:5d: 18:96:80:91:0a:c8:c9:4f:1a:48:a5:d6:bb:57:1e:fe:31:da: 9a:97:38:7e:57:8e:20:9f:2f:7d:d8:4e:0c:81:06:5e:31:cb: 04:f7:de:30:75:a1:e0:09:47:60:1c:bf:85:af:ad:85:c4:3f: a7:51:f7:42:48:12:54:12:c8:f8:b1:48:4d:cd:67:46:90:28: 16:21:a7:d8:7e:72:72:b3:3f:5a:83:d2:6f:ac:05:a7:b4:47: 39:4c:c1:89:95:cb:40:81:f8:42:0b:d7:33:63:45:86:ac:c0: 66:9f:f0:1c:2a:65:23:bd:1e:bf:b6:92:21:ef:f7:54:bf:71: 7e:50:a5:67:78:d5:f4:07:76:c3:bc:21:c5:11:d4:b4:93:fa: 01:ce:94:93:55:54:f5:65:e2:6a:78:82:df:47:e9:04:fa:87: 2c:43:6e:31:30:8b:6a:62:20:f8:88:86:70:e1:c2:d2:41:4e: 02:86:ed:4d:fc:32:b0:83:57:ac:e0:4b:9b:f8:93:9b:11:e1: dd:12:73:de -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt4onxS7tRnEzgfJbsYB7F3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2Q3MmIyZmU4NzgwMzc3ZTQ0YjA3NWVjNmU1ZWEzZGI5MTdiYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWVRyD4MrTTmkwGYj3Z18rTCsUCm S3HksHtMdvbfE6/xrS2mHO85/9Xhw7+iRUWDMMogrNSV+/fUqe+f4Hvwbfqmclff oosghX9PSF6EIEw8R3yvaezhcOM98DkDbhHMpq4hcZWXYSr3pDMZaIM474v9hk0d bR3+PdihGiOk2OpUkXFLaM3cSAWIoRX5q1BlfvkYsAeM0MegsEix8I4CYhG3IfO5 SLb8VYoLi8BujNezZXd8D5K9EmJtns4vfEhELMCtaot2NcAz8JIy4avt0zBz/jum NSzaFfC0fZhrlkR8jKACbzBBIdUsneNRuubiyUHRJjeB44rlYoNk2k4UsQIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFLPXKy/oeAN35EsHXsbl6j25F7wgMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvczljckwtaDRBM2ZrU3dkZXh1WHFQYmtYdkNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQABbbHMAwD BAEtQ44DBAAtQ5ADBAA/9oADBAE/9pwDBABPYrUDBABc+RwDBAFemqgDBABemrAD BABemrMDBADBlF4wDQQCAAIwBwMFACoMOsEwDQYJKoZIhvcNAQELBQADggEBAHh/ U5iN/koRNgUJ1M1IkAhnx5a2Lqnoaor5FNlq8CPCKUuvqIlLPELC5Mb3s20iLV5D DaiwXRiWgJEKyMlPGkil1rtXHv4x2pqXOH5XjiCfL33YTgyBBl4xywT33jB1oeAJ R2Acv4WvrYXEP6dR90JIElQSyPixSE3NZ0aQKBYhp9h+cnKzP1qD0m+sBae0RzlM wYmVy0CB+EIL1zNjRYaswGaf8BwqZSO9Hr+2kiHv91S/cX5QpWd41fQHdsO8IcUR 1LST+gHOlJNVVPVl4mp4gt9H6QT6hyxDbjEwi2piIPiIhnDhwtJBTgKG7U38MrCD V6zgS5v4k5sR4d0Sc94= -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:00 2026 by rpki-client