This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/u3rQ39mTeV2kE1STzKrih9_L758.roa File: u3rQ39mTeV2kE1STzKrih9_L758.roa (raw, json) Hash identifier: KWfkHmC+Pf41EAOenIiA1l0ufOFeet991JgGZvHoQlg= Subject key identifier: BB:7A:D0:DF:D9:93:79:5D:A4:13:54:93:CC:AA:E2:87:DF:CB:EF:9F Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5 Certificate serial: 019B7CED54B53486FE9C337D3EDCEE8D0821 Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/u3rQ39mTeV2kE1STzKrih9_L758.roa Signing time: Fri 02 Jan 2026 04:18:06 +0000 ROA not before: Fri 02 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 144.2.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:54:b5:34:86:fe:9c:33:7d:3e:dc:ee:8d:08:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5 Validity Not Before: Jan 2 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb7ad0dfd993795da4135493ccaae287dfcbef9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:78:42:51:12:3e:c7:79:d3:f0:1f:a7:d8: eb:28:7c:ca:b8:39:a0:a6:0e:e6:d6:c6:b9:cf:22: 9e:26:ab:0f:e4:fd:9a:53:f4:0e:31:f4:b9:3a:47: b9:c1:79:87:ec:31:56:ee:76:01:c7:56:42:e5:0f: cb:eb:d7:01:ad:88:4d:09:ac:8a:70:be:96:74:3b: d7:90:ff:6e:85:45:66:31:a6:b1:8d:22:ff:17:3b: 98:07:e8:2c:b2:a4:e5:73:60:d0:54:02:4e:9e:74: da:6d:e0:5b:93:da:37:c8:39:a2:cf:9c:01:a1:80: 00:8b:26:04:45:e5:c8:78:38:97:41:ef:e5:5d:64: 8d:71:5d:89:0b:54:58:5d:0d:42:62:0f:3e:cd:4e: f8:79:4c:7e:49:df:04:6e:b2:65:f4:19:9d:08:f4: 9b:ed:bf:9f:ac:ef:23:b1:7d:dd:b3:27:bf:2d:69: 4a:c4:ed:8a:bd:34:22:6c:23:68:5a:50:75:2f:37: 73:1d:f3:25:2c:d1:b2:6c:f4:0e:3f:fa:86:ff:a9: 9c:81:aa:62:c6:98:95:c5:46:5c:b2:64:e9:1b:cd: c8:7e:75:fd:14:7e:ed:26:b9:58:e8:10:8d:5c:40: 2a:db:15:4e:29:34:e6:5d:ed:dd:e0:ea:0d:a2:af: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7A:D0:DF:D9:93:79:5D:A4:13:54:93:CC:AA:E2:87:DF:CB:EF:9F X509v3 Authority Key Identifier: keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/u3rQ39mTeV2kE1STzKrih9_L758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.2.154.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:49:34:ad:de:6b:15:ea:57:1f:49:bc:7f:9b:8e:f7:81:d0: 13:50:d1:ba:eb:1f:d1:98:35:d4:cd:17:d2:13:83:a4:aa:f6: 40:41:2f:09:15:60:27:27:b6:5c:9a:70:3b:4b:13:bf:64:6c: e2:13:99:3b:d4:fb:a4:3a:85:25:a7:83:30:15:f2:02:20:de: 5c:7a:6a:9b:36:7f:76:a7:24:3d:25:1a:dd:01:d6:10:59:2f: 81:34:55:f3:8d:17:04:38:49:47:26:f7:41:1b:e6:40:21:d6: 23:95:64:0c:17:9e:77:20:8e:da:fe:3c:94:ab:4b:41:b2:89: 7c:d1:01:c5:85:26:36:14:4d:1b:54:82:8b:9e:97:6d:6f:ea: 37:ce:65:70:f0:48:67:58:11:ce:59:18:54:06:94:f6:f2:e4: b7:33:72:15:a8:48:f5:01:f8:21:54:34:ad:c6:a5:a1:23:64: 47:f8:9c:53:42:1c:e9:25:3e:40:66:92:3a:40:df:f7:cc:2b: 0d:55:5d:21:63:b7:b7:ff:39:1b:17:e8:f6:de:c6:0d:37:0c: cf:9e:af:b0:97:73:41:a7:76:35:3a:3e:42:45:b8:93:65:47: d2:be:1b:8d:0c:e7:88:55:39:37:11:c8:d4:51:a9:4b:4d:34: d5:80:a1:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87VS1NIb+nDN9PtzujQghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzI1OGExOGNmNGQxMjI4ZTVjNzkwNzBkZmE2MzMxMTY4 MzIwYzUwHhcNMjYwMTAyMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjdhZDBkZmQ5OTM3OTVkYTQxMzU0OTNjY2FhZTI4N2RmY2JlZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw094QlESPsd50/Afp9jrKHzKuDmg pg7m1sa5zyKeJqsP5P2aU/QOMfS5Oke5wXmH7DFW7nYBx1ZC5Q/L69cBrYhNCayK cL6WdDvXkP9uhUVmMaaxjSL/FzuYB+gssqTlc2DQVAJOnnTabeBbk9o3yDmiz5wB oYAAiyYEReXIeDiXQe/lXWSNcV2JC1RYXQ1CYg8+zU74eUx+Sd8EbrJl9BmdCPSb 7b+frO8jsX3dsye/LWlKxO2KvTQibCNoWlB1LzdzHfMlLNGybPQOP/qG/6mcgapi xpiVxUZcsmTpG83IfnX9FH7tJrlY6BCNXEAq2xVOKTTmXe3d4OoNoq8/pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLt60N/Zk3ldpBNUk8yq4offy++fMB8GA1UdIwQY MBaAFLQyWKGM9NEijlx5Bw36YzEWgyDFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMt NTcyOGZiMjRiZjBlLzEvdTNyUTM5bVRlVjJrRTFTVHpLcmloOV9MNzU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMtNTcyOGZiMjRiZjBl LzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkAKaMA0G CSqGSIb3DQEBCwUAA4IBAQAaSTSt3msV6lcfSbx/m473gdATUNG66x/RmDXUzRfS E4OkqvZAQS8JFWAnJ7ZcmnA7SxO/ZGziE5k71PukOoUlp4MwFfICIN5cemqbNn92 pyQ9JRrdAdYQWS+BNFXzjRcEOElHJvdBG+ZAIdYjlWQMF553II7a/jyUq0tBsol8 0QHFhSY2FE0bVIKLnpdtb+o3zmVw8EhnWBHOWRhUBpT28uS3M3IVqEj1AfghVDSt xqWhI2RH+JxTQhzpJT5AZpI6QN/3zCsNVV0hY7e3/zkbF+j23sYNNwzPnq+wl3NB p3Y1Oj5CRbiTZUfSvhuNDOeIVTk3EcjUUalLTTTVgKGr -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:09 2026 by rpki-client