This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/_3P5Hj-NN5sEQbIoHeVzpxmupBE.roa File: _3P5Hj-NN5sEQbIoHeVzpxmupBE.roa (raw, json) Hash identifier: fqjtU8iq/3sewZnAYCqosCDuiamCE8qhnJFe+SnTMN8= Subject key identifier: FF:73:F9:1E:3F:8D:37:9B:04:41:B2:28:1D:E5:73:A7:19:AE:A4:11 Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c Certificate serial: 019B7F80BB1336E465BCEB2C7710CF4A3971 Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/_3P5Hj-NN5sEQbIoHeVzpxmupBE.roa Signing time: Fri 02 Jan 2026 16:18:21 +0000 ROA not before: Fri 02 Jan 2026 16:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 145.36.0.0/19 maxlen: 19 145.36.32.0/19 maxlen: 19 145.36.64.0/19 maxlen: 19 145.36.96.0/19 maxlen: 19 145.36.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:bb:13:36:e4:65:bc:eb:2c:77:10:cf:4a:39:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c Validity Not Before: Jan 2 16:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff73f91e3f8d379b0441b2281de573a719aea411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:23:41:91:58:1c:b2:aa:77:75:fa:97:7e: 1d:cb:ef:98:a6:76:8b:05:5a:0c:c8:4d:34:47:25: 89:26:73:e9:15:26:4f:0a:2f:47:48:66:f5:87:1b: fe:25:0b:a2:49:52:cd:cc:85:86:84:67:0e:9b:cc: 79:ab:e9:04:00:21:22:f9:4d:fa:92:48:ab:ae:47: ca:3a:5f:fe:a9:b2:2a:26:17:81:5d:06:e3:37:9e: 3f:fd:50:8a:31:53:2f:5b:f3:3a:25:e3:80:84:00: b2:bb:d7:97:fb:cf:e4:18:39:81:2d:29:7c:b4:23: 16:f4:54:1d:1a:11:cd:d5:b8:e3:a2:da:a8:ba:92: 2f:4c:dd:85:5c:52:a6:31:49:e2:f0:ce:aa:c3:e6: 6d:6f:92:2c:87:83:10:b5:27:b8:fa:3a:92:0c:d9: ab:ce:72:2c:d8:44:53:13:b1:c1:e5:22:b3:15:b0: c3:fe:38:09:e1:7d:0a:49:c3:6c:25:05:64:bc:3e: c2:46:8d:f9:8a:54:0b:f9:ca:5e:5d:06:99:cf:07: f1:4d:e3:99:4c:5c:68:19:3c:38:2b:dd:2b:1d:ff: b9:6a:5c:a6:56:41:2d:bf:3d:3c:69:23:20:55:56: 9b:ac:7b:cc:56:9a:b8:79:8a:bb:d4:64:e9:d9:59: 47:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:73:F9:1E:3F:8D:37:9B:04:41:B2:28:1D:E5:73:A7:19:AE:A4:11 X509v3 Authority Key Identifier: keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/_3P5Hj-NN5sEQbIoHeVzpxmupBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.36.0.0/16 Signature Algorithm: sha256WithRSAEncryption 30:12:2b:dc:99:3d:70:aa:24:b4:64:cc:7b:60:08:0e:02:6d: b4:8f:fd:51:36:34:06:4b:53:2a:ef:a1:ca:42:ff:5a:fa:f1: ec:85:87:48:a3:88:7f:3d:d8:65:38:2b:9c:c5:2c:08:67:8c: 08:83:59:27:6e:11:b8:55:b0:89:70:55:27:2c:b4:75:99:77: 97:97:f3:82:93:d4:aa:32:ba:e7:4e:92:4b:ae:56:4f:fc:be: 64:82:16:a1:78:20:a3:2f:fa:93:9d:de:eb:54:7a:d6:1a:64: f0:53:be:24:ff:e4:47:b7:41:e5:15:5b:ca:1a:5a:43:69:d3: 42:e8:d4:b8:0f:9e:d8:e8:59:be:61:20:86:df:fc:67:96:00: 22:ac:8c:b8:4f:07:dd:c7:0b:28:06:07:d6:3a:29:08:01:d0: 00:9f:e1:44:7f:56:78:c8:d7:16:b0:32:0a:d7:84:47:c7:6d: bb:a8:6d:eb:18:06:5c:e0:07:8b:ec:14:cb:0e:fb:8e:be:c4: 47:e6:cd:bd:e3:45:a8:0e:49:94:4b:de:39:83:84:a1:e1:68: 64:af:3c:3c:02:56:d4:cd:b0:f6:3b:24:64:4f:5c:5f:f1:d7: 09:3e:53:e3:9c:79:e7:18:15:a2:15:4c:41:3d:23:4e:d1:2c: ad:ba:d5:c9 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt/gLsTNuRlvOssdxDPSjlxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YzE4MTcwNmY2MWM0YjczN2NkN2ViNzhmNzIzMGUzNGNk ZmMxNGMwHhcNMjYwMTAyMTYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjczZjkxZTNmOGQzNzliMDQ0MWIyMjgxZGU1NzNhNzE5YWVhNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJIjQZFYHLKqd3X6l34dy++YpnaL BVoMyE00RyWJJnPpFSZPCi9HSGb1hxv+JQuiSVLNzIWGhGcOm8x5q+kEACEi+U36 kkirrkfKOl/+qbIqJheBXQbjN54//VCKMVMvW/M6JeOAhACyu9eX+8/kGDmBLSl8 tCMW9FQdGhHN1bjjotqoupIvTN2FXFKmMUni8M6qw+Ztb5Ish4MQtSe4+jqSDNmr znIs2ERTE7HB5SKzFbDD/jgJ4X0KScNsJQVkvD7CRo35ilQL+cpeXQaZzwfxTeOZ TFxoGTw4K90rHf+5alymVkEtvz08aSMgVVabrHvMVpq4eYq71GTp2VlHIwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFP9z+R4/jTebBEGyKB3lc6cZrqQRMB8GA1UdIwQY MBaAFBXBgXBvYcS3N81+t49yMONM38FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUt OGZmNmNkNzc0N2M0LzEvXzNQNUhqLU5ONXNFUWJJb0hlVnpweG11cEJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUtOGZmNmNkNzc0N2M0 LzEvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkSQwDQYJ KoZIhvcNAQELBQADggEBADASK9yZPXCqJLRkzHtgCA4CbbSP/VE2NAZLUyrvocpC /1r68eyFh0ijiH892GU4K5zFLAhnjAiDWSduEbhVsIlwVScstHWZd5eX84KT1Koy uudOkkuuVk/8vmSCFqF4IKMv+pOd3utUetYaZPBTviT/5Ee3QeUVW8oaWkNp00Lo 1LgPntjoWb5hIIbf/GeWACKsjLhPB93HCygGB9Y6KQgB0ACf4UR/VnjI1xawMgrX hEfHbbuobesYBlzgB4vsFMsO+46+xEfmzb3jRagOSZRL3jmDhKHhaGSvPDwCVtTN sPY7JGRPXF/x1wk+U+OceecYFaIVTEE9I07RLK261ck= -----END CERTIFICATE-----Generated at Fri Jan 9 17:04:39 2026 by rpki-client