This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/L3gW4MNmdb0yfPJGEwYdlY8_fqM.roa File: L3gW4MNmdb0yfPJGEwYdlY8_fqM.roa (raw, json) Hash identifier: ivdcntVpXSIka4vCYKhRHNsu6xqEGJkVPOsPAJlSsGA= Subject key identifier: 2F:78:16:E0:C3:66:75:BD:32:7C:F2:46:13:06:1D:95:8F:3F:7E:A3 Certificate issuer: /CN=bb7752a719b740a0e0244dd29c6532f79151646b Certificate serial: 019B7CEE29B06A9B7F59A471CA737103A889 Authority key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/L3gW4MNmdb0yfPJGEwYdlY8_fqM.roa Signing time: Fri 02 Jan 2026 04:19:01 +0000 ROA not before: Fri 02 Jan 2026 04:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197025 IP address blocks: 178.212.48.0/24 maxlen: 24 178.212.49.0/24 maxlen: 24 178.212.50.0/24 maxlen: 24 178.212.51.0/24 maxlen: 24 178.212.52.0/24 maxlen: 24 178.212.53.0/24 maxlen: 24 178.212.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:29:b0:6a:9b:7f:59:a4:71:ca:73:71:03:a8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb7752a719b740a0e0244dd29c6532f79151646b Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f7816e0c36675bd327cf24613061d958f3f7ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8d:1b:99:eb:1a:a2:89:d0:99:6e:52:44:37: 27:e2:d6:ad:7e:a5:3a:ba:10:d4:a0:fc:5d:d7:ac: a5:dc:1e:ab:41:92:76:53:46:6c:ea:00:04:d4:8f: 2c:e7:15:9b:fa:49:c1:93:b9:d0:e5:3b:76:44:38: 2f:d7:6d:82:4a:b2:db:c1:f6:c5:80:4e:8f:c8:8c: 81:24:fa:47:a8:3f:1b:ce:a6:36:e3:e9:f2:57:2f: 5f:c1:db:37:bb:b5:78:91:8b:c5:11:a6:ff:a8:1e: 1f:52:27:45:32:23:9c:1a:4a:e2:8b:8e:9c:35:39: 5f:5b:dc:32:c0:cc:2c:8d:46:b8:2b:f9:b5:03:de: fc:76:54:a5:e4:2f:84:29:8d:ba:29:a3:85:88:c7: 33:46:7b:61:fd:f2:9c:b5:33:d4:1f:ef:22:fc:1f: a4:41:d7:a7:81:17:1d:3a:af:8a:e2:a0:f3:5b:9c: 33:cb:d7:14:e7:76:84:6c:35:1f:24:54:62:41:15: bf:91:33:c0:0e:61:5d:35:fb:3f:a0:36:ca:0a:fe: 61:9e:cb:fd:8d:6b:97:d0:8a:59:42:c7:b8:0e:69: fa:03:0e:89:f3:21:52:1c:72:91:d0:9f:64:54:84: ac:4e:93:f4:6d:ff:c6:33:b9:c7:fa:1c:14:ca:b5: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:78:16:E0:C3:66:75:BD:32:7C:F2:46:13:06:1D:95:8F:3F:7E:A3 X509v3 Authority Key Identifier: keyid:BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/L3gW4MNmdb0yfPJGEwYdlY8_fqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.48.0-178.212.54.255 Signature Algorithm: sha256WithRSAEncryption 4d:41:fb:0b:7d:cc:24:cb:9e:3e:73:e1:6d:e1:2b:9a:87:b3: 6f:13:a4:21:2c:57:06:d1:8d:fe:ab:93:67:d6:54:2d:ff:6d: 53:b0:8e:8c:29:8e:55:a9:34:64:1b:2a:5e:e2:d9:22:cc:4f: bb:87:a9:2b:07:09:95:6c:73:7f:da:3b:27:d2:12:ab:0c:f1: ea:07:db:6b:b4:91:cf:cc:f2:b1:d8:91:90:dd:ba:f1:07:5d: 1c:87:07:99:9e:ac:cc:c6:da:3a:32:e6:c4:72:ff:d5:cc:71: fc:79:ac:b7:20:27:2f:ca:7f:07:da:b2:0c:ad:7e:3d:f5:c4: 2b:68:b6:79:55:e5:a7:19:9e:a8:4a:96:92:4a:1b:28:af:a7: 85:46:87:25:4e:75:73:84:3b:ae:49:74:f8:1a:e9:93:d3:5c: 37:b1:86:68:99:e4:db:43:34:81:08:47:35:37:25:ab:66:d4: ff:dd:e8:92:7e:48:cf:42:71:47:69:f4:e5:b8:87:6d:9f:af: a2:53:9e:92:d6:62:26:ae:94:b3:09:ed:87:a7:d4:dc:7b:d6: 6f:cd:b2:b9:3f:2b:4f:78:1a:3d:53:30:05:ca:fc:11:ae:b2: 16:83:af:68:9f:9e:67:ec:e2:d6:8f:59:a7:8e:76:d3:92:9c: e1:21:3b:16 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87imwapt/WaRxynNxA6iJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzc1MmE3MTliNzQwYTBlMDI0NGRkMjljNjUzMmY3OTE1 MTY0NmIwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjc4MTZlMGMzNjY3NWJkMzI3Y2YyNDYxMzA2MWQ5NThmM2Y3ZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo0bmesaoonQmW5SRDcn4tatfqU6 uhDUoPxd16yl3B6rQZJ2U0Zs6gAE1I8s5xWb+knBk7nQ5Tt2RDgv122CSrLbwfbF gE6PyIyBJPpHqD8bzqY24+nyVy9fwds3u7V4kYvFEab/qB4fUidFMiOcGkrii46c NTlfW9wywMwsjUa4K/m1A978dlSl5C+EKY26KaOFiMczRnth/fKctTPUH+8i/B+k QdengRcdOq+K4qDzW5wzy9cU53aEbDUfJFRiQRW/kTPADmFdNfs/oDbKCv5hnsv9 jWuX0IpZQse4Dmn6Aw6J8yFSHHKR0J9kVISsTpP0bf/GM7nH+hwUyrUpEQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFC94FuDDZnW9MnzyRhMGHZWPP36jMB8GA1UdIwQY MBaAFLt3UqcZt0Cg4CRN0pxlMveRUWRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYzMyYjUtYzBjOC00MzZhLTlhZDYt MzM1NGFkYmExMWIxLzEvTDNnVzRNTm1kYjB5ZlBKR0V3WWRsWThfZnFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zYzMyYjUtYzBjOC00MzZhLTlhZDYtMzM1NGFkYmExMWIx LzEvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASy1DAD BACy1DYwDQYJKoZIhvcNAQELBQADggEBAE1B+wt9zCTLnj5z4W3hK5qHs28TpCEs VwbRjf6rk2fWVC3/bVOwjowpjlWpNGQbKl7i2SLMT7uHqSsHCZVsc3/aOyfSEqsM 8eoH22u0kc/M8rHYkZDduvEHXRyHB5merMzG2joy5sRy/9XMcfx5rLcgJy/Kfwfa sgytfj31xCtotnlV5acZnqhKlpJKGyivp4VGhyVOdXOEO65JdPga6ZPTXDexhmiZ 5NtDNIEIRzU3Jatm1P/d6JJ+SM9CcUdp9OW4h22fr6JTnpLWYiaulLMJ7Yen1Nx7 1m/Nsrk/K094Gj1TMAXK/BGushaDr2ifnmfs4taPWaeOdtOSnOEhOxY= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:56 2026 by rpki-client