This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3ZOz5T-wSu4Sx6yLvVoPfo3q9l8.roa File: 3ZOz5T-wSu4Sx6yLvVoPfo3q9l8.roa (raw, json) Hash identifier: PM12cxIanZmm93QrDsJhaSihI3UoI6a4Buyf8LnnJ18= Subject key identifier: DD:93:B3:E5:3F:B0:4A:EE:12:C7:AC:8B:BD:5A:0F:7E:8D:EA:F6:5F Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA77413371AFE3242F4678747FA8B07 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3ZOz5T-wSu4Sx6yLvVoPfo3q9l8.roa Signing time: Fri 02 Jan 2026 12:21:02 +0000 ROA not before: Fri 02 Jan 2026 12:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42358 IP address blocks: 46.255.96.0/21 maxlen: 21 77.72.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:74:13:37:1a:fe:32:42:f4:67:87:47:fa:8b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd93b3e53fb04aee12c7ac8bbd5a0f7e8deaf65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:e7:bc:64:c6:f9:cf:66:57:c3:2e:09:5c: 2f:b7:86:a2:bb:9c:c1:c3:28:6a:2c:a8:f8:e0:5b: c1:e6:b7:78:ac:d4:b8:64:d8:6c:94:70:de:50:9b: 94:73:56:c7:b6:c4:98:f3:85:30:20:f2:f2:7a:9d: 7a:b1:d7:50:b2:52:f0:be:45:52:c2:c5:20:1f:31: 22:d9:df:d7:35:68:7d:5e:28:9e:1e:c2:3e:2e:e6: 16:fd:65:1f:aa:79:73:a2:ac:fd:2c:d3:7b:96:b4: a4:fc:29:96:db:a7:ad:8f:9d:c8:7f:16:05:f4:b6: ec:1c:0b:2f:15:ba:b0:32:96:e6:9a:64:51:dc:c2: 20:13:c6:55:32:d3:b9:a1:5c:fe:39:e7:ad:21:62: 11:ba:c1:26:5c:fb:ae:7e:df:ab:05:bd:30:4c:83: 81:72:7d:3d:20:a5:2a:8c:51:45:aa:0f:7b:ef:db: ee:7c:5e:51:b9:1c:a2:d8:9b:bd:a3:74:4b:d4:11: 10:f5:cc:d7:a7:3f:6c:4e:6e:34:a0:7f:41:84:7f: 54:bf:20:35:df:49:25:b2:f7:d8:2e:22:95:b9:fb: b6:88:8d:3c:9f:13:1f:f9:f7:28:1c:d1:7f:07:08: f4:b8:b4:56:e8:67:07:54:e3:0d:15:da:a9:be:e8: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:93:B3:E5:3F:B0:4A:EE:12:C7:AC:8B:BD:5A:0F:7E:8D:EA:F6:5F X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3ZOz5T-wSu4Sx6yLvVoPfo3q9l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.96.0/21 77.72.136.0/21 Signature Algorithm: sha256WithRSAEncryption 05:28:16:7b:1f:b0:a8:9f:7b:fc:f9:3e:aa:60:08:58:37:9e: 00:d1:13:60:ab:69:b4:f8:4d:04:60:6f:ce:ba:1b:1e:e4:c7: 5c:44:37:04:8c:a3:69:a5:dc:6a:a4:3c:a7:44:85:03:fe:c0: 5d:ea:b2:9c:8d:13:91:d0:51:25:17:c5:f8:7a:36:3e:68:44: 2a:72:cf:57:88:87:0c:6b:8f:5c:40:da:df:74:4b:ee:ac:73: 38:bc:14:25:17:c4:da:47:86:58:ff:97:2d:6b:3a:18:59:48: ac:33:f5:ed:26:dc:ca:63:46:34:8b:42:0f:38:99:ab:e2:98: c7:43:31:b9:2a:98:a2:b5:b1:50:f0:f3:4d:44:38:83:00:2b: 41:ba:25:a8:5c:a3:a4:6f:a5:da:ea:23:40:10:a7:e0:40:20: 3b:ed:f8:a6:44:90:61:f9:41:d1:ae:f4:8c:7e:bf:92:fc:db: 25:ee:9e:0f:17:b1:03:38:c0:e9:78:cf:5b:a6:23:35:6e:c9: e6:66:84:99:dd:36:6b:e1:ad:6b:44:ee:ba:55:a3:d1:7f:a9: 9d:32:54:eb:3d:65:dc:21:53:de:18:8a:56:99:83:a6:ec:06: c8:30:5a:b1:fd:89:62:e8:80:de:2a:62:30:68:8c:bd:03:15: f3:f6:95:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+p3QTNxr+MkL0Z4dH+osHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDkzYjNlNTNmYjA0YWVlMTJjN2FjOGJiZDVhMGY3ZThkZWFmNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IfnvGTG+c9mV8MuCVwvt4aiu5zB wyhqLKj44FvB5rd4rNS4ZNhslHDeUJuUc1bHtsSY84UwIPLyep16sddQslLwvkVS wsUgHzEi2d/XNWh9XiieHsI+LuYW/WUfqnlzoqz9LNN7lrSk/CmW26etj53IfxYF 9LbsHAsvFbqwMpbmmmRR3MIgE8ZVMtO5oVz+OeetIWIRusEmXPuuft+rBb0wTIOB cn09IKUqjFFFqg9779vufF5RuRyi2Ju9o3RL1BEQ9czXpz9sTm40oH9BhH9UvyA1 30klsvfYLiKVufu2iI08nxMf+fcoHNF/Bwj0uLRW6GcHVOMNFdqpvugeTwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN2Ts+U/sEruEsesi71aD36N6vZfMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvM1pPejVULXdTdTRTeDZ5THZWb1BmbzNxOWw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLv9gAwQD TUiIMA0GCSqGSIb3DQEBCwUAA4IBAQAFKBZ7H7Con3v8+T6qYAhYN54A0RNgq2m0 +E0EYG/Ouhse5MdcRDcEjKNppdxqpDynRIUD/sBd6rKcjROR0FElF8X4ejY+aEQq cs9XiIcMa49cQNrfdEvurHM4vBQlF8TaR4ZY/5ctazoYWUisM/XtJtzKY0Y0i0IP OJmr4pjHQzG5KpiitbFQ8PNNRDiDACtBuiWoXKOkb6Xa6iNAEKfgQCA77fimRJBh +UHRrvSMfr+S/Nsl7p4PF7EDOMDpeM9bpiM1bsnmZoSZ3TZr4a1rRO66VaPRf6md MlTrPWXcIVPeGIpWmYOm7AbIMFqx/Yli6IDeKmIwaIy9AxXz9pV1 -----END CERTIFICATE-----Generated at Mon Jan 26 11:28:28 2026 by rpki-client