This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/c3WNo_4_81YtKAlp0VRoL7cFPtg.roa File: c3WNo_4_81YtKAlp0VRoL7cFPtg.roa (raw, json) Hash identifier: TP+B2IitpNpDU5H0sLBuUI5Oz9mFfqDfIHOQCcHsUyc= Subject key identifier: 73:75:8D:A3:FE:3F:F3:56:2D:28:09:69:D1:54:68:2F:B7:05:3E:D8 Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4 Certificate serial: 019B77C6E663CD5DCAC4AED95E7DF6D0C382 Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/c3WNo_4_81YtKAlp0VRoL7cFPtg.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21449 IP address blocks: 160.53.0.0/16 maxlen: 24 160.53.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e6:63:cd:5d:ca:c4:ae:d9:5e:7d:f6:d0:c3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73758da3fe3ff3562d280969d154682fb7053ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:2d:fe:7d:07:0c:43:e4:65:fb:bb:c1:bb: b5:6e:a7:42:39:c0:48:68:71:e5:37:ac:fb:7f:f7: ed:8b:17:c8:f5:fa:87:69:be:f7:c0:97:26:3b:23: ed:b5:1d:e1:25:5a:cd:9c:e5:ba:9c:2d:8e:19:b4: 0a:2e:9e:bd:8f:a6:79:72:18:41:28:f3:e4:90:ed: b6:34:40:1a:d4:6b:d9:c0:01:22:03:4c:21:60:75: 71:cd:4d:c3:cd:4a:65:72:4e:f5:df:9b:3c:21:fd: 07:f7:6a:b6:6a:67:2d:3b:e1:e2:87:b3:3c:f1:32: 24:50:5f:ca:89:e9:c4:cc:5a:8d:06:7a:cc:9f:46: d0:4a:f5:02:60:47:f9:cb:44:1b:90:f5:4d:cf:b4: 4a:98:0d:eb:f7:d6:5c:6a:4f:c5:41:ae:52:e8:57: 1a:76:7f:1b:6b:57:63:fb:05:26:7a:54:40:66:37: d4:5c:6a:35:7e:46:14:a3:d8:f8:9b:2a:be:a8:3e: a5:06:73:d8:51:6f:50:16:84:6c:d1:9e:45:04:4f: b4:a2:ec:88:f5:0e:54:46:32:1e:90:c7:87:c6:3d: 4d:03:c0:f3:ab:b8:f9:4f:07:3f:95:dd:24:3f:9a: 8e:74:00:51:39:19:8e:b6:f9:4c:97:49:80:a5:c4: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:75:8D:A3:FE:3F:F3:56:2D:28:09:69:D1:54:68:2F:B7:05:3E:D8 X509v3 Authority Key Identifier: keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/c3WNo_4_81YtKAlp0VRoL7cFPtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption c6:4d:6e:00:25:5e:5e:80:29:5f:f3:1b:34:b2:5c:67:33:2b: 63:1f:fc:7f:03:d4:26:b2:47:09:b6:bb:77:01:f6:71:79:2b: 76:04:40:c3:dd:a7:3f:e3:6c:6b:e6:8f:35:fa:40:f2:a2:5c: d7:28:15:28:2d:85:4a:a8:0a:c2:47:8f:8f:09:e8:14:0f:de: c0:57:85:42:d7:2f:7a:bb:c5:36:69:da:82:26:87:60:71:bd: 14:01:05:8b:7e:a2:da:6d:e9:09:33:4a:c7:07:e0:1b:12:87: 97:dc:78:e0:06:e8:f1:ae:20:26:c9:68:30:d8:2b:23:42:ab: 52:98:7b:7a:44:b5:0b:db:60:54:a7:64:18:c4:2e:88:0f:f3: f0:d0:ea:b5:75:bf:c1:7e:c6:49:24:39:89:da:b4:ef:cb:ad: 3b:8b:4d:1e:40:ba:e1:7a:12:db:b4:45:d4:82:a9:d9:33:07: 25:f1:26:c8:ca:66:97:cb:87:27:41:7f:11:79:4c:73:9a:21: a5:88:e5:ee:67:94:ee:a6:92:7a:08:d5:10:c3:e1:49:db:67: 09:97:b8:d3:14:38:a3:f6:75:bb:1e:56:39:1a:cf:cb:cb:82: a6:27:3e:4c:f7:cc:d3:3c:bb:cc:4e:d3:24:27:7b:8f:76:23: bf:5e:61:29 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3xuZjzV3KxK7ZXn320MOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDhjMjhiZTE1NTE2MjkwYjlkYTUxMzVlNThmNTVmYmI4 MGZmYjQwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mzc1OGRhM2ZlM2ZmMzU2MmQyODA5NjlkMTU0NjgyZmI3MDUzZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI4t/n0HDEPkZfu7wbu1bqdCOcBI aHHlN6z7f/ftixfI9fqHab73wJcmOyPttR3hJVrNnOW6nC2OGbQKLp69j6Z5chhB KPPkkO22NEAa1GvZwAEiA0whYHVxzU3DzUplck7135s8If0H92q2amctO+Hih7M8 8TIkUF/KienEzFqNBnrMn0bQSvUCYEf5y0QbkPVNz7RKmA3r99Zcak/FQa5S6Fca dn8ba1dj+wUmelRAZjfUXGo1fkYUo9j4myq+qD6lBnPYUW9QFoRs0Z5FBE+0ouyI 9Q5URjIekMeHxj1NA8Dzq7j5Twc/ld0kP5qOdABRORmOtvlMl0mApcQQnwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFHN1jaP+P/NWLSgJadFUaC+3BT7YMB8GA1UdIwQY MBaAFIoIwovhVRYpC52lE15Y9V+7gP+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2Mt MDYxOGM5YThjYWM0LzEvYzNXTm9fNF84MVl0S0FscDBWUm9MN2NGUHRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2MtMDYxOGM5YThjYWM0 LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoDUwDQYJ KoZIhvcNAQELBQADggEBAMZNbgAlXl6AKV/zGzSyXGczK2Mf/H8D1CayRwm2u3cB 9nF5K3YEQMPdpz/jbGvmjzX6QPKiXNcoFSgthUqoCsJHj48J6BQP3sBXhULXL3q7 xTZp2oImh2BxvRQBBYt+otpt6QkzSscH4BsSh5fceOAG6PGuICbJaDDYKyNCq1KY e3pEtQvbYFSnZBjELogP8/DQ6rV1v8F+xkkkOYnatO/LrTuLTR5AuuF6Etu0RdSC qdkzByXxJsjKZpfLhydBfxF5THOaIaWI5e5nlO6mknoI1RDD4UnbZwmXuNMUOKP2 dbseVjkaz8vLgqYnPkz3zNM8u8xO0yQne492I79eYSk= -----END CERTIFICATE-----Generated at Tue Jan 27 07:11:28 2026 by rpki-client