This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa File: A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa (raw, json) Hash identifier: nIgl47uG67Ucbrg3x+vJSBwfTbEfiuOT6Ukb3huxJZs= Subject key identifier: 03:7C:64:9A:DD:43:DA:DB:23:7C:17:1C:4B:C1:6C:80:01:54:9C:E4 Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a Certificate serial: 019B7F15CFCD6ACDF3D6D06C276B890D3E51 Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8376 IP address blocks: 217.29.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cf:cd:6a:cd:f3:d6:d0:6c:27:6b:89:0d:3e:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=037c649add43dadb237c171c4bc16c8001549ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:73:fe:d0:9f:6e:a5:67:ca:f7:74:e0:2c: da:01:53:37:3f:30:d3:a4:27:f5:e4:28:79:4f:51: 15:d4:65:a1:40:98:49:ee:4e:37:0f:ff:5b:99:34: bd:4e:73:25:7b:d1:a7:c0:22:83:58:f8:c2:bf:ad: 9a:e4:1e:9a:84:1f:23:a0:4d:4a:73:b9:d5:31:b3: 63:f3:41:c9:be:64:ea:ec:a0:aa:ff:6b:73:50:4e: 45:c8:5a:c0:8a:57:2a:aa:9d:a5:29:85:6a:7a:b5: 41:53:5e:0f:55:7e:6b:0b:fa:df:81:59:87:77:40: ca:81:58:23:f2:99:4e:2d:d3:51:a1:75:61:90:2d: 1d:da:0c:85:d7:40:8f:b2:bd:fa:c2:7a:6c:09:b2: 61:4c:54:52:b0:5f:8d:fa:25:ff:bd:9d:3b:28:e4: 74:1e:a8:44:27:d1:e0:c9:a8:20:e3:11:10:c8:42: 16:80:d5:fd:6d:0c:fe:6a:af:cb:0d:f6:38:9f:83: b4:4f:17:61:92:79:09:73:b5:12:dd:91:38:41:0e: 28:a2:d3:49:1a:26:aa:81:c9:ee:b2:40:18:9f:08: 6c:bd:75:47:bf:25:9a:b9:6e:10:59:1b:39:fc:0a: f7:72:e8:91:03:49:a7:de:05:00:70:db:5d:64:50: 74:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7C:64:9A:DD:43:DA:DB:23:7C:17:1C:4B:C1:6C:80:01:54:9C:E4 X509v3 Authority Key Identifier: keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/A3xkmt1D2tsjfBccS8FsgAFUnOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.29.242.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:dd:4c:28:8a:3d:21:89:38:75:c8:fb:53:9f:94:a5:ee:63: 03:1f:a4:4f:8d:a6:c5:49:52:40:12:e5:54:cf:ac:df:f5:af: 53:5b:54:68:27:e2:66:a5:74:d6:db:e2:fb:f6:35:fe:f8:40: 65:1e:4a:dc:6b:09:41:db:73:3a:5c:2f:c2:c4:68:45:f9:77: b0:d7:ab:6a:56:9e:e0:ff:cb:83:10:6b:19:0d:7d:6b:c0:ec: cd:c2:bf:25:ab:e0:c0:e0:99:72:06:1b:67:85:92:2c:fc:da: 43:8a:e5:0e:39:92:fe:f7:4d:96:7a:f1:9f:9e:30:b2:58:b4: d5:d8:bb:11:bb:e7:5a:f5:cc:92:db:36:7c:50:82:64:8d:f3: 7f:ab:c2:6e:f1:a6:cc:14:0d:a8:7c:f8:43:45:3c:13:d3:8d: 46:03:1c:3c:30:f0:b1:1a:31:cd:11:fb:0b:47:67:e5:6d:8e: 8c:a2:50:45:1f:42:a9:d2:6d:46:bb:b4:83:41:c9:0b:e3:88: 8e:f8:54:d5:17:b4:99:bb:db:74:c9:d6:d9:49:65:b7:f1:1d: b3:3a:b7:ba:8b:2c:02:b1:8f:db:53:c6:80:38:c6:33:3b:86: af:8e:b0:82:7d:e1:0d:3b:6b:e3:87:40:71:6b:3b:61:79:17: eb:b6:dc:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fc/Nas3z1tBsJ2uJDT5RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGZkNDUzZjVlMzVmOWM3N2QxZDcwNmU1NjUxMzhhZGY4 MjI1NmEwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzdjNjQ5YWRkNDNkYWRiMjM3YzE3MWM0YmMxNmM4MDAxNTQ5Y2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYlz/tCfbqVnyvd04CzaAVM3PzDT pCf15Ch5T1EV1GWhQJhJ7k43D/9bmTS9TnMle9GnwCKDWPjCv62a5B6ahB8joE1K c7nVMbNj80HJvmTq7KCq/2tzUE5FyFrAilcqqp2lKYVqerVBU14PVX5rC/rfgVmH d0DKgVgj8plOLdNRoXVhkC0d2gyF10CPsr36wnpsCbJhTFRSsF+N+iX/vZ07KOR0 HqhEJ9Hgyagg4xEQyEIWgNX9bQz+aq/LDfY4n4O0TxdhknkJc7US3ZE4QQ4ootNJ GiaqgcnuskAYnwhsvXVHvyWauW4QWRs5/Ar3cuiRA0mn3gUAcNtdZFB01QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAN8ZJrdQ9rbI3wXHEvBbIABVJzkMB8GA1UdIwQY MBaAFEmP1FP141+cd9HXBuVlE4rfgiVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYt Mzk3OWVmMGQzMmRiLzEvQTN4a210MUQydHNqZkJjY1M4RnNnQUZVbk9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYtMzk3OWVmMGQzMmRi LzEvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2R3yMA0G CSqGSIb3DQEBCwUAA4IBAQBO3Uwoij0hiTh1yPtTn5Sl7mMDH6RPjabFSVJAEuVU z6zf9a9TW1RoJ+JmpXTW2+L79jX++EBlHkrcawlB23M6XC/CxGhF+Xew16tqVp7g /8uDEGsZDX1rwOzNwr8lq+DA4JlyBhtnhZIs/NpDiuUOOZL+902WevGfnjCyWLTV 2LsRu+da9cyS2zZ8UIJkjfN/q8Ju8abMFA2ofPhDRTwT041GAxw8MPCxGjHNEfsL R2flbY6MolBFH0Kp0m1Gu7SDQckL44iO+FTVF7SZu9t0ydbZSWW38R2zOre6iywC sY/bU8aAOMYzO4avjrCCfeENO2vjh0BxaztheRfrttyC -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:59 2026 by rpki-client