This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa File: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (raw, json) Hash identifier: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8= Subject key identifier: AC:4C:63:31:1F:8F:F7:90:73:CF:94:52:EA:9D:49:80:CF:09:48:D4 Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB8FBD2D20224E6A3356C51DE46C6A Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207360 IP address blocks: 217.22.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8f:bd:2d:20:22:4e:6a:33:56:c5:1d:e4:6c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac4c63311f8ff79073cf9452ea9d4980cf0948d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:c9:2e:df:44:bf:dc:0a:9d:a8:e7:ac:e7: 3a:97:2f:8d:b3:51:fe:75:ed:98:17:28:74:69:b7: d8:76:35:f4:32:30:2f:c1:97:1b:2b:8a:d6:95:af: 05:05:02:1d:5f:fb:ea:93:bc:8b:f8:be:1c:14:f3: 69:19:6e:96:52:22:64:53:b5:08:d6:19:91:2d:5b: eb:e7:7b:e3:ee:c6:c1:5a:4f:82:d7:df:36:cb:6b: b0:71:05:5e:c0:9b:e0:1c:39:c3:e1:28:31:27:f3: 31:b6:76:bb:84:57:02:b5:5b:be:3d:1d:82:e8:10: e7:ba:a4:ad:8c:0d:1c:97:e0:a7:29:57:b1:dc:13: 02:30:02:8c:df:32:61:df:75:b9:35:40:18:3d:2f: db:e2:f3:73:36:c5:55:d7:79:51:86:30:78:39:15: 08:5a:d8:a7:29:44:87:8d:86:44:0c:55:b2:ee:96: f9:f4:e2:35:56:5d:8f:1a:6f:09:9d:74:6c:32:71: 3a:08:e2:60:58:ac:71:ba:06:b5:87:bd:13:6a:ac: b5:76:7b:92:bb:9f:46:3a:7f:23:8c:dd:9f:df:d4: 9c:26:f4:4e:48:db:0e:d4:40:65:69:15:6b:59:39: c1:8d:ae:f5:9a:71:59:b6:e5:38:f5:f5:11:12:0a: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4C:63:31:1F:8F:F7:90:73:CF:94:52:EA:9D:49:80:CF:09:48:D4 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.22.115.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:76:bc:c0:fc:3a:27:f9:7c:60:13:e1:1b:84:56:da:93:24: 63:67:77:9a:3d:a4:de:8c:ef:d0:42:7a:5f:bb:8b:13:29:69: e8:c0:22:dc:fd:a7:2d:4e:4e:9d:53:af:ad:29:fc:a7:4e:fe: 62:3a:88:4f:97:01:b2:cf:dd:40:50:b2:a3:08:55:22:93:1b: 65:82:7f:72:ad:77:0f:6f:de:13:ce:46:b0:7f:ee:1b:fc:5e: 68:1a:63:26:bf:58:f7:33:6c:68:66:b0:b7:b0:fa:a1:ec:0f: d1:16:1b:c0:70:37:fc:fd:ab:f6:45:d9:25:17:54:d7:eb:85: db:bc:e5:1e:4f:7b:75:d3:17:ce:58:30:56:4b:4f:c0:b0:5c: be:6e:75:0d:26:9f:e4:df:5f:38:df:7f:b9:bf:46:e4:9c:2b: 95:16:e2:66:25:6e:0b:84:f5:7c:be:c9:20:56:aa:26:e7:0e: 65:02:f5:26:65:9a:7f:d7:b6:97:53:eb:fb:c2:f9:ea:47:5b: 7a:22:76:22:35:78:56:3a:10:e3:62:37:99:e2:61:c1:d0:38: 98:d8:97:c7:8e:97:76:e7:c5:6e:2c:4d:5b:27:19:78:cd:c0: 25:55:3d:e3:fb:34:e6:85:d9:16:c9:8a:e0:72:45:8a:a6:b1: 06:d9:df:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264+9LSAiTmozVsUd5GxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzRjNjMzMTFmOGZmNzkwNzNjZjk0NTJlYTlkNDk4MGNmMDk0OGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohXJLt9Ev9wKnajnrOc6ly+Ns1H+ de2YFyh0abfYdjX0MjAvwZcbK4rWla8FBQIdX/vqk7yL+L4cFPNpGW6WUiJkU7UI 1hmRLVvr53vj7sbBWk+C1982y2uwcQVewJvgHDnD4SgxJ/Mxtna7hFcCtVu+PR2C 6BDnuqStjA0cl+CnKVex3BMCMAKM3zJh33W5NUAYPS/b4vNzNsVV13lRhjB4ORUI WtinKUSHjYZEDFWy7pb59OI1Vl2PGm8JnXRsMnE6COJgWKxxuga1h70Taqy1dnuS u59GOn8jjN2f39ScJvROSNsO1EBlaRVrWTnBja71mnFZtuU49fUREgpFqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxMYzEfj/eQc8+UUuqdSYDPCUjUMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvckV4ak1SLVA5NUJ6ejVSUzZwMUpnTThKU05RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RZzMA0G CSqGSIb3DQEBCwUAA4IBAQAOdrzA/Don+XxgE+EbhFbakyRjZ3eaPaTejO/QQnpf u4sTKWnowCLc/actTk6dU6+tKfynTv5iOohPlwGyz91AULKjCFUikxtlgn9yrXcP b94Tzkawf+4b/F5oGmMmv1j3M2xoZrC3sPqh7A/RFhvAcDf8/av2RdklF1TX64Xb vOUeT3t10xfOWDBWS0/AsFy+bnUNJp/k318433+5v0bknCuVFuJmJW4LhPV8vskg Vqom5w5lAvUmZZp/17aXU+v7wvnqR1t6InYiNXhWOhDjYjeZ4mHB0DiY2JfHjpd2 58VuLE1bJxl4zcAlVT3j+zTmhdkWyYrgckWKprEG2d8r -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:51 2026 by rpki-client