This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/3D1cLIqJM9j2TiDk4FKtoH3bACY.roa File: 3D1cLIqJM9j2TiDk4FKtoH3bACY.roa (raw, json) Hash identifier: 9wyJBuDfbj2/qxzFzPQPUFVR/sga3QbA+VZr0ZYglIg= Subject key identifier: DC:3D:5C:2C:8A:89:33:D8:F6:4E:20:E4:E0:52:AD:A0:7D:DB:00:26 Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 019B77595E211D0E9E0FB378C19259CD994F Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/3D1cLIqJM9j2TiDk4FKtoH3bACY.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209541 IP address blocks: 147.78.232.0/22 maxlen: 22 147.78.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5e:21:1d:0e:9e:0f:b3:78:c1:92:59:cd:99:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc3d5c2c8a8933d8f64e20e4e052ada07ddb0026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0c:96:49:5a:9d:8e:da:1e:fe:ce:5a:98:71: fa:24:06:6d:49:09:55:a4:ee:6e:4d:33:76:69:f0: 19:0d:75:5b:70:bd:55:9c:cc:dc:15:6f:14:6c:71: b2:c6:18:8c:5b:67:49:1b:87:49:6f:af:fb:6a:8e: 99:ce:c5:9f:a8:ae:07:a6:5f:e8:e5:7e:09:ac:58: 5d:a0:12:b4:e7:88:e5:fd:0f:2f:df:9e:6c:6a:79: fb:14:ca:5e:08:e1:a3:de:6b:8a:f7:81:ae:5f:89: 39:6d:c2:ba:6a:2d:c9:24:83:2d:37:4e:8a:89:e1: 23:52:37:6a:fd:56:66:36:56:ad:2a:a4:12:b7:14: cb:9a:04:ec:6a:9e:df:6a:75:e1:14:18:3e:4a:74: 15:f3:9c:46:51:b0:ec:7e:ee:4f:f3:22:56:53:bc: 37:89:c7:94:95:46:25:34:c2:f8:13:cb:10:36:72: c6:57:c5:76:bd:aa:2c:7b:8f:ed:5c:79:59:a9:d9: 10:dd:1b:b8:bd:60:35:51:48:3b:c7:cc:8a:75:02: 64:2f:c9:a4:05:75:18:96:93:6a:54:5e:a7:dd:3a: ee:f8:e0:7f:59:96:36:9a:9f:fd:3c:3f:8a:f8:a2: d7:93:7e:0b:c1:53:12:1f:2b:75:8e:2d:5c:16:f1: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3D:5C:2C:8A:89:33:D8:F6:4E:20:E4:E0:52:AD:A0:7D:DB:00:26 X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/3D1cLIqJM9j2TiDk4FKtoH3bACY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.232.0/22 Signature Algorithm: sha256WithRSAEncryption 51:a7:e1:e5:14:6a:c1:80:d1:72:de:d0:b1:07:21:ec:d0:bd: a3:d1:3f:6d:36:6d:05:30:30:f2:d0:66:40:cb:25:12:cf:c2: d7:2f:37:ca:72:a2:ee:a3:1a:3e:7f:82:f0:4a:1c:44:37:99: bb:00:6e:3b:74:45:db:14:a1:f2:c7:0a:cb:aa:5a:7e:63:f9: 16:0a:ab:2b:4a:47:f9:cd:d1:a6:d5:cf:b1:b2:03:8a:c2:e9: 3f:97:c5:fc:e5:c6:03:f1:75:86:4b:ac:1e:a7:b7:90:99:d1: 49:74:05:b3:4b:17:1e:63:77:c6:92:ff:3a:21:0c:ec:8a:05: 2d:a7:7b:c7:cb:ce:dc:8c:09:1f:8d:7e:1d:11:ab:15:89:1d: 38:80:90:15:50:73:b0:c3:e2:8d:09:8f:5a:c3:7d:80:e8:3f: 64:ad:88:88:ae:93:6c:b2:34:34:eb:a7:dc:29:3f:62:73:7d: 9e:9d:e8:03:c6:41:74:4c:12:8a:53:96:2f:32:38:9d:d9:e8: 9c:ff:c0:9d:f3:50:de:3c:21:45:69:fd:40:97:4e:31:ea:2f: 36:a5:0e:04:e1:ce:7a:9d:d7:bc:9e:51:6d:ad:ae:06:78:5a: 2c:f2:7f:33:8b:b5:7b:65:0d:60:7c:12:e9:22:56:dd:13:aa: bb:bf:59:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WV4hHQ6eD7N4wZJZzZlPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzNkNWMyYzhhODkzM2Q4ZjY0ZTIwZTRlMDUyYWRhMDdkZGIwMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwyWSVqdjtoe/s5amHH6JAZtSQlV pO5uTTN2afAZDXVbcL1VnMzcFW8UbHGyxhiMW2dJG4dJb6/7ao6ZzsWfqK4Hpl/o 5X4JrFhdoBK054jl/Q8v355sann7FMpeCOGj3muK94GuX4k5bcK6ai3JJIMtN06K ieEjUjdq/VZmNlatKqQStxTLmgTsap7fanXhFBg+SnQV85xGUbDsfu5P8yJWU7w3 iceUlUYlNML4E8sQNnLGV8V2vaose4/tXHlZqdkQ3Ru4vWA1UUg7x8yKdQJkL8mk BXUYlpNqVF6n3Tru+OB/WZY2mp/9PD+K+KLXk34LwVMSHyt1ji1cFvG2KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNw9XCyKiTPY9k4g5OBSraB92wAmMB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvM0QxY0xJcUpNOWoyVGlEazRGS3RvSDNiQUNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk07oMA0G CSqGSIb3DQEBCwUAA4IBAQBRp+HlFGrBgNFy3tCxByHs0L2j0T9tNm0FMDDy0GZA yyUSz8LXLzfKcqLuoxo+f4LwShxEN5m7AG47dEXbFKHyxwrLqlp+Y/kWCqsrSkf5 zdGm1c+xsgOKwuk/l8X85cYD8XWGS6wep7eQmdFJdAWzSxceY3fGkv86IQzsigUt p3vHy87cjAkfjX4dEasViR04gJAVUHOww+KNCY9aw32A6D9krYiIrpNssjQ066fc KT9ic32enegDxkF0TBKKU5YvMjid2eic/8Cd81DePCFFaf1Al04x6i82pQ4E4c56 nde8nlFtra4GeFos8n8zi7V7ZQ1gfBLpIlbdE6q7v1nB -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:30 2026 by rpki-client