This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/3wC4iAYIU6RjN3EGUKVhlIp3rko.roa File: 3wC4iAYIU6RjN3EGUKVhlIp3rko.roa (raw, json) Hash identifier: r6BtCtLIRGTbjhqdmmeh1e+4MWSh7VLtqxWzoKISutU= Subject key identifier: DF:00:B8:88:06:08:53:A4:63:37:71:06:50:A5:61:94:8A:77:AE:4A Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487 Certificate serial: 019B7AC789493469ED834F361AE922A98945 Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/3wC4iAYIU6RjN3EGUKVhlIp3rko.roa Signing time: Thu 01 Jan 2026 18:17:35 +0000 ROA not before: Thu 01 Jan 2026 18:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15432 IP address blocks: 212.126.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:89:49:34:69:ed:83:4f:36:1a:e9:22:a9:89:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487 Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df00b888060853a46337710650a561948a77ae4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:e6:14:25:bc:10:a4:d6:1e:b3:d8:67:1f: 0a:68:b7:bc:89:12:0a:83:eb:7e:cf:cb:d2:a4:84: 95:c9:d0:d3:6a:70:69:2f:79:c9:b4:6f:a6:39:f1: 62:68:3c:0e:6c:d6:da:8f:9e:e4:92:17:13:c5:64: 0f:2a:34:e0:43:32:64:be:ec:ca:55:9d:49:9d:3b: 48:50:35:13:dd:c8:95:da:22:f1:89:c1:5b:ab:bd: 6c:af:19:6c:72:a0:c2:a9:7b:b8:8d:f0:c0:1a:0f: 4f:75:d8:e2:1b:98:3d:21:83:34:75:d2:94:d0:b9: ad:63:e8:eb:cb:42:fd:cb:ec:43:ce:29:21:45:1e: 51:95:e1:ba:b3:e7:9d:d9:f8:62:47:7f:58:89:5d: c2:29:30:08:2a:18:ed:dc:90:04:15:d9:26:be:7f: f7:57:c8:e1:9d:a9:7c:10:e5:12:fd:97:aa:2d:46: de:d7:04:07:f1:92:6b:2e:3c:bd:a4:bf:54:b9:28: ea:9e:64:66:d3:67:c6:93:dc:68:06:e4:00:3c:56: b7:46:20:84:37:07:a2:47:ee:88:2e:64:0f:6c:ab: 85:42:9e:97:b6:e7:17:da:9f:81:94:d4:88:41:f8: ff:b3:41:3a:62:cf:6a:ff:c0:49:63:7a:99:25:35: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:00:B8:88:06:08:53:A4:63:37:71:06:50:A5:61:94:8A:77:AE:4A X509v3 Authority Key Identifier: keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/3wC4iAYIU6RjN3EGUKVhlIp3rko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.126.160.0/19 Signature Algorithm: sha256WithRSAEncryption 1e:56:72:42:40:5e:9a:10:31:e8:83:c7:ee:c4:b7:ab:ba:d7: 1d:7f:b8:86:96:f7:b6:f6:c8:a8:cd:b2:6e:dd:f8:d5:d5:1a: 87:95:65:bb:0c:1c:a9:da:ba:42:7e:fe:03:a4:e2:66:17:e4: 62:93:29:b9:bd:20:fc:30:dc:66:74:62:ef:31:db:a7:2c:64: 3b:e7:0d:61:80:48:37:f0:b0:ba:11:f6:67:63:c2:39:d9:ea: 75:a1:47:2c:8d:28:2a:7c:2a:41:61:07:bc:cd:52:a4:16:56: b1:38:6b:ca:7e:60:f5:c3:6f:d0:d2:db:7d:d5:91:c3:94:d4: ba:ad:16:05:ed:9c:aa:63:97:69:c6:64:54:1d:12:ce:d2:7d: c7:0e:5b:db:35:69:fb:08:ba:63:d4:92:dc:73:9b:5e:8c:99: 4a:b5:7d:28:f9:b6:3e:1f:2b:12:a7:79:9b:46:33:ae:25:78: 62:6e:76:52:26:cb:92:34:30:a9:ea:ce:6f:30:17:8e:0a:73: d3:e2:66:8c:c0:0c:fe:ad:a2:e5:27:4c:26:12:e1:b1:d8:8a: 90:3b:be:90:4a:6a:54:ca:f1:24:91:d1:b8:8f:00:4d:bf:1a: a0:aa:02:71:3b:33:0d:dc:94:f5:53:d2:a4:35:36:ae:9b:73: 4f:24:3c:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4lJNGntg082GukiqYlFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjRmOWRiMzBiMTljNzVlMzVhZTgwMzc5M2Y0ZTFiNGFh YTE0ODcwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjAwYjg4ODA2MDg1M2E0NjMzNzcxMDY1MGE1NjE5NDhhNzdhZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIrmFCW8EKTWHrPYZx8KaLe8iRIK g+t+z8vSpISVydDTanBpL3nJtG+mOfFiaDwObNbaj57kkhcTxWQPKjTgQzJkvuzK VZ1JnTtIUDUT3ciV2iLxicFbq71srxlscqDCqXu4jfDAGg9PddjiG5g9IYM0ddKU 0LmtY+jry0L9y+xDzikhRR5RleG6s+ed2fhiR39YiV3CKTAIKhjt3JAEFdkmvn/3 V8jhnal8EOUS/ZeqLUbe1wQH8ZJrLjy9pL9UuSjqnmRm02fGk9xoBuQAPFa3RiCE NweiR+6ILmQPbKuFQp6XtucX2p+BlNSIQfj/s0E6Ys9q/8BJY3qZJTUU7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8AuIgGCFOkYzdxBlClYZSKd65KMB8GA1UdIwQY MBaAFOz0+dswsZx141roA3k/ThtKqhSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYt YzgxNWU1MGVjNWU3LzEvM3dDNGlBWUlVNlJqTjNFR1VLVmhsSXAzcmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYtYzgxNWU1MGVjNWU3 LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1H6gMA0G CSqGSIb3DQEBCwUAA4IBAQAeVnJCQF6aEDHog8fuxLerutcdf7iGlve29siozbJu 3fjV1RqHlWW7DByp2rpCfv4DpOJmF+Rikym5vSD8MNxmdGLvMdunLGQ75w1hgEg3 8LC6EfZnY8I52ep1oUcsjSgqfCpBYQe8zVKkFlaxOGvKfmD1w2/Q0tt91ZHDlNS6 rRYF7ZyqY5dpxmRUHRLO0n3HDlvbNWn7CLpj1JLcc5tejJlKtX0o+bY+HysSp3mb RjOuJXhibnZSJsuSNDCp6s5vMBeOCnPT4maMwAz+raLlJ0wmEuGx2IqQO76QSmpU yvEkkdG4jwBNvxqgqgJxOzMN3JT1U9KkNTaum3NPJDwC -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:00 2026 by rpki-client