This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/3YqbB1GuntlXTN3OXE5PC6dhvpg.roa File: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (raw, json) Hash identifier: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU= Subject key identifier: DD:8A:9B:07:51:AE:9E:D9:57:4C:DD:CE:5C:4E:4F:0B:A7:61:BE:98 Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f Certificate serial: 019B7AC83FD5B44338BE9F8D4FD95084636C Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/3YqbB1GuntlXTN3OXE5PC6dhvpg.roa Signing time: Thu 01 Jan 2026 18:18:22 +0000 ROA not before: Thu 01 Jan 2026 18:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9215 IP address blocks: 43.229.92.0/24 maxlen: 24 43.229.93.0/24 maxlen: 24 43.229.94.0/24 maxlen: 24 43.229.95.0/24 maxlen: 24 103.132.128.0/24 maxlen: 24 103.132.129.0/24 maxlen: 24 103.132.130.0/24 maxlen: 24 185.57.64.0/24 maxlen: 24 185.57.65.0/24 maxlen: 24 185.57.66.0/24 maxlen: 24 185.57.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3f:d5:b4:43:38:be:9f:8d:4f:d9:50:84:63:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f Validity Not Before: Jan 1 18:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd8a9b0751ae9ed9574cddce5c4e4f0ba761be98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:88:a3:29:4e:ab:2a:8f:cc:e6:a3:1d:1b: f8:c6:c5:a5:28:fb:62:a4:df:d9:fa:44:ea:a9:74: c6:71:1d:26:9b:17:66:2c:03:39:7d:94:30:ab:a9: 69:cd:e8:c9:1c:f9:e4:4c:e8:9c:79:35:7e:26:93: 33:3e:30:2f:dd:ba:7f:9a:60:9b:10:ed:4a:8e:0c: 6a:3b:ef:5f:cc:02:46:d6:86:44:b0:f2:e7:93:86: 71:34:e5:0c:46:dc:5c:be:ff:85:44:32:a3:20:b0: 2d:b2:f3:80:f3:77:da:7a:49:73:97:a4:cd:d6:6d: b0:04:50:7a:7d:49:d8:fd:80:26:5a:2b:07:41:b8: f3:e0:59:e1:74:cd:6b:40:e8:4b:55:62:9c:3c:44: d5:15:32:4a:7d:34:04:b7:b2:11:4a:c4:5a:02:21: 85:e8:4e:80:3d:e2:93:6c:7d:78:97:a2:95:3d:0e: 46:29:84:63:14:7a:fe:b1:6b:0b:e8:5b:aa:b4:33: ba:20:e7:d3:c9:08:3b:5a:5e:3f:45:96:48:29:47: 74:e1:54:fd:6c:91:86:a5:54:4b:29:4c:4f:b8:53: 20:44:a5:22:db:74:e8:f0:25:48:89:60:eb:67:7e: 50:6c:d2:e7:ff:b3:ef:3a:94:d2:f4:3f:55:44:bb: 84:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:9B:07:51:AE:9E:D9:57:4C:DD:CE:5C:4E:4F:0B:A7:61:BE:98 X509v3 Authority Key Identifier: keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/3YqbB1GuntlXTN3OXE5PC6dhvpg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.92.0/22 103.132.128.0-103.132.130.255 185.57.64.0/22 Signature Algorithm: sha256WithRSAEncryption 23:69:53:ce:56:8a:0c:57:f8:c7:24:a5:91:b1:e9:b0:e2:ce: 18:0e:94:e8:d3:65:06:1d:e0:d6:5c:fb:10:0f:81:5d:42:8d: 90:df:73:8f:b0:4f:2a:b5:c4:c2:70:e4:7e:c4:e5:4f:6e:6e: c3:62:57:ae:26:fc:9d:0e:39:f2:e3:4e:26:77:ab:a5:28:7e: 0e:dc:7e:7c:36:3b:5d:49:a8:39:21:28:41:49:b6:a2:c6:16: 77:f7:b9:0e:2d:5f:86:d0:f4:25:8c:2d:bd:65:fd:61:9c:ed: b1:51:4b:cf:61:f2:c0:a2:a2:5d:38:19:bc:c0:38:de:ba:0c: 66:5e:6d:18:67:6b:72:2f:aa:b1:32:b9:bd:e5:49:ec:60:8f: 34:89:8b:1a:de:bc:75:3b:77:f8:e4:14:df:0d:06:ad:bb:26: 89:46:49:31:ea:1f:7c:f7:0f:a7:8d:c0:ac:93:58:0c:ef:7b: 31:d0:ac:4a:50:5e:97:f8:e6:cc:bc:42:16:65:63:f6:47:7b: 0e:39:eb:cc:37:a4:99:b5:e1:4b:a2:1d:f7:23:e2:f1:13:c4: a5:93:da:2f:c2:19:69:46:23:dc:18:f9:61:b2:91:49:e8:1a: 9f:6d:ef:31:70:a7:22:cf:16:d7:74:7b:a2:86:00:33:e4:5b: 9e:78:40:89 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6yD/VtEM4vp+NT9lQhGNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi Njc0MGYwHhcNMjYwMTAxMTgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDhhOWIwNzUxYWU5ZWQ5NTc0Y2RkY2U1YzRlNGYwYmE3NjFiZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvaIoylOqyqPzOajHRv4xsWlKPti pN/Z+kTqqXTGcR0mmxdmLAM5fZQwq6lpzejJHPnkTOiceTV+JpMzPjAv3bp/mmCb EO1KjgxqO+9fzAJG1oZEsPLnk4ZxNOUMRtxcvv+FRDKjILAtsvOA83faeklzl6TN 1m2wBFB6fUnY/YAmWisHQbjz4FnhdM1rQOhLVWKcPETVFTJKfTQEt7IRSsRaAiGF 6E6APeKTbH14l6KVPQ5GKYRjFHr+sWsL6FuqtDO6IOfTyQg7Wl4/RZZIKUd04VT9 bJGGpVRLKUxPuFMgRKUi23To8CVIiWDrZ35QbNLn/7PvOpTS9D9VRLuELwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFN2KmwdRrp7ZV0zdzlxOTwunYb6YMB8GA1UdIwQY MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt ODE5YjdhN2VjNDM0LzEvM1lxYkIxR3VudGxYVE4zT1hFNVBDNmRodnBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0 LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCK+VcMAwD BAdnhIADBABnhIIDBAK5OUAwDQYJKoZIhvcNAQELBQADggEBACNpU85WigxX+Mck pZGx6bDizhgOlOjTZQYd4NZc+xAPgV1CjZDfc4+wTyq1xMJw5H7E5U9ubsNiV64m /J0OOfLjTiZ3q6Uofg7cfnw2O11JqDkhKEFJtqLGFnf3uQ4tX4bQ9CWMLb1l/WGc 7bFRS89h8sCiol04GbzAON66DGZebRhna3IvqrEyub3lSexgjzSJixrevHU7d/jk FN8NBq27JolGSTHqH3z3D6eNwKyTWAzvezHQrEpQXpf45sy8QhZlY/ZHew4568w3 pJm14UuiHfcj4vETxKWT2i/CGWlGI9wY+WGykUnoGp9t7zFwpyLPFtd0e6KGADPk W554QIk= -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:40 2026 by rpki-client