This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/3YSDswVguWbvrvj4E3sCx_uL70g.roa File: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (raw, json) Hash identifier: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE= Subject key identifier: DD:84:83:B3:05:60:B9:66:EF:AE:F8:F8:13:7B:02:C7:FB:8B:EF:48 Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310 Certificate serial: 019B79ED2C35C4E75E4F247AB3592E7A22CF Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/3YSDswVguWbvrvj4E3sCx_uL70g.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12912 IP address blocks: 37.30.0.0/15 maxlen: 17 37.30.0.0/19 maxlen: 19 37.30.32.0/19 maxlen: 19 37.30.96.0/19 maxlen: 19 46.204.0.0/15 maxlen: 15 46.204.0.0/19 maxlen: 19 46.204.32.0/19 maxlen: 19 46.204.64.0/19 maxlen: 19 46.204.96.0/19 maxlen: 19 46.205.128.0/19 maxlen: 19 46.205.192.0/20 maxlen: 20 46.205.208.0/20 maxlen: 20 46.205.216.0/21 maxlen: 21 46.205.224.0/20 maxlen: 20 46.205.240.0/21 maxlen: 21 62.152.128.0/19 maxlen: 19 83.220.96.0/19 maxlen: 19 83.220.101.0/24 maxlen: 24 178.180.0.0/14 maxlen: 14 178.182.0.0/18 maxlen: 18 178.183.0.0/18 maxlen: 18 178.183.32.0/24 maxlen: 24 188.146.0.0/15 maxlen: 15 188.146.0.0/16 maxlen: 17 188.146.0.0/18 maxlen: 18 188.146.0.0/19 maxlen: 19 188.146.32.0/19 maxlen: 19 188.146.64.0/19 maxlen: 19 188.146.128.0/19 maxlen: 19 188.146.192.0/19 maxlen: 19 188.147.0.0/19 maxlen: 19 188.147.0.0/22 maxlen: 22 188.147.64.0/18 maxlen: 18 188.147.64.0/19 maxlen: 19 188.147.96.0/19 maxlen: 19 188.147.192.0/19 maxlen: 19 213.158.192.0/19 maxlen: 19 2001:1b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2c:35:c4:e7:5e:4f:24:7a:b3:59:2e:7a:22:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd8483b30560b966efaef8f8137b02c7fb8bef48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ed:f8:d6:fc:39:01:86:01:d1:e3:e8:34:de: f5:d2:47:ff:fe:ac:f2:6a:f2:3e:ee:7f:af:d7:87: a2:fe:a2:81:7d:b6:ed:32:73:7e:26:02:1a:59:57: 38:ac:ad:c5:82:14:61:b8:6d:36:22:43:75:84:b8: 68:c2:c2:e6:eb:7e:f9:d1:c8:40:2c:48:e8:a4:7f: fb:ae:e0:48:33:c6:5b:b0:91:d0:21:ee:7c:e8:a5: 05:4e:68:54:c3:e3:b0:32:bc:c5:49:12:56:c0:e5: aa:25:d1:b0:02:44:7c:14:17:1d:d8:6e:79:70:a3: a4:65:cf:e0:14:15:ee:b5:99:a9:00:2c:42:da:71: f1:2d:20:2c:a4:13:8a:49:51:dc:e0:72:49:50:f0: 99:6b:3f:b2:43:20:6b:39:73:54:43:6c:ea:04:ce: 2b:ed:a0:43:8d:09:49:e1:ca:dd:31:2d:b4:04:4a: 44:ba:00:c0:11:75:0f:61:9e:f1:84:3e:2a:02:6b: 34:4c:e0:b3:d6:6a:1b:9f:01:06:42:ad:f2:fc:40: 25:2a:70:11:2c:71:4d:05:85:9c:a1:85:81:ca:52: a4:3a:35:11:14:7d:41:fc:95:b3:0d:4e:e2:93:0f: be:04:1d:54:42:1e:4d:e1:bb:03:1e:e1:ee:25:24: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:84:83:B3:05:60:B9:66:EF:AE:F8:F8:13:7B:02:C7:FB:8B:EF:48 X509v3 Authority Key Identifier: keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/3YSDswVguWbvrvj4E3sCx_uL70g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.30.0.0/15 46.204.0.0/15 62.152.128.0/19 83.220.96.0/19 178.180.0.0/14 188.146.0.0/15 213.158.192.0/19 IPv6: 2001:1b80::/29 Signature Algorithm: sha256WithRSAEncryption 1a:e7:32:fc:1e:53:3f:07:78:69:2b:4c:3a:ee:ec:36:c9:38: 9c:00:09:d3:77:53:8b:24:5a:90:c6:d7:fa:aa:1b:e6:68:91: 3a:97:5d:30:76:e5:c5:ce:05:75:4d:79:11:86:9b:8f:7e:e7: 03:41:94:84:71:15:ab:b2:52:4f:20:04:1c:c6:16:ee:f1:18: 39:9f:92:4b:9d:70:05:d3:36:a5:6c:36:4c:90:78:9e:54:03: 99:6b:91:bb:62:bf:08:11:7c:f4:65:1b:bb:e1:4c:da:c8:24: 1f:e3:23:0f:52:e6:8d:e9:78:a0:a4:21:06:0f:3d:a0:4a:79: f8:ca:f6:b5:19:5b:ce:6e:05:56:62:33:2f:ae:54:99:68:fa: a3:1e:1e:53:e0:38:15:96:e5:63:bd:7d:43:78:06:30:1b:cf: 4e:68:42:8f:86:c7:8c:f4:f7:81:58:db:ab:a7:ac:44:b4:bf: 34:ff:81:32:ec:7d:c7:d3:01:ad:0d:cc:df:8a:30:ad:d4:99: 12:26:b9:47:64:b3:5c:66:f5:42:03:e2:c7:42:90:29:85:bc: fe:a6:5b:5d:42:1d:56:07:fc:7e:16:16:78:48:cb:9d:02:33: a9:22:57:22:5b:f0:1d:b1:25:6b:41:2e:d9:25:bb:84:e3:22: 78:78:94:9e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt57Sw1xOdeTyR6s1kueiLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDI0YWRkY2MzZDViNzdhMDk5YTkwNzEyMjI1MmE0N2M4 ZjYzMTAwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDg0ODNiMzA1NjBiOTY2ZWZhZWY4ZjgxMzdiMDJjN2ZiOGJlZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+341vw5AYYB0ePoNN710kf//qzy avI+7n+v14ei/qKBfbbtMnN+JgIaWVc4rK3FghRhuG02IkN1hLhowsLm63750chA LEjopH/7ruBIM8ZbsJHQIe586KUFTmhUw+OwMrzFSRJWwOWqJdGwAkR8FBcd2G55 cKOkZc/gFBXutZmpACxC2nHxLSAspBOKSVHc4HJJUPCZaz+yQyBrOXNUQ2zqBM4r 7aBDjQlJ4crdMS20BEpEugDAEXUPYZ7xhD4qAms0TOCz1mobnwEGQq3y/EAlKnAR LHFNBYWcoYWBylKkOjURFH1B/JWzDU7ikw++BB1UQh5N4bsDHuHuJSRr1QIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFN2Eg7MFYLlm7674+BN7Asf7i+9IMB8GA1UdIwQY MBaAFGjSSt3MPVt3oJmpBxIiUqR8j2MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYt YjMxNmRiNTkzOGZmLzEvM1lTRHN3Vmd1V2J2cnZqNEUzc0N4X3VMNzBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYtYjMxNmRiNTkzOGZm LzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwMBJR4DAwEu zAMEBT6YgAMEBVPcYAMDArK0AwMBvJIDBAXVnsAwDQQCAAIwBwMFAyABG4AwDQYJ KoZIhvcNAQELBQADggEBABrnMvweUz8HeGkrTDru7DbJOJwACdN3U4skWpDG1/qq G+ZokTqXXTB25cXOBXVNeRGGm49+5wNBlIRxFauyUk8gBBzGFu7xGDmfkkudcAXT NqVsNkyQeJ5UA5lrkbtivwgRfPRlG7vhTNrIJB/jIw9S5o3peKCkIQYPPaBKefjK 9rUZW85uBVZiMy+uVJlo+qMeHlPgOBWW5WO9fUN4BjAbz05oQo+Gx4z094FY26un rES0vzT/gTLsfcfTAa0NzN+KMK3UmRImuUdks1xm9UID4sdCkCmFvP6mW11CHVYH /H4WFnhIy50CM6kiVyJb8B2xJWtBLtklu4TjInh4lJ4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:40 2026 by rpki-client