This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3lMZ7-KRdV3XaL63GhceZoK95E0.roa File: 3lMZ7-KRdV3XaL63GhceZoK95E0.roa (raw, json) Hash identifier: m8yCF+B0eKLzTcw93b5SfUs2hd2q/w58PdBHn0mlpRQ= Subject key identifier: DE:53:19:EF:E2:91:75:5D:D7:68:BE:B7:1A:17:1E:66:82:BD:E4:4D Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F839AFB13E95C24B5F2E91B508434B7 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3lMZ7-KRdV3XaL63GhceZoK95E0.roa Signing time: Fri 02 Jan 2026 16:21:29 +0000 ROA not before: Fri 02 Jan 2026 16:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35645 IP address blocks: 141.101.217.0/24 maxlen: 24 141.101.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9a:fb:13:e9:5c:24:b5:f2:e9:1b:50:84:34:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de5319efe291755dd768beb71a171e6682bde44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:31:85:28:2b:53:b7:fd:84:b4:ff:e4:79: e0:eb:e9:d3:e1:d9:63:ed:cd:2f:90:b0:ea:44:cb: ca:3e:56:69:63:c1:e5:f2:ec:8a:14:2e:80:cf:80: 8f:8f:e1:87:fb:97:53:2e:12:67:77:01:cc:9b:2b: 1b:00:f9:e4:8f:4f:fb:1f:db:f7:c2:f1:fd:3b:b2: 54:2b:4c:e1:bb:50:c8:5c:bc:5b:e3:92:41:37:fc: 58:96:58:fd:d7:f8:d3:61:fe:a3:49:31:72:c0:10: 12:cc:05:e5:af:68:3d:fc:23:fd:40:c0:6d:a0:a1: 62:cd:81:46:c1:87:18:44:ae:82:e1:2a:97:f1:74: f7:e3:44:0f:c8:43:81:d4:d2:8c:15:64:16:02:be: 03:3d:28:f7:0c:b2:43:d5:9e:f5:c1:a8:87:c2:96: a1:81:ea:e1:cb:22:1b:16:2e:46:10:79:de:ac:38: 47:fa:cf:5f:74:37:53:54:b4:07:cc:92:67:1e:ff: 08:4d:bf:4a:a0:55:7d:ef:45:6b:d9:0c:9b:79:82: b7:e2:ab:16:86:ad:f3:4d:d5:ad:71:5a:ad:de:4e: 44:42:0b:9e:90:d8:f4:f3:27:50:dc:d6:4b:83:09: 80:7b:8a:1a:df:47:a4:be:08:8f:ec:8e:9f:3b:f9: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:53:19:EF:E2:91:75:5D:D7:68:BE:B7:1A:17:1E:66:82:BD:E4:4D X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3lMZ7-KRdV3XaL63GhceZoK95E0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.101.217.0-141.101.219.255 Signature Algorithm: sha256WithRSAEncryption 57:f9:47:56:55:42:65:d2:6d:01:06:b9:4a:35:1d:47:9a:ca: b6:83:46:cf:97:9d:e0:51:50:7f:b0:d7:ea:bd:b5:ea:25:40: 46:11:c7:b9:73:d7:0f:36:55:d9:c6:ad:42:32:82:a3:8d:84: b0:4e:8a:a4:0f:3e:24:28:81:a1:cd:83:ff:f8:10:d6:fb:30: 26:0e:38:0d:f1:71:cb:03:23:8b:d5:b6:25:48:b6:4d:9c:26: 80:25:cf:d3:51:5f:6f:92:90:e2:06:bb:38:ad:d9:e2:34:e9: f0:07:17:e0:9a:28:88:fd:ca:32:37:22:d5:78:18:b9:fb:5c: ac:50:4b:62:1e:f7:b0:44:5a:0c:68:89:ea:6f:93:54:c3:59: 44:bd:3d:7b:ad:96:3d:9b:04:df:b2:7c:6b:40:69:bb:da:d2: 02:20:1f:02:4b:d1:06:0f:49:1c:3c:7e:e7:0d:0e:94:98:a4: 6c:66:cc:91:46:57:9f:e7:64:1c:4d:cd:f1:fd:7a:c2:80:51: 5d:00:c6:83:ae:64:ff:18:0e:8c:03:54:73:24:c6:e9:04:93: 0f:4b:fc:f7:8f:bb:9e:80:4d:6f:6c:db:70:eb:5a:89:fc:47: 13:15:32:70:af:0a:02:30:98:1e:b9:18:ae:cc:6d:9f:25:33: f1:f5:38:f0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/g5r7E+lcJLXy6RtQhDS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTUzMTllZmUyOTE3NTVkZDc2OGJlYjcxYTE3MWU2NjgyYmRlNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUExhSgrU7f9hLT/5Hng6+nT4dlj 7c0vkLDqRMvKPlZpY8Hl8uyKFC6Az4CPj+GH+5dTLhJndwHMmysbAPnkj0/7H9v3 wvH9O7JUK0zhu1DIXLxb45JBN/xYllj91/jTYf6jSTFywBASzAXlr2g9/CP9QMBt oKFizYFGwYcYRK6C4SqX8XT340QPyEOB1NKMFWQWAr4DPSj3DLJD1Z71waiHwpah gerhyyIbFi5GEHnerDhH+s9fdDdTVLQHzJJnHv8ITb9KoFV970Vr2QybeYK34qsW hq3zTdWtcVqt3k5EQguekNj08ydQ3NZLgwmAe4oa30ekvgiP7I6fO/lNUwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFN5TGe/ikXVd12i+txoXHmaCveRNMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvM2xNWjctS1JkVjNYYUw2M0doY2Vab0s5NUUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACNZdkD BAKNZdgwDQYJKoZIhvcNAQELBQADggEBAFf5R1ZVQmXSbQEGuUo1HUeayraDRs+X neBRUH+w1+q9teolQEYRx7lz1w82VdnGrUIygqONhLBOiqQPPiQogaHNg//4ENb7 MCYOOA3xccsDI4vVtiVItk2cJoAlz9NRX2+SkOIGuzit2eI06fAHF+CaKIj9yjI3 ItV4GLn7XKxQS2Ie97BEWgxoiepvk1TDWUS9PXutlj2bBN+yfGtAabva0gIgHwJL 0QYPSRw8fucNDpSYpGxmzJFGV5/nZBxNzfH9esKAUV0AxoOuZP8YDowDVHMkxukE kw9L/PePu56ATW9s23DrWon8RxMVMnCvCgIwmB65GK7MbZ8lM/H1OPA= -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:46 2026 by rpki-client