This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/3Z0Q8tqH9sCjpBnVUqTQKroHNQs.roa File: 3Z0Q8tqH9sCjpBnVUqTQKroHNQs.roa (raw, json) Hash identifier: iEhzHIRnRxzpQUWkwXpH8+wLuqzBi2WgNixBv2cWr5c= Subject key identifier: DD:9D:10:F2:DA:87:F6:C0:A3:A4:19:D5:52:A4:D0:2A:BA:07:35:0B Certificate issuer: /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465 Certificate serial: 019B7FF1A3C6877652198B9CAF8350ECCEFD Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/3Z0Q8tqH9sCjpBnVUqTQKroHNQs.roa Signing time: Fri 02 Jan 2026 18:21:41 +0000 ROA not before: Fri 02 Jan 2026 18:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 5.132.157.0/24 maxlen: 24 5.132.159.0/24 maxlen: 24 5.132.160.0/24 maxlen: 24 5.132.191.0/24 maxlen: 24 2a03:3180:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a3:c6:87:76:52:19:8b:9c:af:83:50:ec:ce:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465 Validity Not Before: Jan 2 18:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd9d10f2da87f6c0a3a419d552a4d02aba07350b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:30:12:d0:9b:ba:c1:6b:af:66:a0:46:d1:77: 3c:a9:33:70:08:ca:6b:cf:b3:01:98:3f:33:1a:96: 60:d0:55:15:8c:36:85:c0:dc:32:4a:bc:2d:cf:3c: f1:c8:fc:d7:36:ce:11:59:31:9c:d3:3f:45:af:51: 09:91:93:89:f1:40:20:4b:70:d1:ab:39:c4:64:60: e2:8c:22:3f:34:0b:71:00:9e:aa:36:b6:7e:13:3e: e4:a7:5b:72:86:cb:67:37:63:90:ef:bd:32:3d:66: bf:b0:04:fa:bb:67:ac:e8:a0:c5:87:f6:ac:1d:fa: 70:1a:8e:60:43:b8:3e:21:34:a1:f6:c9:1d:c4:aa: 6e:ba:5f:f8:ef:11:6d:11:64:2b:f6:70:49:8b:4f: 4f:65:76:cc:70:25:d8:6b:fb:a0:bc:d1:f3:8f:99: ac:eb:c6:ee:6f:c9:a7:63:da:ab:9a:52:37:ea:31: 82:58:61:c2:7d:d5:2a:33:a4:49:69:16:fa:49:41: 43:39:da:f0:cb:24:f9:f9:cb:18:db:76:e7:8d:c5: 65:e1:15:d6:9d:24:bc:64:42:0b:36:fd:60:55:a4: 79:31:10:54:f4:dd:7e:ad:54:38:67:24:30:3c:03: 83:b5:9c:7b:0f:ce:16:47:f8:cf:f4:a7:4e:ed:ab: 1d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9D:10:F2:DA:87:F6:C0:A3:A4:19:D5:52:A4:D0:2A:BA:07:35:0B X509v3 Authority Key Identifier: keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/3Z0Q8tqH9sCjpBnVUqTQKroHNQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.132.157.0/24 5.132.159.0-5.132.160.255 5.132.191.0/24 IPv6: 2a03:3180:f::/48 Signature Algorithm: sha256WithRSAEncryption 1f:70:00:93:61:e1:d3:39:e5:96:a0:25:bb:d0:e8:32:87:5c: e4:e3:31:4b:a7:20:b2:8a:3e:ed:57:e6:95:11:b6:53:a8:da: 8e:d2:e3:30:f4:c3:5d:7b:c2:3d:b3:aa:4d:77:69:44:3b:32: 2b:5b:dd:d7:51:df:c4:92:d8:3e:22:55:eb:8e:31:a5:8e:d3: 24:45:51:b6:51:57:41:16:71:f5:a8:11:61:b3:ac:1d:4f:b4: 61:bc:43:b3:46:5e:16:ba:b9:4d:8d:e0:23:95:ac:48:80:48: c9:5d:28:1d:6c:c6:01:d9:95:48:87:4d:5a:8a:c5:20:fc:76: 63:3e:54:f6:9a:01:33:83:f8:d4:b1:70:06:07:87:d5:d9:eb: 01:42:ba:64:37:92:90:5d:e5:9c:e4:09:20:ea:b2:22:40:6d: 90:70:19:9f:54:ef:ff:32:9a:96:63:ea:02:c2:bf:9c:76:cc: af:39:4b:70:12:c9:c5:40:34:f1:63:df:1e:bf:af:66:77:5a: 42:fb:3c:3a:ca:12:60:67:0b:41:a8:62:d3:d5:e7:b5:5c:21: fa:13:6e:21:ef:4c:3b:a8:ae:54:58:01:42:3c:98:a7:49:03: 8c:c1:d1:39:63:26:12:ee:a0:60:f3:ad:4d:fa:c4:5f:90:c6: c8:30:09:69 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt/8aPGh3ZSGYucr4NQ7M79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNGEyMDIwYjgyZDAyOTRlOTBhMmQ2YjJjMGYyOGQxMTcz YjY0NjUwHhcNMjYwMTAyMTgyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDlkMTBmMmRhODdmNmMwYTNhNDE5ZDU1MmE0ZDAyYWJhMDczNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTAS0Ju6wWuvZqBG0Xc8qTNwCMpr z7MBmD8zGpZg0FUVjDaFwNwySrwtzzzxyPzXNs4RWTGc0z9Fr1EJkZOJ8UAgS3DR qznEZGDijCI/NAtxAJ6qNrZ+Ez7kp1tyhstnN2OQ770yPWa/sAT6u2es6KDFh/as HfpwGo5gQ7g+ITSh9skdxKpuul/47xFtEWQr9nBJi09PZXbMcCXYa/ugvNHzj5ms 68bub8mnY9qrmlI36jGCWGHCfdUqM6RJaRb6SUFDOdrwyyT5+csY23bnjcVl4RXW nSS8ZEILNv1gVaR5MRBU9N1+rVQ4ZyQwPAODtZx7D84WR/jP9KdO7asdcwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFN2dEPLah/bAo6QZ1VKk0Cq6BzULMB8GA1UdIwQY MBaAFB5KICC4LQKU6QotaywPKNEXO2RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQt NTMwNDQwYzRmYTI5LzEvM1owUTh0cUg5c0NqcEJuVlVxVFFLcm9ITlFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQtNTMwNDQwYzRmYTI5 LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQABYSdMAwD BAAFhJ8DBAAFhKADBAAFhL8wDwQCAAIwCQMHACoDMYAADzANBgkqhkiG9w0BAQsF AAOCAQEAH3AAk2Hh0znllqAlu9DoModc5OMxS6cgsoo+7VfmlRG2U6jajtLjMPTD XXvCPbOqTXdpRDsyK1vd11HfxJLYPiJV644xpY7TJEVRtlFXQRZx9agRYbOsHU+0 YbxDs0ZeFrq5TY3gI5WsSIBIyV0oHWzGAdmVSIdNWorFIPx2Yz5U9poBM4P41LFw BgeH1dnrAUK6ZDeSkF3lnOQJIOqyIkBtkHAZn1Tv/zKalmPqAsK/nHbMrzlLcBLJ xUA08WPfHr+vZndaQvs8OsoSYGcLQahi09XntVwh+hNuIe9MO6iuVFgBQjyYp0kD jMHROWMmEu6gYPOtTfrEX5DGyDAJaQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:44 2026 by rpki-client