This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/3SvuzLztH7kaYqpigx8jbNPhEro.roa File: 3SvuzLztH7kaYqpigx8jbNPhEro.roa (raw, json) Hash identifier: jRC8rlwTfMhG8lXkzGvIt38V+oAm4+j9qe4aEosOOZM= Subject key identifier: DD:2B:EE:CC:BC:ED:1F:B9:1A:62:AA:62:83:1F:23:6C:D3:E1:12:BA Certificate issuer: /CN=8c029fb18e19c5677244057eda38c63dc18da12a Certificate serial: 019B7E37C4CF3E5F3FF5C6C3E9AE6E0D5830 Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/3SvuzLztH7kaYqpigx8jbNPhEro.roa Signing time: Fri 02 Jan 2026 10:19:02 +0000 ROA not before: Fri 02 Jan 2026 10:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213527 IP address blocks: 2.58.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c4:cf:3e:5f:3f:f5:c6:c3:e9:ae:6e:0d:58:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a Validity Not Before: Jan 2 10:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd2beeccbced1fb91a62aa62831f236cd3e112ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9c:9c:c2:3e:c0:59:49:28:21:61:b1:59:36: c3:a7:fb:98:f9:b9:92:3f:ca:79:17:f8:11:a9:54: 36:7d:80:8d:51:c9:85:05:98:ab:56:0c:5f:95:f1: a3:34:19:c2:a5:24:9f:8b:62:df:c8:71:9c:9c:71: 04:2a:07:a4:64:24:bb:1a:ce:26:38:2c:ac:c7:2a: d7:ab:64:97:cd:9d:3d:74:ee:0a:1b:43:3f:84:13: 95:5e:da:ca:41:e6:e3:33:24:b0:ef:51:2e:cd:72: 90:32:8a:b3:d8:54:72:84:ff:f3:25:3f:c2:0d:6a: f4:22:60:6c:e6:57:70:4c:e6:9e:fb:d5:08:db:a1: 9c:c6:16:60:ca:2a:ce:6e:2d:41:c7:44:39:33:63: 36:7b:dc:a7:71:5b:e7:cf:f9:f4:62:61:64:e3:0b: b8:59:f6:cc:53:8a:3d:fe:15:2e:11:7b:01:f3:bf: 5e:a0:9f:57:56:b5:72:57:d1:50:3b:43:68:ca:79: 62:a3:77:9e:3f:26:e3:10:41:17:02:c8:6e:e8:4c: 78:65:fa:d4:77:cb:ce:4a:15:41:1f:2d:51:29:9d: cf:87:3d:8a:47:a4:da:e4:dd:d1:7a:bc:6a:13:8e: 05:73:44:03:cb:ae:94:0e:72:fa:6a:1e:bc:30:bc: 1a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2B:EE:CC:BC:ED:1F:B9:1A:62:AA:62:83:1F:23:6C:D3:E1:12:BA X509v3 Authority Key Identifier: keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/3SvuzLztH7kaYqpigx8jbNPhEro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.214.0/24 Signature Algorithm: sha256WithRSAEncryption 61:d6:8f:65:9a:8d:f9:d2:fb:93:2f:b7:ce:87:2a:64:8c:68: 4a:5e:d7:f2:ac:8e:3d:fc:86:f8:b4:e9:66:52:bf:fe:a0:b2: 62:39:35:4b:eb:32:0c:6d:ca:c8:a4:bb:15:6e:54:39:7f:24: c8:f2:21:3a:dd:a1:b7:36:28:0c:ad:78:c2:ae:f6:4f:dc:8d: 7e:7a:25:ff:54:21:4c:a4:56:fd:42:6f:59:0e:7a:9a:14:81: f2:0a:bb:42:48:ad:3d:d0:b4:52:94:5f:0a:38:9f:05:2a:e0: ca:76:6f:84:6f:bf:d4:6e:9f:03:23:ed:a0:eb:43:18:be:1a: 19:e6:84:6e:da:a7:6b:91:e5:6c:4d:6a:41:99:0a:7b:cc:9d: c4:b2:cb:a9:69:a6:22:9f:94:8c:9e:4a:2a:31:a7:ba:2f:f3: a0:df:ee:56:17:1e:d1:21:4c:9e:50:1b:5b:d9:a0:e0:71:a3: ac:9f:03:a9:6b:bd:60:40:bf:9f:fa:fb:23:e4:be:1c:65:61: bf:98:d5:54:8d:6a:13:82:01:05:23:52:b8:2a:e8:d4:33:c5: b5:b6:a8:27:6e:25:e4:ca:82:9d:e1:f2:7a:7a:28:4b:a8:27: ca:fd:81:cc:1f:67:0c:68:27:c8:b4:5f:bf:c3:2b:2b:ae:1b: 37:ee:0e:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8TPPl8/9cbD6a5uDVgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDI5ZmIxOGUxOWM1Njc3MjQ0MDU3ZWRhMzhjNjNkYzE4 ZGExMmEwHhcNMjYwMTAyMTAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDJiZWVjY2JjZWQxZmI5MWE2MmFhNjI4MzFmMjM2Y2QzZTExMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pycwj7AWUkoIWGxWTbDp/uY+bmS P8p5F/gRqVQ2fYCNUcmFBZirVgxflfGjNBnCpSSfi2LfyHGcnHEEKgekZCS7Gs4m OCysxyrXq2SXzZ09dO4KG0M/hBOVXtrKQebjMySw71EuzXKQMoqz2FRyhP/zJT/C DWr0ImBs5ldwTOae+9UI26GcxhZgyirObi1Bx0Q5M2M2e9yncVvnz/n0YmFk4wu4 WfbMU4o9/hUuEXsB879eoJ9XVrVyV9FQO0Noynlio3eePybjEEEXAshu6Ex4ZfrU d8vOShVBHy1RKZ3Phz2KR6Ta5N3RerxqE44Fc0QDy66UDnL6ah68MLwaDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN0r7sy87R+5GmKqYoMfI2zT4RK6MB8GA1UdIwQY MBaAFIwCn7GOGcVnckQFfto4xj3BjaEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFLZnNZNFp4V2R5UkFWLTJqakdQY0dOb1NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84MDAxNjEtY2I2Mi00YjdjLWFjN2Mt NGQzYjZjMWYzYTg5LzEvM1N2dXpMenRIN2thWXFwaWd4OGpiTlBoRXJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84MDAxNjEtY2I2Mi00YjdjLWFjN2MtNGQzYjZjMWYzYTg5 LzEvakFLZnNZNFp4V2R5UkFWLTJqakdQY0dOb1NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjrWMA0G CSqGSIb3DQEBCwUAA4IBAQBh1o9lmo350vuTL7fOhypkjGhKXtfyrI49/Ib4tOlm Ur/+oLJiOTVL6zIMbcrIpLsVblQ5fyTI8iE63aG3NigMrXjCrvZP3I1+eiX/VCFM pFb9Qm9ZDnqaFIHyCrtCSK090LRSlF8KOJ8FKuDKdm+Eb7/Ubp8DI+2g60MYvhoZ 5oRu2qdrkeVsTWpBmQp7zJ3EssupaaYin5SMnkoqMae6L/Og3+5WFx7RIUyeUBtb 2aDgcaOsnwOpa71gQL+f+vsj5L4cZWG/mNVUjWoTggEFI1K4KujUM8W1tqgnbiXk yoKd4fJ6eihLqCfK/YHMH2cMaCfItF+/wysrrhs37g6y -----END CERTIFICATE-----Generated at Sun Jan 25 17:49:29 2026 by rpki-client