This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa File: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (raw, json) Hash identifier: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4= Subject key identifier: 03:7A:56:E1:FD:90:D1:00:97:5B:52:13:17:9F:BB:27:60:06:24:1D Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208 Certificate serial: 019B783512273C29093F4D9A847010792C3A Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198551 IP address blocks: 130.93.180.0/22 maxlen: 22 130.93.184.0/22 maxlen: 22 130.93.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:12:27:3c:29:09:3f:4d:9a:84:70:10:79:2c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208 Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=037a56e1fd90d100975b5213179fbb276006241d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:7f:7f:a4:03:bd:16:f0:72:85:be:d2:21: e4:b9:1b:0f:95:ee:f4:d8:c6:61:f1:4e:d8:a6:ae: 41:c8:73:9d:a4:a5:7f:53:84:79:f4:f3:e3:a4:18: b9:44:2d:69:e2:2e:de:cb:0e:61:c4:ef:ae:ac:d2: bb:ac:ee:2f:8d:ea:a2:ed:fe:0c:69:56:1d:c9:73: 81:65:53:68:36:be:1a:97:35:95:46:b3:da:84:14: e3:9c:21:c1:f8:17:f6:70:4d:2b:2a:6b:b5:90:b9: 90:8e:2b:e9:80:94:a7:39:d5:4c:80:74:4b:70:6a: 79:c7:bd:5b:e8:dd:c4:e3:c4:23:be:7a:7d:d5:26: 6b:f4:40:2c:ae:57:8c:ab:8b:16:0e:64:94:33:9b: fb:7a:61:c6:ac:08:e7:27:a0:19:39:69:6a:04:ba: 66:7f:1f:b2:d9:c4:f5:1a:bd:36:ec:27:a1:d2:4f: f9:9c:b1:d5:13:03:4c:bd:ea:58:27:7b:62:b7:6b: c8:07:d4:c6:c3:cc:04:38:29:e3:32:54:d7:4a:ca: bd:2d:bf:d7:a5:34:e1:8f:0f:92:68:ba:c1:1b:0e: 95:dc:41:0b:b4:2a:d9:60:44:05:c4:fc:42:a0:99: 4c:62:94:c3:e7:cf:7f:e2:9c:22:5e:2a:3b:aa:20: 01:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7A:56:E1:FD:90:D1:00:97:5B:52:13:17:9F:BB:27:60:06:24:1D X509v3 Authority Key Identifier: keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.93.180.0-130.93.191.255 Signature Algorithm: sha256WithRSAEncryption 14:da:7b:4c:26:ee:35:3b:63:cf:38:14:21:c6:69:a5:af:7f: 65:f2:b2:89:81:23:b6:c3:dd:76:c0:9e:27:ce:2c:09:73:a7: 1b:01:bc:4f:58:98:c8:aa:69:64:49:21:a5:d6:6e:0b:d0:ec: 6a:a9:a4:eb:27:60:b1:38:08:71:7c:fc:43:55:b5:f8:22:82: d4:f1:c3:ce:f9:92:ab:3b:21:47:b9:19:13:9b:8c:e8:11:07: 24:64:bf:aa:ca:33:3b:75:24:89:b1:1a:ad:6e:9c:3d:08:68: 7b:70:33:8e:40:24:dc:0d:ea:e2:42:22:08:b6:27:26:5c:27: 35:65:26:45:39:40:ab:8d:83:84:b1:e2:fd:95:af:80:02:b6: 52:5e:c4:9a:fb:bb:23:19:c3:e0:f5:b3:14:00:9d:dd:63:25: 15:98:26:8f:04:47:b7:41:e9:27:e1:d1:d9:dc:b4:1a:9d:8a: 09:06:8e:9a:4d:52:90:90:6a:78:59:f6:61:f1:be:ad:63:62: 4a:c1:fe:48:6a:67:38:87:51:5b:db:1c:2b:9c:0d:21:76:52: 49:43:e9:0c:50:b0:9f:85:2f:0b:77:c2:fc:64:ea:e7:02:5e: d3:89:d7:e1:20:8c:75:e1:32:54:df:87:d7:17:1d:f9:f2:11: e7:ea:97:5a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NRInPCkJP02ahHAQeSw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWZiM2ZlYjE1YzAzYzRkMzRkOWZmNDQ0ZDlhZDdlMzAw NjcyMDgwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzdhNTZlMWZkOTBkMTAwOTc1YjUyMTMxNzlmYmIyNzYwMDYyNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32R/f6QDvRbwcoW+0iHkuRsPle70 2MZh8U7Ypq5ByHOdpKV/U4R59PPjpBi5RC1p4i7eyw5hxO+urNK7rO4vjeqi7f4M aVYdyXOBZVNoNr4alzWVRrPahBTjnCHB+Bf2cE0rKmu1kLmQjivpgJSnOdVMgHRL cGp5x71b6N3E48Qjvnp91SZr9EAsrleMq4sWDmSUM5v7emHGrAjnJ6AZOWlqBLpm fx+y2cT1Gr027Ceh0k/5nLHVEwNMvepYJ3tit2vIB9TGw8wEOCnjMlTXSsq9Lb/X pTThjw+SaLrBGw6V3EELtCrZYEQFxPxCoJlMYpTD589/4pwiXio7qiABAwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAN6VuH9kNEAl1tSExefuydgBiQdMB8GA1UdIwQY MBaAFDRfs/6xXAPE002f9ETZrX4wBnIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUt YmM1NGIxMjExYjYwLzEvQTNwVzRmMlEwUUNYVzFJVEY1LTdKMkFHSkIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUtYmM1NGIxMjExYjYw LzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKCXbQD BAaCXYAwDQYJKoZIhvcNAQELBQADggEBABTae0wm7jU7Y884FCHGaaWvf2XysomB I7bD3XbAnifOLAlzpxsBvE9YmMiqaWRJIaXWbgvQ7GqppOsnYLE4CHF8/ENVtfgi gtTxw875kqs7IUe5GRObjOgRByRkv6rKMzt1JImxGq1unD0IaHtwM45AJNwN6uJC Igi2JyZcJzVlJkU5QKuNg4Sx4v2Vr4ACtlJexJr7uyMZw+D1sxQAnd1jJRWYJo8E R7dB6Sfh0dnctBqdigkGjppNUpCQanhZ9mHxvq1jYkrB/khqZziHUVvbHCucDSF2 UklD6QxQsJ+FLwt3wvxk6ucCXtOJ1+EgjHXhMlTfh9cXHfnyEefql1o= -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:29 2026 by rpki-client