This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/3uaiubVaYwEf-0pq3jOcgWmJ5CE.roa File: 3uaiubVaYwEf-0pq3jOcgWmJ5CE.roa (raw, json) Hash identifier: +/DqQfsYBGZvH5gjSmEEf+nK4crysz9SgEpPppJMqlo= Subject key identifier: DE:E6:A2:B9:B5:5A:63:01:1F:FB:4A:6A:DE:33:9C:81:69:89:E4:21 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 019B7BA3CC5B49B7462E1C9FEE95CDC7AA20 Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/3uaiubVaYwEf-0pq3jOcgWmJ5CE.roa Signing time: Thu 01 Jan 2026 22:18:10 +0000 ROA not before: Thu 01 Jan 2026 22:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198912 IP address blocks: 57.191.127.0/24 maxlen: 24 57.191.192.0/19 maxlen: 24 57.191.224.0/19 maxlen: 24 57.250.220.0/24 maxlen: 24 2a0a:90c2::/36 maxlen: 36 2a0a:90c2:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:cc:5b:49:b7:46:2e:1c:9f:ee:95:cd:c7:aa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Jan 1 22:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dee6a2b9b55a63011ffb4a6ade339c816989e421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:e5:47:46:3a:ac:1a:75:1d:c0:2a:d4:42: ff:d5:cc:6c:fa:a3:85:dc:fd:b8:1e:ff:f2:90:b3: 90:27:5d:f1:64:bc:92:7e:5c:e2:38:be:44:26:14: 17:b7:77:ee:13:07:3e:e7:70:76:72:23:27:17:d3: ec:24:26:c0:d5:21:5a:d0:b7:43:17:97:23:a8:88: 90:8a:39:97:18:5e:54:3e:c3:94:13:ad:ca:74:d1: 64:7d:b6:be:d0:22:cd:29:85:89:07:93:37:07:86: 95:85:22:9a:59:89:19:7d:1d:30:38:55:3f:36:e8: 38:5f:dc:ff:d0:39:75:32:f7:77:62:64:95:49:b9: aa:24:a3:3c:77:6d:a1:aa:a3:75:5b:1d:71:04:44: 32:7c:e4:6d:7e:61:c7:ce:be:9e:e8:9e:9d:e6:b1: ca:0c:21:65:4b:bf:4e:7a:20:35:c1:70:79:08:b4: d0:2a:46:e5:e1:e5:5c:98:b5:ba:a3:6a:48:fe:96: be:70:28:20:93:5b:af:18:a6:4b:f3:61:6c:99:8f: 4f:e7:a2:a6:6f:0e:73:cd:71:3c:3b:55:d8:47:1f: 56:55:23:7b:3f:48:4f:2e:fd:3f:0f:51:0c:ba:3c: a5:bc:29:85:74:44:5a:25:13:3f:e5:98:82:7d:cd: d1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E6:A2:B9:B5:5A:63:01:1F:FB:4A:6A:DE:33:9C:81:69:89:E4:21 X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/3uaiubVaYwEf-0pq3jOcgWmJ5CE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.191.127.0/24 57.191.192.0/18 57.250.220.0/24 IPv6: 2a0a:90c2::/35 Signature Algorithm: sha256WithRSAEncryption 2a:79:cb:73:06:49:f6:b9:cf:97:ca:ed:03:86:07:e5:22:37: 92:aa:c3:5b:c7:2c:74:c2:f7:97:06:4c:22:ab:6a:99:09:ac: 34:1a:dc:30:b4:b8:a5:bd:e2:3b:2f:51:c3:df:5f:e3:59:aa: bb:67:19:07:e9:ca:7e:81:a7:53:62:47:c6:78:87:b7:8a:25: 5d:4f:4c:28:64:ca:0c:48:c3:47:1c:37:91:2d:e8:5a:72:7c: 6a:07:11:07:b2:e4:e0:1e:ac:b0:f3:be:42:ac:c5:1f:b7:0f: 38:dd:20:6f:7d:2f:7c:ad:be:c0:56:0d:a6:e5:fd:1c:43:32: 6d:96:4a:31:84:3d:d5:4a:5d:8d:89:36:a2:a1:1b:12:56:10: a4:b9:30:a1:72:a5:19:10:06:d1:00:a3:3b:dd:66:5a:09:63: 0d:0f:73:b3:0d:c6:2d:b7:ac:0f:41:7b:13:79:0f:96:9a:92: a0:a6:2e:03:c1:23:d7:a8:65:d7:09:77:89:92:a9:f4:1a:ac: 0e:85:58:d8:07:3f:1d:7f:6d:7d:3b:3b:99:03:41:c4:9e:62: 23:a3:84:c1:e8:9c:ef:77:82:88:a2:d0:b3:32:b4:2f:87:3d: bd:e8:c4:fb:1f:46:40:09:ec:29:25:b8:bf:a3:a1:2e:33:37: 5b:03:19:8e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt7o8xbSbdGLhyf7pXNx6ogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjYwMTAxMjIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWU2YTJiOWI1NWE2MzAxMWZmYjRhNmFkZTMzOWM4MTY5ODllNDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXPlR0Y6rBp1HcAq1EL/1cxs+qOF 3P24Hv/ykLOQJ13xZLySflziOL5EJhQXt3fuEwc+53B2ciMnF9PsJCbA1SFa0LdD F5cjqIiQijmXGF5UPsOUE63KdNFkfba+0CLNKYWJB5M3B4aVhSKaWYkZfR0wOFU/ Nug4X9z/0Dl1Mvd3YmSVSbmqJKM8d22hqqN1Wx1xBEQyfORtfmHHzr6e6J6d5rHK DCFlS79OeiA1wXB5CLTQKkbl4eVcmLW6o2pI/pa+cCggk1uvGKZL82FsmY9P56Km bw5zzXE8O1XYRx9WVSN7P0hPLv0/D1EMujylvCmFdERaJRM/5ZiCfc3RJQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN7morm1WmMBH/tKat4znIFpieQhMB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvM3VhaXViVmFZd0VmLTBwcTNqT2NnV21KNUNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQAOb9/AwQG Ob/AAwQAOfrcMA4EAgACMAgDBgUqCpDCADANBgkqhkiG9w0BAQsFAAOCAQEAKnnL cwZJ9rnPl8rtA4YH5SI3kqrDW8csdML3lwZMIqtqmQmsNBrcMLS4pb3iOy9Rw99f 41mqu2cZB+nKfoGnU2JHxniHt4olXU9MKGTKDEjDRxw3kS3oWnJ8agcRB7Lk4B6s sPO+QqzFH7cPON0gb30vfK2+wFYNpuX9HEMybZZKMYQ91UpdjYk2oqEbElYQpLkw oXKlGRAG0QCjO91mWgljDQ9zsw3GLbesD0F7E3kPlpqSoKYuA8Ej16hl1wl3iZKp 9BqsDoVY2Ac/HX9tfTs7mQNBxJ5iI6OEweic73eCiKLQszK0L4c9vejE+x9GQAns KSW4v6OhLjM3WwMZjg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:33 2026 by rpki-client