This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/3eP-ZYKR74zQteZxg-jYK68KuKU.roa File: 3eP-ZYKR74zQteZxg-jYK68KuKU.roa (raw, json) Hash identifier: rI+Q6O08EYSoWZw7Ks588qVsTWbvSuHUC1dp2GQPsEg= Subject key identifier: DD:E3:FE:65:82:91:EF:8C:D0:B5:E6:71:83:E8:D8:2B:AF:0A:B8:A5 Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019B994EC2ED7972E56E3F3814C1281F838A Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/3eP-ZYKR74zQteZxg-jYK68KuKU.roa Signing time: Wed 07 Jan 2026 16:33:54 +0000 ROA not before: Wed 07 Jan 2026 16:33:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211126 IP address blocks: 103.138.188.0/24 maxlen: 24 195.250.27.0/24 maxlen: 24 195.250.28.0/24 maxlen: 24 209.42.29.0/24 maxlen: 24 209.42.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:4e:c2:ed:79:72:e5:6e:3f:38:14:c1:28:1f:83:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Jan 7 16:33:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dde3fe658291ef8cd0b5e67183e8d82baf0ab8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:b4:b1:60:22:99:d4:47:6a:7d:22:d6:5d: 74:52:7d:9b:bb:43:94:d2:9d:9b:9d:92:17:a0:e5: 53:df:cc:4d:3a:bf:f0:b5:02:67:6b:a8:f1:f3:4f: a6:6d:47:db:af:ea:7b:1a:92:2e:2e:f9:b2:87:f6: 8d:fa:2d:9c:f8:6a:d7:d1:8b:f9:7b:97:3b:13:1e: ee:c1:da:b6:71:8b:ac:a9:48:67:13:e3:97:28:da: ee:0e:04:6a:87:8d:26:df:c4:38:84:49:97:eb:62: b8:b9:23:5c:9a:c8:1b:ae:ed:ef:4b:d4:a4:fb:60: 70:cb:30:4b:a1:59:a1:fa:6a:31:bf:24:6e:18:01: 12:c9:bb:40:d3:0d:55:cb:f2:9c:d4:c6:cc:45:94: 8c:32:dc:63:39:45:7e:83:2f:d3:f6:09:c8:55:93: a0:35:57:0d:80:27:bf:d3:e9:b1:ee:65:a9:a9:2a: 6a:97:7b:0e:e1:50:25:c8:5b:4b:fc:1d:f9:5b:33: 82:2f:08:ee:a0:1b:ad:76:e2:0a:81:5c:2b:c1:07: fb:ce:a3:b1:7c:82:08:d5:46:82:9c:af:7f:66:4b: 66:d1:89:d0:5b:18:a9:36:f1:f3:ef:57:5f:b7:51: 95:f8:b1:fc:f2:e4:00:81:a0:c1:28:5f:64:25:49: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E3:FE:65:82:91:EF:8C:D0:B5:E6:71:83:E8:D8:2B:AF:0A:B8:A5 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/3eP-ZYKR74zQteZxg-jYK68KuKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.188.0/24 195.250.27.0-195.250.28.255 209.42.29.0-209.42.30.255 Signature Algorithm: sha256WithRSAEncryption 3c:f0:85:c2:44:a6:0c:c3:54:3d:f2:2e:bf:aa:14:fe:70:6a: 2e:bd:e0:54:3f:03:54:97:d4:18:43:40:27:b0:c4:ef:1d:41: e3:07:7a:f5:6d:05:a5:78:42:f7:98:fa:c1:42:87:81:e7:c2: 2a:60:62:60:0e:f0:69:0e:39:b7:69:c7:cf:88:2d:df:d2:ca: 81:5c:29:74:2f:6c:21:e4:c2:62:39:2e:71:03:83:0a:40:ae: b9:57:2c:e5:f6:db:63:79:81:03:90:25:21:86:75:ec:d1:04: 08:e4:f6:a2:e9:ac:a7:2b:d3:1b:b4:8b:e0:97:15:db:28:0a: 48:23:d7:50:47:2a:0d:ab:3c:dc:17:13:c9:9d:44:56:3a:46: eb:8b:9f:e9:30:d1:94:13:e9:6b:cf:1a:4f:8f:30:7c:1a:0a: cf:54:14:a3:af:ac:91:60:a6:7f:85:c8:51:48:14:e8:80:9e: 3b:b4:f8:42:56:7c:be:f1:6d:67:1e:96:f1:41:c5:a5:7a:f1: 2f:db:24:23:1c:01:b5:83:8e:0a:15:d0:a7:82:3e:fb:59:9b: 4b:b6:af:6a:ac:80:82:bd:60:36:5a:43:66:36:73:e6:d6:98: 2c:0b:96:9e:6a:f5:5d:e8:27:30:a9:63:e1:a6:65:5a:b4:27: b7:c8:76:c6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZuZTsLteXLlbj84FMEoH4OKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwMTA3MTYzMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGUzZmU2NTgyOTFlZjhjZDBiNWU2NzE4M2U4ZDgyYmFmMGFiOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUG0sWAimdRHan0i1l10Un2bu0OU 0p2bnZIXoOVT38xNOr/wtQJna6jx80+mbUfbr+p7GpIuLvmyh/aN+i2c+GrX0Yv5 e5c7Ex7uwdq2cYusqUhnE+OXKNruDgRqh40m38Q4hEmX62K4uSNcmsgbru3vS9Sk +2BwyzBLoVmh+moxvyRuGAESybtA0w1Vy/Kc1MbMRZSMMtxjOUV+gy/T9gnIVZOg NVcNgCe/0+mx7mWpqSpql3sO4VAlyFtL/B35WzOCLwjuoButduIKgVwrwQf7zqOx fIII1UaCnK9/Zktm0YnQWxipNvHz71dft1GV+LH88uQAgaDBKF9kJUma/wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN3j/mWCke+M0LXmcYPo2CuvCrilMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvM2VQLVpZS1I3NHpRdGVaeGctallLNjhLdUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAZ4q8MAwD BADD+hsDBADD+hwwDAMEANEqHQMEANEqHjANBgkqhkiG9w0BAQsFAAOCAQEAPPCF wkSmDMNUPfIuv6oU/nBqLr3gVD8DVJfUGENAJ7DE7x1B4wd69W0FpXhC95j6wUKH gefCKmBiYA7waQ45t2nHz4gt39LKgVwpdC9sIeTCYjkucQODCkCuuVcs5fbbY3mB A5AlIYZ17NEECOT2oumspyvTG7SL4JcV2ygKSCPXUEcqDas83BcTyZ1EVjpG64uf 6TDRlBPpa88aT48wfBoKz1QUo6+skWCmf4XIUUgU6ICeO7T4QlZ8vvFtZx6W8UHF pXrxL9skIxwBtYOOChXQp4I++1mbS7avaqyAgr1gNlpDZjZz5taYLAuWnmr1Xegn MKlj4aZlWrQnt8h2xg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:29 2026 by rpki-client