This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/A3dfbS-b6385QXbD4gqPyZDygnI.roa File: A3dfbS-b6385QXbD4gqPyZDygnI.roa (raw, json) Hash identifier: eMk+m8VzfNpB4AhSwjxnwTq5SWYabewWTjTtFBj+jG4= Subject key identifier: 03:77:5F:6D:2F:9B:EB:7F:39:41:76:C3:E2:0A:8F:C9:90:F2:82:72 Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 019B7DCA6D18FE1F7445C426398973631D84 Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/A3dfbS-b6385QXbD4gqPyZDygnI.roa Signing time: Fri 02 Jan 2026 08:19:36 +0000 ROA not before: Fri 02 Jan 2026 08:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133542 IP address blocks: 150.129.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6d:18:fe:1f:74:45:c4:26:39:89:73:63:1d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Jan 2 08:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03775f6d2f9beb7f394176c3e20a8fc990f28272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:c1:0f:70:b4:24:7e:01:99:76:fe:c3:5d: 2a:2d:39:54:fa:d3:23:89:98:25:cb:ac:59:23:22: 4e:2b:ba:4d:ef:18:39:2c:03:48:05:33:ed:f9:20: 16:96:e4:09:29:63:eb:a5:a0:01:d9:b8:54:9f:2b: 57:2a:61:56:9d:c9:e0:38:0a:fe:4d:a7:a4:7c:f1: 23:3e:af:24:f0:59:7a:1e:96:ec:b7:93:00:b4:ff: f8:41:5d:7a:cc:76:b8:7c:e3:fa:6b:a2:af:c2:b4: 1c:e0:bc:cd:80:93:0a:91:d5:1c:d6:f8:6e:a9:cd: c7:c2:98:33:92:aa:d9:4d:44:39:16:93:67:36:24: c8:19:f2:f0:76:a2:69:5a:1d:c9:bd:ed:fd:fb:56: 9e:0d:1f:ec:90:11:26:30:b2:0a:c3:0f:7a:a3:b7: 6a:18:00:b5:30:ca:a3:a9:7e:c0:a7:32:4c:0d:d9: f3:75:52:bd:5d:7e:55:81:ee:a2:b8:2e:02:65:53: f5:a1:ab:9e:6b:1b:9b:bb:f1:ad:c5:44:8a:b0:73: 5e:52:c1:7f:47:85:5c:ed:4f:80:5a:e2:91:7c:69: 97:07:cd:6a:45:3a:30:ae:70:70:e4:21:e6:d7:31: 1c:84:b2:93:95:db:fc:6a:bd:32:1d:68:f4:f0:40: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:77:5F:6D:2F:9B:EB:7F:39:41:76:C3:E2:0A:8F:C9:90:F2:82:72 X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/A3dfbS-b6385QXbD4gqPyZDygnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.129.92.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:56:74:c9:c0:c2:65:c5:39:c3:ed:e3:1e:49:b5:7e:b0:be: c0:18:85:fa:82:ce:af:c9:46:dd:c2:40:63:c7:9b:4b:55:02: cb:ba:0e:1f:d6:d0:01:b8:6a:0a:99:0a:08:fe:6a:a9:2f:cd: c9:5e:d3:77:0b:e2:4d:e9:28:16:fb:e7:6e:fe:ee:a5:5f:e9: 21:a3:2b:15:33:4d:32:b0:b4:07:e1:34:bc:3e:c5:40:c5:ad: 91:6b:cb:55:b9:de:a9:1c:a1:44:5b:a3:79:5b:27:59:d8:c9: 63:6b:a3:df:f2:8c:8a:bc:6d:4e:54:73:eb:0e:70:72:a2:a5: cd:bb:f7:ec:8c:9c:a6:b2:0a:56:39:c1:92:39:a7:96:a1:79: c2:66:bd:e3:5d:07:90:98:9e:72:a4:c7:4f:0e:40:44:62:e6: de:ba:4e:db:31:9d:2b:93:26:60:74:35:0f:67:25:e5:52:d7: 48:2f:e2:34:13:91:ef:e2:b4:7f:18:b6:f5:ca:48:e1:b4:00: 40:a1:63:42:70:8e:c6:4d:78:61:8a:03:b2:53:ba:a0:6c:48: 21:ac:9d:27:2f:57:fe:cd:77:ef:77:87:16:84:c8:71:d3:78: b5:00:f6:34:13:03:d2:8e:06:45:96:79:77:6e:19:af:c9:45: 12:3e:5b:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ym0Y/h90RcQmOYlzYx2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjYwMTAyMDgxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzc3NWY2ZDJmOWJlYjdmMzk0MTc2YzNlMjBhOGZjOTkwZjI4MjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigDBD3C0JH4BmXb+w10qLTlU+tMj iZgly6xZIyJOK7pN7xg5LANIBTPt+SAWluQJKWPrpaAB2bhUnytXKmFWncngOAr+ TaekfPEjPq8k8Fl6Hpbst5MAtP/4QV16zHa4fOP6a6KvwrQc4LzNgJMKkdUc1vhu qc3HwpgzkqrZTUQ5FpNnNiTIGfLwdqJpWh3Jve39+1aeDR/skBEmMLIKww96o7dq GAC1MMqjqX7ApzJMDdnzdVK9XX5Vge6iuC4CZVP1oaueaxubu/GtxUSKsHNeUsF/ R4Vc7U+AWuKRfGmXB81qRTowrnBw5CHm1zEchLKTldv8ar0yHWj08ECLGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAN3X20vm+t/OUF2w+IKj8mQ8oJyMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvQTNkZmJTLWI2Mzg1UVhiRDRncVB5WkR5Z25JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCloFcMA0G CSqGSIb3DQEBCwUAA4IBAQA8VnTJwMJlxTnD7eMeSbV+sL7AGIX6gs6vyUbdwkBj x5tLVQLLug4f1tABuGoKmQoI/mqpL83JXtN3C+JN6SgW++du/u6lX+khoysVM00y sLQH4TS8PsVAxa2Ra8tVud6pHKFEW6N5WydZ2Mlja6Pf8oyKvG1OVHPrDnByoqXN u/fsjJymsgpWOcGSOaeWoXnCZr3jXQeQmJ5ypMdPDkBEYubeuk7bMZ0rkyZgdDUP ZyXlUtdIL+I0E5Hv4rR/GLb1ykjhtABAoWNCcI7GTXhhigOyU7qgbEghrJ0nL1f+ zXfvd4cWhMhx03i1APY0EwPSjgZFlnl3bhmvyUUSPlsL -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:40 2026 by rpki-client