This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/3cTL_iAyUdWn1rl2_8NBBfXDXvA.roa File: 3cTL_iAyUdWn1rl2_8NBBfXDXvA.roa (raw, json) Hash identifier: Auq6dYW1IbUZ8oYiw7xCvq9559uK3oeBaCd765WHPJA= Subject key identifier: DD:C4:CB:FE:20:32:51:D5:A7:D6:B9:76:FF:C3:41:05:F5:C3:5E:F0 Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403 Certificate serial: 019B78A2E53F5D1F559D0613096C9D2A0975 Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/3cTL_iAyUdWn1rl2_8NBBfXDXvA.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 178.211.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e5:3f:5d:1f:55:9d:06:13:09:6c:9d:2a:09:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddc4cbfe203251d5a7d6b976ffc34105f5c35ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4e:63:88:86:99:58:fa:3d:c2:03:d6:a8:e6: 71:66:31:c8:57:29:3d:b7:d2:2b:31:e9:6a:18:16: 3a:c5:47:db:17:53:e1:74:4e:f5:b9:83:41:d2:38: 96:9f:46:a4:5f:1c:14:2b:ba:05:8d:68:6f:23:72: 6a:71:b5:b0:ba:66:bb:3d:65:b3:04:2e:53:97:aa: 35:22:27:22:64:2f:3e:1a:8b:b4:67:b8:82:79:df: 56:95:7e:86:64:78:7c:6d:8e:a8:61:49:29:c5:3b: 95:14:d7:05:81:c8:d4:f9:d7:fc:68:4a:5c:5e:65: 53:61:95:da:50:3f:b1:96:05:f7:c8:80:21:50:67: 6d:37:44:d3:67:5a:ba:96:c5:06:97:51:a0:10:6a: 97:42:10:ee:68:6c:cb:27:87:ce:3a:b3:f1:57:66: 09:1b:90:39:0b:dd:1e:0a:89:fb:e0:54:e3:75:44: 84:35:86:3d:8f:db:be:9f:1d:bd:34:cb:76:f1:92: d9:54:44:85:9d:4b:c6:69:c7:27:f0:23:84:b2:2d: 36:db:61:1d:a6:4e:9f:44:01:53:73:e0:03:1f:20: e0:39:1d:5c:15:66:49:24:63:6c:46:2b:8d:7e:f8: c7:40:8f:80:fe:f7:4f:9f:b4:e5:7a:fc:a9:d7:4a: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C4:CB:FE:20:32:51:D5:A7:D6:B9:76:FF:C3:41:05:F5:C3:5E:F0 X509v3 Authority Key Identifier: keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/3cTL_iAyUdWn1rl2_8NBBfXDXvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.211.142.0/24 Signature Algorithm: sha256WithRSAEncryption 76:de:37:ad:78:7e:52:34:0e:82:1d:e4:8d:e8:45:d8:75:ed: 6a:c8:02:16:f5:71:86:9e:84:9e:3b:33:5b:52:fb:28:77:f7: c5:c1:d6:a9:0a:5e:10:c0:4b:83:a1:b0:55:17:db:6e:3a:5c: bb:d4:fb:f9:cb:4f:b9:00:8a:6b:c0:fe:dd:c2:30:cc:b7:19: 9e:89:2b:16:dd:f4:86:38:4c:53:85:86:b8:85:aa:e1:b7:03: cf:36:76:fa:fc:bf:53:f9:a6:30:5a:3c:19:f4:73:5d:68:d0: c2:04:8a:d6:1b:0f:b0:e8:a8:1d:9f:cf:44:94:33:5e:0b:19: c1:a1:6d:6a:bb:f9:18:81:de:ef:3c:0e:74:a1:27:7b:8d:b0: b6:77:40:82:c1:53:c6:48:06:4f:1b:f8:a5:ab:78:c8:ac:69: 20:22:72:f1:cc:d9:b5:f5:ec:05:9d:ee:55:c2:46:d9:df:01: e8:f9:fb:43:d2:40:38:c8:9f:f1:26:bc:f8:d7:ad:3a:8e:4d: 56:12:3e:4b:a2:8e:60:1a:3b:40:37:8e:7a:83:c8:db:4f:f8: fc:11:4a:19:0f:05:28:d5:ad:b8:92:3c:b4:ae:f2:56:fe:b8: 47:0b:16:7b:9e:d3:39:e6:b3:4d:e1:d0:5e:e1:91:dd:48:3a: 39:e8:70:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ouU/XR9VnQYTCWydKgl1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjdhYzY5ODVjYzBiM2ZlYTIxNjk0NWM5MmViMmU5MzIx ODk0MDMwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGM0Y2JmZTIwMzI1MWQ1YTdkNmI5NzZmZmMzNDEwNWY1YzM1ZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn05jiIaZWPo9wgPWqOZxZjHIVyk9 t9IrMelqGBY6xUfbF1PhdE71uYNB0jiWn0akXxwUK7oFjWhvI3JqcbWwuma7PWWz BC5Tl6o1IiciZC8+Gou0Z7iCed9WlX6GZHh8bY6oYUkpxTuVFNcFgcjU+df8aEpc XmVTYZXaUD+xlgX3yIAhUGdtN0TTZ1q6lsUGl1GgEGqXQhDuaGzLJ4fOOrPxV2YJ G5A5C90eCon74FTjdUSENYY9j9u+nx29NMt28ZLZVESFnUvGaccn8COEsi0222Ed pk6fRAFTc+ADHyDgOR1cFWZJJGNsRiuNfvjHQI+A/vdPn7Tlevyp10oQAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN3Ey/4gMlHVp9a5dv/DQQX1w17wMB8GA1UdIwQY MBaAFFhnrGmFzAs/6iFpRckusukyGJQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMt Y2IxNjhhZmRiMzQzLzEvM2NUTF9pQXlVZFduMXJsMl84TkJCZlhEWHZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMtY2IxNjhhZmRiMzQz LzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstOOMA0G CSqGSIb3DQEBCwUAA4IBAQB23jeteH5SNA6CHeSN6EXYde1qyAIW9XGGnoSeOzNb Uvsod/fFwdapCl4QwEuDobBVF9tuOly71Pv5y0+5AIprwP7dwjDMtxmeiSsW3fSG OExThYa4harhtwPPNnb6/L9T+aYwWjwZ9HNdaNDCBIrWGw+w6Kgdn89ElDNeCxnB oW1qu/kYgd7vPA50oSd7jbC2d0CCwVPGSAZPG/ilq3jIrGkgInLxzNm19ewFne5V wkbZ3wHo+ftD0kA4yJ/xJrz41606jk1WEj5Loo5gGjtAN456g8jbT/j8EUoZDwUo 1a24kjy0rvJW/rhHCxZ7ntM55rNN4dBe4ZHdSDo56HCT -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:29 2026 by rpki-client