This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/286ljgduSQ23zXxMskYIQVpjxXw.roa File: 286ljgduSQ23zXxMskYIQVpjxXw.roa (raw, json) Hash identifier: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4= Subject key identifier: DB:CE:A5:8E:07:6E:49:0D:B7:CD:7C:4C:B2:46:08:41:5A:63:C5:7C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019B797F079FBC6E956AF0BE82084722866E Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/286ljgduSQ23zXxMskYIQVpjxXw.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49871 IP address blocks: 212.19.51.240/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:07:9f:bc:6e:95:6a:f0:be:82:08:47:22:86:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbcea58e076e490db7cd7c4cb24608415a63c57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:15:ed:86:d7:ee:c5:74:6d:2c:c0:4e:f5: 22:fb:44:34:96:1d:eb:63:dd:be:93:d6:21:0d:78: db:e6:99:8f:ce:c9:c3:8c:4b:a8:d5:4d:04:02:af: 71:90:7e:d9:f8:ac:3f:1c:0c:27:97:c6:c7:c2:1f: dd:f9:86:94:f4:b1:ef:27:52:3b:41:ee:0a:78:13: 58:c8:ee:02:4d:8b:61:b6:78:5a:ca:8a:16:9e:4a: 1d:35:c0:fb:ae:9e:62:ca:ac:a6:3e:2d:29:41:6f: f0:e3:96:82:6a:9b:91:aa:19:14:66:42:87:90:53: d3:61:f9:ba:59:42:e2:54:47:f1:7a:88:b9:be:c3: a9:6e:87:a0:a8:2e:c5:8d:db:f7:df:ce:2c:19:49: ba:14:25:f0:cf:e9:5f:09:41:40:4b:87:ff:3e:17: 82:56:d1:67:bc:df:d1:be:af:f8:91:70:fe:39:47: 25:58:f9:48:a6:a4:b7:5f:01:53:80:4f:65:0c:35: e8:32:75:ce:d4:19:2b:43:a9:28:4f:50:f1:be:47: 62:6d:c3:61:19:1d:95:e4:20:d5:96:a5:4d:47:70: c9:1c:35:d7:34:d1:94:c5:f0:78:8c:d5:5a:4c:c2: a3:dd:0e:72:1f:36:44:9a:e1:31:d0:7c:e8:86:a2: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CE:A5:8E:07:6E:49:0D:B7:CD:7C:4C:B2:46:08:41:5A:63:C5:7C X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/286ljgduSQ23zXxMskYIQVpjxXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.19.51.240/29 Signature Algorithm: sha256WithRSAEncryption ad:ee:02:fa:18:9b:dd:31:f7:fb:1c:e2:14:0d:df:f0:c4:1a: 9a:21:0f:89:cd:63:ea:b0:d1:06:b9:8c:ee:cb:6e:71:23:c4: 2a:4c:44:6b:a1:84:4d:11:cd:6e:43:f6:02:ce:83:25:3c:83: 48:78:46:54:74:c4:9e:61:66:0d:ff:58:2e:ab:a3:8f:c5:cb: c9:bc:02:c5:40:9c:c2:09:c9:26:5b:68:65:71:8a:3c:15:22: 4d:96:2d:13:bc:31:a8:d1:3b:19:b3:1e:04:91:86:d1:7e:a0: 85:65:e7:ce:ea:06:6c:61:b6:98:36:09:b0:f0:55:ec:5e:00: 5a:7d:4e:16:5a:f1:2f:7a:04:e5:8d:84:1d:75:49:f9:45:37: 14:72:06:a8:3d:d7:69:8e:04:2b:56:69:2e:e6:5f:c1:b9:8b: db:f9:29:75:b3:04:f9:99:b0:b8:eb:ac:e1:dd:3b:e6:ef:f6: 58:cb:04:02:0f:72:0f:70:6d:48:0a:21:48:a6:ea:62:a1:01: 3a:f6:65:6f:93:54:6c:45:cd:bb:aa:32:a3:19:e7:8a:9e:54: c6:c8:21:e3:9f:d2:35:74:04:aa:17:0b:d2:7b:e7:93:5e:12: 6b:be:e9:8a:89:9a:9b:01:49:43:9d:a5:b0:2d:af:88:a0:dd: d5:af:bf:79 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fwefvG6VavC+gghHIoZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmNlYTU4ZTA3NmU0OTBkYjdjZDdjNGNiMjQ2MDg0MTVhNjNjNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXoV7YbX7sV0bSzATvUi+0Q0lh3r Y92+k9YhDXjb5pmPzsnDjEuo1U0EAq9xkH7Z+Kw/HAwnl8bHwh/d+YaU9LHvJ1I7 Qe4KeBNYyO4CTYthtnhayooWnkodNcD7rp5iyqymPi0pQW/w45aCapuRqhkUZkKH kFPTYfm6WULiVEfxeoi5vsOpboegqC7Fjdv3384sGUm6FCXwz+lfCUFAS4f/PheC VtFnvN/Rvq/4kXD+OUclWPlIpqS3XwFTgE9lDDXoMnXO1BkrQ6koT1DxvkdibcNh GR2V5CDVlqVNR3DJHDXXNNGUxfB4jNVaTMKj3Q5yHzZEmuEx0HzohqLluwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNvOpY4HbkkNt818TLJGCEFaY8V8MB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvMjg2bGpnZHVTUTIzelh4TXNrWUlRVnBqeFh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD1BMz8DAN BgkqhkiG9w0BAQsFAAOCAQEAre4C+hib3TH3+xziFA3f8MQamiEPic1j6rDRBrmM 7stucSPEKkxEa6GETRHNbkP2As6DJTyDSHhGVHTEnmFmDf9YLqujj8XLybwCxUCc wgnJJltoZXGKPBUiTZYtE7wxqNE7GbMeBJGG0X6ghWXnzuoGbGG2mDYJsPBV7F4A Wn1OFlrxL3oE5Y2EHXVJ+UU3FHIGqD3XaY4EK1ZpLuZfwbmL2/kpdbME+ZmwuOus 4d075u/2WMsEAg9yD3BtSAohSKbqYqEBOvZlb5NUbEXNu6oyoxnnip5Uxsgh45/S NXQEqhcL0nvnk14Sa77piomamwFJQ52lsC2viKDd1a+/eQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:50 2026 by rpki-client