This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/3WRTlHzKYOrm4AbDmKjr4w5CRlU.roa File: 3WRTlHzKYOrm4AbDmKjr4w5CRlU.roa (raw, json) Hash identifier: JIn9kOrrikFOyPhnJDeOrhDS1w67s7IYtwSsVMfbz6o= Subject key identifier: DD:64:53:94:7C:CA:60:EA:E6:E0:06:C3:98:A8:EB:E3:0E:42:46:55 Certificate issuer: /CN=e9057470fd56f1b773b2e40abaee79f9966e4436 Certificate serial: 019B7DCA04FCA6C5F8262F6F19D71053EF68 Authority key identifier: E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/3WRTlHzKYOrm4AbDmKjr4w5CRlU.roa Signing time: Fri 02 Jan 2026 08:19:10 +0000 ROA not before: Fri 02 Jan 2026 08:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49321 IP address blocks: 164.138.192.0/21 maxlen: 21 2a00:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:04:fc:a6:c5:f8:26:2f:6f:19:d7:10:53:ef:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9057470fd56f1b773b2e40abaee79f9966e4436 Validity Not Before: Jan 2 08:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd6453947cca60eae6e006c398a8ebe30e424655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:96:71:97:ed:d6:6d:c4:6c:f9:c0:09:13: f3:94:3a:b0:ae:58:4d:42:22:60:11:0e:dc:28:e4: 00:84:7d:49:df:eb:7d:dc:ee:4c:bd:c2:1d:0e:05: d4:5c:2b:51:ac:2a:8a:e9:bf:e2:c8:7e:d1:75:3f: 95:95:3e:39:d7:b2:1e:50:ab:42:c1:88:1d:1c:ab: 80:2e:0c:a8:9a:ba:0f:a1:d4:21:c0:55:a7:cf:2a: 99:8f:f0:9a:b7:7f:a0:08:f9:57:cf:82:03:d1:fc: 22:0b:e2:2f:2c:e1:d2:30:a0:5b:40:45:e1:ae:af: a6:1f:43:59:0f:13:db:31:38:1c:e9:b4:bf:f1:3e: 06:df:5e:41:63:33:ba:90:c8:a3:89:f4:b3:31:c9: 24:aa:d5:04:bb:0f:23:50:26:a0:ca:a5:59:ed:17: 3d:12:40:f2:5d:3a:dd:a0:e7:4e:cf:80:86:ce:bb: fe:8d:01:5d:89:b2:d6:ea:bf:63:a6:d1:30:d7:3e: aa:48:34:a3:7c:28:7d:bb:46:3e:0c:d8:89:4a:56: 37:36:f1:3b:ad:22:1b:65:13:02:c1:46:d4:d1:73: f3:b0:38:68:d0:02:36:ea:34:01:21:17:ec:cb:83: 25:a5:a5:b9:52:3a:bf:a4:ab:0e:04:22:70:a1:f4: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:64:53:94:7C:CA:60:EA:E6:E0:06:C3:98:A8:EB:E3:0E:42:46:55 X509v3 Authority Key Identifier: keyid:E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/3WRTlHzKYOrm4AbDmKjr4w5CRlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.192.0/21 IPv6: 2a00:bac0::/32 Signature Algorithm: sha256WithRSAEncryption 7b:fb:b4:ec:fd:2f:25:85:04:01:42:2f:57:05:c8:44:16:be: b6:52:3b:64:d4:6d:a9:c8:d3:b6:b0:ab:68:0b:2f:af:c7:35: 0f:a3:dc:dc:6a:76:12:ce:f7:58:0e:b6:5c:7f:23:27:d9:64: 55:e6:a9:33:62:da:01:47:82:22:c2:ab:cd:d9:78:84:62:fd: 73:39:d7:97:05:b4:60:52:47:b2:3e:e7:05:fe:d1:63:0d:ef: d1:db:3e:8b:15:c4:9d:28:77:4d:09:7c:aa:a0:e0:9f:f5:2c: 44:a3:d3:18:ec:30:89:0f:1e:f3:96:6b:21:70:b2:16:42:eb: d9:76:79:88:14:79:4b:f0:95:37:08:c9:e6:73:65:e1:33:a2: 1b:26:93:06:c2:ef:60:f0:45:68:57:11:27:0f:47:ee:4b:70: a2:01:58:be:39:1f:79:2e:5b:16:ca:f9:24:e4:3a:2a:1c:da: 82:8d:5b:39:58:83:54:e0:76:d2:ec:49:e7:18:ad:1b:7a:57: 9f:64:2c:d3:85:b0:c7:13:d0:ef:78:fe:1b:f2:61:78:f9:83: e3:e3:0a:76:b7:47:8a:ac:f2:9c:ed:a3:80:27:ef:86:f0:e9: 2f:6e:27:79:ea:2e:1e:46:33:72:a8:51:92:b1:dd:65:37:a9: 09:8f:10:fd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ygT8psX4Ji9vGdcQU+9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDU3NDcwZmQ1NmYxYjc3M2IyZTQwYWJhZWU3OWY5OTY2 ZTQ0MzYwHhcNMjYwMTAyMDgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDY0NTM5NDdjY2E2MGVhZTZlMDA2YzM5OGE4ZWJlMzBlNDI0NjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCGWcZft1m3EbPnACRPzlDqwrlhN QiJgEQ7cKOQAhH1J3+t93O5MvcIdDgXUXCtRrCqK6b/iyH7RdT+VlT4517IeUKtC wYgdHKuALgyomroPodQhwFWnzyqZj/Cat3+gCPlXz4ID0fwiC+IvLOHSMKBbQEXh rq+mH0NZDxPbMTgc6bS/8T4G315BYzO6kMijifSzMckkqtUEuw8jUCagyqVZ7Rc9 EkDyXTrdoOdOz4CGzrv+jQFdibLW6r9jptEw1z6qSDSjfCh9u0Y+DNiJSlY3NvE7 rSIbZRMCwUbU0XPzsDho0AI26jQBIRfsy4MlpaW5Ujq/pKsOBCJwofQ/eQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN1kU5R8ymDq5uAGw5io6+MOQkZVMB8GA1UdIwQY MBaAFOkFdHD9VvG3c7LkCrruefmWbkQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFWMGNQMVc4YmR6c3VRS3V1NTUtWlp1UkRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NTc3MmEtYTEwZi00MjlkLWI1ZGIt OTIxOGY5MmYzMDM2LzEvM1dSVGxIektZT3JtNEFiRG1LanI0dzVDUmxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80NTc3MmEtYTEwZi00MjlkLWI1ZGItOTIxOGY5MmYzMDM2 LzEvNlFWMGNQMVc4YmR6c3VRS3V1NTUtWlp1UkRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDpIrAMA0E AgACMAcDBQAqALrAMA0GCSqGSIb3DQEBCwUAA4IBAQB7+7Ts/S8lhQQBQi9XBchE Fr62Ujtk1G2pyNO2sKtoCy+vxzUPo9zcanYSzvdYDrZcfyMn2WRV5qkzYtoBR4Ii wqvN2XiEYv1zOdeXBbRgUkeyPucF/tFjDe/R2z6LFcSdKHdNCXyqoOCf9SxEo9MY 7DCJDx7zlmshcLIWQuvZdnmIFHlL8JU3CMnmc2XhM6IbJpMGwu9g8EVoVxEnD0fu S3CiAVi+OR95LlsWyvkk5DoqHNqCjVs5WINU4HbS7EnnGK0belefZCzThbDHE9Dv eP4b8mF4+YPj4wp2t0eKrPKc7aOAJ++G8Okvbid56i4eRjNyqFGSsd1lN6kJjxD9 -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:18 2026 by rpki-client