This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/3jqeLp31Ia72OLV8Vsb0DKq9fLg.roa File: 3jqeLp31Ia72OLV8Vsb0DKq9fLg.roa (raw, json) Hash identifier: 8CA6QC7AuB3Gqp1AExkzok06YhM4gdbvljn5N5Amqps= Subject key identifier: DE:3A:9E:2E:9D:F5:21:AE:F6:38:B5:7C:56:C6:F4:0C:AA:BD:7C:B8 Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be Certificate serial: 019B7AC8338DA6204AAD9594854F4734E186 Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/3jqeLp31Ia72OLV8Vsb0DKq9fLg.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13280 IP address blocks: 31.200.128.0/18 maxlen: 24 62.40.32.0/19 maxlen: 24 80.233.0.0/17 maxlen: 24 83.136.40.0/21 maxlen: 24 89.204.160.0/19 maxlen: 24 89.204.160.0/20 maxlen: 24 89.204.192.0/18 maxlen: 24 92.251.128.0/17 maxlen: 24 92.251.240.0/21 maxlen: 24 95.83.192.0/18 maxlen: 24 95.83.229.0/24 maxlen: 24 178.167.128.0/17 maxlen: 24 185.60.124.0/22 maxlen: 24 213.191.224.0/19 maxlen: 24 2a00:8680::/32 maxlen: 32 2a02:6880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:33:8d:a6:20:4a:ad:95:94:85:4f:47:34:e1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de3a9e2e9df521aef638b57c56c6f40caabd7cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:92:3e:61:0e:90:fe:bd:81:dd:38:a6:05:7e: e0:93:b7:4b:18:ab:e4:48:76:42:b3:8c:d8:3a:06: 06:8b:8d:b2:ce:a7:88:4c:ea:6f:08:a5:d9:5b:6d: 41:db:0f:bf:3b:b3:72:d9:a9:6e:8c:b9:0b:a2:2e: 6b:20:32:43:90:8d:c7:ca:46:28:58:62:51:5c:56: c2:a5:f0:c0:de:d5:bc:b5:f8:27:e1:14:f3:3c:74: 30:e1:6b:0c:ed:50:4a:98:0c:7d:6f:b9:3c:fa:8a: 9b:0a:58:10:c7:52:dc:14:f6:18:99:fc:bb:42:51: 75:32:44:e5:bb:50:f4:17:4b:1d:01:5a:bb:3a:9a: 70:f6:f3:51:52:fc:59:f6:54:e1:65:52:9e:b2:99: 60:c6:fa:e2:04:01:82:f8:70:39:b2:eb:56:b7:d3: 74:9a:cf:7a:41:a4:6d:15:b2:f4:b4:82:71:f3:11: e2:45:55:61:3d:9a:bf:71:8f:a2:cb:33:9b:b0:74: b9:3d:37:67:45:5d:80:2c:56:04:2e:b1:59:ea:eb: 49:c2:73:91:6d:b4:d1:e8:26:20:08:45:ed:95:44: 34:64:04:b9:39:9c:34:4d:01:83:0f:e8:4d:d8:e8: 9f:06:79:b1:93:a4:29:e3:3b:28:d7:aa:63:c1:79: ef:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3A:9E:2E:9D:F5:21:AE:F6:38:B5:7C:56:C6:F4:0C:AA:BD:7C:B8 X509v3 Authority Key Identifier: keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/3jqeLp31Ia72OLV8Vsb0DKq9fLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.200.128.0/18 62.40.32.0/19 80.233.0.0/17 83.136.40.0/21 89.204.160.0-89.204.255.255 92.251.128.0/17 95.83.192.0/18 178.167.128.0/17 185.60.124.0/22 213.191.224.0/19 IPv6: 2a00:8680::/32 2a02:6880::/32 Signature Algorithm: sha256WithRSAEncryption 33:ca:f2:a2:13:15:58:c1:13:27:9c:2f:76:6f:49:12:cb:70: 52:3c:62:90:76:89:b5:56:12:de:ab:69:39:11:38:25:b7:78: f9:8e:8f:48:51:e5:d2:41:29:5c:eb:51:85:c1:82:ee:2b:40: 57:b6:9c:ff:54:0f:e5:91:cd:17:27:00:2f:bf:0f:7e:35:f3: b0:89:81:56:51:c4:43:cf:39:64:97:84:69:80:c3:f4:cd:92: 2a:d6:cc:f8:20:b8:64:d3:ed:7c:5d:be:6c:20:20:30:82:49: a7:ce:d1:cf:fb:71:90:ab:f2:b6:73:db:80:cc:f4:85:a4:04: db:71:70:34:83:98:24:2f:01:3d:28:7d:f0:04:d8:7b:6c:36: 3d:57:aa:c0:b9:a5:c6:e7:38:3a:7b:45:ec:09:b3:11:df:31: ac:ae:01:16:b8:9c:a8:e5:cf:28:7a:40:0a:d5:b3:7e:db:57: d4:a1:35:22:8c:0a:8d:b0:02:a5:4e:ff:92:eb:87:8f:5b:3d: 8b:56:9a:77:d2:6d:88:0f:c3:d8:a5:35:77:aa:ed:bd:88:f0: 52:b2:8d:7f:11:6d:59:ca:68:0d:6f:cd:44:58:f3:03:0d:1c: fd:f0:73:2f:2a:67:c3:8c:0b:9c:f2:ae:a0:f9:3a:85:f9:10: f1:ce:92:39 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt6yDONpiBKrZWUhU9HNOGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWNmMjYwZDIzMjYzYTdjNmJiNmM1OWMxOWVlYmM2NzU5 YjYwYmUwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTNhOWUyZTlkZjUyMWFlZjYzOGI1N2M1NmM2ZjQwY2FhYmQ3Y2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5I+YQ6Q/r2B3TimBX7gk7dLGKvk SHZCs4zYOgYGi42yzqeITOpvCKXZW21B2w+/O7Ny2alujLkLoi5rIDJDkI3HykYo WGJRXFbCpfDA3tW8tfgn4RTzPHQw4WsM7VBKmAx9b7k8+oqbClgQx1LcFPYYmfy7 QlF1MkTlu1D0F0sdAVq7Oppw9vNRUvxZ9lThZVKesplgxvriBAGC+HA5sutWt9N0 ms96QaRtFbL0tIJx8xHiRVVhPZq/cY+iyzObsHS5PTdnRV2ALFYELrFZ6utJwnOR bbTR6CYgCEXtlUQ0ZAS5OZw0TQGDD+hN2OifBnmxk6Qp4zso16pjwXnvIQIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFN46ni6d9SGu9ji1fFbG9AyqvXy4MB8GA1UdIwQY MBaAFMGs8mDSMmOnxrtsWcGe68Z1m2C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEt ZmZkNjQ2ZDA1ZjY3LzEvM2pxZUxwMzFJYTcyT0xWOFZzYjBES3E5ZkxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEtZmZkNjQ2ZDA1ZjY3 LzEvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBJBAIAATBDAwQGH8iAAwQF PiggAwQHUOkAAwQDU4goMAsDBAVZzKADAwBZzAMEB1z7gAMEBl9TwAMEB7KngAME Ark8fAMEBdW/4DAUBAIAAjAOAwUAKgCGgAMFACoCaIAwDQYJKoZIhvcNAQELBQAD ggEBADPK8qITFVjBEyecL3ZvSRLLcFI8YpB2ibVWEt6raTkROCW3ePmOj0hR5dJB KVzrUYXBgu4rQFe2nP9UD+WRzRcnAC+/D34187CJgVZRxEPPOWSXhGmAw/TNkirW zPgguGTT7XxdvmwgIDCCSafO0c/7cZCr8rZz24DM9IWkBNtxcDSDmCQvAT0offAE 2HtsNj1XqsC5pcbnODp7RewJsxHfMayuARa4nKjlzyh6QArVs37bV9ShNSKMCo2w AqVO/5Lrh49bPYtWmnfSbYgPw9ilNXeq7b2I8FKyjX8RbVnKaA1vzURY8wMNHP3w cy8qZ8OMC5zyrqD5OoX5EPHOkjk= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:40 2026 by rpki-client