This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa File: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (raw, json) Hash identifier: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA= Subject key identifier: DF:EC:E3:35:07:8B:AF:65:58:9C:6B:ED:01:09:77:C0:FA:C0:B6:D4 Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f Certificate serial: 019B7AC89EAE2072EE6980FE26306495AD5C Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa Signing time: Thu 01 Jan 2026 18:18:46 +0000 ROA not before: Thu 01 Jan 2026 18:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49915 IP address blocks: 212.32.4.0/24 maxlen: 24 212.32.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9e:ae:20:72:ee:69:80:fe:26:30:64:95:ad:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfece335078baf65589c6bed010977c0fac0b6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:9a:32:23:e6:6d:2f:fa:e6:dd:9e:ec:63: 8f:c7:b6:fa:13:d4:1a:43:a0:e6:9d:b4:76:a3:ec: b2:2d:b4:3f:f7:29:90:8e:d9:be:92:21:1d:59:8f: 75:6c:86:5d:f7:9c:a4:fd:ed:d1:1b:72:5b:3c:75: d3:68:36:8a:06:4c:9c:2b:47:6d:49:dd:a4:3f:c3: a4:1b:52:0b:e0:c2:19:e8:ad:73:67:9e:3f:58:94: 6b:2a:0b:46:87:33:f2:a3:b7:08:f7:62:42:49:ce: d3:68:af:13:87:ba:ab:b9:4e:50:71:08:42:07:ab: 36:b4:3e:8a:ba:a1:22:be:a0:fb:56:38:ef:08:31: 5f:47:2f:b3:be:b3:a7:14:20:59:05:a4:c7:ea:2f: ec:32:cf:39:9b:a7:e1:9d:58:4b:a9:e5:74:2f:3b: 5a:93:b5:b3:46:59:3a:79:a7:79:ff:a7:04:c6:fe: 6f:2f:3d:6c:c9:e4:9b:82:8e:4b:75:25:0b:4d:30: 3e:63:f3:af:b8:2d:14:d5:c6:5b:a7:c3:a8:ae:a5: cb:fa:05:5f:9c:01:cb:1d:89:66:6c:bc:00:eb:da: 51:17:dd:d3:97:23:15:4a:1b:ab:b3:84:f2:5a:bb: 80:db:d6:d7:4f:9d:90:a3:3e:0e:35:f6:8e:66:f8: 61:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EC:E3:35:07:8B:AF:65:58:9C:6B:ED:01:09:77:C0:FA:C0:B6:D4 X509v3 Authority Key Identifier: keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.32.4.0/23 Signature Algorithm: sha256WithRSAEncryption 69:24:a6:e2:c8:68:19:c0:a2:54:5a:1e:a8:59:da:69:76:0a: 8f:14:cb:fb:0a:09:f1:a2:46:73:5d:12:8c:27:fc:09:3b:ef: cb:4b:07:ee:d7:a7:5a:63:84:f6:21:14:76:e6:fb:d1:74:60: 6e:e9:98:df:d1:5d:da:a8:5e:57:b9:37:f1:0f:3b:5b:b6:41: f7:e4:2c:67:d8:4e:21:e1:cf:3c:d4:8b:a1:aa:0e:8d:c0:28: 1a:cb:80:7f:42:bd:c7:fd:96:e1:c8:79:bc:a6:b0:fc:64:0f: ce:8a:05:fa:94:d1:a4:46:98:67:8f:ff:8e:f5:f5:6b:d4:66: 1a:c7:3f:c0:4a:2b:f2:60:7b:e4:f6:46:a6:4d:c5:44:a2:f5: c2:4d:22:74:45:2f:db:3d:4d:3a:78:98:ab:e5:44:06:c8:6a: 6b:1c:ec:a4:62:42:06:e3:53:6f:41:fd:93:b0:c4:1d:05:6c: f7:6d:19:26:98:0f:5f:43:f0:c6:2d:af:25:00:7c:30:d4:aa: d8:e4:a0:64:0e:20:f9:40:7b:e9:9a:9a:42:2f:01:8a:94:45: 27:27:b2:54:48:61:05:b1:29:21:bf:4c:a7:37:5d:f3:76:28: 75:25:ae:55:63:48:4d:b3:8a:ff:61:3e:ce:ce:88:f1:61:84: 08:06:c0:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJ6uIHLuaYD+JjBkla1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1 ZWRjN2YwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmVjZTMzNTA3OGJhZjY1NTg5YzZiZWQwMTA5NzdjMGZhYzBiNmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk62aMiPmbS/65t2e7GOPx7b6E9Qa Q6DmnbR2o+yyLbQ/9ymQjtm+kiEdWY91bIZd95yk/e3RG3JbPHXTaDaKBkycK0dt Sd2kP8OkG1IL4MIZ6K1zZ54/WJRrKgtGhzPyo7cI92JCSc7TaK8Th7qruU5QcQhC B6s2tD6KuqEivqD7VjjvCDFfRy+zvrOnFCBZBaTH6i/sMs85m6fhnVhLqeV0Lzta k7WzRlk6ead5/6cExv5vLz1syeSbgo5LdSULTTA+Y/OvuC0U1cZbp8OorqXL+gVf nAHLHYlmbLwA69pRF93TlyMVShurs4TyWruA29bXT52Qoz4ONfaOZvhhUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/s4zUHi69lWJxr7QEJd8D6wLbUMB8GA1UdIwQY MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt MzY4N2M4MThlZGU1LzEvMy16ak5RZUxyMlZZbkd2dEFRbDN3UHJBdHRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1 LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1CAEMA0G CSqGSIb3DQEBCwUAA4IBAQBpJKbiyGgZwKJUWh6oWdppdgqPFMv7CgnxokZzXRKM J/wJO+/LSwfu16daY4T2IRR25vvRdGBu6Zjf0V3aqF5XuTfxDztbtkH35Cxn2E4h 4c881Iuhqg6NwCgay4B/Qr3H/ZbhyHm8prD8ZA/OigX6lNGkRphnj/+O9fVr1GYa xz/ASivyYHvk9kamTcVEovXCTSJ0RS/bPU06eJir5UQGyGprHOykYkIG41NvQf2T sMQdBWz3bRkmmA9fQ/DGLa8lAHww1KrY5KBkDiD5QHvpmppCLwGKlEUnJ7JUSGEF sSkhv0ynN13zdih1Ja5VY0hNs4r/YT7OzojxYYQIBsDs -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:22 2026 by rpki-client