This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/3W7usHsAz5z3pRj0N-iDHGm2czc.roa File: 3W7usHsAz5z3pRj0N-iDHGm2czc.roa (raw, json) Hash identifier: E4GnjrWRndz3AnBRx+9OaWV9XAb0zCBKRFe07lFMNTM= Subject key identifier: DD:6E:EE:B0:7B:00:CF:9C:F7:A5:18:F4:37:E8:83:1C:69:B6:73:37 Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Certificate serial: 019B7CEE5B8B0354F7B318AA96826F28E152 Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/3W7usHsAz5z3pRj0N-iDHGm2czc.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29208 IP address blocks: 46.227.8.0/21 maxlen: 21 62.4.96.0/21 maxlen: 21 62.4.104.0/22 maxlen: 22 62.44.0.0/19 maxlen: 19 62.177.64.0/18 maxlen: 18 82.100.0.0/18 maxlen: 18 82.113.32.0/19 maxlen: 19 82.119.240.0/20 maxlen: 20 82.119.250.0/24 maxlen: 24 83.148.0.0/18 maxlen: 18 85.93.96.0/19 maxlen: 19 88.146.0.0/17 maxlen: 17 88.208.64.0/18 maxlen: 18 89.235.0.0/18 maxlen: 18 95.80.192.0/18 maxlen: 18 109.235.176.0/22 maxlen: 22 151.237.224.0/21 maxlen: 21 185.24.236.0/22 maxlen: 22 194.213.224.0/19 maxlen: 19 195.122.192.0/19 maxlen: 19 195.128.192.0/19 maxlen: 19 195.250.128.0/19 maxlen: 19 195.250.154.0/24 maxlen: 24 212.20.96.0/19 maxlen: 19 212.24.128.0/19 maxlen: 19 212.27.192.0/19 maxlen: 19 212.80.64.0/19 maxlen: 19 213.151.64.0/19 maxlen: 19 213.175.32.0/19 maxlen: 19 213.191.96.0/19 maxlen: 19 2001:1508::/32 maxlen: 48 2001:4de8::/32 maxlen: 48 2a00:c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5b:8b:03:54:f7:b3:18:aa:96:82:6f:28:e1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd6eeeb07b00cf9cf7a518f437e8831c69b67337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:19:33:46:3d:e5:8d:58:a7:e4:5a:58:f8: 9e:bc:a3:54:42:3f:5c:79:5f:a0:66:b5:30:c2:97: a3:13:d2:5b:f1:76:c9:73:82:f0:30:86:05:3e:95: 6f:69:04:38:87:21:d2:28:73:fb:b5:5f:f0:fa:e0: 75:e9:1d:08:37:be:be:92:da:07:3d:81:89:0a:f6: 21:cf:4b:a6:32:63:b7:c2:3a:94:b8:d7:29:18:14: 39:0f:9d:5f:d3:38:75:69:02:ce:62:43:50:08:ab: b9:93:b3:97:a4:76:fb:35:59:6c:56:58:5e:b3:0b: 4e:a0:42:dc:34:6b:be:57:2a:9e:1c:b8:21:2c:3a: a3:2e:21:f0:26:89:06:2a:6d:13:f4:16:3b:a9:1c: c6:0d:71:9b:e3:91:e7:64:ee:bc:f2:c2:5e:69:66: 45:63:52:bd:94:32:b0:8a:b7:f9:2b:cd:96:ab:e7: ed:37:74:f2:d6:32:23:b2:26:4c:90:69:2f:bf:7b: e1:4d:8d:f2:e5:49:49:e9:2a:c1:e3:58:88:85:0a: 9f:ed:8c:04:32:58:ba:45:e3:90:da:14:82:26:44: 5d:f1:2a:e8:01:98:f5:a4:fa:48:96:96:fd:b6:93: 2b:2f:06:c2:0c:56:32:4c:2c:e6:32:f6:c1:16:39: b1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6E:EE:B0:7B:00:CF:9C:F7:A5:18:F4:37:E8:83:1C:69:B6:73:37 X509v3 Authority Key Identifier: keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/3W7usHsAz5z3pRj0N-iDHGm2czc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.8.0/21 62.4.96.0-62.4.107.255 62.44.0.0/19 62.177.64.0/18 82.100.0.0/18 82.113.32.0/19 82.119.240.0/20 83.148.0.0/18 85.93.96.0/19 88.146.0.0/17 88.208.64.0/18 89.235.0.0/18 95.80.192.0/18 109.235.176.0/22 151.237.224.0/21 185.24.236.0/22 194.213.224.0/19 195.122.192.0/19 195.128.192.0/19 195.250.128.0/19 212.20.96.0/19 212.24.128.0/19 212.27.192.0/19 212.80.64.0/19 213.151.64.0/19 213.175.32.0/19 213.191.96.0/19 IPv6: 2001:1508::/32 2001:4de8::/32 2a00:c40::/32 Signature Algorithm: sha256WithRSAEncryption 58:13:ff:11:da:21:7a:79:91:5c:ed:5d:22:95:71:e2:17:c8: 78:2c:6e:89:e8:00:cd:59:32:1c:b4:46:ea:81:a8:02:aa:d7: 7b:0b:05:aa:38:84:ab:97:88:bf:aa:df:6c:57:77:fb:5a:dd: 6a:16:02:57:35:0d:18:68:05:fd:66:e4:a6:4d:af:d3:db:b0: ea:62:c9:f2:64:36:c3:ce:10:20:b6:61:06:1b:ad:9a:b3:cc: 40:ac:d8:18:97:b8:95:9d:ae:81:e4:7c:74:02:9a:71:60:21: 17:f5:e6:27:90:e9:5b:ab:1e:c1:d9:8b:d6:d7:a9:3a:97:6a: 5f:7f:03:22:28:82:e7:26:c2:be:11:9e:69:69:c3:e4:9a:11: 92:f8:0f:e9:00:ab:50:bf:a4:bf:47:9f:13:57:03:d0:4c:d7: 28:34:41:28:90:2d:78:3b:b3:e7:25:59:7c:3b:b7:79:94:d6: e9:55:2b:06:d8:66:10:1d:ba:0f:1b:cf:bc:8d:72:b5:71:91: 2a:07:7e:94:77:06:1a:d5:b9:44:4b:e3:ed:67:c8:a3:d1:3e: 1e:83:4d:2d:1f:b2:aa:88:28:31:e4:cc:e4:37:41:e3:98:32: 8d:d6:fd:ee:3e:dd:d0:57:42:9e:a1:1b:eb:2b:5f:17:2d:c8: 22:58:62:8f -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt87luLA1T3sxiqloJvKOFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5 YTQxMzkwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDZlZWViMDdiMDBjZjljZjdhNTE4ZjQzN2U4ODMxYzY5YjY3MzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOsZM0Y95Y1Yp+RaWPievKNUQj9c eV+gZrUwwpejE9Jb8XbJc4LwMIYFPpVvaQQ4hyHSKHP7tV/w+uB16R0IN76+ktoH PYGJCvYhz0umMmO3wjqUuNcpGBQ5D51f0zh1aQLOYkNQCKu5k7OXpHb7NVlsVlhe swtOoELcNGu+VyqeHLghLDqjLiHwJokGKm0T9BY7qRzGDXGb45HnZO688sJeaWZF Y1K9lDKwirf5K82Wq+ftN3Ty1jIjsiZMkGkvv3vhTY3y5UlJ6SrB41iIhQqf7YwE Mli6ReOQ2hSCJkRd8SroAZj1pPpIlpb9tpMrLwbCDFYyTCzmMvbBFjmxWwIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFN1u7rB7AM+c96UY9DfogxxptnM3MB8GA1UdIwQY MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt MGExYTM1ODk3ZjEwLzEvM1c3dXNIc0F6NXozcFJqME4taURIR20yY3pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHkBggrBgEFBQcBBwEB/wSB1DCB0TCBsQQCAAEwgaoDBAMu 4wgwDAMEBT4EYAMEAj4EaAMEBT4sAAMEBj6xQAMEBlJkAAMEBVJxIAMEBFJ38AME BlOUAAMEBVVdYAMEB1iSAAMEBljQQAMEBlnrAAMEBl9QwAMEAm3rsAMEA5ft4AME ArkY7AMEBcLV4AMEBcN6wAMEBcOAwAMEBcP6gAMEBdQUYAMEBdQYgAMEBdQbwAME BdRQQAMEBdWXQAMEBdWvIAMEBdW/YDAbBAIAAjAVAwUAIAEVCAMFACABTegDBQAq AAxAMA0GCSqGSIb3DQEBCwUAA4IBAQBYE/8R2iF6eZFc7V0ilXHiF8h4LG6J6ADN WTIctEbqgagCqtd7CwWqOISrl4i/qt9sV3f7Wt1qFgJXNQ0YaAX9ZuSmTa/T27Dq YsnyZDbDzhAgtmEGG62as8xArNgYl7iVna6B5Hx0AppxYCEX9eYnkOlbqx7B2YvW 16k6l2pffwMiKILnJsK+EZ5pacPkmhGS+A/pAKtQv6S/R58TVwPQTNcoNEEokC14 O7PnJVl8O7d5lNbpVSsG2GYQHboPG8+8jXK1cZEqB36UdwYa1blES+PtZ8ij0T4e g00tH7KqiCgx5MzkN0HjmDKN1v3uPt3QV0KeoRvrK18XLcgiWGKP -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:07 2026 by rpki-client