This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/a3zHXiytnxR6C7Yya8cqACPMcyc.roa File: a3zHXiytnxR6C7Yya8cqACPMcyc.roa (raw, json) Hash identifier: T1Jty2//hchc0LCzlubxKMABR/tRMsPUV0k73TQ7gFM= Subject key identifier: 6B:7C:C7:5E:2C:AD:9F:14:7A:0B:B6:32:6B:C7:2A:00:23:CC:73:27 Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Certificate serial: 019B7B359E264E5CDCA7D3A4ED561F21A7AA Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/a3zHXiytnxR6C7Yya8cqACPMcyc.roa Signing time: Thu 01 Jan 2026 20:17:49 +0000 ROA not before: Thu 01 Jan 2026 20:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3330 IP address blocks: 62.249.64.0/18 maxlen: 18 185.92.100.0/22 maxlen: 22 193.186.161.0/24 maxlen: 24 194.112.128.0/18 maxlen: 18 194.112.192.0/18 maxlen: 18 2a02:5e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9e:26:4e:5c:dc:a7:d3:a4:ed:56:1f:21:a7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Validity Not Before: Jan 1 20:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b7cc75e2cad9f147a0bb6326bc72a0023cc7327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ec:a1:f5:64:10:39:95:63:bd:52:3c:6c:37: 4c:69:83:0c:e4:d8:41:a0:54:10:5e:a1:32:2e:a2: 43:8f:03:13:0f:09:7a:b2:9d:a5:a4:60:50:53:cd: 67:7b:3b:a9:ba:f8:e7:47:dc:e8:e5:8d:f8:fd:54: b3:e9:d9:e5:21:8d:66:3d:66:00:7a:66:7a:9d:64: bb:68:93:52:61:98:a9:73:3b:63:75:d9:ae:d5:b5: 76:9f:53:19:10:80:fb:5d:58:d7:fb:3d:7e:a7:78: a0:fc:2b:f6:5f:86:a1:8d:cb:47:6b:94:de:b5:d5: 9c:ca:70:cd:6b:61:72:c2:1c:bb:5e:81:28:11:b5: 9d:fb:fd:30:9a:01:c9:1a:23:cc:aa:ac:6b:da:75: 0a:d6:10:2b:d6:68:8a:b1:e5:0b:3c:be:fc:b6:55: 9b:df:8c:45:69:2e:1c:2a:9a:d0:9c:00:b0:cf:ca: a4:e7:53:b5:d6:5c:4d:f9:1f:1d:78:1e:97:c6:21: 29:ce:b5:2f:ac:fd:c0:1b:1a:76:28:8f:0a:23:01: a0:7b:19:80:76:c4:d2:e6:3c:68:1a:32:3f:c6:53: 5a:2d:21:39:a8:10:e7:8b:e0:a9:ae:8e:f3:5d:03: e1:43:1b:e4:c3:a0:00:bb:a4:e6:67:d7:5b:50:69: f2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:C7:5E:2C:AD:9F:14:7A:0B:B6:32:6B:C7:2A:00:23:CC:73:27 X509v3 Authority Key Identifier: keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/a3zHXiytnxR6C7Yya8cqACPMcyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.249.64.0/18 185.92.100.0/22 193.186.161.0/24 194.112.128.0/17 IPv6: 2a02:5e0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:4d:45:4e:e3:8e:2a:3b:d1:e7:14:9e:41:d3:38:19:b9:d4: 2c:6c:f7:93:51:ee:9d:a1:cf:29:ed:90:5a:3d:dc:81:b9:0f: 9b:4d:9b:19:81:f7:d2:3b:ce:1e:87:f5:6b:d8:bd:ae:42:8c: c2:d1:eb:c1:9c:52:a9:3d:28:64:1d:de:4d:31:29:fb:e6:51: 39:a8:3d:86:79:25:62:b1:fd:71:21:da:14:35:9b:b8:33:14: e5:5b:f0:fa:b7:11:80:f1:43:c5:dc:e7:3c:58:d2:55:91:62: 48:b4:5a:75:e0:fa:e9:6a:1d:b0:d9:f4:e4:ef:08:a1:ae:d5: 29:9e:ba:c1:f5:16:6a:04:f1:21:95:b0:f7:2e:78:6d:b6:e4: 60:ca:2e:b4:60:f0:5e:83:9f:6b:5e:a2:61:26:c6:fa:e5:12: 2c:4a:b6:c3:35:a0:6a:df:5e:f8:39:c8:70:0d:b6:45:c5:8a: 25:ab:4f:d9:54:7e:24:9f:d1:4a:a9:5f:f0:f3:c2:5b:d5:03: cc:ef:64:f3:29:d0:c3:98:3d:3e:48:33:a8:9b:dc:3b:3e:d3: 21:3f:4e:66:88:6f:df:fb:5e:a8:5a:ca:61:06:1e:44:a0:93: 2e:99:f7:53:81:b5:e7:d1:e3:30:c7:95:16:2c:90:94:a4:7f: 43:49:3c:67 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7NZ4mTlzcp9Ok7VYfIaeqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDI0MDYwM2VjNmViY2Q2MmY3MmQ0NmYxZGMwMGNiN2Ux ZjBiMmUwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjdjYzc1ZTJjYWQ5ZjE0N2EwYmI2MzI2YmM3MmEwMDIzY2M3MzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eyh9WQQOZVjvVI8bDdMaYMM5NhB oFQQXqEyLqJDjwMTDwl6sp2lpGBQU81nezupuvjnR9zo5Y34/VSz6dnlIY1mPWYA emZ6nWS7aJNSYZipcztjddmu1bV2n1MZEID7XVjX+z1+p3ig/Cv2X4ahjctHa5Te tdWcynDNa2Fywhy7XoEoEbWd+/0wmgHJGiPMqqxr2nUK1hAr1miKseULPL78tlWb 34xFaS4cKprQnACwz8qk51O11lxN+R8deB6XxiEpzrUvrP3AGxp2KI8KIwGgexmA dsTS5jxoGjI/xlNaLSE5qBDni+Cpro7zXQPhQxvkw6AAu6TmZ9dbUGnyTQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFGt8x14srZ8Uegu2MmvHKgAjzHMnMB8GA1UdIwQY MBaAFIrSQGA+xuvNYvctRvHcAMt+HwsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUt ZDc2YzhjNzM5ODYxLzEvYTN6SFhpeXRueFI2QzdZeWE4Y3FBQ1BNY3ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUtZDc2YzhjNzM5ODYx LzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGPvlAAwQC uVxkAwQAwbqhAwQHwnCAMA0EAgACMAcDBQAqAgXgMA0GCSqGSIb3DQEBCwUAA4IB AQB+TUVO444qO9HnFJ5B0zgZudQsbPeTUe6doc8p7ZBaPdyBuQ+bTZsZgffSO84e h/Vr2L2uQozC0evBnFKpPShkHd5NMSn75lE5qD2GeSVisf1xIdoUNZu4MxTlW/D6 txGA8UPF3Oc8WNJVkWJItFp14Prpah2w2fTk7wihrtUpnrrB9RZqBPEhlbD3Lnht tuRgyi60YPBeg59rXqJhJsb65RIsSrbDNaBq3174OchwDbZFxYolq0/ZVH4kn9FK qV/w88Jb1QPM72TzKdDDmD0+SDOom9w7PtMhP05miG/f+16oWsphBh5EoJMumfdT gbXn0eMwx5UWLJCUpH9DSTxn -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:47 2026 by rpki-client