This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/3jYKnkkcPN6zosdPDC704_TH7Vg.roa File: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (raw, json) Hash identifier: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg= Subject key identifier: DE:36:0A:9E:49:1C:3C:DE:B3:A2:C7:4F:0C:2E:F4:E3:F4:C7:ED:58 Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a Certificate serial: 019B76EAEF492FC50BFDC5B3321C877751C7 Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/3jYKnkkcPN6zosdPDC704_TH7Vg.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60754 IP address blocks: 212.8.50.0/23 maxlen: 23 212.8.50.0/24 maxlen: 24 212.8.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ef:49:2f:c5:0b:fd:c5:b3:32:1c:87:77:51:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de360a9e491c3cdeb3a2c74f0c2ef4e3f4c7ed58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:d9:8c:c1:93:71:81:38:e6:de:96:46:83: f4:ec:b4:b9:b0:04:61:0a:94:27:a9:76:b7:51:56: d4:b1:72:c6:d5:60:56:e4:3f:f4:ed:c3:e5:42:db: 3f:22:f6:f6:a4:7d:e2:54:86:63:5b:f9:55:3b:f1: 2d:0b:0f:3d:c1:36:1b:13:2e:a8:07:e9:6b:8f:c9: ed:2d:7b:72:e9:b1:ae:3e:3d:dc:1f:53:2c:8a:d3: e0:85:b4:45:a6:49:5f:68:6d:cb:75:8b:56:30:d0: f9:0d:8c:82:83:9f:bd:8d:ab:dc:58:e2:47:45:f8: 72:76:f4:85:67:2c:ce:40:dd:26:1c:97:c0:58:1d: f8:b8:78:fd:b5:45:d8:09:ad:72:e7:ab:50:0e:04: 08:28:7f:49:19:b0:d5:3c:eb:6b:e6:f2:9f:6c:f4: 1c:85:8f:dd:56:d1:2e:9e:80:f1:32:7e:66:97:cd: 73:73:dd:ac:aa:9a:f5:46:52:ed:fd:fb:88:d4:a3: c6:33:4b:a4:48:0b:0d:3f:49:3d:b4:2d:24:75:10: 8f:32:de:63:28:03:99:76:66:0c:79:0a:28:b6:ac: a2:e4:79:ec:33:6f:c0:cc:bf:a1:61:64:3c:c3:90: c4:67:3b:8c:b2:df:1a:b0:96:4a:ef:04:76:5d:dd: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:36:0A:9E:49:1C:3C:DE:B3:A2:C7:4F:0C:2E:F4:E3:F4:C7:ED:58 X509v3 Authority Key Identifier: keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/3jYKnkkcPN6zosdPDC704_TH7Vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.8.50.0/23 Signature Algorithm: sha256WithRSAEncryption 38:b7:2c:6e:7a:bb:c3:50:7c:1b:ca:ec:a2:8b:ad:ba:53:78: 2b:9c:8b:bb:09:d0:ed:f5:0e:a1:4e:d1:f4:a1:d6:91:b0:25: db:a5:98:5e:4f:9f:1a:80:d4:77:6b:fc:08:b5:2d:4d:4f:ee: 2c:b2:36:76:28:42:95:44:f2:46:dd:b8:ba:31:aa:50:f0:e1: fd:a2:b1:e9:0c:4a:b5:45:ae:98:e7:e5:a3:60:ff:f2:1f:94: 95:71:ed:9c:cc:cd:5a:03:72:3c:2d:19:d4:ad:be:29:cb:45: 36:45:ea:c6:28:35:2b:b0:1d:74:a2:10:fe:34:56:bf:3a:a7: c5:07:5a:14:70:85:4e:9b:ec:be:9a:c7:c5:da:26:ea:1f:be: b1:13:57:79:9c:c6:2b:81:7a:fd:47:79:5d:ac:c4:03:26:72: 88:e8:a0:c4:39:1c:50:f5:19:bd:53:5f:f9:61:75:29:f3:e3: 3b:fe:b9:c5:b3:91:c7:22:c5:95:4e:1f:34:6d:5d:9c:a2:91: 4e:3f:78:7a:4b:d9:d3:7f:0e:5a:ff:8d:00:90:12:9c:bd:11: 03:b2:05:03:df:bb:71:d7:0e:6a:73:9a:28:17:ca:db:1e:51: cb:ca:f6:a1:93:d4:56:03:ab:41:ea:3c:0c:55:b8:e0:c0:37: ce:96:d3:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26u9JL8UL/cWzMhyHd1HHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm MzM1OGEwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTM2MGE5ZTQ5MWMzY2RlYjNhMmM3NGYwYzJlZjRlM2Y0YzdlZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse/ZjMGTcYE45t6WRoP07LS5sARh CpQnqXa3UVbUsXLG1WBW5D/07cPlQts/Ivb2pH3iVIZjW/lVO/EtCw89wTYbEy6o B+lrj8ntLXty6bGuPj3cH1MsitPghbRFpklfaG3LdYtWMND5DYyCg5+9javcWOJH RfhydvSFZyzOQN0mHJfAWB34uHj9tUXYCa1y56tQDgQIKH9JGbDVPOtr5vKfbPQc hY/dVtEunoDxMn5ml81zc92sqpr1RlLt/fuI1KPGM0ukSAsNP0k9tC0kdRCPMt5j KAOZdmYMeQootqyi5HnsM2/AzL+hYWQ8w5DEZzuMst8asJZK7wR2Xd1miwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN42Cp5JHDzes6LHTwwu9OP0x+1YMB8GA1UdIwQY MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt ZGViZmNkOWViMjBlLzEvM2pZS25ra2NQTjZ6b3NkUERDNzA0X1RIN1ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1AgyMA0G CSqGSIb3DQEBCwUAA4IBAQA4tyxuervDUHwbyuyii626U3grnIu7CdDt9Q6hTtH0 odaRsCXbpZheT58agNR3a/wItS1NT+4ssjZ2KEKVRPJG3bi6MapQ8OH9orHpDEq1 Ra6Y5+WjYP/yH5SVce2czM1aA3I8LRnUrb4py0U2RerGKDUrsB10ohD+NFa/OqfF B1oUcIVOm+y+msfF2ibqH76xE1d5nMYrgXr9R3ldrMQDJnKI6KDEORxQ9Rm9U1/5 YXUp8+M7/rnFs5HHIsWVTh80bV2copFOP3h6S9nTfw5a/40AkBKcvREDsgUD37tx 1w5qc5ooF8rbHlHLyvahk9RWA6tB6jwMVbjgwDfOltNt -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:24 2026 by rpki-client