This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3USYP3XL6YkeppVNgKtNWzfiBp4.roa File: 3USYP3XL6YkeppVNgKtNWzfiBp4.roa (raw, json) Hash identifier: XudDZN7QyaBGNf7AZdwUb38sI8TYda4E0c977/fvuR8= Subject key identifier: DD:44:98:3F:75:CB:E9:89:1E:A6:95:4D:80:AB:4D:5B:37:E2:06:9E Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B437093129921BD50844AE4B22688803B Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3USYP3XL6YkeppVNgKtNWzfiBp4.roa Signing time: Mon 22 Dec 2025 00:23:29 +0000 ROA not before: Mon 22 Dec 2025 00:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 46844 IP address blocks: 212.116.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:70:93:12:99:21:bd:50:84:4a:e4:b2:26:88:80:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Dec 22 00:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dd44983f75cbe9891ea6954d80ab4d5b37e2069e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1c:44:1c:c9:75:af:8f:06:7d:c3:d9:e1:e7: 3b:da:42:1f:56:76:69:5c:76:46:47:19:0c:cc:4e: 80:88:3f:e0:b7:cd:31:fc:04:61:b7:ee:e8:60:2e: f6:b3:25:fc:7c:ef:58:57:2e:ba:02:b7:c1:5e:94: 41:72:77:f7:c6:9c:b7:bd:b8:5c:95:11:c9:0a:d7: 42:ae:db:4a:3c:7c:b5:36:68:22:34:b5:56:a1:57: 7b:6c:7d:3e:52:b5:04:0f:05:f7:31:c2:d3:62:a0: b1:ef:d4:8c:61:95:9d:bc:8a:9d:72:99:b0:e2:e5: 2d:9a:98:2d:c0:9a:1e:b8:8b:8b:08:22:26:a4:43: b1:30:e8:4d:68:78:05:0e:93:af:01:2e:1a:d4:93: 13:8d:0a:61:63:f4:3b:4f:b5:ed:24:a5:f5:d3:98: 5b:4b:f2:e1:1b:01:4d:88:95:9e:2b:9a:ad:b2:0d: 0b:6e:9c:72:91:62:8b:eb:ee:91:28:d3:6e:de:92: 93:ea:a7:2b:9c:7e:2e:3c:01:2d:85:63:bf:9c:90: ae:3a:c7:06:41:1c:88:94:f6:ba:18:c3:d0:38:8b: c5:a9:7f:b7:b9:18:37:d8:73:a2:ca:43:19:fb:d5: 79:2d:d3:67:11:10:4b:50:3b:44:87:52:9a:b6:df: 35:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:44:98:3F:75:CB:E9:89:1E:A6:95:4D:80:AB:4D:5B:37:E2:06:9E X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3USYP3XL6YkeppVNgKtNWzfiBp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.236.0/24 Signature Algorithm: sha256WithRSAEncryption 24:b5:7f:ec:cc:89:eb:81:f0:49:01:e4:c8:6b:ba:3f:33:31: 7c:ed:c2:e2:19:91:57:1c:a3:d2:04:4d:52:b6:4c:9b:11:42: f0:f5:0b:62:5b:08:3b:6d:43:a7:f4:6a:13:fd:ed:5f:03:60: 25:32:dd:06:45:41:f1:a8:1c:a3:7f:6d:e1:21:af:22:d3:b7: 48:d8:cb:6f:02:46:24:04:d3:8c:0f:a9:3d:c3:12:4c:41:e6: a6:c7:c5:cb:1c:55:4a:30:85:76:64:ed:22:db:fb:02:5e:b5: 44:1a:db:3a:12:e2:80:28:86:a2:68:c9:66:a5:d5:d5:a1:f0: 39:ca:6f:86:91:3c:f2:7c:9f:ab:ea:6c:ce:84:53:24:c8:74: 4a:de:4b:43:ab:dd:8c:de:20:11:b3:9a:05:24:01:33:f2:68: f5:12:f7:eb:b2:3e:d0:6c:90:ef:fd:6a:8f:2b:f8:7f:4b:2e: 0a:73:73:f6:0a:98:42:50:e1:b2:9c:cf:d7:62:73:fb:45:12: b2:5c:d6:86:7b:ac:73:60:30:d4:bd:34:b0:43:25:1b:ef:50: c9:ff:b7:c8:aa:f0:6f:48:49:26:bc:83:8b:b9:d9:b4:36:3c: a7:59:78:d8:aa:fc:67:8c:1e:a2:d4:da:5b:5f:ac:09:9d:7c: 54:83:65:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtDcJMSmSG9UIRK5LImiIA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjUxMjIyMDAyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDQ0OTgzZjc1Y2JlOTg5MWVhNjk1NGQ4MGFiNGQ1YjM3ZTIwNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRxEHMl1r48GfcPZ4ec72kIfVnZp XHZGRxkMzE6AiD/gt80x/ARht+7oYC72syX8fO9YVy66ArfBXpRBcnf3xpy3vbhc lRHJCtdCrttKPHy1NmgiNLVWoVd7bH0+UrUEDwX3McLTYqCx79SMYZWdvIqdcpmw 4uUtmpgtwJoeuIuLCCImpEOxMOhNaHgFDpOvAS4a1JMTjQphY/Q7T7XtJKX105hb S/LhGwFNiJWeK5qtsg0LbpxykWKL6+6RKNNu3pKT6qcrnH4uPAEthWO/nJCuOscG QRyIlPa6GMPQOIvFqX+3uRg32HOiykMZ+9V5LdNnERBLUDtEh1Katt81ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN1EmD91y+mJHqaVTYCrTVs34gaeMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvM1VTWVAzWEw2WWtlcHBWTmdLdE5XemZpQnA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HTsMA0G CSqGSIb3DQEBCwUAA4IBAQAktX/szInrgfBJAeTIa7o/MzF87cLiGZFXHKPSBE1S tkybEULw9QtiWwg7bUOn9GoT/e1fA2AlMt0GRUHxqByjf23hIa8i07dI2MtvAkYk BNOMD6k9wxJMQeamx8XLHFVKMIV2ZO0i2/sCXrVEGts6EuKAKIaiaMlmpdXVofA5 ym+GkTzyfJ+r6mzOhFMkyHRK3ktDq92M3iARs5oFJAEz8mj1Evfrsj7QbJDv/WqP K/h/Sy4Kc3P2CphCUOGynM/XYnP7RRKyXNaGe6xzYDDUvTSwQyUb71DJ/7fIqvBv SEkmvIOLudm0NjynWXjYqvxnjB6i1NpbX6wJnXxUg2VU -----END CERTIFICATE-----Generated at Thu Dec 25 12:39:17 2025 by rpki-client