This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/3Ji8ZxtqU_lIwKa_SqT03tF5SWE.roa File: 3Ji8ZxtqU_lIwKa_SqT03tF5SWE.roa (raw, json) Hash identifier: jTuElWfRQSD5SofMMRCQ0LeEwPmYlDKmyuYEtvYSFDY= Subject key identifier: DC:98:BC:67:1B:6A:53:F9:48:C0:A6:BF:4A:A4:F4:DE:D1:79:49:61 Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1 Certificate serial: 019B7E3914B8E1A0E0047B3A561996A5B01B Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/3Ji8ZxtqU_lIwKa_SqT03tF5SWE.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15169 IP address blocks: 66.22.228.0/23 maxlen: 24 66.22.228.0/24 maxlen: 24 66.22.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:14:b8:e1:a0:e0:04:7b:3a:56:19:96:a5:b0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc98bc671b6a53f948c0a6bf4aa4f4ded1794961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:1e:c7:ef:b1:1d:9e:90:74:ca:16:be:8c: 92:61:60:84:0a:1d:fb:97:6f:42:95:8b:9a:1d:56: 97:07:9d:92:62:85:ab:31:13:7f:46:aa:ad:10:8f: 57:9b:49:ea:42:25:23:0d:89:f9:7c:f2:ab:5d:38: 42:33:a1:f0:1c:27:dc:f5:86:31:6f:49:a9:4e:47: ab:41:87:9b:ab:30:43:2b:8f:53:38:16:0d:39:99: f8:83:1a:ea:4a:24:14:5e:27:41:55:c2:7e:ad:11: c6:b3:80:18:b2:4f:97:b7:ad:97:19:42:3c:16:f9: 7d:c6:98:af:b7:02:25:74:f8:45:36:5d:e8:54:ae: 0d:6e:15:00:1b:1e:ae:77:72:80:4f:c2:0b:1d:68: 2a:35:8d:20:fd:46:03:3d:46:10:68:49:82:b3:50: bd:18:23:f6:c4:91:5f:dc:1f:64:17:fb:cc:c1:f1: 99:02:ac:85:e8:5c:94:73:39:41:d0:9c:12:04:f8: 63:83:41:2b:ad:1e:d7:26:fb:84:b9:b8:93:7b:fd: ee:5b:66:ac:7d:70:50:41:d1:8d:ff:c1:a9:11:3e: 76:17:1d:ca:8b:91:98:5f:b0:48:5c:9a:a6:ab:86: 96:c5:e1:8c:9a:bf:0a:70:e3:a6:ed:03:9f:1d:3a: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:98:BC:67:1B:6A:53:F9:48:C0:A6:BF:4A:A4:F4:DE:D1:79:49:61 X509v3 Authority Key Identifier: keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/3Ji8ZxtqU_lIwKa_SqT03tF5SWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.22.228.0/23 Signature Algorithm: sha256WithRSAEncryption b6:4b:74:c5:dd:5b:2e:ce:72:d1:2d:3e:eb:16:7b:6e:07:4f: 13:cf:19:5d:d8:a4:76:5d:c1:fa:b9:db:ef:e6:45:a4:ee:76: 4f:18:bb:2a:90:8f:2e:1f:f8:67:32:5f:cc:a5:08:be:a6:70: 8e:55:79:5d:5d:90:57:69:8c:ab:9a:89:14:49:0c:f1:de:fb: b3:63:5e:19:a1:a0:f8:6a:ae:b2:38:6c:da:d6:7e:5e:95:11: 61:2e:bf:a0:5c:8a:7e:86:d2:63:c0:a2:8a:52:a4:d0:80:aa: f5:a2:95:47:0a:4f:b7:0f:2d:f0:ee:9a:77:52:fa:dd:42:8c: 49:ff:be:d5:9a:19:42:79:50:31:13:31:e2:50:2f:87:42:02: d5:7b:11:bc:0c:b7:7b:80:b0:7f:6c:b8:4a:26:5b:4b:ab:f0: d7:da:f5:09:46:81:57:0c:27:28:d8:8d:6a:0e:50:56:60:07: a3:40:06:ca:fe:43:97:57:65:bf:0c:70:f8:ed:ff:fd:89:cf: e5:2c:8d:7e:b7:91:41:a1:65:4f:3b:f8:2d:9d:59:dc:05:18: bf:a6:65:56:81:3b:69:20:bd:a8:61:99:3f:af:45:4b:21:90: 4a:12:ad:14:fb:f4:ff:73:9f:bb:e3:38:1e:5b:a5:27:55:c2: 98:de:63:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORS44aDgBHs6VhmWpbAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYzEwM2Q2NWE1NGQ2YWYxZWZiYTZhYzNlNjM3MjIwMjhh ZjJiYjEwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzk4YmM2NzFiNmE1M2Y5NDhjMGE2YmY0YWE0ZjRkZWQxNzk0OTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFIex++xHZ6QdMoWvoySYWCECh37 l29ClYuaHVaXB52SYoWrMRN/RqqtEI9Xm0nqQiUjDYn5fPKrXThCM6HwHCfc9YYx b0mpTkerQYebqzBDK49TOBYNOZn4gxrqSiQUXidBVcJ+rRHGs4AYsk+Xt62XGUI8 Fvl9xpivtwIldPhFNl3oVK4NbhUAGx6ud3KAT8ILHWgqNY0g/UYDPUYQaEmCs1C9 GCP2xJFf3B9kF/vMwfGZAqyF6FyUczlB0JwSBPhjg0ErrR7XJvuEubiTe/3uW2as fXBQQdGN/8GpET52Fx3Ki5GYX7BIXJqmq4aWxeGMmr8KcOOm7QOfHTrV+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNyYvGcbalP5SMCmv0qk9N7ReUlhMB8GA1UdIwQY MBaAFIPBA9ZaVNavHvumrD5jciAoryuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQt YjUwY2Y1ZjJhYTIyLzEvM0ppOFp4dHFVX2xJd0thX1NxVDAzdEY1U1dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQtYjUwY2Y1ZjJhYTIy LzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQhbkMA0G CSqGSIb3DQEBCwUAA4IBAQC2S3TF3VsuznLRLT7rFntuB08Tzxld2KR2XcH6udvv 5kWk7nZPGLsqkI8uH/hnMl/MpQi+pnCOVXldXZBXaYyrmokUSQzx3vuzY14ZoaD4 aq6yOGza1n5elRFhLr+gXIp+htJjwKKKUqTQgKr1opVHCk+3Dy3w7pp3UvrdQoxJ /77VmhlCeVAxEzHiUC+HQgLVexG8DLd7gLB/bLhKJltLq/DX2vUJRoFXDCco2I1q DlBWYAejQAbK/kOXV2W/DHD47f/9ic/lLI1+t5FBoWVPO/gtnVncBRi/pmVWgTtp IL2oYZk/r0VLIZBKEq0U+/T/c5+74zgeW6UnVcKY3mMY -----END CERTIFICATE-----Generated at Sat Jan 3 03:52:39 2026 by rpki-client