This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3jgqwvygxgS77KtlTyhp2V_U5Ls.roa File: 3jgqwvygxgS77KtlTyhp2V_U5Ls.roa (raw, json) Hash identifier: zs+plCGL6zNwoTk0wdbt5AM2ndyD830waXhZJLhZU3g= Subject key identifier: DE:38:2A:C2:FC:A0:C6:04:BB:EC:AB:65:4F:28:69:D9:5F:D4:E4:BB Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B1635EC4B3A572B274733EF21AD2C7F62 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3jgqwvygxgS77KtlTyhp2V_U5Ls.roa Signing time: Sat 13 Dec 2025 05:36:31 +0000 ROA not before: Sat 13 Dec 2025 05:36:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202736 IP address blocks: 151.244.3.0/24 maxlen: 24 151.246.48.0/21 maxlen: 24 151.246.56.0/21 maxlen: 24 151.246.80.0/21 maxlen: 24 151.246.88.0/21 maxlen: 24 151.246.96.0/21 maxlen: 24 151.246.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:35:ec:4b:3a:57:2b:27:47:33:ef:21:ad:2c:7f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 13 05:36:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de382ac2fca0c604bbecab654f2869d95fd4e4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:4d:f5:8b:96:99:ee:f2:05:35:52:f2:6e: d0:cc:f2:32:d9:ce:5a:20:e7:dc:98:b5:64:9b:70: 19:86:9d:af:a1:96:78:81:dd:0d:8c:58:77:a3:f8: a6:8b:f2:ce:b0:49:08:a7:d1:32:7d:97:fd:08:b9: 2d:5b:2d:8a:4a:33:92:d7:bf:4c:79:66:9c:b7:88: 06:5d:95:d2:7e:9d:1f:fa:9f:3a:06:4e:de:c7:0b: 18:f9:60:25:5b:7c:0b:f3:5a:41:34:a5:3f:95:6b: 56:38:0d:d0:47:bc:b9:80:f0:3c:7a:e1:7d:15:09: 2a:9c:02:75:dc:c8:07:73:88:5a:95:06:60:85:68: 6c:00:38:77:71:b7:e3:5d:c0:12:2a:7b:ff:5a:62: 8c:b7:f4:a1:3e:e8:1e:b8:77:98:ec:b9:de:96:c6: 26:fe:da:60:e8:48:12:cc:dd:b7:04:ea:78:5f:8c: 9f:58:52:27:92:6f:99:4e:59:fd:6b:35:6d:39:a2: ed:0a:4d:ed:6d:35:0f:37:f4:e8:c6:a9:07:e9:a4: 0d:3f:05:f7:b6:2d:8a:94:b8:c9:c5:fa:77:12:c4: c3:d5:45:76:56:f2:a8:31:b1:85:7a:2b:1b:0d:e8: 0e:38:96:07:43:4a:87:2a:ae:58:80:20:1a:8c:f1: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:38:2A:C2:FC:A0:C6:04:BB:EC:AB:65:4F:28:69:D9:5F:D4:E4:BB X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3jgqwvygxgS77KtlTyhp2V_U5Ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.3.0/24 151.246.48.0/20 151.246.80.0-151.246.103.255 151.246.112.0/21 Signature Algorithm: sha256WithRSAEncryption 66:5c:7f:48:21:e3:41:d9:63:47:02:d4:22:f1:b0:8a:2c:ee: 0b:08:e8:03:0f:8b:97:20:56:bc:ac:4e:0b:64:96:bf:dc:6a: f0:94:05:5d:9c:b1:e9:3e:2a:75:ac:5d:30:34:d5:a4:a1:69: 4d:27:ee:d1:ad:82:1e:bb:80:98:c0:c6:ce:fb:2d:ba:1a:e3: 69:fa:02:eb:9a:99:c2:db:ac:81:cd:e1:48:66:69:8e:18:b4: a1:72:00:56:04:63:17:e4:81:22:f3:e4:43:2f:e6:73:da:a2: 80:9d:c4:7d:99:79:5e:4f:44:13:49:0a:fa:88:ae:6a:0a:cc: fd:53:f9:0c:40:9d:09:7f:a9:c8:a7:cb:0a:93:bd:ef:17:15: f2:83:fe:f0:c1:01:43:3b:51:4f:6e:c6:03:8a:e4:a7:fd:d8: 4e:8c:6e:a2:de:b4:6c:e5:e8:df:c5:e3:aa:cd:5e:65:e7:55: 09:41:25:ac:c4:17:35:75:fd:43:be:ff:52:bd:dd:2e:2c:b1: 5c:df:31:19:9d:8a:08:12:4d:95:02:fe:84:e4:ec:55:28:38: 93:7d:88:f9:7a:0f:2c:ed:18:b6:3d:3e:6c:b6:0e:06:5d:ad: a4:08:c4:b5:be:6a:30:72:44:7c:8e:bd:fa:89:8f:3d:ba:77: 8f:33:f5:85 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZsWNexLOlcrJ0cz7yGtLH9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEzMDUzNjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTM4MmFjMmZjYTBjNjA0YmJlY2FiNjU0ZjI4NjlkOTVmZDRlNGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRNN9YuWme7yBTVS8m7QzPIy2c5a IOfcmLVkm3AZhp2voZZ4gd0NjFh3o/imi/LOsEkIp9EyfZf9CLktWy2KSjOS179M eWact4gGXZXSfp0f+p86Bk7exwsY+WAlW3wL81pBNKU/lWtWOA3QR7y5gPA8euF9 FQkqnAJ13MgHc4halQZghWhsADh3cbfjXcASKnv/WmKMt/ShPugeuHeY7LnelsYm /tpg6EgSzN23BOp4X4yfWFInkm+ZTln9azVtOaLtCk3tbTUPN/ToxqkH6aQNPwX3 ti2KlLjJxfp3EsTD1UV2VvKoMbGFeisbDegOOJYHQ0qHKq5YgCAajPHSGQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFN44KsL8oMYEu+yrZU8oadlf1OS7MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvM2pncXd2eWd4Z1M3N0t0bFR5aHAyVl9VNUxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAl/QDAwQE l/YwMAwDBASX9lADBAOX9mADBAOX9nAwDQYJKoZIhvcNAQELBQADggEBAGZcf0gh 40HZY0cC1CLxsIos7gsI6AMPi5cgVrysTgtklr/cavCUBV2csek+KnWsXTA01aSh aU0n7tGtgh67gJjAxs77Lboa42n6AuuamcLbrIHN4UhmaY4YtKFyAFYEYxfkgSLz 5EMv5nPaooCdxH2ZeV5PRBNJCvqIrmoKzP1T+QxAnQl/qcinywqTve8XFfKD/vDB AUM7UU9uxgOK5Kf92E6MbqLetGzl6N/F46rNXmXnVQlBJazEFzV1/UO+/1K93S4s sVzfMRmdiggSTZUC/oTk7FUoOJN9iPl6DyztGLY9Pmy2DgZdraQIxLW+ajByRHyO vfqJjz26d48z9YU= -----END CERTIFICATE-----Generated at Fri Dec 19 16:48:59 2025 by rpki-client