This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/3vux-L5-d0HjyqAIkvg3RDpM2aQ.roa File: 3vux-L5-d0HjyqAIkvg3RDpM2aQ.roa (raw, json) Hash identifier: m/yE3xAFbKUz4N7SaBoAPL+7kUv+QTlE8lSrT+sNXaU= Subject key identifier: DE:FB:B1:F8:BE:7E:77:41:E3:CA:A0:08:92:F8:37:44:3A:4C:D9:A4 Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Certificate serial: 019B2B674FF757A304099B14E8E80C7C1F4D Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/3vux-L5-d0HjyqAIkvg3RDpM2aQ.roa Signing time: Wed 17 Dec 2025 08:22:29 +0000 ROA not before: Wed 17 Dec 2025 08:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59547 IP address blocks: 141.136.16.0/24 maxlen: 24 141.136.17.0/24 maxlen: 24 141.136.18.0/24 maxlen: 24 141.136.19.0/24 maxlen: 24 151.248.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:67:4f:f7:57:a3:04:09:9b:14:e8:e8:0c:7c:1f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Validity Not Before: Dec 17 08:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=defbb1f8be7e7741e3caa00892f837443a4cd9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:46:2c:c9:69:ff:72:75:4f:39:00:92:cb:81: 07:77:e1:91:e8:1d:7b:f1:39:4e:fe:fd:8c:2b:0c: 3e:a5:75:b9:4d:be:86:0d:e9:34:24:b6:c1:97:57: 65:d2:83:b6:7a:05:ee:5e:2e:db:63:a9:57:d1:b4: 7b:16:3e:33:6d:cf:72:a0:38:2c:eb:3c:4f:a3:67: 84:47:b6:5e:ac:8d:8e:f2:64:ab:07:ce:3d:63:7b: 77:f6:c6:2d:2c:93:99:bb:5d:ec:19:dc:d5:a4:c5: 5b:48:c3:f7:a5:3b:c3:35:90:46:ca:24:b6:19:54: 82:f8:5f:d7:46:c0:a0:fd:75:f1:b6:76:00:f4:3e: b6:39:76:65:bd:19:0f:51:8f:18:bd:34:06:5f:8b: 20:f9:32:57:03:93:38:fa:0c:78:42:2c:d9:63:ea: cf:18:50:ad:b3:2a:1d:4d:bc:0d:0d:c0:8b:4e:31: 3e:11:b9:87:2a:33:5c:9b:d3:5a:60:ba:c5:b2:2b: 42:28:8d:6d:41:3a:c7:3a:0c:db:ab:9e:d9:6e:b5: 72:21:59:3c:e6:ac:c1:59:9a:22:9e:8c:a2:e9:64: c2:e7:c6:7f:7c:98:34:44:cb:9d:31:4d:32:32:01: a1:ea:74:32:d1:8b:14:21:5f:c2:ac:9c:85:30:5c: e0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FB:B1:F8:BE:7E:77:41:E3:CA:A0:08:92:F8:37:44:3A:4C:D9:A4 X509v3 Authority Key Identifier: keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/3vux-L5-d0HjyqAIkvg3RDpM2aQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.136.16.0/22 151.248.48.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:b2:f4:79:d8:ec:8f:26:50:a8:ef:51:93:76:f1:2b:fc:fc: b3:7a:74:d2:c9:e4:3d:e2:7f:b7:ff:91:31:cd:fc:8f:57:32: de:21:92:b1:a5:c3:87:75:ae:ed:fb:47:75:57:85:06:79:19: f4:ae:3c:82:34:fe:6a:9c:1e:7e:d8:cd:39:72:43:b5:46:41: 0b:3d:c3:d7:ed:63:36:91:0f:a2:be:f4:c4:e9:25:0f:6d:c1: 6d:b9:22:6c:42:6e:49:a7:61:ac:03:bf:fa:55:90:74:28:16: 86:85:c1:72:db:be:f3:2f:5f:f0:cd:ae:a6:55:ef:bb:7f:0a: bc:54:58:e8:69:18:88:20:06:0a:49:4e:7e:0b:35:f1:3e:00: 16:85:75:79:63:7c:0f:90:30:73:c1:d4:14:f5:7e:72:ba:f0: 9d:17:43:e3:a2:3d:ec:c6:e0:8a:96:af:55:70:0c:98:5c:05: d2:6b:2d:d2:4d:1d:99:31:db:37:0d:93:51:f1:5f:68:53:93: 26:dc:5b:04:c1:b0:ef:e8:41:b6:7d:84:97:bb:85:76:ef:63: f3:28:88:65:a3:0f:f2:2b:7f:9c:62:d0:05:1b:a7:92:4b:ed: 35:dd:8a:ea:53:5a:9b:55:69:f2:7c:ca:98:ea:e2:d0:28:7c: 7c:9c:56:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsrZ0/3V6MECZsU6OgMfB9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjU4MGUxOGFkNmZmOGRjOTQyYmU4ODNjMTZkZThiNzMx Zjk2MDUwHhcNMjUxMjE3MDgyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWZiYjFmOGJlN2U3NzQxZTNjYWEwMDg5MmY4Mzc0NDNhNGNkOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUYsyWn/cnVPOQCSy4EHd+GR6B17 8TlO/v2MKww+pXW5Tb6GDek0JLbBl1dl0oO2egXuXi7bY6lX0bR7Fj4zbc9yoDgs 6zxPo2eER7ZerI2O8mSrB849Y3t39sYtLJOZu13sGdzVpMVbSMP3pTvDNZBGyiS2 GVSC+F/XRsCg/XXxtnYA9D62OXZlvRkPUY8YvTQGX4sg+TJXA5M4+gx4QizZY+rP GFCtsyodTbwNDcCLTjE+EbmHKjNcm9NaYLrFsitCKI1tQTrHOgzbq57ZbrVyIVk8 5qzBWZoinoyi6WTC58Z/fJg0RMudMU0yMgGh6nQy0YsUIV/CrJyFMFzgmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN77sfi+fndB48qgCJL4N0Q6TNmkMB8GA1UdIwQY MBaAFKhlgOGK1v+NyUK+iDwW3otzH5YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEt MjM2ZTkyZmM2YTU5LzEvM3Z1eC1MNS1kMEhqeXFBSWt2ZzNSRHBNMmFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEtMjM2ZTkyZmM2YTU5 LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCjYgQAwQD l/gwMA0GCSqGSIb3DQEBCwUAA4IBAQB9svR52OyPJlCo71GTdvEr/PyzenTSyeQ9 4n+3/5ExzfyPVzLeIZKxpcOHda7t+0d1V4UGeRn0rjyCNP5qnB5+2M05ckO1RkEL PcPX7WM2kQ+ivvTE6SUPbcFtuSJsQm5Jp2GsA7/6VZB0KBaGhcFy277zL1/wza6m Ve+7fwq8VFjoaRiIIAYKSU5+CzXxPgAWhXV5Y3wPkDBzwdQU9X5yuvCdF0Pjoj3s xuCKlq9VcAyYXAXSay3STR2ZMds3DZNR8V9oU5Mm3FsEwbDv6EG2fYSXu4V272Pz KIhlow/yK3+cYtAFG6eSS+013YrqU1qbVWnyfMqY6uLQKHx8nFbH -----END CERTIFICATE-----Generated at Sun Dec 21 04:50:19 2025 by rpki-client