This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/3v4aI3hIcklmgeZ_UAwLSRXNdMQ.roa File: 3v4aI3hIcklmgeZ_UAwLSRXNdMQ.roa (raw, json) Hash identifier: IpPkFkZsNYzLAK3kRG6z1JeeccdjVJAcpoXlT9FO7rs= Subject key identifier: DE:FE:1A:23:78:48:72:49:66:81:E6:7F:50:0C:0B:49:15:CD:74:C4 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B7759735455AB2DE5E1302459DA64C4D7 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/3v4aI3hIcklmgeZ_UAwLSRXNdMQ.roa Signing time: Thu 01 Jan 2026 02:18:29 +0000 ROA not before: Thu 01 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42250 IP address blocks: 45.66.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:73:54:55:ab:2d:e5:e1:30:24:59:da:64:c4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=defe1a23784872496681e67f500c0b4915cd74c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:92:2c:b4:d4:93:80:7a:de:c5:cd:04:bd: 18:f2:c9:5f:69:6d:6e:50:95:9a:99:20:cc:21:4e: 72:24:5e:c9:00:b3:75:46:52:72:89:05:50:dc:f4: 36:e0:8e:9b:c9:67:25:5a:c7:ed:11:a6:5a:61:6e: 23:ba:ef:69:80:9b:d9:62:c9:e4:82:a9:07:4b:a5: 8b:38:fa:be:73:72:91:76:3a:f5:38:25:23:1b:27: f0:77:76:0e:c2:34:03:03:18:fb:c8:d2:9d:c6:7d: 18:23:d5:3a:29:80:ac:57:61:81:97:a0:34:2f:ec: d5:16:3c:56:d4:2f:3a:23:0b:60:73:19:b2:34:6f: db:69:7c:4b:05:78:84:ad:0e:2e:6b:e0:09:1c:2a: 18:02:cd:68:c6:d2:e0:d9:63:ab:ae:47:37:ad:ad: 9e:bd:f6:49:08:ed:e5:68:a3:91:c9:1a:ce:4e:35: c3:96:e4:bd:ae:2c:0f:58:a7:88:1c:e7:d9:83:a9: e4:a1:52:14:d4:89:4e:db:fd:ae:81:99:25:d8:a8: a0:f2:06:96:fd:e2:13:d6:0d:09:05:17:ec:fc:70: 73:ad:02:63:c8:6c:ca:8d:86:69:2a:7e:54:65:0d: 68:33:69:fe:22:b7:c6:b4:09:b0:73:6f:ae:70:d1: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FE:1A:23:78:48:72:49:66:81:E6:7F:50:0C:0B:49:15:CD:74:C4 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/3v4aI3hIcklmgeZ_UAwLSRXNdMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.55.0/24 Signature Algorithm: sha256WithRSAEncryption 36:14:a3:6f:52:90:e8:9e:9d:8e:19:1e:01:99:0c:c7:bb:ea: 1b:11:90:96:39:60:f7:b1:e4:30:2c:03:c9:36:13:84:dc:0e: 28:6a:e8:99:f1:1f:02:d8:44:be:91:48:58:16:ea:5e:7c:e7: 1d:4b:46:38:c6:63:9c:00:eb:e4:0d:b9:64:09:e7:29:6e:bc: 59:cd:9f:24:15:9e:b4:e4:37:b9:48:22:d6:ac:65:a7:0c:e7: 19:30:69:fc:d0:54:24:b9:5d:bc:e7:ad:24:6f:04:e7:56:b4: eb:44:67:70:b8:12:29:95:8e:51:00:7b:88:38:17:d3:c1:b5: 1d:39:bc:bf:0c:96:2a:ce:3d:30:f4:a1:47:5a:15:96:cb:5f: 7b:db:f9:e5:d4:61:32:ae:55:c1:c5:92:78:d2:b4:fd:15:73: ca:ea:b1:fe:33:82:bc:c5:ad:ed:d8:c1:66:e5:2d:7b:d1:45: df:2b:ef:fe:92:bc:e8:2b:90:8c:82:6f:b9:70:98:5a:bb:5c: 03:d9:94:63:a2:45:1b:08:f6:61:f1:b0:94:c2:93:96:65:17: 20:3a:9c:5d:19:d0:cc:f8:2e:d9:cf:b0:fe:78:63:ec:d3:3a: 72:dc:95:61:0c:7a:73:f7:c7:69:89:59:6d:b3:a6:1c:92:da: 03:42:ec:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXNUVast5eEwJFnaZMTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWZlMWEyMzc4NDg3MjQ5NjY4MWU2N2Y1MDBjMGI0OTE1Y2Q3NGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbOSLLTUk4B63sXNBL0Y8slfaW1u UJWamSDMIU5yJF7JALN1RlJyiQVQ3PQ24I6byWclWsftEaZaYW4juu9pgJvZYsnk gqkHS6WLOPq+c3KRdjr1OCUjGyfwd3YOwjQDAxj7yNKdxn0YI9U6KYCsV2GBl6A0 L+zVFjxW1C86IwtgcxmyNG/baXxLBXiErQ4ua+AJHCoYAs1oxtLg2WOrrkc3ra2e vfZJCO3laKORyRrOTjXDluS9riwPWKeIHOfZg6nkoVIU1IlO2/2ugZkl2Kig8gaW /eIT1g0JBRfs/HBzrQJjyGzKjYZpKn5UZQ1oM2n+IrfGtAmwc2+ucNEaAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN7+GiN4SHJJZoHmf1AMC0kVzXTEMB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvM3Y0YUkzaElja2xtZ2VaX1VBd0xTUlhOZE1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUI3MA0G CSqGSIb3DQEBCwUAA4IBAQA2FKNvUpDonp2OGR4BmQzHu+obEZCWOWD3seQwLAPJ NhOE3A4oauiZ8R8C2ES+kUhYFupefOcdS0Y4xmOcAOvkDblkCecpbrxZzZ8kFZ60 5De5SCLWrGWnDOcZMGn80FQkuV28560kbwTnVrTrRGdwuBIplY5RAHuIOBfTwbUd Oby/DJYqzj0w9KFHWhWWy1972/nl1GEyrlXBxZJ40rT9FXPK6rH+M4K8xa3t2MFm 5S170UXfK+/+krzoK5CMgm+5cJhau1wD2ZRjokUbCPZh8bCUwpOWZRcgOpxdGdDM +C7Zz7D+eGPs0zpy3JVhDHpz98dpiVlts6YcktoDQuy1 -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:54 2026 by rpki-client