This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/3JNSQLDSVjMCAeXDdRfs56ArU_A.roa File: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (raw, json) Hash identifier: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8= Subject key identifier: DC:93:52:40:B0:D2:56:33:02:01:E5:C3:75:17:EC:E7:A0:2B:53:F0 Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Certificate serial: 019B7DCA815CEAB87BF8F25A5A6BCD743E69 Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/3JNSQLDSVjMCAeXDdRfs56ArU_A.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212193 IP address blocks: 45.94.6.0/24 maxlen: 24 45.156.28.0/24 maxlen: 24 45.156.29.0/24 maxlen: 24 194.29.55.0/24 maxlen: 24 2a10:9f80::/29 maxlen: 48 2a11:4bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:81:5c:ea:b8:7b:f8:f2:5a:5a:6b:cd:74:3e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645 Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc935240b0d256330201e5c37517ece7a02b53f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:84:e2:4e:c6:73:28:e3:ec:9a:85:e9:48: 46:30:bf:bb:5c:ff:cd:5f:e1:63:21:b2:7f:ca:8a: fd:52:94:bf:23:3e:36:62:63:3b:d7:9c:cd:26:ab: 01:c6:dd:ca:76:30:a9:5a:31:c2:98:39:54:ed:21: 0a:25:55:79:10:54:7d:0c:5e:d0:17:24:d8:f0:11: fd:23:f0:c9:b5:27:8a:29:b4:cd:2c:3e:1e:a6:fd: 69:41:ff:31:a0:bb:c2:c8:48:63:cc:78:65:23:0d: 88:da:75:7f:18:69:2e:a0:b4:f0:f9:b0:fc:fc:3e: 72:e1:67:6e:d3:0e:3e:8b:4c:5f:23:9e:e1:72:0f: 05:fb:d7:63:0c:06:79:4a:31:e2:1b:f8:1e:89:b7: de:6e:b2:4d:d3:ac:94:16:a6:30:7a:e7:aa:f5:8b: 35:48:6a:a4:da:77:2d:df:af:3f:58:c0:9c:c7:6d: 02:f3:99:93:39:b9:83:12:d4:1d:66:13:04:90:b7: 5f:8c:15:9c:ae:43:a0:31:ac:9a:76:cd:bd:d6:db: 2a:5d:1e:01:b2:84:f2:85:8e:aa:47:f0:97:c7:e0: 28:64:fb:1f:10:46:a6:62:68:65:90:62:01:1f:f7: 06:6d:a0:aa:7d:31:a3:36:c4:7d:bd:5b:57:8d:0e: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:93:52:40:B0:D2:56:33:02:01:E5:C3:75:17:EC:E7:A0:2B:53:F0 X509v3 Authority Key Identifier: keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/3JNSQLDSVjMCAeXDdRfs56ArU_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.6.0/24 45.156.28.0/23 194.29.55.0/24 IPv6: 2a10:9f80::/29 2a11:4bc0::/29 Signature Algorithm: sha256WithRSAEncryption 21:7f:15:93:bb:90:b4:7b:a7:46:66:25:49:dd:e2:28:9d:fe: 70:82:e7:12:6a:40:a0:e3:83:e3:9c:86:af:f2:c2:a7:af:af: bd:9c:17:b8:23:2d:12:87:2c:9a:aa:1f:a6:98:e0:6f:44:b9: ef:60:0d:68:45:85:04:88:3a:a2:27:57:eb:a0:cd:e3:d8:bb: 18:96:fc:26:78:b1:d8:80:ee:6c:c0:ee:5a:0d:f9:1d:24:08: ed:72:56:df:68:f4:31:99:85:5a:71:e5:e9:7f:c7:fc:4e:39: 7a:cf:80:32:aa:f6:b3:3e:c5:f7:59:18:1c:93:bb:f9:d7:18: 4c:09:05:3f:6f:82:75:c4:7c:86:06:9e:5f:72:6e:df:67:ec: a4:87:3c:fc:e1:a7:7f:e8:c5:06:05:48:f5:41:14:ae:b3:83: 33:86:89:37:03:44:e9:14:cb:2d:e8:03:ed:bf:f6:20:da:7e: c6:a7:aa:47:6e:16:d4:f6:7b:6f:52:5b:a8:48:62:f7:a5:c6: 30:09:ec:26:04:e8:ef:e7:64:08:31:38:7d:38:ee:69:ee:00: e5:56:66:06:c0:d5:6e:e1:2b:66:d9:79:65:c0:b0:b4:cb:3a: 13:da:1f:92:ac:3a:ad:1c:2a:ba:90:c8:c2:36:a7:d8:ac:32: 93:00:c0:f7 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt9yoFc6rh7+PJaWmvNdD5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj NGY2NDUwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzkzNTI0MGIwZDI1NjMzMDIwMWU1YzM3NTE3ZWNlN2EwMmI1M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DaE4k7Gcyjj7JqF6UhGML+7XP/N X+FjIbJ/yor9UpS/Iz42YmM715zNJqsBxt3KdjCpWjHCmDlU7SEKJVV5EFR9DF7Q FyTY8BH9I/DJtSeKKbTNLD4epv1pQf8xoLvCyEhjzHhlIw2I2nV/GGkuoLTw+bD8 /D5y4Wdu0w4+i0xfI57hcg8F+9djDAZ5SjHiG/geibfebrJN06yUFqYweueq9Ys1 SGqk2nct368/WMCcx20C85mTObmDEtQdZhMEkLdfjBWcrkOgMayads291tsqXR4B soTyhY6qR/CXx+AoZPsfEEamYmhlkGIBH/cGbaCqfTGjNsR9vVtXjQ4VQQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFNyTUkCw0lYzAgHlw3UX7OegK1PwMB8GA1UdIwQY MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt ZmNjMzM2ZWVkOGQ3LzEvM0pOU1FMRFNWak1DQWVYRGRSZnM1NkFyVV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3 LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQALV4GAwQB LZwcAwQAwh03MBQEAgACMA4DBQMqEJ+AAwUDKhFLwDANBgkqhkiG9w0BAQsFAAOC AQEAIX8Vk7uQtHunRmYlSd3iKJ3+cILnEmpAoOOD45yGr/LCp6+vvZwXuCMtEocs mqofppjgb0S572ANaEWFBIg6oidX66DN49i7GJb8Jnix2IDubMDuWg35HSQI7XJW 32j0MZmFWnHl6X/H/E45es+AMqr2sz7F91kYHJO7+dcYTAkFP2+CdcR8hgaeX3Ju 32fspIc8/OGnf+jFBgVI9UEUrrODM4aJNwNE6RTLLegD7b/2INp+xqeqR24W1PZ7 b1JbqEhi96XGMAnsJgTo7+dkCDE4fTjuae4A5VZmBsDVbuErZtl5ZcCwtMs6E9of kqw6rRwqupDIwjan2KwykwDA9w== -----END CERTIFICATE-----Generated at Mon Jan 26 08:57:35 2026 by rpki-client