This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/3vLLEawWlFzGv5JsfUPDtZBDJGY.roa File: 3vLLEawWlFzGv5JsfUPDtZBDJGY.roa (raw, json) Hash identifier: PavOw4v6+T14FuM5j33PYH4PD5HZoqWe5pgCu1sHQTM= Subject key identifier: DE:F2:CB:11:AC:16:94:5C:C6:BF:92:6C:7D:43:C3:B5:90:43:24:66 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019B78A31A922857CAA8094F913C1D094B81 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/3vLLEawWlFzGv5JsfUPDtZBDJGY.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202425 IP address blocks: 45.148.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1a:92:28:57:ca:a8:09:4f:91:3c:1d:09:4b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=def2cb11ac16945cc6bf926c7d43c3b590432466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:09:2a:67:fc:c2:e7:02:ed:46:cb:70:1f: 4f:da:c8:33:c4:5a:b5:d0:e3:6f:e1:a9:4f:a0:02: 2c:3b:72:48:e7:4e:7d:b3:c6:7c:3b:5e:fb:5e:7d: 58:ea:41:8c:d6:ca:58:c9:08:00:c1:90:9e:af:04: de:cb:17:3e:48:e3:75:dd:dd:75:fe:30:97:44:9a: b0:52:bf:ea:e4:74:ff:be:02:30:b3:af:96:df:03: 92:23:e0:eb:5a:22:f3:d7:03:b5:d4:e8:12:f9:2d: b1:f3:d1:59:48:d2:bf:f0:6c:c6:31:fd:95:52:51: 96:7b:dc:1f:03:d0:c1:ce:81:a6:7c:e9:93:67:3e: e2:d5:81:20:d7:93:3e:6a:d9:f7:aa:fd:cf:24:32: 5e:15:3d:e2:b5:87:95:08:92:48:f3:ee:fd:49:c2: f4:3a:f5:01:f3:b6:a8:61:c3:a3:b9:f0:bc:a3:a6: a6:9b:2b:20:44:87:39:9c:94:2e:64:93:f0:6d:1f: 76:ca:34:7b:61:f2:46:3c:6d:93:f1:27:c1:03:9f: 56:c9:f0:d7:77:3c:21:04:64:d5:3c:6a:86:34:e6: 3e:67:f1:eb:fa:38:6f:06:0e:a2:cf:5e:a6:1f:62: 05:5e:1e:e8:6f:1a:18:cb:95:22:85:aa:08:21:50: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F2:CB:11:AC:16:94:5C:C6:BF:92:6C:7D:43:C3:B5:90:43:24:66 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/3vLLEawWlFzGv5JsfUPDtZBDJGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.144.0/24 Signature Algorithm: sha256WithRSAEncryption 64:5d:78:44:43:12:7d:c4:fb:bf:e5:53:13:d9:7b:e7:bc:b6: 82:2e:01:c0:bf:42:2c:7f:55:63:b7:3e:41:7d:52:cb:62:5d: f0:5a:47:53:9b:a3:ee:41:ba:93:6d:f6:4a:0f:82:04:ba:2d: 95:ba:70:fc:45:58:3f:67:95:a6:97:a3:2a:66:f9:c5:86:d0: 44:04:17:82:0b:b9:fb:a1:74:f6:c1:ee:3a:87:ab:ad:e1:50: df:dc:3a:00:56:92:65:f6:f1:73:05:98:dd:56:3e:1c:c0:ae: cd:c9:b6:c5:df:b6:0c:7e:ab:e7:a4:1a:e2:b0:eb:42:74:61: 70:d9:cc:82:bf:4e:fb:b9:a9:3f:2e:af:af:31:37:0e:99:18: e8:9d:25:41:01:3e:b2:85:ab:c2:df:85:cb:b8:60:37:0a:61: c1:a0:4e:ae:d3:e1:cf:3b:3b:ff:b5:ae:b7:32:d0:7f:a6:3e: 31:9d:d4:e5:73:20:1c:1e:0c:68:fb:e9:d6:12:fc:73:9e:9a: b1:76:7d:4f:0e:2d:31:20:ae:9c:13:c5:5c:4d:3e:9d:4b:b8: fd:1e:03:d4:ba:d5:c4:bf:d1:89:08:d6:a0:94:bb:14:1f:c0: e2:7f:ae:2f:ad:a2:00:e0:60:21:10:b8:81:28:31:62:31:3d: e1:8a:8c:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxqSKFfKqAlPkTwdCUuBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWYyY2IxMWFjMTY5NDVjYzZiZjkyNmM3ZDQzYzNiNTkwNDMyNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/sJKmf8wucC7UbLcB9P2sgzxFq1 0ONv4alPoAIsO3JI5059s8Z8O177Xn1Y6kGM1spYyQgAwZCerwTeyxc+SON13d11 /jCXRJqwUr/q5HT/vgIws6+W3wOSI+DrWiLz1wO11OgS+S2x89FZSNK/8GzGMf2V UlGWe9wfA9DBzoGmfOmTZz7i1YEg15M+atn3qv3PJDJeFT3itYeVCJJI8+79ScL0 OvUB87aoYcOjufC8o6ammysgRIc5nJQuZJPwbR92yjR7YfJGPG2T8SfBA59WyfDX dzwhBGTVPGqGNOY+Z/Hr+jhvBg6iz16mH2IFXh7obxoYy5UihaoIIVBEeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN7yyxGsFpRcxr+SbH1Dw7WQQyRmMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvM3ZMTEVhd1dsRnpHdjVKc2ZVUER0WkJESkdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZSQMA0G CSqGSIb3DQEBCwUAA4IBAQBkXXhEQxJ9xPu/5VMT2XvnvLaCLgHAv0Isf1Vjtz5B fVLLYl3wWkdTm6PuQbqTbfZKD4IEui2VunD8RVg/Z5Wml6MqZvnFhtBEBBeCC7n7 oXT2we46h6ut4VDf3DoAVpJl9vFzBZjdVj4cwK7NybbF37YMfqvnpBrisOtCdGFw 2cyCv077uak/Lq+vMTcOmRjonSVBAT6yhavC34XLuGA3CmHBoE6u0+HPOzv/ta63 MtB/pj4xndTlcyAcHgxo++nWEvxznpqxdn1PDi0xIK6cE8VcTT6dS7j9HgPUutXE v9GJCNaglLsUH8Dif64vraIA4GAhELiBKDFiMT3hioyE -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:34 2026 by rpki-client