This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/RTK3cJIZUbfw_CFVCNlmTyAvi5w.roa File: RTK3cJIZUbfw_CFVCNlmTyAvi5w.roa (raw, json) Hash identifier: 86/7kcMAzf3R35O/Bh30wSQsADQn2qQ5HkYOWkHNE7k= Subject key identifier: 45:32:B7:70:92:19:51:B7:F0:FC:21:55:08:D9:66:4F:20:2F:8B:9C Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Certificate serial: 019B7FF24CF2D1BC3FA1BA8EE73DF8D2B628 Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/RTK3cJIZUbfw_CFVCNlmTyAvi5w.roa Signing time: Fri 02 Jan 2026 18:22:24 +0000 ROA not before: Fri 02 Jan 2026 18:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206483 IP address blocks: 84.45.30.0/24 maxlen: 24 84.45.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:4c:f2:d1:bc:3f:a1:ba:8e:e7:3d:f8:d2:b6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Validity Not Before: Jan 2 18:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4532b770921951b7f0fc215508d9664f202f8b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:11:33:1c:58:59:18:ef:5a:0b:9e:38:ea:47: a3:89:73:8f:ad:b1:ff:e7:fb:5c:d5:33:06:2f:93: ce:31:23:d1:0c:cd:11:98:6c:57:19:ff:71:1e:87: a9:d2:08:d1:02:63:db:06:ff:f7:9e:c3:eb:cf:5f: 13:30:19:cf:57:30:70:be:51:f3:a8:c7:73:76:54: 58:6b:2b:59:78:d0:5c:46:84:72:ab:1d:2d:2d:19: f3:e5:8a:af:3a:9a:8d:b4:94:c5:55:a5:31:e1:7f: 14:53:81:5d:b2:4a:b6:82:57:48:63:81:14:bf:83: 5a:07:b6:57:05:1c:bb:b1:57:7a:00:35:1e:cc:aa: d2:f8:1e:ca:31:bb:bf:36:fc:99:c4:1a:7b:7a:8e: 36:f3:45:e5:90:96:00:c1:34:27:14:0a:d7:5a:d5: 25:d9:29:c0:c7:07:6f:29:e8:fd:b3:75:ef:4c:e7: 0f:df:c0:2b:34:0e:a2:1b:82:8e:73:c5:cc:51:d7: b0:dd:ce:b6:2a:00:7f:6e:0c:de:a5:fb:41:69:23: f9:cb:3a:8a:90:c7:d1:9f:08:41:d5:95:78:d6:7a: 5c:f8:e8:19:ae:2d:9a:81:85:2a:f0:01:3e:a8:c8: e4:9f:8f:7b:f3:b9:80:0f:d1:11:74:a1:ef:74:df: 4d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:32:B7:70:92:19:51:B7:F0:FC:21:55:08:D9:66:4F:20:2F:8B:9C X509v3 Authority Key Identifier: keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/RTK3cJIZUbfw_CFVCNlmTyAvi5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.45.30.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:b7:30:5f:67:3a:76:f3:6f:23:19:93:b3:f3:a4:cd:00:01: 5b:7b:cf:b2:92:41:21:2d:08:de:12:ce:00:48:bc:37:cb:cd: 4d:2c:b2:fa:59:86:30:14:55:f4:cd:4f:b2:ff:fe:c6:5f:39: de:d0:f9:5d:fa:58:ff:1b:a5:c4:83:9f:ae:bf:14:a9:ca:5f: 0b:62:4c:09:60:c9:de:68:2b:92:aa:be:1b:f8:b6:8a:68:7a: 18:89:19:d0:f8:30:7d:50:2f:15:b3:d1:f9:ba:a3:c3:b9:d9: 52:0e:83:21:8a:de:be:70:b9:56:20:8f:76:50:73:a3:6d:29: 75:2c:12:b0:84:3b:6b:34:88:a2:91:21:2b:da:12:7a:f5:6a: 85:a0:69:6f:5d:a7:3b:3f:8c:96:91:8f:bb:8a:83:f8:29:b6: f7:b6:a1:36:1c:8d:86:e2:b3:4c:da:44:53:05:bd:cf:15:16: a7:74:a5:8e:d9:2a:f7:30:8d:96:dd:df:38:8e:b0:ec:f7:8e: 97:fe:17:fc:de:7c:25:3e:9f:ab:a4:f9:4e:ca:b5:e1:fb:c9: ca:fb:1e:4b:89:65:63:2a:29:b7:68:79:dc:ad:5a:57:83:1c: a9:2e:68:38:1d:2d:7e:b3:bf:ce:e2:d0:c6:59:98:20:93:b3: 33:ec:60:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8kzy0bw/obqO5z340rYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm Y2FmMmEwHhcNMjYwMTAyMTgyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTMyYjc3MDkyMTk1MWI3ZjBmYzIxNTUwOGQ5NjY0ZjIwMmY4YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshEzHFhZGO9aC5446kejiXOPrbH/ 5/tc1TMGL5POMSPRDM0RmGxXGf9xHoep0gjRAmPbBv/3nsPrz18TMBnPVzBwvlHz qMdzdlRYaytZeNBcRoRyqx0tLRnz5YqvOpqNtJTFVaUx4X8UU4Fdskq2gldIY4EU v4NaB7ZXBRy7sVd6ADUezKrS+B7KMbu/NvyZxBp7eo4280XlkJYAwTQnFArXWtUl 2SnAxwdvKej9s3XvTOcP38ArNA6iG4KOc8XMUdew3c62KgB/bgzepftBaSP5yzqK kMfRnwhB1ZV41npc+OgZri2agYUq8AE+qMjkn49787mAD9ERdKHvdN9NIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUyt3CSGVG38PwhVQjZZk8gL4ucMB8GA1UdIwQY MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt MTYzZmI3MDAzZTVkLzEvUlRLM2NKSVpVYmZ3X0NGVkNObG1UeUF2aTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVC0eMA0G CSqGSIb3DQEBCwUAA4IBAQBqtzBfZzp2828jGZOz86TNAAFbe8+ykkEhLQjeEs4A SLw3y81NLLL6WYYwFFX0zU+y//7GXzne0Pld+lj/G6XEg5+uvxSpyl8LYkwJYMne aCuSqr4b+LaKaHoYiRnQ+DB9UC8Vs9H5uqPDudlSDoMhit6+cLlWII92UHOjbSl1 LBKwhDtrNIiikSEr2hJ69WqFoGlvXac7P4yWkY+7ioP4Kbb3tqE2HI2G4rNM2kRT Bb3PFRandKWO2Sr3MI2W3d84jrDs946X/hf83nwlPp+rpPlOyrXh+8nK+x5LiWVj Kim3aHncrVpXgxypLmg4HS1+s7/O4tDGWZggk7Mz7GDh -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:10 2026 by rpki-client