This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/b_n3Z3GxujBB68-zb1vahju6Fp0.roa File: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (raw, json) Hash identifier: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc= Subject key identifier: 6F:F9:F7:67:71:B1:BA:30:41:EB:CF:B3:6F:5B:DA:86:3B:BA:16:9D Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019B7A5AB12AC6EABA58D4D6C559ADF35BFA Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/b_n3Z3GxujBB68-zb1vahju6Fp0.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.140.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b1:2a:c6:ea:ba:58:d4:d6:c5:59:ad:f3:5b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ff9f76771b1ba3041ebcfb36f5bda863bba169d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:1a:6f:bf:34:80:a4:88:af:01:1d:46:d3: 71:aa:2d:35:72:c3:21:ff:ac:01:b7:67:98:bf:83: a3:54:12:ae:6a:f8:f6:36:bf:c0:7e:80:5a:be:ad: f6:2d:42:36:0e:8c:0b:1b:90:da:17:0d:9d:89:92: 39:f4:9d:30:d1:31:6d:5e:d6:19:f7:8c:b6:1c:41: ab:fd:d6:9f:4d:c5:03:96:dc:5f:82:1b:0e:dd:43: 23:1b:81:ba:3f:17:ec:82:b3:f8:5e:b9:75:2a:da: 86:f9:ee:58:48:3b:20:22:67:c0:5e:a8:61:b4:8d: c9:de:c7:78:c7:17:af:e1:f2:91:6f:3f:05:c1:ea: 17:5b:0a:7f:a8:1f:11:ef:11:f5:dd:96:f4:db:99: c6:30:87:f8:3b:3e:6a:f8:4c:79:7e:b8:21:80:17: 9a:17:10:52:2f:cf:f8:2a:e3:c3:f0:66:40:6d:1d: 74:81:07:ed:f5:19:6c:fd:81:72:01:37:2b:72:55: 01:47:63:88:fd:5b:90:c4:63:01:e7:0e:59:df:0f: 12:45:43:b0:c3:79:2c:1d:ca:22:2d:a9:ed:06:cd: 29:e2:aa:3d:25:bb:69:3f:43:44:31:74:17:2a:40: a3:90:99:b9:e2:de:4e:62:29:0a:c3:60:1d:6a:c5: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F9:F7:67:71:B1:BA:30:41:EB:CF:B3:6F:5B:DA:86:3B:BA:16:9D X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/b_n3Z3GxujBB68-zb1vahju6Fp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.211.0/24 Signature Algorithm: sha256WithRSAEncryption c5:c0:8a:e1:a9:6a:8d:8d:cc:f6:ae:e6:e9:18:51:2d:b3:a7: d2:32:59:e5:4f:32:06:39:9c:76:38:8a:52:5a:b6:2b:06:4f: 8d:d2:4d:f8:c0:0a:8a:c2:d1:8a:b9:6d:15:72:6e:79:d5:b8: b4:98:be:57:8f:02:be:91:f2:ad:90:f9:a8:2e:db:2d:52:64: aa:56:ae:69:2c:67:95:b3:d4:aa:92:9d:87:fa:32:d9:c6:c3: 73:b5:87:5b:c5:c1:ef:4a:f9:17:8f:0b:52:c7:bb:69:3b:9b: 7f:14:00:5a:c1:d7:3f:5c:88:d6:37:ce:9f:81:fe:a0:fc:cd: 06:4f:0d:2b:c3:39:b7:c4:c2:7e:92:44:e2:f0:73:56:6b:13: 2c:a5:c7:cc:98:e9:eb:1b:ec:b3:15:ac:e6:50:e0:4a:3a:56: f0:8f:84:d8:01:43:ba:a9:71:42:c2:d8:a0:87:55:4c:54:4e: 14:8e:dd:1f:93:f9:2f:af:c8:b6:4a:ea:43:a9:e8:36:ac:e4: df:ce:15:21:15:ce:00:f4:cd:0e:9d:77:39:2a:2a:67:a6:50: e7:3c:c1:3f:8f:50:8e:8f:fe:00:65:24:aa:86:80:1d:83:a4: e0:28:c3:5a:71:f5:b5:c0:af:d3:23:3b:3a:1c:14:5e:fd:8f: bb:7b:3b:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrEqxuq6WNTWxVmt81v6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmY5Zjc2NzcxYjFiYTMwNDFlYmNmYjM2ZjViZGE4NjNiYmExNjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiMab780gKSIrwEdRtNxqi01csMh /6wBt2eYv4OjVBKuavj2Nr/AfoBavq32LUI2DowLG5DaFw2diZI59J0w0TFtXtYZ 94y2HEGr/dafTcUDltxfghsO3UMjG4G6PxfsgrP4Xrl1KtqG+e5YSDsgImfAXqhh tI3J3sd4xxev4fKRbz8FweoXWwp/qB8R7xH13Zb025nGMIf4Oz5q+Ex5frghgBea FxBSL8/4KuPD8GZAbR10gQft9Rls/YFyATcrclUBR2OI/VuQxGMB5w5Z3w8SRUOw w3ksHcoiLantBs0p4qo9JbtpP0NEMXQXKkCjkJm54t5OYikKw2AdasVy3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG/592dxsbowQevPs29b2oY7uhadMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEvYl9uM1ozR3h1akJCNjgtemIxdmFoanU2RnAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzTMA0G CSqGSIb3DQEBCwUAA4IBAQDFwIrhqWqNjcz2rubpGFEts6fSMlnlTzIGOZx2OIpS WrYrBk+N0k34wAqKwtGKuW0Vcm551bi0mL5XjwK+kfKtkPmoLtstUmSqVq5pLGeV s9Sqkp2H+jLZxsNztYdbxcHvSvkXjwtSx7tpO5t/FABawdc/XIjWN86fgf6g/M0G Tw0rwzm3xMJ+kkTi8HNWaxMspcfMmOnrG+yzFazmUOBKOlbwj4TYAUO6qXFCwtig h1VMVE4Ujt0fk/kvr8i2SupDqeg2rOTfzhUhFc4A9M0OnXc5KipnplDnPME/j1CO j/4AZSSqhoAdg6TgKMNacfW1wK/TIzs6HBRe/Y+7ezs2 -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:44 2026 by rpki-client