This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/L3FElQgN_OK9ME85XjkPB5d4njo.roa File: L3FElQgN_OK9ME85XjkPB5d4njo.roa (raw, json) Hash identifier: 7fKQw9/kLDh7zT4p1MB3dQg/LI4nczVMbuMgYO277J0= Subject key identifier: 2F:71:44:95:08:0D:FC:E2:BD:30:4F:39:5E:39:0F:07:97:78:9E:3A Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689 Certificate serial: 019B7F82C337C958351C5B9F0EDECFF7615D Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/L3FElQgN_OK9ME85XjkPB5d4njo.roa Signing time: Fri 02 Jan 2026 16:20:34 +0000 ROA not before: Fri 02 Jan 2026 16:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 45.80.232.0/22 maxlen: 24 2a0e:4980::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c3:37:c9:58:35:1c:5b:9f:0e:de:cf:f7:61:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689 Validity Not Before: Jan 2 16:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f714495080dfce2bd304f395e390f0797789e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:61:dd:7f:d2:b2:f5:0a:03:2e:7f:7c:fc: 91:24:0e:c5:e0:56:40:bf:91:c2:11:28:56:d2:2a: dc:61:44:99:a7:15:d3:31:65:8e:67:17:5b:77:6d: e1:78:d6:d6:58:1a:2b:14:7a:67:60:d2:9c:4e:e3: cc:c3:93:5a:f7:d4:2c:54:dc:35:b1:5b:c7:f6:4c: e1:c7:8c:16:77:8f:67:2e:5b:0b:35:39:c8:34:d2: 49:44:ac:ae:83:ee:51:a9:8a:86:3b:7b:47:78:80: 75:fd:9f:83:d5:61:f5:50:f9:c7:cb:e6:57:a8:36: db:9f:90:28:31:7d:2d:d7:69:77:0f:f1:19:96:ba: 49:f0:84:48:e3:11:84:ac:c6:4a:0c:21:84:d6:f8: 89:fe:84:bf:82:f6:16:62:77:01:cc:02:17:3d:69: f4:15:a2:52:74:12:81:a1:6f:b2:a7:ec:51:01:7e: 48:6c:70:6c:ce:51:1b:ca:4c:d6:90:a5:be:e0:88: 5a:5d:dc:d2:dd:78:9b:e3:2d:f7:e0:b6:bc:a8:32: c1:20:3d:ef:13:1b:2d:fd:fa:40:3c:86:ee:67:3d: 0f:34:18:21:e7:97:36:c5:0a:1e:99:17:8b:a5:f8: 28:fb:97:3e:91:1c:9b:d3:af:2d:02:37:4a:91:53: 13:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:71:44:95:08:0D:FC:E2:BD:30:4F:39:5E:39:0F:07:97:78:9E:3A X509v3 Authority Key Identifier: keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/L3FElQgN_OK9ME85XjkPB5d4njo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.232.0/22 IPv6: 2a0e:4980::/32 Signature Algorithm: sha256WithRSAEncryption a3:18:75:7c:f1:a5:3d:7c:96:d8:e0:60:da:85:2b:33:32:05: 0c:8e:93:74:ae:be:3b:c3:0b:48:48:74:1f:2d:6f:74:80:4a: b0:b1:c6:91:99:0d:f0:7c:26:36:6a:44:02:cf:e3:cb:65:d0: f1:89:4d:b8:d9:01:e4:c9:48:a4:14:9a:da:c3:87:02:1d:7b: b7:17:53:3a:1b:e6:2b:5b:4f:f7:ef:9c:3b:a9:8e:9f:97:e1: 1a:cf:4d:ce:e7:3c:a7:f4:2e:58:59:40:38:2a:af:cc:d7:e6: af:d2:ed:a8:49:34:7d:05:10:00:2e:a1:a3:0b:6e:ba:16:1d: 35:db:f6:45:83:20:8b:b9:72:e8:25:5d:d8:c5:ac:65:d1:78: eb:a2:a6:2a:6a:e3:5e:a8:04:26:3d:04:be:ba:a0:12:fb:0d: 15:2e:57:91:7d:af:eb:50:7d:a8:84:17:91:2b:b7:8f:81:d3: 18:59:13:71:94:ae:ba:c0:23:f6:a1:46:e9:06:a1:d7:7a:b5: cc:c6:cf:ad:32:06:6c:8f:6a:74:cf:18:67:87:54:cc:03:de: 66:ed:0d:ac:d8:cf:12:9d:cd:e6:6d:ed:ee:7b:c3:58:66:88: 3b:38:2f:07:f7:40:49:c7:43:37:1a:f8:ae:16:81:8b:8a:8e: ea:62:b4:59 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gsM3yVg1HFufDt7P92FdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzY0OTk0ZTI0ZDRhZWZkYzQyYTg4MzFmZTBkY2UyMGQ2 MDQ2ODkwHhcNMjYwMTAyMTYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjcxNDQ5NTA4MGRmY2UyYmQzMDRmMzk1ZTM5MGYwNzk3Nzg5ZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqZh3X/SsvUKAy5/fPyRJA7F4FZA v5HCEShW0ircYUSZpxXTMWWOZxdbd23heNbWWBorFHpnYNKcTuPMw5Na99QsVNw1 sVvH9kzhx4wWd49nLlsLNTnINNJJRKyug+5RqYqGO3tHeIB1/Z+D1WH1UPnHy+ZX qDbbn5AoMX0t12l3D/EZlrpJ8IRI4xGErMZKDCGE1viJ/oS/gvYWYncBzAIXPWn0 FaJSdBKBoW+yp+xRAX5IbHBszlEbykzWkKW+4IhaXdzS3Xib4y334La8qDLBID3v Exst/fpAPIbuZz0PNBgh55c2xQoemReLpfgo+5c+kRyb068tAjdKkVMTIQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC9xRJUIDfzivTBPOV45DweXeJ46MB8GA1UdIwQY MBaAFPTGSZTiTUrv3EKogx/g3OINYEaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1aSmxPSk5TdV9jUXFpREgtRGM0ZzFnUm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82NDY1OGQtZDVlYi00ODliLWJjMTUt Mzg1NTY5OGZiNTdmLzEvTDNGRWxRZ05fT0s5TUU4NVhqa1BCNWQ0bmpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82NDY1OGQtZDVlYi00ODliLWJjMTUtMzg1NTY5OGZiNTdm LzEvOU1aSmxPSk5TdV9jUXFpREgtRGM0ZzFnUm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVDoMA0E AgACMAcDBQAqDkmAMA0GCSqGSIb3DQEBCwUAA4IBAQCjGHV88aU9fJbY4GDahSsz MgUMjpN0rr47wwtISHQfLW90gEqwscaRmQ3wfCY2akQCz+PLZdDxiU242QHkyUik FJraw4cCHXu3F1M6G+YrW0/375w7qY6fl+Eaz03O5zyn9C5YWUA4Kq/M1+av0u2o STR9BRAALqGjC266Fh012/ZFgyCLuXLoJV3Yxaxl0XjroqYqauNeqAQmPQS+uqAS +w0VLleRfa/rUH2ohBeRK7ePgdMYWRNxlK66wCP2oUbpBqHXerXMxs+tMgZsj2p0 zxhnh1TMA95m7Q2s2M8Snc3mbe3ue8NYZog7OC8H90BJx0M3GviuFoGLio7qYrRZ -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:30 2026 by rpki-client