This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/3yN1WaImxLytELQ8orv8zRs2JTc.roa File: 3yN1WaImxLytELQ8orv8zRs2JTc.roa (raw, json) Hash identifier: xMQ9DHu/OHk2/N1Hs4FxQtyh2D3+E7jpj/gCToK104o= Subject key identifier: DF:23:75:59:A2:26:C4:BC:AD:10:B4:3C:A2:BB:FC:CD:1B:36:25:37 Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234 Certificate serial: 019B7DC9FC487EBF1858D051177E5685947E Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/3yN1WaImxLytELQ8orv8zRs2JTc.roa Signing time: Fri 02 Jan 2026 08:19:07 +0000 ROA not before: Fri 02 Jan 2026 08:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4134 IP address blocks: 81.173.16.0/24 maxlen: 24 81.173.17.0/24 maxlen: 24 81.173.18.0/24 maxlen: 24 81.173.19.0/24 maxlen: 24 81.173.20.0/24 maxlen: 24 81.173.21.0/24 maxlen: 24 81.173.22.0/24 maxlen: 24 81.173.23.0/24 maxlen: 24 81.173.24.0/24 maxlen: 24 81.173.28.0/24 maxlen: 24 2a04:f580:8010::/48 maxlen: 48 2a04:f580:8011::/48 maxlen: 48 2a04:f580:8030:100::/56 maxlen: 56 2a04:f580:8090::/48 maxlen: 48 2a04:f580:8210::/48 maxlen: 48 2a04:f580:8211::/48 maxlen: 48 2a04:f580:8290::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fc:48:7e:bf:18:58:d0:51:17:7e:56:85:94:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234 Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df237559a226c4bcad10b43ca2bbfccd1b362537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:3e:51:7a:3e:da:f9:2b:fa:7e:b6:36:9b: b0:5e:40:88:92:b9:d0:87:d9:1a:40:07:78:b2:84: cb:7b:9a:7a:19:bd:2a:4a:fc:ca:7e:b3:e1:12:59: 90:05:27:12:19:ce:a4:05:84:a3:31:96:79:96:6b: 52:d4:6e:7b:ca:04:8b:e9:ec:12:28:b5:89:fe:cb: cd:28:f8:8c:06:ba:b1:d5:b5:09:d4:17:1d:a7:ea: b6:51:00:6c:fa:b7:5e:9e:de:01:69:f2:60:6f:91: 44:9a:80:3a:5f:2a:21:4f:d7:eb:0e:40:ab:ad:52: 0d:d0:32:d9:9d:86:85:bd:f8:bc:a7:e9:0d:86:eb: f5:f8:2c:ed:1e:7a:9e:ea:4d:cf:a0:f6:69:61:d0: 8f:4f:98:94:bf:d9:73:e1:f5:08:f1:fb:41:6a:0c: df:a9:3d:1a:4c:8c:ec:21:39:4e:05:00:4a:1b:39: c9:62:cc:ee:01:3c:e6:3c:1f:25:83:1b:42:0c:05: 3a:70:f3:5e:98:90:1f:b2:64:b5:ce:aa:ff:60:4b: c4:2b:e3:63:2d:6c:26:72:c9:60:1b:99:0d:80:17: 4c:47:41:58:69:ba:df:cc:46:c8:23:8a:1c:3f:98: 01:b3:e9:3c:f9:b4:3a:d5:8f:5e:20:f4:c9:74:d1: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:23:75:59:A2:26:C4:BC:AD:10:B4:3C:A2:BB:FC:CD:1B:36:25:37 X509v3 Authority Key Identifier: keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/3yN1WaImxLytELQ8orv8zRs2JTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.173.16.0-81.173.24.255 81.173.28.0/24 IPv6: 2a04:f580:8010::/47 2a04:f580:8030:100::/56 2a04:f580:8090::/48 2a04:f580:8210::/47 2a04:f580:8290::/48 Signature Algorithm: sha256WithRSAEncryption 4d:29:5b:19:3b:ae:3b:9a:7c:f5:9d:0a:ce:4d:ab:96:f1:a2: 61:96:11:ff:b2:a4:22:4e:8d:e9:b0:a5:5d:26:d8:89:71:b4: bb:c9:2d:72:35:2c:ed:02:9f:93:d0:36:e4:ec:a0:38:81:39: a1:a0:b5:66:91:6e:66:8e:4c:c3:4e:35:5f:56:21:5e:c2:24: 3e:c2:ec:f8:8f:f9:14:ef:1f:53:64:17:af:d3:32:b2:70:19: 31:ff:c4:6c:65:f2:56:a8:8c:34:d1:f9:6c:3d:2a:de:c4:95: 46:06:16:ac:71:0a:3a:52:b0:0e:96:04:8b:81:06:53:8e:80: 89:b6:1c:11:a9:b8:68:4d:8e:fc:84:c4:87:20:6c:0a:ff:10: 28:22:14:bb:ec:c7:8f:3a:54:4e:08:ca:a5:da:b7:d2:15:92: 21:64:ac:ed:84:71:cd:43:f2:a5:94:6f:fb:55:f4:b1:3b:c5: 5c:fa:71:47:bd:59:49:37:5f:3d:fc:ae:47:f8:80:97:32:1b: 93:7b:00:3b:dd:9b:59:9a:c7:39:1a:cc:11:e1:0b:72:98:8f: be:a8:98:0f:6b:ae:f0:2c:ce:3f:8c:79:27:f5:07:1f:5c:87: 03:0f:e6:82:91:33:65:b2:58:7d:cf:b9:59:01:2e:1a:03:2f: 67:ff:8b:c2 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt9yfxIfr8YWNBRF35WhZR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZjNlZjNlMGVhOTVhOTc1NTM3ZDVjMjVkOTNjYjc2YWY2 ODcyMzQwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjIzNzU1OWEyMjZjNGJjYWQxMGI0M2NhMmJiZmNjZDFiMzYyNTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhA+UXo+2vkr+n62NpuwXkCIkrnQ h9kaQAd4soTLe5p6Gb0qSvzKfrPhElmQBScSGc6kBYSjMZZ5lmtS1G57ygSL6ewS KLWJ/svNKPiMBrqx1bUJ1Bcdp+q2UQBs+rdent4BafJgb5FEmoA6XyohT9frDkCr rVIN0DLZnYaFvfi8p+kNhuv1+CztHnqe6k3PoPZpYdCPT5iUv9lz4fUI8ftBagzf qT0aTIzsITlOBQBKGznJYszuATzmPB8lgxtCDAU6cPNemJAfsmS1zqr/YEvEK+Nj LWwmcslgG5kNgBdMR0FYabrfzEbII4ocP5gBs+k8+bQ61Y9eIPTJdNER0QIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFN8jdVmiJsS8rRC0PKK7/M0bNiU3MB8GA1UdIwQY MBaAFAHz7z4OqVqXVTfVwl2Ty3avaHI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEt MzUzYjNhNjMzYWRhLzEvM3lOMVdhSW14THl0RUxROG9ydjh6UnMySlRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEtMzUzYjNhNjMzYWRh LzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjAaBAIAATAUMAwDBARRrRAD BABRrRgDBABRrRwwNAQCAAIwLgMHASoE9YCAEAMIACoE9YCAMAEDBwAqBPWAgJAD BwEqBPWAghADBwAqBPWAgpAwDQYJKoZIhvcNAQELBQADggEBAE0pWxk7rjuafPWd Cs5Nq5bxomGWEf+ypCJOjemwpV0m2IlxtLvJLXI1LO0Cn5PQNuTsoDiBOaGgtWaR bmaOTMNONV9WIV7CJD7C7PiP+RTvH1NkF6/TMrJwGTH/xGxl8laojDTR+Ww9Kt7E lUYGFqxxCjpSsA6WBIuBBlOOgIm2HBGpuGhNjvyExIcgbAr/ECgiFLvsx486VE4I yqXat9IVkiFkrO2Ecc1D8qWUb/tV9LE7xVz6cUe9WUk3Xz38rkf4gJcyG5N7ADvd m1maxzkazBHhC3KYj76omA9rrvAszj+MeSf1Bx9chwMP5oKRM2WyWH3PuVkBLhoD L2f/i8I= -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:28 2026 by rpki-client