This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/3djyl22f-p0y1ATvkQjBV19gaTY.roa File: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (raw, json) Hash identifier: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk= Subject key identifier: DD:D8:F2:97:6D:9F:FA:9D:32:D4:04:EF:91:08:C1:57:5F:60:69:36 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019B7E381E75E8FC34436A91BEEE3C7717F0 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/3djyl22f-p0y1ATvkQjBV19gaTY.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215512 IP address blocks: 45.113.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1e:75:e8:fc:34:43:6a:91:be:ee:3c:77:17:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddd8f2976d9ffa9d32d404ef9108c1575f606936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:a5:95:4d:0d:fe:3b:6b:89:d9:d2:fc:b0: 2c:d4:14:d5:54:33:03:69:e3:3b:56:24:09:04:6b: 7a:1e:79:e3:ec:d2:df:be:06:76:8e:c3:1d:e4:42: 25:56:91:fd:0e:36:15:8b:f0:20:be:f0:10:28:c0: 7d:3b:dd:78:38:d3:ac:ea:86:d2:5b:60:66:dc:a2: 22:8c:52:d5:1d:e8:08:46:a4:18:38:03:81:3c:4f: 52:b2:e3:1a:e5:d7:7f:74:a5:76:c5:9e:a2:e0:0c: 74:d6:04:c8:74:8e:f8:4b:f2:d5:ff:35:f3:52:63: fe:37:6a:37:b8:62:2d:4a:3f:7f:48:a1:33:d5:1d: 87:0f:a7:9c:ec:88:b3:8e:5c:c6:dc:36:80:31:7c: 3b:97:ba:52:c1:b7:a6:ff:89:b5:52:98:4a:b9:be: ed:57:dd:89:10:48:fb:2e:91:b1:91:94:c1:dd:d8: d0:29:01:ed:07:f2:ae:04:0a:b8:c0:a1:f1:fd:88: a6:b7:a1:36:0d:eb:6d:c5:d1:d4:8e:5b:85:eb:a0: f1:84:be:fa:f9:16:39:3c:fd:22:de:f6:3a:6a:ab: 50:9d:85:20:fa:5c:a9:b2:c4:59:8c:fb:f4:c9:38: 64:71:d9:c2:8a:e2:99:e2:5a:bb:f4:08:e4:63:8a: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D8:F2:97:6D:9F:FA:9D:32:D4:04:EF:91:08:C1:57:5F:60:69:36 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/3djyl22f-p0y1ATvkQjBV19gaTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.113.237.0/24 Signature Algorithm: sha256WithRSAEncryption 47:65:40:7d:ff:dd:0c:f7:00:c4:a5:de:be:b3:24:a5:fe:bb: b9:18:88:a5:b7:4b:47:62:64:44:c8:b5:67:94:4b:e9:83:a8: f6:45:ad:34:5c:80:32:a4:41:51:55:01:28:57:ac:8e:ab:e0: 8e:fa:7b:c5:f4:fe:7b:5c:0b:d1:99:7f:ce:f7:25:b3:1b:20: d5:81:e4:27:d4:69:4c:07:ad:a7:2a:5c:02:0b:fc:ba:39:e9: d2:42:06:bd:ad:e7:6e:45:23:29:fb:04:93:c0:0d:d4:03:bf: e6:28:9d:65:33:59:ae:7e:c5:ab:52:df:6f:94:c9:1a:f7:af: f9:71:0a:7f:72:6b:ad:76:bd:5e:10:bb:83:86:36:a7:78:1b: 09:f8:3e:bd:a9:ec:0d:5b:5b:93:bf:91:80:ce:08:4d:2f:62: 6f:72:64:7c:92:c9:ef:af:da:d2:0f:ac:51:06:21:97:0f:b9: 25:ea:35:c9:fa:ba:d4:64:1b:9d:a4:4b:08:01:57:85:44:5d: dd:b2:d9:a1:0d:02:32:fe:7a:d3:55:5e:cc:2c:df:7c:15:ec: 2a:07:3f:d0:79:fa:3a:71:e4:17:31:1b:5e:13:65:e5:71:29: 67:d0:0e:50:c9:66:91:40:04:ce:f4:0e:f2:a8:ef:f2:69:69: ad:60:db:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OB516Pw0Q2qRvu48dxfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGQ4ZjI5NzZkOWZmYTlkMzJkNDA0ZWY5MTA4YzE1NzVmNjA2OTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo76llU0N/jtridnS/LAs1BTVVDMD aeM7ViQJBGt6Hnnj7NLfvgZ2jsMd5EIlVpH9DjYVi/AgvvAQKMB9O914ONOs6obS W2Bm3KIijFLVHegIRqQYOAOBPE9SsuMa5dd/dKV2xZ6i4Ax01gTIdI74S/LV/zXz UmP+N2o3uGItSj9/SKEz1R2HD6ec7IizjlzG3DaAMXw7l7pSwbem/4m1UphKub7t V92JEEj7LpGxkZTB3djQKQHtB/KuBAq4wKHx/Yimt6E2DettxdHUjluF66DxhL76 +RY5PP0i3vY6aqtQnYUg+lypssRZjPv0yThkcdnCiuKZ4lq79AjkY4rkCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN3Y8pdtn/qdMtQE75EIwVdfYGk2MB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvM2RqeWwyMmYtcDB5MUFUdmtRakJWMTlnYVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXHtMA0G CSqGSIb3DQEBCwUAA4IBAQBHZUB9/90M9wDEpd6+sySl/ru5GIilt0tHYmREyLVn lEvpg6j2Ra00XIAypEFRVQEoV6yOq+CO+nvF9P57XAvRmX/O9yWzGyDVgeQn1GlM B62nKlwCC/y6OenSQga9reduRSMp+wSTwA3UA7/mKJ1lM1mufsWrUt9vlMka96/5 cQp/cmutdr1eELuDhjaneBsJ+D69qewNW1uTv5GAzghNL2JvcmR8ksnvr9rSD6xR BiGXD7kl6jXJ+rrUZBudpEsIAVeFRF3dstmhDQIy/nrTVV7MLN98FewqBz/Qefo6 ceQXMRteE2XlcSln0A5QyWaRQATO9A7yqO/yaWmtYNsQ -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:12 2026 by rpki-client