This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/3t-GXOdyV_PVMNEPLKodiUSllwY.roa File: 3t-GXOdyV_PVMNEPLKodiUSllwY.roa (raw, json) Hash identifier: 5QAO17Sat5Y/Glt4R9uCsMNGet80URNof1X9giYNv40= Subject key identifier: DE:DF:86:5C:E7:72:57:F3:D5:30:D1:0F:2C:AA:1D:89:44:A5:97:06 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B78345B6BC7BC4C98AC9DF2DDCC189DAC Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/3t-GXOdyV_PVMNEPLKodiUSllwY.roa Signing time: Thu 01 Jan 2026 06:17:35 +0000 ROA not before: Thu 01 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212512 IP address blocks: 45.82.76.0/22 maxlen: 24 45.131.155.0/24 maxlen: 24 88.218.193.0/24 maxlen: 24 185.207.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5b:6b:c7:bc:4c:98:ac:9d:f2:dd:cc:18:9d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dedf865ce77257f3d530d10f2caa1d8944a59706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e6:6d:ed:3d:83:88:28:36:13:a3:12:2f:9d: 1d:7a:70:f1:fe:37:ef:54:05:32:52:18:ad:28:c7: 99:da:b1:12:5d:06:b4:02:d4:64:ef:95:cc:87:0a: 65:e5:94:2f:77:9d:bb:c3:b4:87:70:53:41:a7:cd: 3c:95:1a:d8:0a:cc:fb:ed:43:31:1c:5e:16:56:a1: 55:48:d1:80:a6:ea:c6:bd:bf:12:c8:a6:ca:e7:e7: f3:a7:ed:2d:57:7f:5c:ef:72:be:ef:b2:50:8d:44: 1a:6a:8c:dc:19:f5:d0:f1:b2:2c:79:0e:2a:a7:97: 8a:ad:42:a3:4d:6b:15:1d:e5:3d:d4:1b:d7:71:7f: 5c:1a:c9:6e:5f:ae:e1:0f:5a:bb:62:31:b6:c7:b7: 60:d6:76:ce:e3:57:25:07:aa:62:71:44:03:9e:81: 02:d2:f3:c2:1e:c5:9d:4c:70:81:4c:86:f0:66:37: 4e:46:14:be:5f:d3:53:dc:1e:81:79:31:52:ac:ea: c8:ae:02:a8:37:c3:c1:6e:6c:25:98:92:eb:e2:51: e1:fe:e2:35:c0:6b:f1:8a:16:cd:36:46:72:84:94: 48:f1:ff:ba:ca:d2:5b:5d:f7:36:ae:a7:08:e7:e8: ac:1e:62:88:44:78:b6:2b:31:11:a5:67:f2:0d:c3: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DF:86:5C:E7:72:57:F3:D5:30:D1:0F:2C:AA:1D:89:44:A5:97:06 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/3t-GXOdyV_PVMNEPLKodiUSllwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.76.0/22 45.131.155.0/24 88.218.193.0/24 185.207.153.0/24 Signature Algorithm: sha256WithRSAEncryption 90:1f:cf:c4:47:24:bf:b0:dc:f9:e1:93:ef:f6:00:1a:0b:4e: ea:82:60:2b:dc:bd:b0:f1:8a:7f:91:c1:3e:18:0f:82:7d:e0: 60:b0:1c:13:f2:6e:0f:2c:5c:8a:d4:01:5c:f4:13:37:f2:db: 7d:c2:c2:03:39:f5:6d:97:50:20:5f:f7:80:43:d8:70:cd:a3: 0d:5f:8d:cd:1b:16:83:87:5a:07:1b:e7:37:dd:8f:3c:b9:23: f6:2e:bc:ae:b4:00:10:d5:30:2f:cb:0f:62:8b:62:6d:e2:30: b0:16:63:c5:47:39:2d:c5:a8:60:b6:b1:22:aa:46:ed:b0:f5: e4:df:1e:70:ea:07:33:98:3a:e4:8d:4a:85:d7:b7:ce:cf:b3: d0:b6:e7:8f:84:76:32:e5:61:5a:fd:af:0b:89:89:63:65:17: ec:7d:1a:69:46:2a:b8:2c:00:6e:f8:41:e9:b6:c7:3e:14:25: 93:1b:8e:db:fb:4a:7b:2e:b5:70:ef:c3:78:8a:8e:d7:75:c9: 75:20:24:1f:43:27:74:81:fa:2f:6b:c8:b1:9c:47:af:1d:f3: 5c:e1:0d:c0:c7:55:c9:98:1d:1c:e4:c9:18:87:20:3c:c8:b6: a6:25:a8:e1:d5:8a:e4:af:1e:2b:a1:38:e4:6d:91:24:ed:02: 71:00:d2:bd -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NFtrx7xMmKyd8t3MGJ2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWRmODY1Y2U3NzI1N2YzZDUzMGQxMGYyY2FhMWQ4OTQ0YTU5NzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeZt7T2DiCg2E6MSL50denDx/jfv VAUyUhitKMeZ2rESXQa0AtRk75XMhwpl5ZQvd527w7SHcFNBp808lRrYCsz77UMx HF4WVqFVSNGApurGvb8SyKbK5+fzp+0tV39c73K+77JQjUQaaozcGfXQ8bIseQ4q p5eKrUKjTWsVHeU91BvXcX9cGsluX67hD1q7YjG2x7dg1nbO41clB6picUQDnoEC 0vPCHsWdTHCBTIbwZjdORhS+X9NT3B6BeTFSrOrIrgKoN8PBbmwlmJLr4lHh/uI1 wGvxihbNNkZyhJRI8f+6ytJbXfc2rqcI5+isHmKIRHi2KzERpWfyDcOVGQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFN7fhlznclfz1TDRDyyqHYlEpZcGMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvM3QtR1hPZHlWX1BWTU5FUExLb2RpVVNsbHdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLVJMAwQA LYObAwQAWNrBAwQAuc+ZMA0GCSqGSIb3DQEBCwUAA4IBAQCQH8/ERyS/sNz54ZPv 9gAaC07qgmAr3L2w8Yp/kcE+GA+CfeBgsBwT8m4PLFyK1AFc9BM38tt9wsIDOfVt l1AgX/eAQ9hwzaMNX43NGxaDh1oHG+c33Y88uSP2LryutAAQ1TAvyw9ii2Jt4jCw FmPFRzktxahgtrEiqkbtsPXk3x5w6gczmDrkjUqF17fOz7PQtuePhHYy5WFa/a8L iYljZRfsfRppRiq4LABu+EHptsc+FCWTG47b+0p7LrVw78N4io7Xdcl1ICQfQyd0 gfova8ixnEevHfNc4Q3Ax1XJmB0c5MkYhyA8yLamJajh1Yrkrx4roTjkbZEk7QJx ANK9 -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:17 2026 by rpki-client