This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/g3ikyABmwYnsstzPEiwf1y3JZw4.roa File: g3ikyABmwYnsstzPEiwf1y3JZw4.roa (raw, json) Hash identifier: iV6diY2/uvF2VPragiyPeS/YOKkeG7Rg1youKOMMysY= Subject key identifier: 83:78:A4:C8:00:66:C1:89:EC:B2:DC:CF:12:2C:1F:D7:2D:C9:67:0E Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D1B782E81298308C1EC174312951 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/g3ikyABmwYnsstzPEiwf1y3JZw4.roa Signing time: Fri 02 Jan 2026 16:18:27 +0000 ROA not before: Fri 02 Jan 2026 16:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8315 IP address blocks: 145.131.0.0/20 maxlen: 20 145.131.5.0/24 maxlen: 24 145.131.16.0/20 maxlen: 20 145.131.32.0/20 maxlen: 20 2001:678:76c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d1:b7:82:e8:12:98:30:8c:1e:c1:74:31:29:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8378a4c80066c189ecb2dccf122c1fd72dc9670e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:99:67:32:b9:de:87:a9:7b:a0:1b:46:a4: 70:a4:d3:33:7a:25:08:15:e5:ae:32:19:d5:bf:a4: aa:99:62:2d:3e:51:f8:94:5f:a8:22:12:da:fa:b9: 75:ec:ff:71:02:a4:f6:df:1d:bc:26:c1:5f:02:d8: 4c:a9:be:57:29:86:ae:22:d4:ea:51:f1:92:1e:be: f2:75:03:5f:d5:60:3b:75:c7:43:9c:1f:bf:24:7a: 4b:84:e0:a1:23:8c:f7:d6:06:e7:98:22:28:c6:ae: 98:67:54:c7:bb:f9:c4:33:bb:b6:69:cb:66:2d:b0: ec:1e:4c:50:06:cc:23:8b:75:16:65:21:e9:eb:db: 06:c3:8d:62:4e:b7:f1:66:76:ef:65:34:1f:44:d0: a2:02:2b:75:c2:75:dc:0f:9d:3f:11:4d:b7:2e:b1: 21:67:51:5b:93:cf:99:d2:f4:cb:5f:7c:14:19:f1: a9:7a:c2:2f:68:20:4a:1b:53:3a:cb:d4:bd:a2:7a: 87:cd:d4:d5:96:f6:b9:d5:4d:61:ff:1d:32:73:ee: 5b:05:54:5c:29:0f:8a:bd:39:d5:3e:e3:de:9a:81: b0:7d:8e:b9:cf:41:67:e3:6e:27:b8:c0:ec:3a:d9: 96:56:27:1f:7d:0d:1a:61:4d:96:e3:be:22:46:a4: a5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:78:A4:C8:00:66:C1:89:EC:B2:DC:CF:12:2C:1F:D7:2D:C9:67:0E X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/g3ikyABmwYnsstzPEiwf1y3JZw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.131.0.0-145.131.47.255 IPv6: 2001:678:76c::/48 Signature Algorithm: sha256WithRSAEncryption 39:2e:0a:26:5e:90:55:59:f6:58:fe:c1:5a:84:56:9a:c6:ab: 84:64:8c:c0:c6:eb:24:34:87:a2:db:ea:83:32:bc:a7:b1:2a: 98:b9:38:05:81:94:98:65:69:b9:11:e2:11:60:2e:17:c7:ad: c4:6c:42:a9:25:f8:37:c9:04:44:ba:81:6b:8b:b1:26:60:68: 82:c7:de:d1:72:e6:e2:62:84:34:34:4b:2f:a8:03:92:6d:53: 47:ce:4f:ee:27:5b:dd:8c:9d:75:c8:f0:d7:17:d4:8e:e1:a6: 4f:9b:fc:e3:a0:6e:0f:78:46:43:9b:07:37:98:25:c9:93:94: 86:71:b8:05:0d:93:24:87:c8:50:c3:bd:82:f6:c4:e1:0a:b9: 98:a2:da:18:99:e0:f3:0a:7c:54:33:d6:15:d6:f6:2c:57:25: 60:18:dc:29:a7:98:cb:c0:e6:1a:ed:3e:aa:65:88:16:42:d3: f4:29:dc:07:9e:de:a2:8f:03:ee:56:19:cb:2c:77:a5:4d:a3: ff:11:24:96:42:ab:5f:b4:e3:ea:d1:b4:22:6d:82:a1:1a:4e: f1:b6:48:ad:cc:13:fc:e9:d1:2a:e6:15:96:ac:43:d5:58:83: d0:60:d7:22:2b:1a:6c:26:2c:49:0b:db:7c:ae:e4:7c:56:f6: 25:a4:78:46 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/gNG3gugSmDCMHsF0MSlRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzc4YTRjODAwNjZjMTg5ZWNiMmRjY2YxMjJjMWZkNzJkYzk2NzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOaZZzK53oepe6AbRqRwpNMzeiUI FeWuMhnVv6SqmWItPlH4lF+oIhLa+rl17P9xAqT23x28JsFfAthMqb5XKYauItTq UfGSHr7ydQNf1WA7dcdDnB+/JHpLhOChI4z31gbnmCIoxq6YZ1THu/nEM7u2actm LbDsHkxQBswji3UWZSHp69sGw41iTrfxZnbvZTQfRNCiAit1wnXcD50/EU23LrEh Z1Fbk8+Z0vTLX3wUGfGpesIvaCBKG1M6y9S9onqHzdTVlva51U1h/x0yc+5bBVRc KQ+KvTnVPuPemoGwfY65z0Fn424nuMDsOtmWVicffQ0aYU2W474iRqSlcQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIN4pMgAZsGJ7LLczxIsH9ctyWcOMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvZzNpa3lBQm13WW5zc3R6UEVpd2YxeTNKWnc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjATBAIAATANMAsDAwCRgwME BJGDIDAPBAIAAjAJAwcAIAEGeAdsMA0GCSqGSIb3DQEBCwUAA4IBAQA5LgomXpBV WfZY/sFahFaaxquEZIzAxuskNIei2+qDMrynsSqYuTgFgZSYZWm5EeIRYC4Xx63E bEKpJfg3yQREuoFri7EmYGiCx97RcubiYoQ0NEsvqAOSbVNHzk/uJ1vdjJ11yPDX F9SO4aZPm/zjoG4PeEZDmwc3mCXJk5SGcbgFDZMkh8hQw72C9sThCrmYotoYmeDz CnxUM9YV1vYsVyVgGNwpp5jLwOYa7T6qZYgWQtP0KdwHnt6ijwPuVhnLLHelTaP/ ESSWQqtftOPq0bQibYKhGk7xtkitzBP86dEq5hWWrEPVWIPQYNciKxpsJixJC9t8 ruR8VvYlpHhG -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:35 2026 by rpki-client