This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/X3ZQenpvE8l1hGo8jarjWIZlEHg.roa File: X3ZQenpvE8l1hGo8jarjWIZlEHg.roa (raw, json) Hash identifier: z2dHWQocjAT7eQBvB40EN/2l3Ks2v71LcjzkY2camiw= Subject key identifier: 5F:76:50:7A:7A:6F:13:C9:75:84:6A:3C:8D:AA:E3:58:86:65:10:78 Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91 Certificate serial: 019B7DC92B0D13BBE87DC1A92515D713D439 Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/X3ZQenpvE8l1hGo8jarjWIZlEHg.roa Signing time: Fri 02 Jan 2026 08:18:14 +0000 ROA not before: Fri 02 Jan 2026 08:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61361 IP address blocks: 45.80.0.0/22 maxlen: 22 2a0e:3780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:2b:0d:13:bb:e8:7d:c1:a9:25:15:d7:13:d4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91 Validity Not Before: Jan 2 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f76507a7a6f13c975846a3c8daae35886651078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c9:1e:ff:ff:6a:88:5a:8f:61:9f:78:8a:cd: a4:7a:7b:21:af:f9:4c:4f:f7:1b:2a:c4:98:91:24: 71:5b:9d:42:df:d4:da:9f:7e:df:b7:d1:be:b4:41: ee:cb:66:ea:17:59:40:c8:f0:da:e2:ca:49:5a:e7: 3a:84:61:a3:9d:16:d8:f7:22:75:91:fb:12:62:a4: 46:fa:da:61:c5:59:84:f8:0a:70:39:bb:ad:18:72: 39:9d:c5:c0:6d:d6:2e:79:6f:6a:5a:25:b2:b2:2f: d6:ef:0f:ca:25:3d:1e:24:26:58:ba:e2:5b:bb:68: 76:ca:5b:41:8e:46:89:2d:7d:43:9e:a9:87:ff:c3: 41:88:47:26:49:22:bd:a9:89:70:d0:b9:d8:5e:c5: 4b:50:a2:2c:8d:8c:03:01:af:6f:50:16:13:1e:19: 38:25:f1:aa:ea:72:3e:c2:fb:ad:dc:59:09:c0:50: 62:ef:2f:86:36:f3:cf:50:f1:76:ab:3c:e8:c8:91: 9b:de:ea:dc:43:19:f8:ac:5f:1d:ec:23:58:9c:84: aa:e8:40:43:1e:62:ee:4c:f1:cd:38:de:2a:56:c2: cd:2d:7e:ab:52:13:1c:dc:81:3e:a0:9a:d3:67:4f: ca:98:8e:64:2b:96:13:40:4e:45:32:0a:53:bc:65: 19:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:76:50:7A:7A:6F:13:C9:75:84:6A:3C:8D:AA:E3:58:86:65:10:78 X509v3 Authority Key Identifier: keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/X3ZQenpvE8l1hGo8jarjWIZlEHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.0.0/22 IPv6: 2a0e:3780::/29 Signature Algorithm: sha256WithRSAEncryption 6c:6b:e4:5a:b3:9d:fc:99:84:88:7d:13:e3:a0:1c:ad:4a:e4: 44:8c:85:f5:c8:61:62:80:1a:21:b8:8f:56:e4:9f:05:e0:9a: ca:3e:27:2d:56:bf:8f:11:91:24:1c:d0:70:31:44:2b:d3:61: 4c:8e:f9:ac:9b:3f:34:00:0f:eb:63:17:7d:d9:f4:58:30:f4: 66:5a:17:f9:5e:f3:17:f9:16:37:70:23:dc:99:99:65:dc:f3: bd:39:0b:d0:0f:8a:0b:30:2c:ec:2f:2b:52:d7:27:57:5b:7d: 11:23:ed:bf:4b:86:bd:8c:b8:e7:89:62:c5:24:68:61:95:a5: 90:93:e2:0f:82:b9:8e:79:5a:a5:ba:b9:87:45:9c:df:4c:d0: f6:83:e9:1f:5f:ab:8a:1a:ab:fb:fb:75:d5:ae:fe:6f:52:b5: 98:11:17:34:44:b2:63:72:b6:7e:11:1c:bf:a2:5d:f2:50:18: 94:a5:11:4f:ea:66:2f:34:cf:26:d5:62:7a:e3:43:25:7e:da: 20:72:18:c7:16:bf:9f:8f:08:24:ff:32:6e:29:da:6b:c9:7b: 61:eb:bf:0a:95:3b:19:af:7b:dc:5a:bd:0b:35:71:ba:b8:82: a4:00:d4:39:0a:5f:a8:0f:21:01:21:7a:af:2c:76:5f:bd:81: cc:c6:42:35 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ySsNE7vofcGpJRXXE9Q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw MjhlOTEwHhcNMjYwMTAyMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Zjc2NTA3YTdhNmYxM2M5NzU4NDZhM2M4ZGFhZTM1ODg2NjUxMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ske//9qiFqPYZ94is2kenshr/lM T/cbKsSYkSRxW51C39Tan37ft9G+tEHuy2bqF1lAyPDa4spJWuc6hGGjnRbY9yJ1 kfsSYqRG+tphxVmE+ApwObutGHI5ncXAbdYueW9qWiWysi/W7w/KJT0eJCZYuuJb u2h2yltBjkaJLX1DnqmH/8NBiEcmSSK9qYlw0LnYXsVLUKIsjYwDAa9vUBYTHhk4 JfGq6nI+wvut3FkJwFBi7y+GNvPPUPF2qzzoyJGb3urcQxn4rF8d7CNYnISq6EBD HmLuTPHNON4qVsLNLX6rUhMc3IE+oJrTZ0/KmI5kK5YTQE5FMgpTvGUZxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFF92UHp6bxPJdYRqPI2q41iGZRB4MB8GA1UdIwQY MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt ODg1NGM4MmI1NDVkLzEvWDNaUWVucHZFOGwxaEdvOGphcmpXSVpsRUhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVAAMA0E AgACMAcDBQMqDjeAMA0GCSqGSIb3DQEBCwUAA4IBAQBsa+Ras538mYSIfRPjoByt SuREjIX1yGFigBohuI9W5J8F4JrKPictVr+PEZEkHNBwMUQr02FMjvmsmz80AA/r Yxd92fRYMPRmWhf5XvMX+RY3cCPcmZll3PO9OQvQD4oLMCzsLytS1ydXW30RI+2/ S4a9jLjniWLFJGhhlaWQk+IPgrmOeVqlurmHRZzfTND2g+kfX6uKGqv7+3XVrv5v UrWYERc0RLJjcrZ+ERy/ol3yUBiUpRFP6mYvNM8m1WJ640MlftogchjHFr+fjwgk /zJuKdpryXth678KlTsZr3vcWr0LNXG6uIKkANQ5Cl+oDyEBIXqvLHZfvYHMxkI1 -----END CERTIFICATE-----Generated at Mon Jan 26 12:27:03 2026 by rpki-client