This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa File: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (raw, json) Hash identifier: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8= Subject key identifier: DE:11:19:5B:22:2D:BB:2F:5D:C0:0B:73:99:9F:80:15:62:E1:4F:9C Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508 Certificate serial: 019B7E387A00D0A6276B39D1ED9AC885D7C4 Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa Signing time: Fri 02 Jan 2026 10:19:48 +0000 ROA not before: Fri 02 Jan 2026 10:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51812 IP address blocks: 46.148.48.0/20 maxlen: 20 46.148.48.0/23 maxlen: 23 46.148.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7a:00:d0:a6:27:6b:39:d1:ed:9a:c8:85:d7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de11195b222dbb2f5dc00b73999f801562e14f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:ba:a6:ba:a4:9a:c1:3d:a9:f0:92:14:69: 1e:4e:5b:ad:14:ba:92:b6:75:8e:6b:79:cc:db:5e: 3c:c5:d9:a0:5f:fd:ad:9f:0e:17:73:54:c7:c6:6d: 3d:99:66:5c:a1:ad:e6:a9:36:71:d6:76:35:ba:4a: 36:68:b2:ec:74:10:e0:43:79:9c:e9:c7:19:ea:85: 4a:77:0b:21:b9:28:38:7e:ae:bc:36:1d:a7:fc:66: 63:96:a9:61:9b:24:12:31:24:bd:f1:5f:90:f9:4c: 38:b6:da:33:2c:37:82:7b:03:47:69:21:80:db:97: 18:64:8d:98:ce:09:58:cd:eb:63:63:75:8a:02:9b: 6d:fc:1a:79:92:9e:f7:9c:29:61:68:87:d6:92:eb: 27:33:f3:a6:0d:8b:5d:ac:e4:f2:ce:73:52:c2:bf: 3c:54:28:6c:23:07:e1:42:ac:22:7d:b3:32:26:4e: 5a:e0:80:11:b5:75:8c:73:ff:95:f8:5f:a4:4f:9a: 8f:1d:b6:61:e2:52:08:09:d2:26:9c:a7:a5:89:39: 4e:37:57:a9:29:92:8e:9e:0e:45:a5:71:45:49:dc: 52:7f:ea:a5:ff:b1:fe:aa:8b:19:ac:04:6a:5c:41: 96:af:37:ee:cc:88:fa:9c:98:fa:35:fb:63:3b:66: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:11:19:5B:22:2D:BB:2F:5D:C0:0B:73:99:9F:80:15:62:E1:4F:9C X509v3 Authority Key Identifier: keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.48.0/20 Signature Algorithm: sha256WithRSAEncryption 93:19:e7:ee:53:f6:c5:0f:fd:45:f4:3d:24:93:f5:2a:5b:85: 28:3c:e1:69:4e:f4:1b:07:b3:68:e6:59:14:44:e2:3e:22:88: 0e:87:71:4d:9a:18:13:74:7f:e3:13:fd:20:78:cb:46:ee:f8: 00:5b:33:69:28:dd:9f:d3:8b:2e:1c:8b:4a:ee:62:ce:6a:bc: f5:15:6d:7f:5e:68:c2:7c:3a:92:31:0f:22:c7:47:20:8f:a2: 19:b0:fd:f9:3b:13:bd:e0:9c:1c:2b:de:bc:4e:0f:48:57:4b: f0:3a:75:bc:11:7f:b1:1c:b7:a6:35:69:c1:d4:cb:25:37:f0: 22:3a:ce:b8:fc:82:3c:89:7e:f1:ed:86:2b:5f:8b:d6:8b:33: 16:04:20:80:88:e3:65:01:3f:37:ba:76:fa:be:ae:00:39:23: b4:ee:49:3f:59:0e:0d:79:12:8e:f7:c4:13:18:b8:98:03:8e: c9:cc:ca:8c:d5:df:66:ce:6b:0a:3c:11:90:be:bb:8b:8b:41: b2:e5:8b:45:52:11:82:04:cd:40:44:44:4b:da:82:5e:db:89: 55:b7:18:bb:b5:b4:4c:69:c4:b2:80:89:f2:ed:f9:d3:1f:76: f6:eb:65:d0:a9:be:fc:67:9d:76:e9:96:bf:07:12:b7:92:c1: be:b8:21:09 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OHoA0KYnaznR7ZrIhdfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDMyOTY4YWFhYTkxOWM1Mjc5MWZmYjA3ZjkzNDM2Yjc0 ZmQ1MDgwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTExMTk1YjIyMmRiYjJmNWRjMDBiNzM5OTlmODAxNTYyZTE0ZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvm6prqkmsE9qfCSFGkeTlutFLqS tnWOa3nM2148xdmgX/2tnw4Xc1THxm09mWZcoa3mqTZx1nY1uko2aLLsdBDgQ3mc 6ccZ6oVKdwshuSg4fq68Nh2n/GZjlqlhmyQSMSS98V+Q+Uw4ttozLDeCewNHaSGA 25cYZI2YzglYzetjY3WKAptt/Bp5kp73nClhaIfWkusnM/OmDYtdrOTyznNSwr88 VChsIwfhQqwifbMyJk5a4IARtXWMc/+V+F+kT5qPHbZh4lIICdImnKeliTlON1ep KZKOng5FpXFFSdxSf+ql/7H+qosZrARqXEGWrzfuzIj6nJj6NftjO2ZpjwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFN4RGVsiLbsvXcALc5mfgBVi4U+cMB8GA1UdIwQY MBaAFPvTKWiqqpGcUnkf+wf5NDa3T9UIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05TXBhS3Fxa1p4U2VSXzdCX2swTnJkUDFRZy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFh LTg4NzM5ZTMzNTA1My8xLzNoRVpXeUl0dXk5ZHdBdHptWi1BRldMaFQ1dy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFhLTg4NzM5ZTMzNTA1 My8xLzEtOU1wYUtxcWtaeFNlUl83Ql9rME5yZFAxUWcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQulDAw DQYJKoZIhvcNAQELBQADggEBAJMZ5+5T9sUP/UX0PSST9SpbhSg84WlO9BsHs2jm WRRE4j4iiA6HcU2aGBN0f+MT/SB4y0bu+ABbM2ko3Z/Tiy4ci0ruYs5qvPUVbX9e aMJ8OpIxDyLHRyCPohmw/fk7E73gnBwr3rxOD0hXS/A6dbwRf7Ect6Y1acHUyyU3 8CI6zrj8gjyJfvHthitfi9aLMxYEIICI42UBPze6dvq+rgA5I7TuST9ZDg15Eo73 xBMYuJgDjsnMyozV32bOawo8EZC+u4uLQbLli0VSEYIEzUBEREvagl7biVW3GLu1 tExpxLKAifLt+dMfdvbrZdCpvvxnnXbplr8HEreSwb64IQk= -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:16 2026 by rpki-client