This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/Q3WmyVx2hL_ulJlmWV4wBuMv3sY.roa File: Q3WmyVx2hL_ulJlmWV4wBuMv3sY.roa (raw, json) Hash identifier: qNBXvE4FodOwmoHeT/8KvY1e+YtkkhFfaz/pGiYECDk= Subject key identifier: 43:75:A6:C9:5C:76:84:BF:EE:94:99:66:59:5E:30:06:E3:2F:DE:C6 Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6 Certificate serial: 019B78A2D423F36CFA47B358EA699305DABD Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/Q3WmyVx2hL_ulJlmWV4wBuMv3sY.roa Signing time: Thu 01 Jan 2026 08:18:15 +0000 ROA not before: Thu 01 Jan 2026 08:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208905 IP address blocks: 45.80.88.0/22 maxlen: 22 45.80.88.0/23 maxlen: 23 45.80.88.0/24 maxlen: 24 45.80.89.0/24 maxlen: 24 45.80.90.0/23 maxlen: 23 45.80.90.0/24 maxlen: 24 45.80.91.0/24 maxlen: 24 78.138.56.0/23 maxlen: 23 78.138.56.0/24 maxlen: 24 78.138.57.0/24 maxlen: 24 78.138.59.0/24 maxlen: 24 78.138.60.0/24 maxlen: 24 2a0e:9cc0::/29 maxlen: 29 2a0e:9cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d4:23:f3:6c:fa:47:b3:58:ea:69:93:05:da:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6 Validity Not Before: Jan 1 08:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4375a6c95c7684bfee949966595e3006e32fdec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:bb:27:81:a7:7e:90:4c:16:b2:00:29:47: 35:5c:8e:05:c9:ea:3c:f5:34:a4:ad:9f:73:0c:1a: 1a:ac:4c:bd:9a:32:26:47:ab:41:8f:e5:11:82:0e: 7b:d4:32:e7:c3:36:75:73:50:f0:c5:e7:7d:f8:25: bd:3a:5e:bb:46:5b:33:64:d9:fb:2c:db:25:2e:c1: 3b:a7:24:46:f7:9b:d1:a1:97:b9:53:20:e9:09:21: a6:93:e2:61:3d:01:de:9c:1f:34:fd:e2:c3:af:04: f4:b9:3e:a2:91:a4:c7:0e:0a:16:1f:d0:66:5a:b7: 4c:31:cd:77:e0:bd:8c:50:0f:73:a4:ba:21:c0:50: f4:e8:b0:62:13:a5:b3:d4:4e:fd:1d:3b:bd:1e:d5: f7:48:ce:bf:6f:51:5a:a1:a8:78:4a:9e:e1:59:dc: 3a:39:e3:35:65:85:ee:2a:f6:46:86:87:19:91:b8: 6b:71:66:3e:88:65:e5:3d:2e:05:f6:0c:fb:aa:15: 5f:e9:49:2e:59:d5:79:e4:7e:a0:2a:cb:3d:ed:f6: 67:87:7a:d7:d6:84:51:5b:f9:7e:25:1b:19:d2:98: 3e:15:0e:9d:79:0f:11:b3:d5:87:f1:8e:0f:47:8a: e3:5f:03:6a:89:47:75:e1:ac:56:5e:8d:f3:f8:da: 6b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:75:A6:C9:5C:76:84:BF:EE:94:99:66:59:5E:30:06:E3:2F:DE:C6 X509v3 Authority Key Identifier: keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/Q3WmyVx2hL_ulJlmWV4wBuMv3sY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.88.0/22 78.138.56.0/23 78.138.59.0-78.138.60.255 IPv6: 2a0e:9cc0::/29 Signature Algorithm: sha256WithRSAEncryption 42:1f:cb:d7:52:ee:67:33:bf:79:b3:fe:71:23:65:1d:d1:94: c4:ea:d0:ba:7a:fc:c1:7a:b5:93:25:9a:d2:25:77:49:01:46: 65:58:3a:b2:1e:89:19:c4:3a:ff:ab:6a:b7:c7:97:50:b5:20: 0d:bc:42:7d:b5:0d:b9:f7:63:3c:19:86:69:47:69:54:95:38: f0:70:c6:85:12:65:6c:c3:37:dc:85:64:85:d0:c0:d4:ad:8a: 11:82:c0:77:88:7e:3d:f0:d5:20:b8:43:ae:cc:c3:7d:07:88: 2f:5f:e3:ec:17:f0:1d:dc:ff:65:6c:df:64:a6:89:22:f4:8c: c1:26:a8:50:59:14:90:7e:df:64:70:b7:a5:62:7b:70:4d:50: 65:7d:01:8a:ee:0b:45:0d:2d:1e:8f:ae:f3:d3:fe:47:e0:4e: 50:29:4a:bf:54:18:7d:03:69:6a:e3:f3:0a:20:38:ec:7d:bd: ea:f1:cc:51:f2:bc:2e:e5:5c:c6:77:87:07:35:a0:51:bb:a1: 98:45:ce:92:56:15:a9:fc:98:24:18:f4:2b:7c:60:06:60:97: 32:7a:3b:b1:3d:70:38:5a:ef:93:31:77:fb:de:dd:6c:5c:b3: f3:36:df:92:51:a1:9e:be:5b:61:cc:e3:cd:77:4f:21:a9:56: e1:a1:f0:a7 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt4otQj82z6R7NY6mmTBdq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNjc2YTMwMjg0ZTE0YjAyY2M2ZGRhYTAzNGU3NzU0MDZl NDYxYTYwHhcNMjYwMTAxMDgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Mzc1YTZjOTVjNzY4NGJmZWU5NDk5NjY1OTVlMzAwNmUzMmZkZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/a7J4GnfpBMFrIAKUc1XI4Fyeo8 9TSkrZ9zDBoarEy9mjImR6tBj+URgg571DLnwzZ1c1Dwxed9+CW9Ol67RlszZNn7 LNslLsE7pyRG95vRoZe5UyDpCSGmk+JhPQHenB80/eLDrwT0uT6ikaTHDgoWH9Bm WrdMMc134L2MUA9zpLohwFD06LBiE6Wz1E79HTu9HtX3SM6/b1Faoah4Sp7hWdw6 OeM1ZYXuKvZGhocZkbhrcWY+iGXlPS4F9gz7qhVf6UkuWdV55H6gKss97fZnh3rX 1oRRW/l+JRsZ0pg+FQ6deQ8Rs9WH8Y4PR4rjXwNqiUd14axWXo3z+NprPwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFEN1pslcdoS/7pSZZlleMAbjL97GMB8GA1UdIwQY MBaAFM5najAoThSwLMbdqgNOd1QG5GGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem1kcU1DaE9GTEFzeHQycUEwNTNWQWJrWWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iODYwNWEtMjEzNi00Mzg5LWE0MDUt ZWE2MDY1NzA5NDZhLzEvUTNXbXlWeDJoTF91bEpsbVdWNHdCdU12M3NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9iODYwNWEtMjEzNi00Mzg5LWE0MDUtZWE2MDY1NzA5NDZh LzEvem1kcU1DaE9GTEFzeHQycUEwNTNWQWJrWWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCLVBYAwQB Too4MAwDBABOijsDBABOijwwDQQCAAIwBwMFAyoOnMAwDQYJKoZIhvcNAQELBQAD ggEBAEIfy9dS7mczv3mz/nEjZR3RlMTq0Lp6/MF6tZMlmtIld0kBRmVYOrIeiRnE Ov+rarfHl1C1IA28Qn21Dbn3YzwZhmlHaVSVOPBwxoUSZWzDN9yFZIXQwNStihGC wHeIfj3w1SC4Q67Mw30HiC9f4+wX8B3c/2Vs32SmiSL0jMEmqFBZFJB+32Rwt6Vi e3BNUGV9AYruC0UNLR6PrvPT/kfgTlApSr9UGH0DaWrj8wogOOx9verxzFHyvC7l XMZ3hwc1oFG7oZhFzpJWFan8mCQY9Ct8YAZglzJ6O7E9cDha75Mxd/ve3Wxcs/M2 35JRoZ6+W2HM4813TyGpVuGh8Kc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:01 2026 by rpki-client