This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/wQ__3mS7AnuqJ-EruyFAAIOStfU.roa File: wQ__3mS7AnuqJ-EruyFAAIOStfU.roa (raw, json) Hash identifier: bg7mzla/XbjHEcTtbDSzPbOrSMtA7vkNn21Gj+YjuwE= Subject key identifier: C1:0F:FF:DE:64:BB:02:7B:AA:27:E1:2B:BB:21:40:00:83:92:B5:F5 Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37 Certificate serial: 019B7834CBF93B44E30401E43C949A07158B Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/wQ__3mS7AnuqJ-EruyFAAIOStfU.roa Signing time: Thu 01 Jan 2026 06:18:04 +0000 ROA not before: Thu 01 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42298 IP address blocks: 45.67.73.0/24 maxlen: 24 45.67.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:cb:f9:3b:44:e3:04:01:e4:3c:94:9a:07:15:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37 Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c10fffde64bb027baa27e12bbb2140008392b5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:8c:21:3d:6f:e4:39:02:e4:22:bf:43:56: 90:f1:40:63:39:da:78:de:62:76:b6:19:e2:7f:f2: 99:87:14:a8:bf:96:f9:bd:94:25:c1:a4:a9:0c:44: 2b:e8:31:64:4c:23:fa:ef:b9:a4:a0:2c:17:08:4e: e3:ff:1d:ef:a9:30:68:24:8c:59:1c:4d:cb:5f:40: 50:97:43:ff:6b:b8:a3:2b:2f:74:74:06:cb:1a:6b: ae:6c:98:91:11:ce:7a:89:7b:ca:47:d6:75:8a:48: ec:8a:0c:55:04:8e:16:42:cb:4e:68:22:bd:df:02: 02:1d:f7:ea:b3:fb:6a:0d:48:b7:a6:b0:2a:e2:02: 3a:60:2a:11:d4:e7:fd:d5:94:f5:a6:ad:0e:a5:e7: 09:f8:3d:54:e4:69:8b:b0:b6:63:26:3b:59:61:9a: 9a:29:63:63:b6:b5:7d:e6:fa:e0:4b:ed:8c:d1:1f: 06:d0:c0:49:0f:4e:3a:21:db:2b:24:84:b0:dc:76: fe:17:44:5f:ba:53:e2:29:90:9a:d3:7e:ff:eb:89: 15:ff:4c:20:0a:a9:c3:20:2a:5a:c2:fd:06:57:05: 3f:e5:4f:cc:e1:8f:ea:9a:bd:47:b1:f7:e5:8c:13: f9:4f:c5:51:c8:ec:c6:98:70:95:60:16:6e:38:46: 01:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0F:FF:DE:64:BB:02:7B:AA:27:E1:2B:BB:21:40:00:83:92:B5:F5 X509v3 Authority Key Identifier: keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/wQ__3mS7AnuqJ-EruyFAAIOStfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.73.0/24 45.67.75.0/24 Signature Algorithm: sha256WithRSAEncryption 48:20:af:72:5f:c2:e2:a2:14:42:fc:13:a8:39:c6:2e:96:e5: 05:8a:27:7f:c4:24:df:e5:48:49:03:ff:12:72:15:5a:af:0e: b7:be:59:e8:29:ce:40:f8:d0:19:08:9b:eb:b0:6d:41:58:93: e9:96:49:e7:02:b0:9c:4b:29:4d:13:16:2f:dc:1c:5e:94:31: 19:0c:1d:b9:f9:e7:8e:36:bb:19:48:fa:70:56:3c:38:87:45: 9e:b1:78:e5:14:8e:68:13:88:2b:1b:b3:f9:d0:b1:cb:2c:1e: 30:ac:6b:c2:77:2c:a6:29:b7:fd:c1:7b:a0:8c:4f:4d:03:ed: 67:c7:2b:80:07:5b:3c:6e:3e:8f:3c:d6:3e:66:31:4d:25:be: 35:3c:7a:9e:25:4a:11:86:ab:f5:ab:0f:b8:f0:29:e0:c3:17: 49:cc:15:7b:a9:88:d2:f6:7f:31:92:da:91:04:2e:e2:07:10: 0c:4d:03:1e:64:76:2f:35:79:77:d1:d6:87:df:da:0e:3b:37: 2e:04:b9:68:df:dc:b7:cb:5c:28:04:b8:fa:27:90:7c:ad:0d: eb:b5:0d:c5:49:7b:94:dc:66:ba:f3:5d:a7:ca:5b:6d:1c:8e: d0:59:4a:a7:f8:d2:a4:c3:35:84:e8:16:89:23:85:d0:5c:81: 90:ce:ae:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NMv5O0TjBAHkPJSaBxWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODcyODI2ZmNlMDJiZDk0ODVlZjI3NjY0MWQyYjU4NGY1 OTliMzcwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTBmZmZkZTY0YmIwMjdiYWEyN2UxMmJiYjIxNDAwMDgzOTJiNWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFqMIT1v5DkC5CK/Q1aQ8UBjOdp4 3mJ2thnif/KZhxSov5b5vZQlwaSpDEQr6DFkTCP677mkoCwXCE7j/x3vqTBoJIxZ HE3LX0BQl0P/a7ijKy90dAbLGmuubJiREc56iXvKR9Z1ikjsigxVBI4WQstOaCK9 3wICHffqs/tqDUi3prAq4gI6YCoR1Of91ZT1pq0OpecJ+D1U5GmLsLZjJjtZYZqa KWNjtrV95vrgS+2M0R8G0MBJD046IdsrJISw3Hb+F0RfulPiKZCa037/64kV/0wg CqnDICpawv0GVwU/5U/M4Y/qmr1HsffljBP5T8VRyOzGmHCVYBZuOEYBWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMEP/95kuwJ7qifhK7shQACDkrX1MB8GA1UdIwQY MBaAFC6HKCb84CvZSF7ydmQdK1hPWZs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0Yzct MjRjNzliMWNiNGRhLzEvd1FfXzNtUzdBbnVxSi1FcnV5RkFBSU9TdGZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xYmNlZjQtMTMxZC00ZGI1LTk0YzctMjRjNzliMWNiNGRh LzEvTG9jb0p2emdLOWxJWHZKMlpCMHJXRTlabXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALUNJAwQA LUNLMA0GCSqGSIb3DQEBCwUAA4IBAQBIIK9yX8LiohRC/BOoOcYuluUFiid/xCTf 5UhJA/8SchVarw63vlnoKc5A+NAZCJvrsG1BWJPplknnArCcSylNExYv3BxelDEZ DB25+eeONrsZSPpwVjw4h0WesXjlFI5oE4grG7P50LHLLB4wrGvCdyymKbf9wXug jE9NA+1nxyuAB1s8bj6PPNY+ZjFNJb41PHqeJUoRhqv1qw+48CngwxdJzBV7qYjS 9n8xktqRBC7iBxAMTQMeZHYvNXl30daH39oOOzcuBLlo39y3y1woBLj6J5B8rQ3r tQ3FSXuU3Ga6812nylttHI7QWUqn+NKkwzWE6BaJI4XQXIGQzq6n -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:45 2026 by rpki-client