This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/3BwNdrkKQij3iLju6BrO2elKEDU.roa File: 3BwNdrkKQij3iLju6BrO2elKEDU.roa (raw, json) Hash identifier: LD2RApU9Hl8o4t7NiDLxpiWcrV4cz6X7zWjatkLQRSA= Subject key identifier: DC:1C:0D:76:B9:0A:42:28:F7:88:B8:EE:E8:1A:CE:D9:E9:4A:10:35 Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43 Certificate serial: 019B7C12E220BD64A356A9777131C6F28CE7 Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/3BwNdrkKQij3iLju6BrO2elKEDU.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29014 IP address blocks: 45.139.156.0/22 maxlen: 24 45.139.158.0/23 maxlen: 23 85.158.0.0/22 maxlen: 24 85.158.0.0/24 maxlen: 24 85.158.4.0/23 maxlen: 23 85.158.6.0/24 maxlen: 24 85.158.7.0/24 maxlen: 24 93.92.128.0/21 maxlen: 24 93.92.128.0/23 maxlen: 23 93.92.130.0/23 maxlen: 23 93.92.132.0/24 maxlen: 24 93.92.133.0/24 maxlen: 24 93.92.134.0/23 maxlen: 23 185.8.8.0/22 maxlen: 24 185.8.8.0/24 maxlen: 24 192.42.65.0/24 maxlen: 24 193.41.116.0/23 maxlen: 24 194.126.239.0/24 maxlen: 24 195.177.232.0/23 maxlen: 24 195.177.233.0/24 maxlen: 24 2a00:12e8::/32 maxlen: 40 2a00:12e8::/40 maxlen: 40 2a00:12e8:100::/40 maxlen: 40 2a00:12e8:200::/40 maxlen: 40 2a00:12e8:300::/40 maxlen: 40 2a00:12e8:400::/40 maxlen: 40 2a00:12e8:500::/40 maxlen: 40 2a00:12e8:600::/40 maxlen: 40 2a00:12e8:700::/40 maxlen: 40 2a00:12e8:800::/40 maxlen: 48 2a00:12e8:800::/48 maxlen: 48 2a00:12e8:801::/48 maxlen: 48 2a00:12e8:802::/48 maxlen: 48 2a00:12e8:900::/40 maxlen: 40 2a00:12e8:f111::/48 maxlen: 48 2a00:12e8:f122::/48 maxlen: 48 2a00:12e8:f123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e2:20:bd:64:a3:56:a9:77:71:31:c6:f2:8c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43 Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc1c0d76b90a4228f788b8eee81aced9e94a1035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:55:b7:79:d3:84:4d:2a:36:60:be:db:36:1e: 55:dc:d8:11:a0:c6:75:78:36:a3:97:07:db:1f:d1: a2:bf:15:49:48:7e:bf:79:e6:90:49:51:bd:6b:32: b4:65:da:5e:08:f2:2b:f1:36:a9:11:22:e9:12:45: 99:22:dd:c5:69:01:4c:19:4f:b0:d4:e0:6b:ec:11: 96:75:72:ae:c8:b0:a1:27:4e:26:e1:d3:bd:d8:59: b8:bc:3a:ba:54:eb:8d:cc:84:55:7e:86:07:1e:d6: a9:4b:2d:06:1d:64:f1:89:5d:54:73:98:d9:f2:39: 5b:3c:1c:05:c4:32:67:11:56:95:a0:7c:39:bf:a6: 26:40:95:8c:22:f0:ca:a7:f6:84:34:a5:22:97:38: ed:21:a8:e9:0f:b2:77:14:c3:ef:b3:d9:62:9c:94: 2a:8c:94:e8:ad:9c:82:68:88:ca:66:89:1c:f6:e4: 4f:a8:17:94:20:7c:77:f1:83:e3:c6:90:78:1d:4b: 5c:78:84:ab:55:dd:15:0b:af:35:84:72:35:e4:4f: 7c:f4:24:18:c3:63:5d:24:63:3c:09:9f:95:18:9d: 0d:0e:fd:07:0a:88:a8:a4:fb:bf:26:91:64:bf:47: 15:e7:f8:9b:7a:00:4e:ff:08:d5:41:19:aa:86:22: 9a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1C:0D:76:B9:0A:42:28:F7:88:B8:EE:E8:1A:CE:D9:E9:4A:10:35 X509v3 Authority Key Identifier: keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/3BwNdrkKQij3iLju6BrO2elKEDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.156.0/22 85.158.0.0/21 93.92.128.0/21 185.8.8.0/22 192.42.65.0/24 193.41.116.0/23 194.126.239.0/24 195.177.232.0/23 IPv6: 2a00:12e8::/32 Signature Algorithm: sha256WithRSAEncryption 8d:0f:cd:fd:40:8b:cd:0c:16:4a:d8:b5:1c:81:e8:38:ff:1d: 5b:f7:d0:87:93:c8:d1:9d:30:ca:de:84:9e:f3:ed:c6:30:0b: 7f:86:7c:9a:69:9d:28:e5:18:4a:75:2e:a7:d1:7e:47:1a:41: 01:ed:47:8d:f3:7d:67:b0:b3:5c:a3:b2:e0:4b:f8:c6:ef:f4: 51:c3:c1:a4:6f:d9:99:fa:c3:e3:1c:64:7e:02:32:60:1b:33: 9d:e1:1c:12:d5:87:14:02:46:a3:c6:76:70:ac:44:ac:bc:75: 47:3f:ca:a0:9e:56:b5:40:06:36:2f:89:fa:36:c7:63:fa:02: 28:b8:77:78:5d:03:c9:b7:d2:00:98:64:d4:f7:db:f3:5d:6e: ac:35:c0:ce:af:a0:86:26:d7:c9:db:cb:43:60:34:77:f4:b9: 0f:3c:6d:d5:97:50:cd:06:fb:d5:17:ed:51:37:6e:c8:e3:7d: 7c:84:51:81:ef:a1:57:25:42:28:dc:e9:26:cf:82:90:c9:11: 94:5b:18:d4:d9:9f:c6:68:1e:b0:36:64:76:11:ac:ba:74:78: 96:ae:88:ac:a4:e5:56:f0:72:07:9a:82:0f:c6:db:17:ca:98: e8:9c:9b:4f:3a:07:69:9e:8c:52:35:7d:02:30:23:2d:bf:6a: 96:3b:74:63 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt8EuIgvWSjVql3cTHG8oznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjhjMmYzN2JkOGQ3ZTA0ZTc2OTg1YTRjZWQ0NTU5ZDc2 NTFjNDMwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzFjMGQ3NmI5MGE0MjI4Zjc4OGI4ZWVlODFhY2VkOWU5NGExMDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lW3edOETSo2YL7bNh5V3NgRoMZ1 eDajlwfbH9GivxVJSH6/eeaQSVG9azK0ZdpeCPIr8TapESLpEkWZIt3FaQFMGU+w 1OBr7BGWdXKuyLChJ04m4dO92Fm4vDq6VOuNzIRVfoYHHtapSy0GHWTxiV1Uc5jZ 8jlbPBwFxDJnEVaVoHw5v6YmQJWMIvDKp/aENKUilzjtIajpD7J3FMPvs9linJQq jJTorZyCaIjKZokc9uRPqBeUIHx38YPjxpB4HUtceISrVd0VC681hHI15E989CQY w2NdJGM8CZ+VGJ0NDv0HCoiopPu/JpFkv0cV5/ibegBO/wjVQRmqhiKaLwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFNwcDXa5CkIo94i47ugaztnpShA1MB8GA1UdIwQY MBaAFEG4wvN72NfgTnaYWkztRVnXZRxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjIt MjgxOGY2NTc4ZDFiLzEvM0J3TmRya0tRaWozaUxqdTZCck8yZWxLRURVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjItMjgxOGY2NTc4ZDFi LzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCLYucAwQD VZ4AAwQDXVyAAwQCuQgIAwQAwCpBAwQBwSl0AwQAwn7vAwQBw7HoMA0EAgACMAcD BQAqABLoMA0GCSqGSIb3DQEBCwUAA4IBAQCND839QIvNDBZK2LUcgeg4/x1b99CH k8jRnTDK3oSe8+3GMAt/hnyaaZ0o5RhKdS6n0X5HGkEB7UeN831nsLNco7LgS/jG 7/RRw8Gkb9mZ+sPjHGR+AjJgGzOd4RwS1YcUAkajxnZwrESsvHVHP8qgnla1QAY2 L4n6Nsdj+gIouHd4XQPJt9IAmGTU99vzXW6sNcDOr6CGJtfJ28tDYDR39LkPPG3V l1DNBvvVF+1RN27I4318hFGB76FXJUIo3Okmz4KQyRGUWxjU2Z/GaB6wNmR2Eay6 dHiWroispOVW8HIHmoIPxtsXypjonJtPOgdpnoxSNX0CMCMtv2qWO3Rj -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:36 2026 by rpki-client