This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa File: 3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa (raw, json) Hash identifier: qThiWbhOm4MVwzcc4QS1C0KW/Cr2nD4QzMpn3VG/nII= Subject key identifier: DC:59:33:00:F9:79:74:37:97:7C:41:0C:45:2C:0B:A6:F3:F9:74:1C Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2 Certificate serial: 019B7AC7B238C4C68FB0DF84E86B31FEA6A9 Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa Signing time: Thu 01 Jan 2026 18:17:46 +0000 ROA not before: Thu 01 Jan 2026 18:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203089 IP address blocks: 45.148.214.0/24 maxlen: 24 45.148.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b2:38:c4:c6:8f:b0:df:84:e8:6b:31:fe:a6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2 Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc593300f9797437977c410c452c0ba6f3f9741c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:28:d1:76:36:fc:8c:a5:2e:b2:0f:af:7e:eb: 40:77:72:66:79:47:49:49:19:4b:6d:77:c1:be:62: a2:59:2f:ae:56:64:21:fd:0c:70:fc:f8:6f:fe:fc: 65:00:e7:71:16:d0:24:8e:0d:55:e6:55:9d:d9:15: fd:93:0f:a4:91:2e:c9:f7:5f:39:07:02:41:98:43: 67:31:18:d2:c5:0f:31:cc:90:2b:a3:86:81:79:bb: 91:de:f6:c4:d3:eb:32:5e:d3:92:d1:94:e7:b8:56: 5e:66:ca:d9:0e:7c:8a:89:94:77:6c:81:8a:cc:77: f4:55:4d:69:e7:87:ed:22:21:0e:61:c1:48:16:c3: ce:9e:b3:60:11:40:30:51:5e:53:c1:50:82:b8:f6: f1:49:ee:39:33:31:13:f8:94:00:c3:96:8d:db:65: 23:85:56:e3:65:75:b6:92:d0:e2:cc:1a:cd:49:9d: b7:7f:29:56:35:22:db:bb:36:45:42:42:fd:33:07: d5:ba:b3:a3:0a:10:ab:d7:c2:b6:3d:25:b5:b6:0b: be:b0:41:af:f9:f6:96:89:ba:7d:23:7b:6b:3c:dd: 64:a6:65:7c:4b:50:d9:68:dd:2d:5c:71:74:8e:d3: 93:c2:d9:d2:f6:4d:f6:d6:81:86:6b:17:72:46:bc: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:59:33:00:F9:79:74:37:97:7C:41:0C:45:2C:0B:A6:F3:F9:74:1C X509v3 Authority Key Identifier: keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.214.0/23 Signature Algorithm: sha256WithRSAEncryption 68:d2:b8:d9:d0:2f:f6:2a:4d:d9:ad:ac:5f:a2:ac:f1:27:54: b4:2c:f9:4e:6c:f5:d2:64:e0:79:1a:cf:50:a4:b5:13:86:7a: f0:c3:2b:d6:7d:c1:f3:da:f3:60:02:b1:d1:c7:34:9d:7c:b7: d1:32:11:10:71:d6:ff:61:35:79:26:71:b0:9d:ad:32:51:c6: 12:a1:14:51:37:15:ed:20:51:fc:43:0b:74:22:26:2a:02:0c: 2d:fa:00:82:0a:92:cd:0e:f1:f2:9b:39:36:82:17:b6:15:4d: 1d:1d:92:3a:38:15:cb:2a:c6:2e:82:ee:30:c0:00:4b:e3:ec: ed:41:46:99:72:4b:11:49:7a:c9:60:01:10:2f:53:bc:85:f9: e2:cb:86:ac:ce:85:71:a0:0d:fe:46:ea:56:dc:2f:57:7b:41: e9:64:01:ec:9e:84:c6:92:1f:74:ef:00:fb:94:44:6b:2d:d5: 5b:1a:c2:36:7b:11:19:6e:81:f6:59:5f:df:9c:7e:21:f4:36: 1c:1f:3b:96:fd:2a:d9:33:e9:ba:3c:c9:4c:86:6e:3e:af:1b: 20:74:9c:94:9a:5c:c9:33:65:a2:84:c1:c4:fa:57:b0:e7:2c: f5:a3:cd:87:4c:e9:e0:bd:21:a9:05:72:e0:f1:da:e7:9b:b7: 2f:0a:84:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7I4xMaPsN+E6Gsx/qapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx OTUxYzIwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzU5MzMwMGY5Nzk3NDM3OTc3YzQxMGM0NTJjMGJhNmYzZjk3NDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnijRdjb8jKUusg+vfutAd3JmeUdJ SRlLbXfBvmKiWS+uVmQh/Qxw/Phv/vxlAOdxFtAkjg1V5lWd2RX9kw+kkS7J9185 BwJBmENnMRjSxQ8xzJAro4aBebuR3vbE0+syXtOS0ZTnuFZeZsrZDnyKiZR3bIGK zHf0VU1p54ftIiEOYcFIFsPOnrNgEUAwUV5TwVCCuPbxSe45MzET+JQAw5aN22Uj hVbjZXW2ktDizBrNSZ23fylWNSLbuzZFQkL9MwfVurOjChCr18K2PSW1tgu+sEGv +faWibp9I3trPN1kpmV8S1DZaN0tXHF0jtOTwtnS9k321oGGaxdyRrwmqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxZMwD5eXQ3l3xBDEUsC6bz+XQcMB8GA1UdIwQY MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct YWQwMjdlOTVjNWM3LzEvM0ZrekFQbDVkRGVYZkVFTVJTd0xwdlA1ZEJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3 LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZTWMA0G CSqGSIb3DQEBCwUAA4IBAQBo0rjZ0C/2Kk3ZraxfoqzxJ1S0LPlObPXSZOB5Gs9Q pLUThnrwwyvWfcHz2vNgArHRxzSdfLfRMhEQcdb/YTV5JnGwna0yUcYSoRRRNxXt IFH8Qwt0IiYqAgwt+gCCCpLNDvHymzk2ghe2FU0dHZI6OBXLKsYugu4wwABL4+zt QUaZcksRSXrJYAEQL1O8hfniy4aszoVxoA3+RupW3C9Xe0HpZAHsnoTGkh907wD7 lERrLdVbGsI2exEZboH2WV/fnH4h9DYcHzuW/SrZM+m6PMlMhm4+rxsgdJyUmlzJ M2WihMHE+lew5yz1o82HTOngvSGpBXLg8drnm7cvCoTI -----END CERTIFICATE-----Generated at Mon Jan 12 22:23:44 2026 by rpki-client