This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/3tPs-hmvMWYpJTDa0LrNchR-BRU.roa File: 3tPs-hmvMWYpJTDa0LrNchR-BRU.roa (raw, json) Hash identifier: P08I5J8BvFgxh/ROUQBVKnGBWnHnTyxFTFLzZS6Bx/Y= Subject key identifier: DE:D3:EC:FA:19:AF:31:66:29:25:30:DA:D0:BA:CD:72:14:7E:05:15 Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6 Certificate serial: 019B797EF0C17553C73C14624EF18A43F4E6 Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/3tPs-hmvMWYpJTDa0LrNchR-BRU.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29075 IP address blocks: 45.140.103.0/24 maxlen: 24 185.18.172.0/22 maxlen: 22 2a04:cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f0:c1:75:53:c7:3c:14:62:4e:f1:8a:43:f4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6 Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ded3ecfa19af3166292530dad0bacd72147e0515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:0f:bf:24:69:8e:6b:00:4e:36:04:f5:33: fa:b6:89:8a:94:79:fd:90:2d:89:59:4a:fb:52:a2: 97:23:34:42:aa:da:a5:ec:26:1d:0d:7d:b4:08:c0: 74:6c:f7:aa:f8:cd:84:8b:38:c6:06:50:38:1d:66: d9:39:cf:34:55:90:75:a5:77:8c:58:71:e2:93:ef: 44:7c:0c:16:f9:5d:b4:bf:eb:68:cd:10:70:99:fb: 28:b3:cc:d8:9a:be:0f:0b:2d:dd:ed:5d:bb:81:16: 66:58:5e:14:57:09:65:f4:46:fe:ae:12:80:f8:03: 12:cf:60:ad:5a:e5:ff:32:82:3a:b9:87:ec:0d:e2: ff:d0:58:0a:63:3d:7f:cb:13:44:33:ea:5e:74:a3: a9:37:80:8b:a0:f8:1d:96:e2:94:fe:db:5c:b4:3e: 69:d0:1b:fd:e2:45:a7:47:ef:89:06:29:d9:9c:d2: 08:c6:78:2e:3b:7b:b6:5a:82:25:27:3a:16:20:4a: 89:a4:de:a6:e6:9b:66:c9:c7:1a:ae:19:81:ca:2f: 0b:20:bc:6a:21:29:cc:f9:9e:88:94:e0:88:41:af: 9a:2c:49:5f:97:e6:a7:cc:93:c2:d3:dd:98:cd:5b: f5:a8:42:9b:d1:f2:6e:c8:31:62:04:68:65:2a:8c: ce:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D3:EC:FA:19:AF:31:66:29:25:30:DA:D0:BA:CD:72:14:7E:05:15 X509v3 Authority Key Identifier: keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/3tPs-hmvMWYpJTDa0LrNchR-BRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.103.0/24 185.18.172.0/22 IPv6: 2a04:cc0::/29 Signature Algorithm: sha256WithRSAEncryption 08:4d:9a:23:f1:c1:47:a7:31:f6:b1:52:1d:5a:98:cd:57:c7: 34:5a:0e:bb:0a:00:bd:b0:fa:ee:c1:01:ce:0c:23:b1:13:1e: 9b:6d:db:80:2b:c0:6c:65:9f:e8:71:b4:b9:55:92:24:00:84: 03:ba:44:b3:c2:6a:4b:98:c4:5d:d3:dc:15:26:2e:08:de:57: 5c:9d:f1:18:80:ab:fd:f9:9c:23:2d:9c:7c:dd:71:dc:db:b5: 87:03:00:11:43:a9:6d:aa:d7:71:1b:32:ec:46:1f:c0:de:e6: a7:50:2a:02:3a:f3:d9:c4:77:5e:76:ea:57:5d:e8:05:43:df: 18:2e:11:56:92:8a:4d:6e:63:a7:7e:d3:64:d5:20:f4:24:20: 60:d1:de:20:c4:0e:0b:fd:5a:1e:79:0b:27:b2:c2:ba:91:bf: 76:ca:41:2f:0c:66:ff:47:b2:39:d2:1c:21:49:72:7d:00:0e: 75:61:ff:5a:5f:7c:e1:82:88:92:4c:8d:3a:5d:00:63:2b:75: 22:92:83:7f:8c:01:aa:06:00:aa:6e:69:28:63:e6:38:77:66: cc:7d:3a:0c:1d:5f:9e:cf:31:86:e6:fd:6f:0f:43:1c:51:86: 5c:96:61:b6:fc:53:a9:39:eb:f7:24:70:46:02:61:99:d1:a2: fa:b4:d0:40 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fvDBdVPHPBRiTvGKQ/TmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2I1OWE0MThlYWRmYTVkYzg2OWY1NmYxODQ3ZmIyNWQ5 ODdmYzYwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWQzZWNmYTE5YWYzMTY2MjkyNTMwZGFkMGJhY2Q3MjE0N2UwNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnwPvyRpjmsATjYE9TP6tomKlHn9 kC2JWUr7UqKXIzRCqtql7CYdDX20CMB0bPeq+M2EizjGBlA4HWbZOc80VZB1pXeM WHHik+9EfAwW+V20v+tozRBwmfsos8zYmr4PCy3d7V27gRZmWF4UVwll9Eb+rhKA +AMSz2CtWuX/MoI6uYfsDeL/0FgKYz1/yxNEM+pedKOpN4CLoPgdluKU/ttctD5p 0Bv94kWnR++JBinZnNIIxnguO3u2WoIlJzoWIEqJpN6m5ptmyccarhmByi8LILxq ISnM+Z6IlOCIQa+aLElfl+anzJPC092YzVv1qEKb0fJuyDFiBGhlKozOOwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFN7T7PoZrzFmKSUw2tC6zXIUfgUVMB8GA1UdIwQY MBaAFEDLWaQY6t+l3IafVvGEf7JdmH/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQt MTFmMWI1YTRiMGRjLzEvM3RQcy1obXZNV1lwSlREYTBMck5jaFItQlJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQtMTFmMWI1YTRiMGRj LzEvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALYxnAwQC uRKsMA0EAgACMAcDBQMqBAzAMA0GCSqGSIb3DQEBCwUAA4IBAQAITZoj8cFHpzH2 sVIdWpjNV8c0Wg67CgC9sPruwQHODCOxEx6bbduAK8BsZZ/ocbS5VZIkAIQDukSz wmpLmMRd09wVJi4I3ldcnfEYgKv9+ZwjLZx83XHc27WHAwARQ6ltqtdxGzLsRh/A 3uanUCoCOvPZxHdedupXXegFQ98YLhFWkopNbmOnftNk1SD0JCBg0d4gxA4L/Voe eQsnssK6kb92ykEvDGb/R7I50hwhSXJ9AA51Yf9aX3zhgoiSTI06XQBjK3UikoN/ jAGqBgCqbmkoY+Y4d2bMfToMHV+ezzGG5v1vD0McUYZclmG2/FOpOev3JHBGAmGZ 0aL6tNBA -----END CERTIFICATE-----Generated at Wed Jan 7 06:55:49 2026 by rpki-client