This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/3xj2legghm7eGnEGMQvf_A8o52g.roa File: 3xj2legghm7eGnEGMQvf_A8o52g.roa (raw, json) Hash identifier: 3FXg1e3ldXpkoq4vb8/uYp+ljLvmqUV1DA8KQnwb0A4= Subject key identifier: DF:18:F6:95:E8:20:86:6E:DE:1A:71:06:31:0B:DF:FC:0F:28:E7:68 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C805A7FD40B0F60227BA6BB49342E29 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/3xj2legghm7eGnEGMQvf_A8o52g.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49729 IP address blocks: 45.132.205.0/24 maxlen: 24 84.54.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5a:7f:d4:0b:0f:60:22:7b:a6:bb:49:34:2e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df18f695e820866ede1a7106310bdffc0f28e768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:c9:4c:29:cd:2c:70:2d:ca:15:2b:a4:ad: 8c:fb:fc:a6:10:83:37:b5:e1:16:35:0c:ce:b7:9e: 39:6f:68:a9:e0:f1:9a:99:7a:98:99:7e:5c:77:8a: e6:7a:b2:64:21:c5:54:15:45:0f:c2:c6:3d:b0:0b: 17:fd:57:64:70:a8:93:26:c4:41:06:95:43:5f:d3: d6:39:01:d8:5f:e5:e6:03:39:12:73:8f:0d:36:a9: e8:8e:61:5e:98:3c:0e:e4:46:ca:2e:2a:58:17:f1: 45:1b:4a:72:d4:e9:98:bf:21:ed:94:85:fc:63:7b: 66:0b:89:ee:be:4f:04:6d:c7:9a:d2:3b:bc:e9:28: 88:38:2f:8a:ca:04:71:2e:5e:80:b7:29:c7:f4:af: aa:f7:78:66:96:d7:3d:83:2c:21:f3:a2:0d:37:27: fe:0e:62:55:94:6c:fb:35:fe:9e:08:83:ec:0b:b8: ae:f4:20:2a:f6:a3:3d:d4:3c:ad:fc:2f:7c:cb:66: 29:a9:2f:8f:30:e6:15:7d:25:a9:97:99:4d:c8:09: bc:f7:71:fa:86:3e:ee:d9:e9:33:13:df:24:dc:28: 43:76:e0:23:a5:d5:0d:26:d9:d9:31:65:04:04:7b: 8d:6f:2c:e8:27:bd:6d:a4:5f:31:6c:b3:d1:01:4f: 2c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:18:F6:95:E8:20:86:6E:DE:1A:71:06:31:0B:DF:FC:0F:28:E7:68 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/3xj2legghm7eGnEGMQvf_A8o52g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.205.0/24 84.54.6.0/24 Signature Algorithm: sha256WithRSAEncryption 01:7a:ff:5c:1f:e4:4f:aa:c5:5c:2b:59:fb:cb:11:f9:ba:6e: 28:5a:34:83:e0:17:24:1a:a4:e2:e5:b2:75:04:21:05:6b:78: 7e:6d:c6:f3:a9:9e:c7:ec:be:50:45:8d:f6:cc:ed:d2:a5:19: 7c:40:05:31:c0:08:db:4a:cd:4c:12:3d:d6:51:be:da:fd:42: af:14:66:b3:f2:92:f8:53:d5:a6:44:dd:f4:78:7d:d2:5c:dc: 4b:5b:e5:e7:c4:ec:7e:6c:a6:a7:4e:d5:00:39:9a:4c:85:94: 1f:e3:72:15:00:9f:2d:00:4d:4e:64:f9:90:1b:6a:fb:31:72: fa:25:3b:ff:c3:b2:e8:e5:65:a9:f7:75:13:11:6e:85:9e:9b: d9:14:19:c0:75:44:e5:17:1b:44:8a:dd:75:56:ce:c7:0e:3c: bc:e2:14:21:f7:8b:5a:f8:22:82:44:e6:58:12:00:2f:d3:f4: a3:93:35:b8:a9:04:22:16:04:18:63:ec:01:9c:eb:ee:ec:ec: c3:67:aa:32:10:66:b8:3f:44:13:71:b3:71:8e:2f:23:c3:8b: 7e:fe:43:bb:86:e4:69:51:15:4c:c3:44:09:f9:66:39:ba:cb: 8a:83:69:a6:6a:6f:2b:e0:d1:87:74:eb:ac:e0:de:fb:af:55: a4:e3:b8:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gFp/1AsPYCJ7prtJNC4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjE4ZjY5NWU4MjA4NjZlZGUxYTcxMDYzMTBiZGZmYzBmMjhlNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteLJTCnNLHAtyhUrpK2M+/ymEIM3 teEWNQzOt545b2ip4PGamXqYmX5cd4rmerJkIcVUFUUPwsY9sAsX/VdkcKiTJsRB BpVDX9PWOQHYX+XmAzkSc48NNqnojmFemDwO5EbKLipYF/FFG0py1OmYvyHtlIX8 Y3tmC4nuvk8Ebcea0ju86SiIOC+KygRxLl6AtynH9K+q93hmltc9gywh86INNyf+ DmJVlGz7Nf6eCIPsC7iu9CAq9qM91Dyt/C98y2YpqS+PMOYVfSWpl5lNyAm893H6 hj7u2ekzE98k3ChDduAjpdUNJtnZMWUEBHuNbyzoJ71tpF8xbLPRAU8s4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN8Y9pXoIIZu3hpxBjEL3/wPKOdoMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvM3hqMmxlZ2dobTdlR25FR01RdmZfQThvNTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYTNAwQA VDYGMA0GCSqGSIb3DQEBCwUAA4IBAQABev9cH+RPqsVcK1n7yxH5um4oWjSD4Bck GqTi5bJ1BCEFa3h+bcbzqZ7H7L5QRY32zO3SpRl8QAUxwAjbSs1MEj3WUb7a/UKv FGaz8pL4U9WmRN30eH3SXNxLW+XnxOx+bKanTtUAOZpMhZQf43IVAJ8tAE1OZPmQ G2r7MXL6JTv/w7Lo5WWp93UTEW6FnpvZFBnAdUTlFxtEit11Vs7HDjy84hQh94ta +CKCROZYEgAv0/SjkzW4qQQiFgQYY+wBnOvu7OzDZ6oyEGa4P0QTcbNxji8jw4t+ /kO7huRpURVMw0QJ+WY5usuKg2mmam8r4NGHdOus4N77r1Wk47hX -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:13 2026 by rpki-client