This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3BCMedD3JcAvT0GSwyVheadxyoY.roa File: 3BCMedD3JcAvT0GSwyVheadxyoY.roa (raw, json) Hash identifier: lQ4oRGSAyK9ljXM8PdFfB5+PhWTOOEO0xBWLxJ9LdEk= Subject key identifier: DC:10:8C:79:D0:F7:25:C0:2F:4F:41:92:C3:25:61:79:A7:71:CA:86 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA701A70B20DF1CCE63DEFC0F88F5C5 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3BCMedD3JcAvT0GSwyVheadxyoY.roa Signing time: Fri 02 Jan 2026 12:20:32 +0000 ROA not before: Fri 02 Jan 2026 12:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213064 IP address blocks: 45.134.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:01:a7:0b:20:df:1c:ce:63:de:fc:0f:88:f5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc108c79d0f725c02f4f4192c3256179a771ca86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:41:12:44:9d:ee:58:e7:83:31:85:6a:fc: 1f:79:f3:0f:b9:94:ac:17:a7:a5:ba:89:d6:20:28: 95:a3:45:47:84:cf:4c:f0:0c:ef:05:1d:ba:76:57: 2c:d7:54:79:1a:4f:6e:af:e6:fd:e2:52:dd:e1:96: 00:fa:2a:7d:84:d8:72:8f:c5:cd:f8:66:1a:b8:2a: 1e:6f:f4:16:1f:f2:c9:3f:2a:a9:50:f5:d0:fd:10: e1:78:0f:c5:c8:4c:b2:80:8d:6a:fb:73:e3:fc:f6: 16:24:0a:c7:8e:2b:6e:0d:75:45:93:95:6f:77:9a: 3f:e5:9f:5c:04:20:5c:55:19:c9:44:29:25:27:3a: bc:5a:4e:90:c3:3e:63:17:1e:ca:3e:c8:1b:64:ce: 73:92:97:e7:ce:26:58:9c:dc:19:8a:f4:26:01:ca: f8:1e:fa:cf:81:c1:d9:5a:03:08:54:7e:b6:95:57: 91:04:f0:dd:6d:52:f2:eb:26:4c:cf:13:52:cc:31: 11:96:af:e4:f5:50:d7:1c:94:46:36:49:76:66:7e: cf:a7:9b:b6:75:34:d6:17:d6:b3:f2:0b:c2:c7:13: 96:d2:b4:b6:42:b5:52:de:64:f6:0c:31:b8:c9:4c: bf:e0:0b:02:45:c2:9d:98:60:96:13:1b:5b:ae:32: 84:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:10:8C:79:D0:F7:25:C0:2F:4F:41:92:C3:25:61:79:A7:71:CA:86 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3BCMedD3JcAvT0GSwyVheadxyoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.90.0/24 Signature Algorithm: sha256WithRSAEncryption 71:19:b4:98:70:8c:94:6a:7c:43:85:c1:ee:53:83:f7:99:77: b5:53:2e:dc:f3:29:4f:15:11:f0:7d:e0:2e:d9:92:91:d7:64: 33:3f:3c:92:d8:10:e3:63:d4:8a:ad:48:c8:99:3d:1f:c9:81: 3c:7b:43:d9:38:f4:be:00:fa:13:52:65:3b:6a:09:94:78:c3: b2:d4:f2:0b:75:63:75:f7:f3:f6:82:32:0d:c9:f8:55:55:18: 89:3e:98:7b:ae:4c:48:71:9c:5a:4f:63:fb:c2:fc:6b:07:5f: 32:0c:e0:c7:bd:26:fd:14:86:68:97:d9:5b:a8:09:20:10:bb: 56:f5:9d:78:93:1c:83:8d:14:9a:e6:10:35:50:d5:a0:d2:89: a3:96:f7:da:e2:fd:92:d5:5a:14:b7:1c:91:e0:25:75:c5:de: b3:2b:54:ab:6d:31:70:43:de:5e:ef:59:52:f6:e2:d4:84:bd: 42:81:e9:87:b3:49:b5:f3:b3:1d:e7:81:b2:98:8a:93:4c:42: 5d:2f:4a:cc:5b:0c:bb:33:4f:50:f7:c7:0b:1f:9d:39:30:72: 78:b8:2f:2a:ae:9e:95:d8:93:2c:5c:bf:55:6c:91:3c:db:9d: fe:66:06:4d:84:29:f3:b5:65:48:2f:3b:c7:b5:b8:75:c4:51: a4:5d:34:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pwGnCyDfHM5j3vwPiPXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzEwOGM3OWQwZjcyNWMwMmY0ZjQxOTJjMzI1NjE3OWE3NzFjYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjVBEkSd7ljngzGFavwfefMPuZSs F6eluonWICiVo0VHhM9M8AzvBR26dlcs11R5Gk9ur+b94lLd4ZYA+ip9hNhyj8XN +GYauCoeb/QWH/LJPyqpUPXQ/RDheA/FyEyygI1q+3Pj/PYWJArHjituDXVFk5Vv d5o/5Z9cBCBcVRnJRCklJzq8Wk6Qwz5jFx7KPsgbZM5zkpfnziZYnNwZivQmAcr4 HvrPgcHZWgMIVH62lVeRBPDdbVLy6yZMzxNSzDERlq/k9VDXHJRGNkl2Zn7Pp5u2 dTTWF9az8gvCxxOW0rS2QrVS3mT2DDG4yUy/4AsCRcKdmGCWExtbrjKE7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwQjHnQ9yXAL09BksMlYXmnccqGMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvM0JDTWVkRDNKY0F2VDBHU3d5VmhlYWR4eW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYZaMA0G CSqGSIb3DQEBCwUAA4IBAQBxGbSYcIyUanxDhcHuU4P3mXe1Uy7c8ylPFRHwfeAu 2ZKR12QzPzyS2BDjY9SKrUjImT0fyYE8e0PZOPS+APoTUmU7agmUeMOy1PILdWN1 9/P2gjINyfhVVRiJPph7rkxIcZxaT2P7wvxrB18yDODHvSb9FIZol9lbqAkgELtW 9Z14kxyDjRSa5hA1UNWg0omjlvfa4v2S1VoUtxyR4CV1xd6zK1SrbTFwQ95e71lS 9uLUhL1CgemHs0m187Md54GymIqTTEJdL0rMWwy7M09Q98cLH505MHJ4uC8qrp6V 2JMsXL9VbJE8253+ZgZNhCnztWVILzvHtbh1xFGkXTSX -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:41 2026 by rpki-client