This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-3gXvF107LMMyw4a7w5jGMrt3Xo.roa File: 1-3gXvF107LMMyw4a7w5jGMrt3Xo.roa (raw, json) Hash identifier: NKduMlQ8Ic5m5DIO1K4cGkgxaa/WIYAhYMZA9xXuzfY= Subject key identifier: FB:78:17:BC:5D:74:EC:B3:0C:CB:0E:1A:EF:0E:63:18:CA:ED:DD:7A Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F84199767A86DFF7EE77C491CF34 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-3gXvF107LMMyw4a7w5jGMrt3Xo.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42926 IP address blocks: 45.84.223.0/24 maxlen: 24 45.89.246.0/24 maxlen: 24 212.115.40.0/24 maxlen: 24 212.115.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f8:41:99:76:7a:86:df:f7:ee:77:c4:91:cf:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb7817bc5d74ecb30ccb0e1aef0e6318caeddd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fb:ca:9d:20:ff:d4:41:4e:ca:1b:d8:0e:3f: bd:1f:02:25:7c:56:85:74:35:e1:ab:ff:2a:98:7d: b6:3f:37:14:6a:48:fc:38:ba:ec:e2:89:91:85:4b: 62:b9:50:14:95:f7:4e:8c:4e:71:b1:db:12:a3:7d: 03:b3:76:b5:b7:62:f6:62:15:c7:e0:93:57:91:b1: d5:89:8e:f7:94:ac:a4:ce:bf:0c:3c:1c:77:8c:54: a1:49:1a:61:06:4b:b9:70:93:e7:38:4c:b6:9f:58: 61:1e:77:53:1c:d9:6b:7c:5b:02:e3:4c:a2:19:17: 31:95:4d:bb:ed:9c:ba:15:79:02:a6:e0:70:65:d3: 13:1c:3c:8f:79:29:65:47:4c:41:16:36:2a:dc:09: 26:83:fc:b5:ec:cb:50:f7:63:18:fb:36:9a:a8:94: b1:d2:eb:f8:0a:9d:86:97:95:74:ff:c1:da:e4:6d: 6f:30:ee:e2:54:58:e5:67:ed:ce:db:8e:3e:76:f6: b7:a4:94:ad:98:7a:08:3a:16:6f:90:a8:96:30:0e: 32:4f:b6:21:09:f8:fc:2f:6f:cc:be:9c:68:cc:be: b1:d5:7a:77:32:c1:04:5a:1f:ea:0b:09:57:f6:65: f0:51:8c:97:69:ec:17:46:95:db:32:04:df:a6:a9: df:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:78:17:BC:5D:74:EC:B3:0C:CB:0E:1A:EF:0E:63:18:CA:ED:DD:7A X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-3gXvF107LMMyw4a7w5jGMrt3Xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.223.0/24 45.89.246.0/24 212.115.40.0/24 212.115.42.0/23 Signature Algorithm: sha256WithRSAEncryption 38:01:42:87:28:03:38:be:15:37:42:8f:6c:50:ec:1f:61:0d: e0:37:57:73:78:ee:6d:fc:1f:bf:28:ed:fa:77:e0:49:25:32: b5:f3:59:50:3f:fd:34:0c:a8:6a:9a:b7:8f:7e:ef:33:78:9c: 3b:0b:45:aa:5b:90:f5:56:0e:43:9a:42:39:13:c2:79:5b:76: b2:81:4c:3d:9b:9f:e6:53:2e:1c:26:00:98:83:0a:b3:b8:7e: 6b:26:17:31:6e:6b:e0:01:09:d0:e8:1e:69:e2:88:43:99:8e: 26:8c:4d:3d:8a:7d:e9:fe:24:d9:e5:af:f9:73:1e:ff:35:b1: 0d:82:a4:bc:6a:3b:b3:61:49:03:d9:f4:a1:30:35:98:2b:18: e6:82:c2:9a:aa:98:d3:19:5f:d5:52:1a:a4:29:a3:a8:74:1a: 89:88:74:4f:e6:e8:a1:b2:78:38:72:90:2a:06:54:3e:a3:16: 64:13:f9:cb:54:49:f9:29:dc:0f:82:cf:84:73:9f:ea:57:b6: f3:b9:4c:09:ff:a4:30:ee:84:e2:1f:9d:56:19:0c:42:c3:0a: 5c:99:9f:25:1c:a5:29:a1:09:e8:af:3a:a3:9d:28:e5:6a:e8: 44:91:d3:62:d0:4a:16:87:3e:14:38:7e:df:a9:14:88:75:ec: f7:06:1c:26 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt4ovhBmXZ6ht/37nfEkc80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjc4MTdiYzVkNzRlY2IzMGNjYjBlMWFlZjBlNjMxOGNhZWRkZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfvKnSD/1EFOyhvYDj+9HwIlfFaF dDXhq/8qmH22PzcUakj8OLrs4omRhUtiuVAUlfdOjE5xsdsSo30Ds3a1t2L2YhXH 4JNXkbHViY73lKykzr8MPBx3jFShSRphBku5cJPnOEy2n1hhHndTHNlrfFsC40yi GRcxlU277Zy6FXkCpuBwZdMTHDyPeSllR0xBFjYq3Akmg/y17MtQ92MY+zaaqJSx 0uv4Cp2Gl5V0/8Ha5G1vMO7iVFjlZ+3O244+dva3pJStmHoIOhZvkKiWMA4yT7Yh Cfj8L2/MvpxozL6x1Xp3MsEEWh/qCwlX9mXwUYyXaewXRpXbMgTfpqnfaQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFPt4F7xddOyzDMsOGu8OYxjK7d16MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvMS0zZ1h2RjEwN0xNTXl3NGE3dzVqR01ydDNYby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcx Mi8xL0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAC1U3wME AC1Z9gMEANRzKAMEAdRzKjANBgkqhkiG9w0BAQsFAAOCAQEAOAFChygDOL4VN0KP bFDsH2EN4DdXc3jubfwfvyjt+nfgSSUytfNZUD/9NAyoapq3j37vM3icOwtFqluQ 9VYOQ5pCORPCeVt2soFMPZuf5lMuHCYAmIMKs7h+ayYXMW5r4AEJ0OgeaeKIQ5mO JoxNPYp96f4k2eWv+XMe/zWxDYKkvGo7s2FJA9n0oTA1mCsY5oLCmqqY0xlf1VIa pCmjqHQaiYh0T+boobJ4OHKQKgZUPqMWZBP5y1RJ+SncD4LPhHOf6le287lMCf+k MO6E4h+dVhkMQsMKXJmfJRylKaEJ6K86o50o5WroRJHTYtBKFoc+FDh+36kUiHXs 9wYcJg== -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:23 2026 by rpki-client