This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3o3QH00T-JwkNvAMQvw4C-BiDW0.roa File: 3o3QH00T-JwkNvAMQvw4C-BiDW0.roa (raw, json) Hash identifier: vEajJTh+S+D34Q4JAtv9tVasfMAvQctOcVgA5R1EaAU= Subject key identifier: DE:8D:D0:1F:4D:13:F8:9C:24:36:F0:0C:42:FC:38:0B:E0:62:0D:6D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33DA59C0ADAFDAFF2B255A4F4AAA4 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3o3QH00T-JwkNvAMQvw4C-BiDW0.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211619 IP address blocks: 45.9.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3d:a5:9c:0a:da:fd:af:f2:b2:55:a4:f4:aa:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de8dd01f4d13f89c2436f00c42fc380be0620d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:59:71:b0:f9:25:41:58:b5:e8:3a:cb:cb: 68:fc:e4:4d:50:35:c1:dc:61:74:e1:51:2b:37:29: cb:d2:07:5c:72:7f:8b:09:12:15:e1:c0:ca:61:55: ad:53:95:0d:50:97:b9:49:38:19:fa:3e:b6:2d:eb: 0e:d9:d1:2b:2e:7b:88:42:05:65:3e:a8:86:f7:7c: d9:a0:d6:db:07:c0:02:e7:35:c2:12:a8:9d:b8:0a: dc:d2:b6:bf:08:0a:42:c7:a6:be:05:5d:30:b4:44: 4b:26:c4:01:ea:e6:69:b4:ba:ee:59:35:6b:3d:ab: b4:2a:4b:ec:ba:1b:ac:fc:90:f0:7c:7a:3c:bd:5e: 67:04:4b:a0:de:18:b1:3e:f2:3a:78:9d:6a:8d:c2: 13:fc:76:c0:a8:73:14:79:fd:94:af:07:bc:b6:c8: 55:1a:6f:8d:1c:ed:e5:9e:fb:a3:c6:fe:30:57:cc: 5b:61:4a:b3:91:df:3c:61:2b:df:b9:67:b7:7e:d7: e8:f6:f2:8a:6c:b7:1b:5a:53:44:bb:cb:6f:a6:28: d4:ce:8e:6e:20:10:d0:a4:15:5e:4c:a6:73:09:4c: dd:47:04:fe:e2:ab:fe:e4:2d:86:de:97:a2:02:c7: c1:8c:12:bf:3c:01:46:8f:58:92:02:5e:9b:08:5a: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8D:D0:1F:4D:13:F8:9C:24:36:F0:0C:42:FC:38:0B:E0:62:0D:6D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3o3QH00T-JwkNvAMQvw4C-BiDW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.156.0/24 Signature Algorithm: sha256WithRSAEncryption 39:f6:04:16:28:6c:7e:90:9a:94:a7:16:2d:a2:c3:a9:bd:0e: 42:3f:33:92:ac:0c:f6:5a:77:a9:6d:41:cd:33:87:1d:1b:9e: bf:1e:b7:4f:88:84:43:35:2b:f5:67:b3:d9:76:ef:39:80:c3: 48:bd:54:6d:37:0a:83:d3:84:0c:87:4b:bf:4b:89:41:ac:a9: cc:eb:fd:6b:e9:ed:6b:ac:72:fe:52:23:6d:71:de:6f:96:c3: a7:54:7e:22:2f:6c:10:a4:7a:e0:e7:7b:15:67:78:f4:df:c7: 0b:7e:c2:1b:7d:0f:9e:ed:b0:2a:f5:f7:3a:43:7e:16:dd:d5: 89:f9:08:e0:1f:e4:36:87:ab:19:e6:88:c9:5f:6b:b9:38:6c: ad:40:65:24:3e:37:43:a2:73:67:a0:96:aa:71:9f:69:f7:8e: 37:eb:4f:fd:5d:c0:54:a6:92:23:48:ea:59:a5:fe:30:bf:e6: 68:1c:91:53:ab:55:eb:41:7a:d3:55:1e:b3:14:6c:53:b4:42: 94:99:63:b5:28:c4:cc:c6:1b:77:d5:cd:7f:5a:8d:37:8d:8e: 6e:1e:c5:60:87:67:c9:71:d7:c0:0f:4d:33:0e:9c:00:71:e7: 6d:71:14:cc:9f:ee:70:21:2d:a6:db:37:8b:14:fa:06:ff:ca: ed:df:e3:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oz2lnAra/a/yslWk9KqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZThkZDAxZjRkMTNmODljMjQzNmYwMGM0MmZjMzgwYmUwNjIwZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8xZcbD5JUFYteg6y8to/ORNUDXB 3GF04VErNynL0gdccn+LCRIV4cDKYVWtU5UNUJe5STgZ+j62LesO2dErLnuIQgVl PqiG93zZoNbbB8AC5zXCEqiduArc0ra/CApCx6a+BV0wtERLJsQB6uZptLruWTVr Pau0Kkvsuhus/JDwfHo8vV5nBEug3hixPvI6eJ1qjcIT/HbAqHMUef2Urwe8tshV Gm+NHO3lnvujxv4wV8xbYUqzkd88YSvfuWe3ftfo9vKKbLcbWlNEu8tvpijUzo5u IBDQpBVeTKZzCUzdRwT+4qv+5C2G3peiAsfBjBK/PAFGj1iSAl6bCFrTLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN6N0B9NE/icJDbwDEL8OAvgYg1tMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvM28zUUgwMFQtSndrTnZBTVF2dzRDLUJpRFcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQmcMA0G CSqGSIb3DQEBCwUAA4IBAQA59gQWKGx+kJqUpxYtosOpvQ5CPzOSrAz2WnepbUHN M4cdG56/HrdPiIRDNSv1Z7PZdu85gMNIvVRtNwqD04QMh0u/S4lBrKnM6/1r6e1r rHL+UiNtcd5vlsOnVH4iL2wQpHrg53sVZ3j038cLfsIbfQ+e7bAq9fc6Q34W3dWJ +QjgH+Q2h6sZ5ojJX2u5OGytQGUkPjdDonNnoJaqcZ9p944360/9XcBUppIjSOpZ pf4wv+ZoHJFTq1XrQXrTVR6zFGxTtEKUmWO1KMTMxht31c1/Wo03jY5uHsVgh2fJ cdfAD00zDpwAcedtcRTMn+5wIS2m2zeLFPoG/8rt3+Po -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:34 2026 by rpki-client