This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e_3kzWboslyS0j2UPT-xZ2qMTbU.roa File: e_3kzWboslyS0j2UPT-xZ2qMTbU.roa (raw, json) Hash identifier: NPzWXi0X66Hw/8QvYXUpL+Kz6zCs5xyyLSGTo6Ok2bE= Subject key identifier: 7B:FD:E4:CD:66:E8:B2:5C:92:D2:3D:94:3D:3F:B1:67:6A:8C:4D:B5 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3349CEBB987BF17B61712011264D7 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e_3kzWboslyS0j2UPT-xZ2qMTbU.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208220 IP address blocks: 45.8.92.0/24 maxlen: 24 81.31.194.0/24 maxlen: 24 81.31.195.0/24 maxlen: 24 87.120.127.0/24 maxlen: 24 94.156.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:34:9c:eb:b9:87:bf:17:b6:17:12:01:12:64:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bfde4cd66e8b25c92d23d943d3fb1676a8c4db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:4a:fd:b9:94:61:8f:26:fe:ff:67:63:21: 97:88:e1:d0:6c:ce:f6:c7:31:b2:24:ac:3c:2b:98: cf:e5:a6:80:2e:9f:d5:c6:40:c9:98:d2:1d:3c:e1: 80:de:79:04:40:2c:87:9f:ad:50:89:e5:0d:09:41: d6:0e:34:bf:2b:0f:1a:d0:fc:c1:95:f8:3f:d4:d7: a5:24:33:4d:79:bd:0b:4e:65:30:a8:74:82:55:84: 95:1a:34:7b:6a:1e:c2:2a:7e:a5:ee:a6:6f:b6:70: d7:f7:fd:3f:e3:9d:70:d8:8f:9b:76:58:0d:da:66: 64:97:dd:f9:fd:5b:71:e5:b7:9e:2a:62:14:a9:57: 63:63:6e:8e:a1:a4:73:b8:7f:d0:7b:89:6b:95:d9: b6:70:0b:07:b6:84:0c:f7:c3:87:c0:73:4e:2a:8f: 13:ad:b2:a5:9f:1e:92:df:1b:d6:07:c5:7b:4f:32: 41:b6:5b:d2:f2:91:a0:0d:16:b3:77:0a:d3:0a:1b: 1b:08:f9:b4:8a:4f:1c:d4:79:6b:0e:43:e7:3d:d5: 8b:93:2f:c1:80:5e:9d:89:6b:a4:81:81:35:ec:f4: 86:20:31:fe:4d:e3:2e:98:34:dc:ad:e8:a3:19:ee: 7f:01:36:bf:e8:09:3a:9c:af:e7:b0:79:6d:1f:cd: a0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:E4:CD:66:E8:B2:5C:92:D2:3D:94:3D:3F:B1:67:6A:8C:4D:B5 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e_3kzWboslyS0j2UPT-xZ2qMTbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.92.0/24 81.31.194.0/23 87.120.127.0/24 94.156.167.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:c6:9e:79:74:58:78:f5:81:66:94:1e:7f:ff:53:80:9d:59: bf:c4:c6:03:4b:ee:83:90:f7:57:6c:c5:3f:74:4d:57:91:cd: a2:c1:e5:01:a0:8a:1e:01:5b:9f:51:fe:7c:7f:80:8c:f1:c8: d4:67:9c:b1:6d:0c:78:79:73:ec:89:8e:d2:0f:e6:8d:c0:b7: 19:43:4a:bc:b1:28:53:1f:81:8a:f4:cb:1d:89:08:38:e4:57: c6:5a:3f:cf:98:a7:5a:e6:ea:2a:52:e4:9b:a4:0e:4d:26:a0: b6:c0:8a:06:22:9b:49:1e:7d:fd:37:21:3a:1a:95:c3:7a:0e: 1a:e2:25:53:9f:39:b2:1d:ab:56:a4:fd:22:1b:83:72:02:34: d7:11:97:2d:bb:44:fe:3b:c0:37:2b:4e:34:af:fa:e9:b0:e9: e0:c7:e2:2f:2a:9b:74:c8:9c:f9:73:59:b7:80:2f:c0:6f:9f: 4f:5a:13:38:e5:ec:b1:93:cd:2a:9b:7e:8c:4d:8f:5d:d7:91: 4a:07:be:19:f5:55:e0:67:51:0f:d6:3e:2c:a9:48:f6:13:49: 3f:5c:ac:25:e8:53:be:0c:a7:1a:83:f5:a4:c6:9f:c4:0e:3c: a1:0e:e5:26:30:9c:a4:2a:fa:57:11:0a:73:f9:a3:ae:55:e7: 56:57:07:57 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4ozSc67mHvxe2FxIBEmTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmZkZTRjZDY2ZThiMjVjOTJkMjNkOTQzZDNmYjE2NzZhOGM0ZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtohK/bmUYY8m/v9nYyGXiOHQbM72 xzGyJKw8K5jP5aaALp/VxkDJmNIdPOGA3nkEQCyHn61QieUNCUHWDjS/Kw8a0PzB lfg/1NelJDNNeb0LTmUwqHSCVYSVGjR7ah7CKn6l7qZvtnDX9/0/451w2I+bdlgN 2mZkl935/Vtx5beeKmIUqVdjY26OoaRzuH/Qe4lrldm2cAsHtoQM98OHwHNOKo8T rbKlnx6S3xvWB8V7TzJBtlvS8pGgDRazdwrTChsbCPm0ik8c1HlrDkPnPdWLky/B gF6diWukgYE17PSGIDH+TeMumDTcreijGe5/ATa/6Ak6nK/nsHltH82gJwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHv95M1m6LJcktI9lD0/sWdqjE21MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvZV8za3pXYm9zbHlTMGoyVVBULXhaMnFNVGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQhcAwQB UR/CAwQAV3h/AwQAXpynMA0GCSqGSIb3DQEBCwUAA4IBAQCOxp55dFh49YFmlB5/ /1OAnVm/xMYDS+6DkPdXbMU/dE1Xkc2iweUBoIoeAVufUf58f4CM8cjUZ5yxbQx4 eXPsiY7SD+aNwLcZQ0q8sShTH4GK9MsdiQg45FfGWj/PmKda5uoqUuSbpA5NJqC2 wIoGIptJHn39NyE6GpXDeg4a4iVTnzmyHatWpP0iG4NyAjTXEZctu0T+O8A3K040 r/rpsOngx+IvKpt0yJz5c1m3gC/Ab59PWhM45eyxk80qm36MTY9d15FKB74Z9VXg Z1EP1j4sqUj2E0k/XKwl6FO+DKcag/Wkxp/EDjyhDuUmMJykKvpXEQpz+aOuVedW VwdX -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:44 2026 by rpki-client