This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QB4_WrWv1_f_4y7MeernB0lxRQ.roa File: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (raw, json) Hash identifier: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA= Subject key identifier: DD:00:78:FD:6A:D6:BF:5F:DF:FF:8C:BB:31:E7:AB:9C:1D:25:C5:14 Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Certificate serial: 019B797F334EC120E8C0C7D2410962E13483 Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QB4_WrWv1_f_4y7MeernB0lxRQ.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.80.175.0/24 maxlen: 24 2a13:7c40:1::/48 maxlen: 48 2a13:7c40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:33:4e:c1:20:e8:c0:c7:d2:41:09:62:e1:34:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd0078fd6ad6bf5fdfff8cbb31e7ab9c1d25c514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:19:ea:57:0c:7f:61:cf:01:84:44:eb:c9: 77:b5:d2:d6:f3:46:54:43:78:53:0d:92:57:0a:2c: ab:a5:54:71:98:91:37:ec:80:7d:0c:4a:04:4b:4a: 73:b8:db:52:b4:ea:31:b2:40:5e:d1:f1:54:12:82: 9e:7f:fb:43:d9:2d:1d:cc:9f:47:68:2c:b2:07:45: f4:d3:21:68:73:97:47:fa:05:ae:41:f0:67:79:f2: 52:78:99:55:b7:7e:f9:51:5a:7f:ff:d5:c7:1f:47: 12:6d:02:42:20:ed:1c:41:62:8e:88:e2:94:8c:12: fa:11:b7:cf:7d:bc:a1:f4:41:10:e3:57:67:44:b8: 49:c2:4d:f3:b8:24:96:c0:e7:56:db:b9:9c:d3:c2: c6:1a:00:42:cb:99:f7:0e:f7:9f:a2:6b:af:33:0b: b2:64:7a:0c:ed:cf:27:72:97:1b:27:0f:b2:a6:90: b7:fc:c8:d0:fc:4a:b1:4e:f8:a8:b3:d3:d1:5f:49: e7:f9:50:e9:0f:0f:19:ed:f8:79:e1:e1:ad:d1:18: 9a:05:04:6a:de:d3:6d:25:95:9b:82:fd:36:62:9e: e2:e8:a7:61:92:69:cb:24:65:6c:8d:04:12:51:4a: e7:bc:eb:43:e1:1b:0f:d9:11:8a:16:3e:f6:a9:35: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:00:78:FD:6A:D6:BF:5F:DF:FF:8C:BB:31:E7:AB:9C:1D:25:C5:14 X509v3 Authority Key Identifier: keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QB4_WrWv1_f_4y7MeernB0lxRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.175.0/24 IPv6: 2a13:7c40:1::-2a13:7c40:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 81:6c:11:55:9e:cf:e2:60:62:7a:fc:47:84:9c:2c:24:df:a9: 4f:72:66:8b:31:31:59:bc:a8:d8:8c:03:1b:f9:68:50:cd:2c: eb:c1:dc:e9:25:73:aa:7c:86:11:22:05:14:6b:11:4f:df:1b: aa:7c:c2:bf:e6:8d:e1:67:f4:2b:77:23:15:a9:78:f9:75:e0: df:dc:ba:86:97:a1:c3:94:d7:eb:1a:59:b6:36:f2:75:21:30: 12:9c:e7:58:3b:47:01:4a:1b:f7:4b:8b:22:6a:bb:c6:77:e8: 24:c7:2e:45:05:99:ca:75:cc:a8:c1:df:8f:de:ac:95:ce:ba: 41:af:9b:2e:68:9b:f3:f8:96:14:a7:46:fa:4c:6f:c4:00:a4: f7:6c:23:07:6b:09:28:20:a4:4d:5a:37:49:f0:bc:2a:32:71: 1c:55:d3:30:42:ca:a7:6c:db:1a:a5:48:c1:51:2d:e4:61:d0: e9:d3:69:e5:5d:69:c7:80:8c:f4:bf:5f:cc:f8:73:d3:3b:71: 40:a2:95:de:5f:08:4d:d6:e6:e5:6f:80:db:db:01:7f:d3:51: 94:0b:53:93:27:bb:c5:43:c8:5f:4c:b5:11:96:2e:c4:02:e2: bd:0f:94:fd:5d:d6:52:cf:a3:98:68:59:1c:6e:d9:ba:f0:04: c6:0f:7f:4d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt5fzNOwSDowMfSQQli4TSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMDEwOTM4ZDllZjcyMTU4ZmM5OGJkNDVkZTcxYjBiMWE5 ZmY3MjkwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDAwNzhmZDZhZDZiZjVmZGZmZjhjYmIzMWU3YWI5YzFkMjVjNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyggZ6lcMf2HPAYRE68l3tdLW80ZU Q3hTDZJXCiyrpVRxmJE37IB9DEoES0pzuNtStOoxskBe0fFUEoKef/tD2S0dzJ9H aCyyB0X00yFoc5dH+gWuQfBnefJSeJlVt375UVp//9XHH0cSbQJCIO0cQWKOiOKU jBL6EbfPfbyh9EEQ41dnRLhJwk3zuCSWwOdW27mc08LGGgBCy5n3DvefomuvMwuy ZHoM7c8ncpcbJw+yppC3/MjQ/EqxTvios9PRX0nn+VDpDw8Z7fh54eGt0RiaBQRq 3tNtJZWbgv02Yp7i6KdhkmnLJGVsjQQSUUrnvOtD4RsP2RGKFj72qTW7BQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN0AeP1q1r9f3/+MuzHnq5wdJcUUMB8GA1UdIwQY MBaAFN0BCTjZ73IVj8mL1F3nGwsan/cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYt Y2VmZjU0NmM5MzNlLzEvM1FCNF9Xcld2MV9mXzR5N01lZXJuQjBseFJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYtY2VmZjU0NmM5MzNl LzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQALVCvMBoE AgACMBQwEgMHACoTfEAAAQMHACoTfEAAAjANBgkqhkiG9w0BAQsFAAOCAQEAgWwR VZ7P4mBievxHhJwsJN+pT3JmizExWbyo2IwDG/loUM0s68Hc6SVzqnyGESIFFGsR T98bqnzCv+aN4Wf0K3cjFal4+XXg39y6hpehw5TX6xpZtjbydSEwEpznWDtHAUob 90uLImq7xnfoJMcuRQWZynXMqMHfj96slc66Qa+bLmib8/iWFKdG+kxvxACk92wj B2sJKCCkTVo3SfC8KjJxHFXTMELKp2zbGqVIwVEt5GHQ6dNp5V1px4CM9L9fzPhz 0ztxQKKV3l8ITdbm5W+A29sBf9NRlAtTkye7xUPIX0y1EZYuxALivQ+U/V3WUs+j mGhZHG7ZuvAExg9/TQ== -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:44 2026 by rpki-client