This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/m3QG645Jxe5JU10VjtLZCAwTzqE.roa File: m3QG645Jxe5JU10VjtLZCAwTzqE.roa (raw, json) Hash identifier: qQhuxCc/6YQx1PHrhefGoXSV5uHGKCWCPmjs33OuAHk= Subject key identifier: 9B:74:06:EB:8E:49:C5:EE:49:53:5D:15:8E:D2:D9:08:0C:13:CE:A1 Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37CEEEC8FE8BCB0659556022D82E0 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/m3QG645Jxe5JU10VjtLZCAwTzqE.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212165 IP address blocks: 45.87.245.0/24 maxlen: 24 45.87.246.0/24 maxlen: 24 45.87.247.0/24 maxlen: 24 45.129.142.0/24 maxlen: 24 45.129.143.0/24 maxlen: 24 185.224.212.0/24 maxlen: 24 195.245.249.0/24 maxlen: 24 2a10:9680::/32 maxlen: 32 2a10:9684::/32 maxlen: 32 2a10:9685::/32 maxlen: 32 2a11:e140::/32 maxlen: 32 2a12:7f40::/29 maxlen: 29 2a12:92c0::/29 maxlen: 29 2a12:b3c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7c:ee:ec:8f:e8:bc:b0:65:95:56:02:2d:82:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b7406eb8e49c5ee49535d158ed2d9080c13cea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:22:fd:75:74:69:af:3d:01:3c:bc:a2:61: 62:0a:a2:fe:01:70:72:45:51:e2:46:ba:31:c4:0f: 69:56:f5:2c:7e:6a:a3:cb:cc:fe:9b:66:0f:c7:37: c4:f7:f6:47:98:70:63:15:4c:fc:af:16:29:dc:c2: c7:c1:0d:d5:60:76:00:1a:1f:d5:8a:4f:84:78:3e: a3:94:fc:5f:e2:71:81:1b:f8:64:05:f0:e3:99:b0: 01:6c:17:c8:5a:ca:3b:3c:13:e8:e3:a8:60:89:35: df:3d:99:80:8d:96:67:43:8e:47:29:b0:d6:d8:14: 27:e4:34:66:8d:07:e4:9c:5b:3a:65:ce:ac:37:a2: a4:00:86:c5:9f:0b:d9:7b:98:15:06:99:f7:a6:b4: 6b:46:da:90:2f:7b:d6:f6:36:16:64:7e:59:09:79: d5:d4:3d:ff:56:4d:46:e5:05:cf:64:a8:e3:ad:96: e5:ba:e7:d0:f5:39:b1:3d:72:e2:05:86:57:9e:c2: 8d:c7:78:54:6c:0f:50:f2:39:25:54:f2:51:ae:fc: 5b:1e:4f:2b:12:7f:b1:39:5a:6b:14:9b:dd:bf:ec: 68:05:5f:77:57:ab:e4:7b:0d:cb:7d:e5:c7:db:a7: ef:21:de:0c:e4:43:03:0e:96:2d:fe:c7:7e:a5:75: 5f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:06:EB:8E:49:C5:EE:49:53:5D:15:8E:D2:D9:08:0C:13:CE:A1 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/m3QG645Jxe5JU10VjtLZCAwTzqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.245.0-45.87.247.255 45.129.142.0/23 185.224.212.0/24 195.245.249.0/24 IPv6: 2a10:9680::/32 2a10:9684::/31 2a11:e140::/32 2a12:7f40::/29 2a12:92c0::/29 2a12:b3c0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 06:cc:3a:05:be:3b:7f:e8:9c:e3:56:2a:fc:96:a8:0b:3b:69: 23:f7:89:b9:d2:4d:b9:83:df:2c:8c:a5:3d:f3:bd:f6:f4:31: 39:63:c3:76:2a:81:a9:44:3c:09:15:2e:4d:dc:23:b2:33:f4: 74:9a:de:c2:f2:8c:0d:9b:12:ff:a1:88:19:17:77:79:0c:6e: e4:6d:25:69:77:0f:38:cc:e4:02:d9:c2:4d:7c:00:cb:0e:02: f3:fa:46:41:7b:ac:fe:bb:0a:ef:d1:51:e8:d7:89:b8:f9:55: 37:4f:68:e0:a4:60:94:af:f2:ce:53:17:59:7d:99:ee:b7:e3: b7:ff:ba:92:7c:65:4a:e8:66:99:7e:c1:dc:b1:05:72:92:26: e7:9e:84:9d:1c:ed:05:4a:19:ba:6b:f5:5e:00:5e:5e:a4:f3: f4:90:bd:1e:93:20:86:51:de:f7:0d:45:58:9a:0e:d3:70:3c: f7:6b:0f:35:59:6f:b1:39:df:b7:84:55:c8:64:2e:8e:3f:ce: 11:30:af:6d:a6:d4:ba:ab:85:ed:b6:47:56:d6:d3:a4:dc:d0: 82:fb:c6:eb:a7:60:3e:17:5e:ec:7b:4b:76:e8:6e:b8:12:a4: 87:0a:7c:93:4c:ae:a0:93:30:fb:11:70:ed:58:0f:8a:40:54: a9:5a:e0:83 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt4o3zu7I/ovLBllVYCLYLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjc0MDZlYjhlNDljNWVlNDk1MzVkMTU4ZWQyZDkwODBjMTNjZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRwi/XV0aa89ATy8omFiCqL+AXBy RVHiRroxxA9pVvUsfmqjy8z+m2YPxzfE9/ZHmHBjFUz8rxYp3MLHwQ3VYHYAGh/V ik+EeD6jlPxf4nGBG/hkBfDjmbABbBfIWso7PBPo46hgiTXfPZmAjZZnQ45HKbDW 2BQn5DRmjQfknFs6Zc6sN6KkAIbFnwvZe5gVBpn3prRrRtqQL3vW9jYWZH5ZCXnV 1D3/Vk1G5QXPZKjjrZbluufQ9TmxPXLiBYZXnsKNx3hUbA9Q8jklVPJRrvxbHk8r En+xOVprFJvdv+xoBV93V6vkew3LfeXH26fvId4M5EMDDpYt/sd+pXVfRwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFJt0BuuOScXuSVNdFY7S2QgME86hMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvbTNRRzY0NUp4ZTVKVTEwVmp0TFpDQXdUenFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDAmBAIAATAgMAwDBAAtV/UD BAMtV/ADBAEtgY4DBAC54NQDBADD9fkwMgQCAAIwLAMFACoQloADBQEqEJaEAwUA KhHhQAMFAyoSf0ADBQMqEpLAAwcAKhKzwP//MA0GCSqGSIb3DQEBCwUAA4IBAQAG zDoFvjt/6JzjVir8lqgLO2kj94m50k25g98sjKU987329DE5Y8N2KoGpRDwJFS5N 3COyM/R0mt7C8owNmxL/oYgZF3d5DG7kbSVpdw84zOQC2cJNfADLDgLz+kZBe6z+ uwrv0VHo14m4+VU3T2jgpGCUr/LOUxdZfZnut+O3/7qSfGVK6GaZfsHcsQVykibn noSdHO0FShm6a/VeAF5epPP0kL0ekyCGUd73DUVYmg7TcDz3aw81WW+xOd+3hFXI ZC6OP84RMK9tptS6q4XttkdW1tOk3NCC+8brp2A+F17se0t26G64EqSHCnyTTK6g kzD7EXDtWA+KQFSpWuCD -----END CERTIFICATE-----Generated at Wed Jan 21 17:07:53 2026 by rpki-client