This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/84-3SJk4QaD9jbxVPvrJ0GU3kBk.roa File: 84-3SJk4QaD9jbxVPvrJ0GU3kBk.roa (raw, json) Hash identifier: wrnuHE6QjHxe+FuSoT0E9njhR0JRXWmzouk6plX+sQY= Subject key identifier: F3:8F:B7:48:99:38:41:A0:FD:8D:BC:55:3E:FA:C9:D0:65:37:90:19 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F144DEDCA6D6EE698AD71A916915794 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/84-3SJk4QaD9jbxVPvrJ0GU3kBk.roa Signing time: Fri 02 Jan 2026 14:19:55 +0000 ROA not before: Fri 02 Jan 2026 14:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53356 IP address blocks: 147.45.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4d:ed:ca:6d:6e:e6:98:ad:71:a9:16:91:57:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f38fb748993841a0fd8dbc553efac9d065379019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8d:02:73:0f:ee:6f:37:26:e4:06:ac:40:7f: 17:a6:4c:14:f5:28:2b:a6:94:e7:9d:32:6d:b6:bb: ff:7b:a8:b5:cf:41:08:a0:8d:6c:61:38:ff:19:8d: f8:ba:5a:2c:18:ed:a6:c5:6f:fc:ff:13:79:e9:e6: e3:e5:e1:db:37:64:98:40:86:5a:bc:6b:ef:be:71: 0a:34:ba:75:24:6b:89:b2:a1:0c:57:fd:24:e4:5d: e4:e8:17:8e:fd:4f:8d:97:e0:56:4a:0d:29:a9:90: 17:a3:ce:b5:29:90:4e:7c:55:e1:f8:9e:86:a9:6a: 4f:ed:f3:a0:23:6b:40:28:b5:e1:73:a7:d1:1a:f1: bc:a7:2f:91:51:1c:cf:57:27:ed:2c:7c:1f:26:88: 62:c9:25:36:84:8b:ab:ed:28:21:44:89:2d:84:00: d0:3d:43:55:2a:02:ae:6e:8f:f6:95:1b:cb:56:73: d6:dd:ab:5c:59:63:e9:5a:d8:b0:da:73:3a:b5:5b: e3:00:5b:3c:e8:d1:22:f1:75:f0:9e:dc:b5:f0:3a: 9f:b8:9b:8d:4f:88:84:43:4e:b8:d7:92:02:3e:ff: d4:d7:d0:cb:e9:da:d8:0d:02:c6:0e:95:5f:cd:8a: 13:da:8e:f7:32:f9:73:e0:67:31:31:50:e9:3f:24: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8F:B7:48:99:38:41:A0:FD:8D:BC:55:3E:FA:C9:D0:65:37:90:19 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/84-3SJk4QaD9jbxVPvrJ0GU3kBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.114.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:1f:05:00:33:90:2c:5b:07:4d:34:3f:c5:c4:04:ea:ca:5a: 74:0c:a5:ae:ef:3d:13:1f:81:54:36:e2:94:6c:4d:15:6b:29: 77:42:13:92:79:d0:59:e8:d8:cb:a3:fe:73:f8:ff:5e:8d:a5: 4c:c8:03:0c:7d:6d:cc:e8:26:e1:dd:8b:4d:26:af:75:4a:10: 3c:a5:98:c4:c6:9e:f6:0a:88:74:32:69:39:71:a2:40:46:a2: de:51:b8:4a:9d:e7:20:b0:a9:32:9b:da:8f:4c:84:5f:a8:5f: fe:96:f7:9d:1e:07:b9:85:72:5b:06:79:f3:e9:29:15:a2:d5: 25:67:12:85:13:d2:97:43:6a:07:dd:b9:27:c1:9f:16:fb:52: ef:71:12:62:18:a6:5a:55:56:bc:8b:7c:16:57:aa:db:8c:cf: ca:ec:1c:71:3b:5b:84:f2:99:ff:40:17:76:04:18:c8:f6:39: fa:89:bb:69:7f:17:d6:4e:59:aa:54:be:bc:6e:ed:dd:92:f3: bb:eb:9f:cf:6b:19:ae:68:c3:af:e7:cc:de:80:98:40:fb:32: d5:19:10:40:05:2a:4d:bc:94:d2:ac:d7:25:dc:31:0e:85:6a: 03:28:df:2b:80:b7:67:5c:08:de:16:9f:1c:68:5e:c1:3e:c4: 2d:70:32:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FE3tym1u5pitcakWkVeUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzhmYjc0ODk5Mzg0MWEwZmQ4ZGJjNTUzZWZhYzlkMDY1Mzc5MDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI0Ccw/ubzcm5AasQH8XpkwU9Sgr ppTnnTJttrv/e6i1z0EIoI1sYTj/GY34ulosGO2mxW/8/xN56ebj5eHbN2SYQIZa vGvvvnEKNLp1JGuJsqEMV/0k5F3k6BeO/U+Nl+BWSg0pqZAXo861KZBOfFXh+J6G qWpP7fOgI2tAKLXhc6fRGvG8py+RURzPVyftLHwfJohiySU2hIur7SghRIkthADQ PUNVKgKubo/2lRvLVnPW3atcWWPpWtiw2nM6tVvjAFs86NEi8XXwnty18DqfuJuN T4iEQ06415ICPv/U19DL6drYDQLGDpVfzYoT2o73Mvlz4GcxMVDpPySgiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPOPt0iZOEGg/Y28VT76ydBlN5AZMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvODQtM1NKazRRYUQ5amJ4VlB2ckowR1Uza0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAky1yMA0G CSqGSIb3DQEBCwUAA4IBAQB/HwUAM5AsWwdNND/FxATqylp0DKWu7z0TH4FUNuKU bE0Vayl3QhOSedBZ6NjLo/5z+P9ejaVMyAMMfW3M6Cbh3YtNJq91ShA8pZjExp72 Coh0Mmk5caJARqLeUbhKnecgsKkym9qPTIRfqF/+lvedHge5hXJbBnnz6SkVotUl ZxKFE9KXQ2oH3bknwZ8W+1LvcRJiGKZaVVa8i3wWV6rbjM/K7BxxO1uE8pn/QBd2 BBjI9jn6ibtpfxfWTlmqVL68bu3dkvO765/PaxmuaMOv58zegJhA+zLVGRBABSpN vJTSrNcl3DEOhWoDKN8rgLdnXAjeFp8caF7BPsQtcDLZ -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:44 2026 by rpki-client