This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Fn3txwFOnsHfJqp3dmOvAMcvgHc.roa File: Fn3txwFOnsHfJqp3dmOvAMcvgHc.roa (raw, json) Hash identifier: 0tFPd6mFP89u9IcgrQmVyEuYoDxe9S4zwwRr4qndNks= Subject key identifier: 16:7D:ED:C7:01:4E:9E:C1:DF:26:AA:77:76:63:AF:00:C7:2F:80:77 Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019B7B35C9FA9FAECD06CFD2A5FE0AAAE58E Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Fn3txwFOnsHfJqp3dmOvAMcvgHc.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 45.135.138.0/24 maxlen: 24 45.135.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c9:fa:9f:ae:cd:06:cf:d2:a5:fe:0a:aa:e5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=167dedc7014e9ec1df26aa777663af00c72f8077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:60:f0:c2:37:a4:f4:2c:ba:05:d6:44:c1: 47:61:a6:88:45:2b:e9:0e:a1:f7:c2:35:c6:a5:3f: 94:9f:b3:52:35:a5:1a:4a:50:c6:b3:ba:5c:16:2c: 7a:88:fe:d7:6a:d8:7e:72:ec:c3:51:da:d8:fa:64: 72:60:31:02:84:4b:7a:f6:ea:92:b5:5c:c8:77:a6: 63:a2:86:b1:1d:ca:ea:d6:f8:70:34:d0:8d:a8:e5: d8:91:39:9a:7b:2d:42:59:65:d7:22:b3:c7:4d:b4: d8:05:03:72:08:1e:10:e6:37:2b:33:d6:e2:41:c4: e0:35:74:2f:f2:68:60:9b:ca:4f:0d:01:8d:88:32: 19:5e:20:1e:98:18:07:b9:58:e9:95:d4:65:47:07: 94:49:f3:6e:7e:85:01:c4:6e:61:4d:ce:1c:ed:7b: cb:14:e1:00:e5:fb:64:d5:7e:89:76:1a:5b:72:86: 4d:12:e3:9e:15:46:fc:aa:1e:0c:b1:23:7a:84:cd: 6e:7d:18:10:22:35:14:4a:5e:de:10:3b:b8:de:3e: 9a:38:a7:f4:d4:37:65:93:e6:4f:24:51:56:8d:a6: 2d:04:b8:d4:58:c8:46:9b:01:d7:d2:ae:1a:cd:1c: bd:77:c8:d7:1f:43:f8:73:19:c3:1d:0b:83:12:d9: cb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7D:ED:C7:01:4E:9E:C1:DF:26:AA:77:76:63:AF:00:C7:2F:80:77 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Fn3txwFOnsHfJqp3dmOvAMcvgHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.138.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:55:a0:b4:62:07:dd:ae:3f:70:fc:5f:08:6a:20:1a:cb:40: 57:5b:a4:97:20:eb:40:94:18:5d:f8:57:40:44:bb:d4:f9:a8: 3d:88:56:ee:a8:83:dc:de:e0:6c:59:f7:e5:6d:58:fb:25:3c: 7f:aa:9a:5f:2a:ea:f4:fd:04:d2:86:41:80:c8:72:aa:26:64: 39:bc:83:f1:32:79:c6:ed:ad:1c:4c:70:ff:70:34:78:39:90: 5a:93:55:ca:f2:7b:c9:eb:a3:af:e0:d7:55:5d:5b:8c:d2:69: 6a:c6:2a:d7:41:49:36:e3:5f:4f:9a:b6:b6:11:28:57:57:9f: 84:d5:4d:6d:81:67:a5:10:ba:ea:b6:af:eb:ed:e1:e5:bc:74: 4a:b4:20:8e:f7:7a:a7:9b:e7:d1:50:9a:4a:e7:29:b2:c8:cf: d1:8f:fa:5a:d8:e8:5a:d4:ea:48:1b:5b:40:c2:f2:7b:78:8e: 8f:e8:88:cc:3c:16:63:4c:6b:33:d2:8c:00:71:99:cb:20:1d: 5a:14:42:85:fb:82:f8:ce:97:c6:b9:bf:09:28:a8:61:b1:43: f3:93:3f:55:10:35:a0:6c:67:34:c3:2f:c8:7a:fa:d9:ae:70: 8b:79:89:02:7e:72:21:7f:37:f7:ed:2b:cc:8d:9f:8c:b9:50: 4a:b4:7a:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ncn6n67NBs/Spf4KquWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjdkZWRjNzAxNGU5ZWMxZGYyNmFhNzc3NjYzYWYwMGM3MmY4MDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOZg8MI3pPQsugXWRMFHYaaIRSvp DqH3wjXGpT+Un7NSNaUaSlDGs7pcFix6iP7Xath+cuzDUdrY+mRyYDEChEt69uqS tVzId6ZjooaxHcrq1vhwNNCNqOXYkTmaey1CWWXXIrPHTbTYBQNyCB4Q5jcrM9bi QcTgNXQv8mhgm8pPDQGNiDIZXiAemBgHuVjpldRlRweUSfNufoUBxG5hTc4c7XvL FOEA5ftk1X6JdhpbcoZNEuOeFUb8qh4MsSN6hM1ufRgQIjUUSl7eEDu43j6aOKf0 1Ddlk+ZPJFFWjaYtBLjUWMhGmwHX0q4azRy9d8jXH0P4cxnDHQuDEtnLKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZ97ccBTp7B3yaqd3ZjrwDHL4B3MB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvRm4zdHh3Rk9uc0hmSnFwM2RtT3ZBTWN2Z0hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYeKMA0G CSqGSIb3DQEBCwUAA4IBAQBOVaC0Ygfdrj9w/F8IaiAay0BXW6SXIOtAlBhd+FdA RLvU+ag9iFbuqIPc3uBsWfflbVj7JTx/qppfKur0/QTShkGAyHKqJmQ5vIPxMnnG 7a0cTHD/cDR4OZBak1XK8nvJ66Ov4NdVXVuM0mlqxirXQUk2419Pmra2EShXV5+E 1U1tgWelELrqtq/r7eHlvHRKtCCO93qnm+fRUJpK5ymyyM/Rj/pa2Oha1OpIG1tA wvJ7eI6P6IjMPBZjTGsz0owAcZnLIB1aFEKF+4L4zpfGub8JKKhhsUPzkz9VEDWg bGc0wy/IevrZrnCLeYkCfnIhfzf37SvMjZ+MuVBKtHoQ -----END CERTIFICATE-----Generated at Wed Jan 21 04:08:56 2026 by rpki-client