This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/3aS_biMuk3t6OSrvJyokC_jXDfU.roa File: 3aS_biMuk3t6OSrvJyokC_jXDfU.roa (raw, json) Hash identifier: uIA1uRbc2hX8KsAKbb90U8OFKc7TaqfJ9JatfJ5wndY= Subject key identifier: DD:A4:BF:6E:23:2E:93:7B:7A:39:2A:EF:27:2A:24:0B:F8:D7:0D:F5 Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Certificate serial: 019B797E342A1543CADF4D95E83753B8FB27 Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/3aS_biMuk3t6OSrvJyokC_jXDfU.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202348 IP address blocks: 91.240.89.0/24 maxlen: 24 2a13:141:2::/48 maxlen: 48 2a13:141:4::/48 maxlen: 48 2a13:141:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:34:2a:15:43:ca:df:4d:95:e8:37:53:b8:fb:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dda4bf6e232e937b7a392aef272a240bf8d70df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:66:e5:fa:06:45:78:e7:1d:cb:04:3c:48: a5:8b:6a:9f:13:b8:9c:2e:d8:2b:29:b6:b1:25:1e: 59:61:1d:38:2a:5b:30:3c:ad:9a:af:c2:4a:c9:e5: 8b:0c:9f:58:87:e8:4b:a0:ca:e6:df:b2:55:91:c1: 2f:ba:27:37:30:95:f8:d9:25:c7:4f:02:f6:82:19: 83:95:ae:b4:fd:ab:94:4b:79:79:0f:3b:46:99:73: 7f:a0:a6:6c:2c:47:af:b5:9e:a9:9c:83:11:86:7e: d7:7c:b8:41:4d:cd:66:f8:d2:6f:29:c7:cd:16:a2: e4:47:37:72:0c:54:c5:0e:c7:fa:c4:af:9f:e3:57: d2:ee:ce:df:89:5e:1c:8d:aa:35:11:4b:12:b2:b4: ef:b7:39:7b:48:ea:a8:78:76:23:a8:12:ff:a5:56: 1a:e4:30:3b:89:2a:af:57:5a:be:aa:b7:04:8b:42: a2:d2:f5:34:34:1b:89:b3:b3:d7:23:19:6c:3b:15: 0e:77:64:98:87:18:74:7b:cb:6c:62:61:52:e9:f5: bf:9e:a7:34:ea:f1:df:32:8e:82:38:34:f2:d1:87: 9b:b9:2d:f3:b1:68:54:9e:72:5d:78:db:b3:66:0f: 4c:e6:6d:dc:c1:3d:9f:d5:cf:97:73:b7:c3:b3:89: d7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A4:BF:6E:23:2E:93:7B:7A:39:2A:EF:27:2A:24:0B:F8:D7:0D:F5 X509v3 Authority Key Identifier: keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/3aS_biMuk3t6OSrvJyokC_jXDfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.89.0/24 IPv6: 2a13:141:2::/48 2a13:141:4::/48 2a13:141:11::/48 Signature Algorithm: sha256WithRSAEncryption 24:9c:d8:04:a5:a3:07:19:ec:9c:c6:66:8b:97:a6:5c:7f:28: 18:70:3a:a1:e0:4a:5f:ac:f9:54:87:80:0b:28:25:d0:2e:59: 45:e2:7c:74:8a:c5:01:ff:7f:a8:df:5c:00:d2:b6:1c:ed:1c: 8c:a9:a4:cb:bd:32:63:09:fa:e7:81:3f:b1:17:53:b5:5f:07: 00:62:21:d1:e5:1c:f9:1b:2e:3f:e0:b0:c1:d5:2c:56:dd:c4: 60:9a:9c:87:a1:45:e1:2a:45:7c:c7:99:9a:2d:ca:0a:69:24: f8:e6:82:51:40:30:12:2b:a4:94:01:7b:ea:bc:f4:db:29:1a: f8:f0:a8:d5:75:88:13:9b:cf:d2:c5:03:5a:ce:06:cb:95:6c: a5:9b:03:f7:0d:40:27:ba:65:dc:5a:ea:d7:bb:51:b2:3d:ce: d4:63:22:95:ab:d4:6d:18:e2:32:bf:c0:58:81:27:74:08:b6: 86:0c:d6:2c:61:7e:e1:d8:0d:6d:32:6b:8d:3d:a8:d2:a8:38: ff:a8:4f:a7:3b:c5:c2:27:d6:99:3f:92:27:7d:f1:23:fb:72: 83:2e:ea:00:30:82:f3:4d:b1:4b:44:58:6a:d9:18:77:37:8c: ed:38:85:c6:69:a9:69:4f:ca:a3:ac:04:63:61:a9:a8:f3:96: 80:7e:71:ab -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt5fjQqFUPK302V6DdTuPsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDU4ZTQwYzZkOTFmMzcyOWU1N2UzMzQ0ZDMwOGI1OTky ZmU0NmUwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGE0YmY2ZTIzMmU5MzdiN2EzOTJhZWYyNzJhMjQwYmY4ZDcwZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kBm5foGRXjnHcsEPEili2qfE7ic LtgrKbaxJR5ZYR04KlswPK2ar8JKyeWLDJ9Yh+hLoMrm37JVkcEvuic3MJX42SXH TwL2ghmDla60/auUS3l5DztGmXN/oKZsLEevtZ6pnIMRhn7XfLhBTc1m+NJvKcfN FqLkRzdyDFTFDsf6xK+f41fS7s7fiV4cjao1EUsSsrTvtzl7SOqoeHYjqBL/pVYa 5DA7iSqvV1q+qrcEi0Ki0vU0NBuJs7PXIxlsOxUOd2SYhxh0e8tsYmFS6fW/nqc0 6vHfMo6CODTy0YebuS3zsWhUnnJdeNuzZg9M5m3cwT2f1c+Xc7fDs4nXJQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFN2kv24jLpN7ejkq7ycqJAv41w31MB8GA1UdIwQY MBaAFDDVjkDG2R83KeV+M0TTCLWZL+RuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEt ZjgyYjcwZDhhMGE3LzEvM2FTX2JpTXVrM3Q2T1Nydkp5b2tDX2pYRGZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEtZjgyYjcwZDhhMGE3 LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAW/BZMCEE AgACMBsDBwAqEwFBAAIDBwAqEwFBAAQDBwAqEwFBABEwDQYJKoZIhvcNAQELBQAD ggEBACSc2ASlowcZ7JzGZouXplx/KBhwOqHgSl+s+VSHgAsoJdAuWUXifHSKxQH/ f6jfXADSthztHIyppMu9MmMJ+ueBP7EXU7VfBwBiIdHlHPkbLj/gsMHVLFbdxGCa nIehReEqRXzHmZotygppJPjmglFAMBIrpJQBe+q89NspGvjwqNV1iBObz9LFA1rO BsuVbKWbA/cNQCe6Zdxa6te7UbI9ztRjIpWr1G0Y4jK/wFiBJ3QItoYM1ixhfuHY DW0ya409qNKoOP+oT6c7xcIn1pk/kid98SP7coMu6gAwgvNNsUtEWGrZGHc3jO04 hcZpqWlPyqOsBGNhqajzloB+cas= -----END CERTIFICATE-----Generated at Sun Jan 11 02:59:05 2026 by rpki-client