This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3ImguG6P3wj8KnfIY06ed1TI75M.roa File: 3ImguG6P3wj8KnfIY06ed1TI75M.roa (raw, json) Hash identifier: /fjoVvlsIlv6VHA8J7yUfAEqq3cGHcykgW7b+LDUF8s= Subject key identifier: DC:89:A0:B8:6E:8F:DF:08:FC:2A:77:C8:63:4E:9E:77:54:C8:EF:93 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C802C2BFEFCFC9FD4EA2719318211B3 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3ImguG6P3wj8KnfIY06ed1TI75M.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213850 IP address blocks: 45.142.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2c:2b:fe:fc:fc:9f:d4:ea:27:19:31:82:11:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc89a0b86e8fdf08fc2a77c8634e9e7754c8ef93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f9:3b:f0:84:b2:a5:9f:de:b2:04:72:e7:a2: ec:37:dc:d5:ff:03:a1:4e:84:b4:77:51:30:67:05: f7:20:b5:e3:4a:db:75:de:20:e9:eb:4b:49:00:c4: 4c:07:b4:55:81:01:b0:4d:26:4c:cd:78:cc:8d:47: ba:68:94:f4:e9:7e:cf:7d:b4:22:27:34:33:47:27: f0:6c:c9:e7:69:a1:e3:2e:cc:1f:53:f7:e7:d6:26: 1b:3d:92:1c:99:bd:f7:f9:53:68:81:0f:93:12:57: b2:20:6b:e5:b0:95:b2:dc:a9:6d:61:d1:ae:2e:78: 54:eb:71:62:91:a5:6a:ab:27:66:22:55:0f:ce:b6: 82:02:db:7b:95:01:3b:fc:dc:5b:2a:01:76:73:74: c2:03:2b:e0:51:4e:ab:1c:5d:12:e1:58:0a:4d:5e: 79:ee:d7:31:32:4b:4a:72:77:31:81:f5:f7:52:b5: df:f7:79:f0:5d:c4:61:2e:95:86:94:64:b0:1d:64: 3e:bb:3c:76:a2:cb:37:6b:e9:9e:68:a8:27:e3:6f: 51:49:6e:d6:76:21:44:ff:94:f7:36:8d:cc:aa:38: b9:4b:d0:f2:e3:1f:ad:68:b6:f2:d4:ce:c1:ab:0b: 5e:b5:5d:6c:fd:bc:d5:7a:c5:ed:bc:3f:6c:73:e7: 2a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:A0:B8:6E:8F:DF:08:FC:2A:77:C8:63:4E:9E:77:54:C8:EF:93 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3ImguG6P3wj8KnfIY06ed1TI75M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.104.0/24 Signature Algorithm: sha256WithRSAEncryption 87:30:a7:ec:11:9d:b0:0c:30:69:12:d4:43:db:b9:96:12:c4: 86:1e:92:7f:9f:d7:e6:3d:21:7f:8f:18:d0:29:d2:18:bc:45: 13:7f:ed:66:c6:d2:5b:8e:f3:11:98:af:36:9e:38:14:d7:9e: 14:d8:d3:ed:3c:32:59:d8:5a:7e:46:83:76:59:3d:79:6a:e4: 64:fa:6b:42:2e:2f:da:6c:a3:0a:3b:9d:2c:a8:78:64:ab:01: 7d:21:fb:1f:1d:3f:98:b4:c5:48:b7:a8:a9:75:c6:85:18:06: 9d:7c:4d:dc:73:70:b5:8c:f1:39:52:fb:04:9a:e3:37:3c:c0: 4d:d2:c2:3a:87:98:12:a8:e5:79:3a:7a:e3:ab:8b:11:1e:9b: 44:4f:30:0b:9f:d1:e8:1c:15:60:79:de:35:fb:dc:30:ba:84: 0a:65:42:81:a7:50:bc:77:64:0b:cd:a5:ee:f8:ce:4b:25:9f: 5c:3c:f7:f1:33:f2:a9:7c:35:1c:90:50:99:ad:c5:f4:8e:69: 7a:c4:e5:4b:f3:1f:45:6b:36:78:18:ae:e8:3e:8f:77:4c:7c: 4e:db:85:7b:2c:04:44:96:38:83:ed:fa:54:d1:88:3e:bb:82: 33:4d:e8:7d:6e:6e:16:63:c9:53:80:18:2f:59:ad:2d:e6:f6: df:01:1b:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCwr/vz8n9TqJxkxghGzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzg5YTBiODZlOGZkZjA4ZmMyYTc3Yzg2MzRlOWU3NzU0YzhlZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/k78ISypZ/esgRy56LsN9zV/wOh ToS0d1EwZwX3ILXjStt13iDp60tJAMRMB7RVgQGwTSZMzXjMjUe6aJT06X7PfbQi JzQzRyfwbMnnaaHjLswfU/fn1iYbPZIcmb33+VNogQ+TEleyIGvlsJWy3KltYdGu LnhU63FikaVqqydmIlUPzraCAtt7lQE7/NxbKgF2c3TCAyvgUU6rHF0S4VgKTV55 7tcxMktKcncxgfX3UrXf93nwXcRhLpWGlGSwHWQ+uzx2oss3a+meaKgn429RSW7W diFE/5T3No3Mqji5S9Dy4x+taLby1M7BqwtetV1s/bzVesXtvD9sc+cqAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNyJoLhuj98I/Cp3yGNOnndUyO+TMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvM0ltZ3VHNlAzd2o4S25mSVkwNmVkMVRJNzVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY5oMA0G CSqGSIb3DQEBCwUAA4IBAQCHMKfsEZ2wDDBpEtRD27mWEsSGHpJ/n9fmPSF/jxjQ KdIYvEUTf+1mxtJbjvMRmK82njgU154U2NPtPDJZ2Fp+RoN2WT15auRk+mtCLi/a bKMKO50sqHhkqwF9IfsfHT+YtMVIt6ipdcaFGAadfE3cc3C1jPE5UvsEmuM3PMBN 0sI6h5gSqOV5Onrjq4sRHptETzALn9HoHBVged41+9wwuoQKZUKBp1C8d2QLzaXu +M5LJZ9cPPfxM/KpfDUckFCZrcX0jml6xOVL8x9FazZ4GK7oPo93THxO24V7LARE ljiD7fpU0Yg+u4IzTeh9bm4WY8lTgBgvWa0t5vbfARvB -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:55 2026 by rpki-client