This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/K3Pc8PqKteR3mXfZaeCaGQiBP08.roa File: K3Pc8PqKteR3mXfZaeCaGQiBP08.roa (raw, json) Hash identifier: nOgQo0ZdFNUmY/9JR31AFLD4lp7zgDYx0s2Dor0Imh8= Subject key identifier: 2B:73:DC:F0:FA:8A:B5:E4:77:99:77:D9:69:E0:9A:19:08:81:3F:4F Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C801EF45D4AC1365DE8E83654CB2A6D Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/K3Pc8PqKteR3mXfZaeCaGQiBP08.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133219 IP address blocks: 45.135.149.0/24 maxlen: 24 45.147.6.0/24 maxlen: 24 194.15.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 08:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1e:f4:5d:4a:c1:36:5d:e8:e8:36:54:cb:2a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b73dcf0fa8ab5e4779977d969e09a1908813f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:99:38:4a:73:a1:59:ae:e0:21:ce:5e:8f: 44:a9:cb:e7:56:22:d9:52:d0:fe:41:b6:2b:cb:36: 73:57:f7:70:0b:84:f2:2b:cb:55:9f:52:89:24:15: fb:2e:9b:d4:85:83:ed:dc:4b:5c:76:8c:c6:76:c4: 44:65:22:96:d2:70:c3:6b:29:47:8c:be:21:77:5e: c2:2a:7b:56:31:f1:d9:9e:33:87:cf:9c:06:7d:b0: 99:12:66:ae:33:7b:25:c1:77:b6:10:2a:52:de:ab: 8d:cd:3d:e8:ba:32:92:3d:6e:b1:5f:53:50:62:23: 8b:52:c1:48:13:03:aa:de:c8:a0:a8:9b:01:81:07: 6b:fc:af:c9:20:f1:6a:7e:be:40:08:65:95:14:3e: c2:07:e3:28:47:20:8c:7b:69:59:50:46:5b:bc:ef: a4:cb:78:c5:a5:94:37:21:f7:5e:05:11:09:5d:ba: 08:5f:29:be:19:26:fe:a0:50:f2:4d:b7:4d:b2:06: 5a:19:24:ee:a9:22:e7:d7:7a:02:dd:40:05:82:18: 80:6f:68:d0:78:d7:2a:22:04:c7:53:af:00:0c:e4: ff:4b:5d:00:30:f2:88:ed:f0:32:a2:e5:a8:50:9f: 72:16:31:9d:f6:a6:cb:ef:37:20:a2:b9:af:d4:9a: 86:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:73:DC:F0:FA:8A:B5:E4:77:99:77:D9:69:E0:9A:19:08:81:3F:4F X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/K3Pc8PqKteR3mXfZaeCaGQiBP08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.149.0/24 45.147.6.0/24 194.15.39.0/24 Signature Algorithm: sha256WithRSAEncryption 19:9e:7e:fe:f0:7d:08:4f:b8:e7:4d:18:8d:63:b8:4a:ea:4f: b1:4d:c4:2e:63:d1:f2:64:13:6e:9d:22:b4:40:a5:87:4c:e4: a4:08:4c:09:be:2f:d4:10:a6:34:d8:72:83:1c:5b:70:33:6f: 86:bf:1f:12:f3:ce:e2:2e:ec:4f:84:fe:de:fa:fe:fe:d0:2a: 55:9d:63:19:61:86:03:91:d2:37:8e:cf:7a:15:0d:8b:a3:2d: c2:53:01:6a:be:9a:cb:20:c4:d9:6f:42:ea:6e:96:e9:aa:5a: 18:7c:c9:61:03:f2:36:3b:f1:3d:9d:c9:50:d3:e6:33:96:6a: f6:5f:f9:74:9a:a3:0d:ba:75:e4:f8:0e:1e:4b:6f:f1:ce:30: 3d:da:6b:b0:dc:10:d2:ae:e3:31:64:55:b2:f0:c2:9c:e1:4e: 9c:35:e7:6b:d5:3b:f1:d7:f4:ec:ba:b5:f2:82:e0:3a:52:9f: e6:b5:3f:4d:b5:9a:ba:fb:86:70:e5:5a:2a:cc:1b:10:d8:5d: 79:df:ba:b9:62:e6:88:5a:d7:1e:9e:bf:b9:da:50:8d:2d:ce: f9:86:a7:6d:83:4b:55:99:3e:9e:df:eb:ac:49:67:74:65:20: f3:51:d3:66:b3:13:2e:1a:b9:ad:a4:d7:da:c5:f7:2d:d6:51: 62:8e:ed:0f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gB70XUrBNl3o6DZUyyptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjczZGNmMGZhOGFiNWU0Nzc5OTc3ZDk2OWUwOWExOTA4ODEzZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0WZOEpzoVmu4CHOXo9EqcvnViLZ UtD+QbYryzZzV/dwC4TyK8tVn1KJJBX7LpvUhYPt3EtcdozGdsREZSKW0nDDaylH jL4hd17CKntWMfHZnjOHz5wGfbCZEmauM3slwXe2ECpS3quNzT3oujKSPW6xX1NQ YiOLUsFIEwOq3sigqJsBgQdr/K/JIPFqfr5ACGWVFD7CB+MoRyCMe2lZUEZbvO+k y3jFpZQ3IfdeBREJXboIXym+GSb+oFDyTbdNsgZaGSTuqSLn13oC3UAFghiAb2jQ eNcqIgTHU68ADOT/S10AMPKI7fAyouWoUJ9yFjGd9qbL7zcgormv1JqGMQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCtz3PD6irXkd5l32WngmhkIgT9PMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvSzNQYzhQcUt0ZVIzbVhmWmFlQ2FHUWlCUDA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYeVAwQA LZMGAwQAwg8nMA0GCSqGSIb3DQEBCwUAA4IBAQAZnn7+8H0IT7jnTRiNY7hK6k+x TcQuY9HyZBNunSK0QKWHTOSkCEwJvi/UEKY02HKDHFtwM2+Gvx8S887iLuxPhP7e +v7+0CpVnWMZYYYDkdI3js96FQ2Loy3CUwFqvprLIMTZb0LqbpbpqloYfMlhA/I2 O/E9nclQ0+Yzlmr2X/l0mqMNunXk+A4eS2/xzjA92muw3BDSruMxZFWy8MKc4U6c Nedr1Tvx1/TsurXyguA6Up/mtT9NtZq6+4Zw5VoqzBsQ2F1537q5YuaIWtcenr+5 2lCNLc75hqdtg0tVmT6e3+usSWd0ZSDzUdNmsxMuGrmtpNfaxfct1lFiju0P -----END CERTIFICATE-----Generated at Fri Jan 16 18:02:42 2026 by rpki-client