This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-3LZTEM0QeXlSWqpl-HShHsIpVg.roa File: 1-3LZTEM0QeXlSWqpl-HShHsIpVg.roa (raw, json) Hash identifier: Evo3h/Pref3pdTbiLRZns73z53q9WdlBpkAMaAvjsXQ= Subject key identifier: FB:72:D9:4C:43:34:41:E5:E5:49:6A:A9:97:E1:D2:84:7B:08:A5:58 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA759FFEBCE452B4F8804C5287BC290 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-3LZTEM0QeXlSWqpl-HShHsIpVg.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43641 IP address blocks: 45.92.77.0/24 maxlen: 24 77.72.81.0/24 maxlen: 24 146.19.93.0/24 maxlen: 24 188.93.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:59:ff:eb:ce:45:2b:4f:88:04:c5:28:7b:c2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb72d94c433441e5e5496aa997e1d2847b08a558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:08:b8:a9:eb:18:73:90:09:00:39:54:b3:4a: 4c:9b:2c:28:89:5d:9f:a5:1d:a5:18:d9:40:5b:9e: ea:dc:36:24:39:b6:25:24:e5:03:ef:52:78:2e:7e: 71:50:3e:03:46:ee:2b:2c:47:3d:03:6d:c1:3f:a1: 98:7e:08:55:3d:da:84:86:71:04:89:0e:60:41:7c: 1d:c2:6f:a4:0d:b4:b2:f2:c4:27:85:2c:06:6b:f1: 8b:f1:23:49:bd:32:49:50:c4:7d:3e:1d:26:f8:a1: 9e:37:49:1f:cb:3a:fa:7e:29:18:31:e4:6f:d0:2f: 54:6b:87:3b:c2:1d:d2:10:96:ab:cd:56:0a:2a:d1: 84:32:09:5d:12:4a:3e:4f:a9:f0:0d:d2:47:83:bf: 78:73:de:20:29:ab:79:e2:52:7d:b3:ae:fb:ba:7c: 96:18:e4:d7:6a:44:59:5b:79:de:86:07:da:d2:6d: a8:54:88:01:4b:0f:73:64:4e:f9:57:77:38:60:77: 4d:90:9e:e4:14:93:9b:5c:4a:29:f6:f0:44:24:d7: 97:17:02:ef:e4:4b:c1:f7:25:5e:06:82:a1:43:cd: 4e:b8:99:24:cb:48:92:3a:00:7d:cd:dd:62:57:e0: 24:98:e4:1f:b4:d5:b8:a6:51:a5:ca:ed:47:38:d6: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:72:D9:4C:43:34:41:E5:E5:49:6A:A9:97:E1:D2:84:7B:08:A5:58 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-3LZTEM0QeXlSWqpl-HShHsIpVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.77.0/24 77.72.81.0/24 146.19.93.0/24 188.93.138.0/24 Signature Algorithm: sha256WithRSAEncryption 40:18:ca:8f:d7:b7:ab:5b:66:9b:bf:00:ad:9f:31:71:65:73: 2c:43:87:81:93:ad:7e:3a:93:ec:1a:c1:e0:53:00:e3:37:09: 5f:1d:d1:1f:78:ae:8b:89:e7:5f:cd:68:4b:75:37:f8:5c:67: 1c:12:72:10:42:06:a9:25:35:6a:dc:4d:79:af:b9:17:78:43: 56:a5:bd:d8:89:4a:ee:4d:a3:e3:82:8d:3f:59:d5:8f:f9:fb: 09:25:24:9d:5e:8d:1b:e9:e6:2a:9b:c5:31:4a:92:f8:e6:4b: 9f:f9:d3:a4:8b:98:f6:70:94:51:41:47:63:82:db:7f:14:1d: 8a:6d:3d:b0:9c:4e:e0:37:32:45:ad:46:1c:ba:24:c7:21:95: 69:6b:0b:b4:ac:7a:2e:5b:41:9d:28:ae:fb:54:45:04:c7:dd: d4:69:3f:04:4e:bb:30:11:68:c9:8d:cb:bc:39:02:f6:70:63: ef:d4:50:13:c9:6f:7d:8d:36:0a:93:24:6c:fb:ed:b4:79:e2: e1:f3:8e:df:30:50:58:1d:60:07:07:59:59:4a:ed:d6:65:1e: ee:56:22:71:b3:73:47:43:b0:89:16:ad:15:26:8e:1c:8f:7a: b9:4b:77:5f:f3:79:6c:81:ad:85:0a:9d:a4:97:7c:f7:1e:c1: 61:9a:ba:6f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt+p1n/685FK0+IBMUoe8KQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjcyZDk0YzQzMzQ0MWU1ZTU0OTZhYTk5N2UxZDI4NDdiMDhhNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwi4qesYc5AJADlUs0pMmywoiV2f pR2lGNlAW57q3DYkObYlJOUD71J4Ln5xUD4DRu4rLEc9A23BP6GYfghVPdqEhnEE iQ5gQXwdwm+kDbSy8sQnhSwGa/GL8SNJvTJJUMR9Ph0m+KGeN0kfyzr6fikYMeRv 0C9Ua4c7wh3SEJarzVYKKtGEMgldEko+T6nwDdJHg794c94gKat54lJ9s677unyW GOTXakRZW3nehgfa0m2oVIgBSw9zZE75V3c4YHdNkJ7kFJObXEop9vBEJNeXFwLv 5EvB9yVeBoKhQ81OuJkky0iSOgB9zd1iV+AkmOQftNW4plGlyu1HONb1RwIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFPty2UxDNEHl5UlqqZfh0oR7CKVYMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvMS0zTFpURU0wUWVYbFNXcXBsLUhTaEhzSXBWZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWUvM2NhYTUxLTdhMjEtNDk5ZC1hNTQ1LWJhZmJkZmM4MTMy YS8xL1R4UVJMUVhwMkhZVW5TZDQxSTdhcWpKTnNLVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAC1cTQME AE1IUQMEAJITXQMEALxdijANBgkqhkiG9w0BAQsFAAOCAQEAQBjKj9e3q1tmm78A rZ8xcWVzLEOHgZOtfjqT7BrB4FMA4zcJXx3RH3iui4nnX81oS3U3+FxnHBJyEEIG qSU1atxNea+5F3hDVqW92IlK7k2j44KNP1nVj/n7CSUknV6NG+nmKpvFMUqS+OZL n/nTpIuY9nCUUUFHY4LbfxQdim09sJxO4DcyRa1GHLokxyGVaWsLtKx6LltBnSiu +1RFBMfd1Gk/BE67MBFoyY3LvDkC9nBj79RQE8lvfY02CpMkbPvttHni4fOO3zBQ WB1gBwdZWUrt1mUe7lYicbNzR0OwiRatFSaOHI96uUt3X/N5bIGthQqdpJd89x7B YZq6bw== -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:21 2026 by rpki-client