This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/3Ye3xRBKt2yjTYFdIHKyVc2s6PE.roa File: 3Ye3xRBKt2yjTYFdIHKyVc2s6PE.roa (raw, json) Hash identifier: oezTDWmK3WHr002ir1Ptu9iTniHZPY5ga3z38ge9bZ0= Subject key identifier: DD:87:B7:C5:10:4A:B7:6C:A3:4D:81:5D:20:72:B2:55:CD:AC:E8:F1 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C72B6553C36961AB3F709CF51229B8 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/3Ye3xRBKt2yjTYFdIHKyVc2s6PE.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61087 IP address blocks: 45.89.60.0/24 maxlen: 24 45.150.66.0/24 maxlen: 24 138.124.181.0/24 maxlen: 24 194.39.110.0/24 maxlen: 24 2a0e:4007:fff4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2b:65:53:c3:69:61:ab:3f:70:9c:f5:12:29:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd87b7c5104ab76ca34d815d2072b255cdace8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:4e:07:8c:05:c1:9c:ea:ef:3b:50:87:eb: 93:e3:f0:3f:5f:5c:db:9d:de:2f:78:de:15:c4:9c: b7:e1:ea:3f:d6:b3:bf:27:89:5d:ad:76:6a:dc:32: 1c:68:fc:95:26:19:f0:47:96:32:bf:5d:24:e9:32: 59:f2:54:ef:df:7f:57:ba:7a:83:b3:86:75:23:35: a3:68:9f:ac:47:3c:ab:e8:45:f3:4c:31:f5:57:17: 23:e5:db:c8:3a:8e:03:79:54:5b:01:77:91:2a:5e: e2:f9:7d:78:8c:15:a8:14:96:61:37:f2:ed:bb:ec: 80:2e:a3:15:9d:39:ad:6e:9b:a7:85:f5:6b:71:ae: 4b:fe:ac:29:33:b4:c4:44:a1:ff:8f:0f:ff:89:c2: b1:8f:ad:a7:05:4b:7e:33:2a:a5:43:9c:86:3c:59: 46:b7:02:75:2c:64:27:3b:c9:64:ff:e2:c9:91:2e: 27:65:14:43:39:7c:3e:ed:f4:e7:31:a6:a7:d4:e2: be:97:a5:ca:ba:54:b9:5d:ba:71:46:87:9f:87:35: 8b:1a:1a:b3:2e:22:6c:70:b8:82:fe:87:37:19:1e: 0d:2c:f4:50:5f:61:40:d4:8d:cd:90:f0:b2:9d:5d: b3:0a:42:d7:de:08:7e:64:5b:9c:fc:b8:aa:7d:91: 7f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:B7:C5:10:4A:B7:6C:A3:4D:81:5D:20:72:B2:55:CD:AC:E8:F1 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/3Ye3xRBKt2yjTYFdIHKyVc2s6PE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.60.0/24 45.150.66.0/24 138.124.181.0/24 194.39.110.0/24 IPv6: 2a0e:4007:fff4::/48 Signature Algorithm: sha256WithRSAEncryption 71:2b:75:26:8f:cf:2f:0e:a7:66:9d:fe:7e:7b:aa:e1:b4:e9: 00:6e:d3:5d:86:93:a8:90:84:9e:61:39:6a:66:a9:6d:74:e6: 81:96:44:e9:0c:92:b7:aa:d3:06:d6:f9:ff:56:b9:1b:cb:b4: 48:c6:a3:5c:10:32:6a:61:f2:73:ad:91:4b:76:29:ff:c9:0d: 73:60:1b:b9:6e:2c:8e:14:5f:6b:1f:01:d6:cb:77:c9:e4:5b: bb:1a:68:a4:d1:25:a4:59:2a:03:1c:ed:10:73:4b:14:4a:2e: b3:0d:eb:29:d3:37:4f:c2:7e:70:82:aa:8e:3e:1e:34:4a:68: ed:04:99:e8:8f:1a:6e:71:11:3b:00:60:0c:29:cc:9a:e8:60: 97:b8:6c:33:ba:ff:2d:db:51:25:f5:e7:f7:2b:a5:ca:6f:fe: 62:1d:70:2c:c1:81:74:11:b3:0c:6b:7f:28:01:bb:b5:13:49: 44:25:6f:16:88:ee:57:19:0d:fd:59:ae:00:20:54:6a:37:cc: ff:a4:aa:01:88:c3:b0:76:dd:a9:13:8e:56:10:f8:6f:c6:24: ed:d9:1f:63:cc:8f:e6:49:36:3c:29:e8:5e:19:55:7c:31:d3: d1:a0:2c:03:7a:ec:01:d8:3c:86:be:fd:97:ef:e3:82:df:34: 00:bc:7b:73 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt3xytlU8NpYas/cJz1Eim4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDg3YjdjNTEwNGFiNzZjYTM0ZDgxNWQyMDcyYjI1NWNkYWNlOGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujNOB4wFwZzq7ztQh+uT4/A/X1zb nd4veN4VxJy34eo/1rO/J4ldrXZq3DIcaPyVJhnwR5Yyv10k6TJZ8lTv339XunqD s4Z1IzWjaJ+sRzyr6EXzTDH1Vxcj5dvIOo4DeVRbAXeRKl7i+X14jBWoFJZhN/Lt u+yALqMVnTmtbpunhfVrca5L/qwpM7TERKH/jw//icKxj62nBUt+MyqlQ5yGPFlG twJ1LGQnO8lk/+LJkS4nZRRDOXw+7fTnMaan1OK+l6XKulS5XbpxRoefhzWLGhqz LiJscLiC/oc3GR4NLPRQX2FA1I3NkPCynV2zCkLX3gh+ZFuc/LiqfZF/SwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFN2Ht8UQSrdso02BXSByslXNrOjxMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvM1llM3hSQkt0MnlqVFlGZElIS3lWYzJzNlBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALVk8AwQA LZZCAwQAiny1AwQAwiduMA8EAgACMAkDBwAqDkAH//QwDQYJKoZIhvcNAQELBQAD ggEBAHErdSaPzy8Op2ad/n57quG06QBu012Gk6iQhJ5hOWpmqW105oGWROkMkreq 0wbW+f9WuRvLtEjGo1wQMmph8nOtkUt2Kf/JDXNgG7luLI4UX2sfAdbLd8nkW7sa aKTRJaRZKgMc7RBzSxRKLrMN6ynTN0/CfnCCqo4+HjRKaO0EmeiPGm5xETsAYAwp zJroYJe4bDO6/y3bUSX15/crpcpv/mIdcCzBgXQRswxrfygBu7UTSUQlbxaI7lcZ Df1ZrgAgVGo3zP+kqgGIw7B23akTjlYQ+G/GJO3ZH2PMj+ZJNjwp6F4ZVXwx09Gg LAN67AHYPIa+/Zfv44LfNAC8e3M= -----END CERTIFICATE-----Generated at Wed Jan 21 06:46:58 2026 by rpki-client