This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/aa3gjPhQpHv-BaIkpsQYgGBQCPM.roa File: aa3gjPhQpHv-BaIkpsQYgGBQCPM.roa (raw, json) Hash identifier: 8UFm1q7FERl7hmEhN4RSU3M8aef8QuPV/UHa7FsVID0= Subject key identifier: 69:AD:E0:8C:F8:50:A4:7B:FE:05:A2:24:A6:C4:18:80:60:50:08:F3 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B7F159B1968FEEC0BABBBDFB2018EFD08 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/aa3gjPhQpHv-BaIkpsQYgGBQCPM.roa Signing time: Fri 02 Jan 2026 14:21:20 +0000 ROA not before: Fri 02 Jan 2026 14:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203446 IP address blocks: 45.84.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9b:19:68:fe:ec:0b:ab:bb:df:b2:01:8e:fd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69ade08cf850a47bfe05a224a6c41880605008f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:98:ed:25:18:b7:86:ac:4c:9c:16:41:e9: c7:15:17:94:8a:8c:00:98:74:d6:af:61:a9:48:6e: dd:bf:6d:be:77:84:20:dd:60:b7:45:63:95:6a:56: a5:99:ff:6c:0a:73:1d:28:a6:9d:f7:85:67:a3:83: 44:50:fc:53:81:e7:be:10:72:bf:8c:b4:75:ac:11: c2:47:fe:a2:52:5e:c7:b7:2e:cc:c7:88:6b:b2:57: 93:37:c0:78:f2:74:3a:2d:dc:30:18:e2:49:f5:e5: 9d:86:95:8f:32:84:f1:9f:3f:67:1c:3f:08:c3:96: 24:54:3e:6a:d0:c9:07:cd:7f:37:13:a4:38:d9:1e: 30:28:30:0a:c5:6b:0d:56:8e:41:24:b2:48:82:1c: be:36:b3:f3:b2:e8:1b:e8:97:12:a3:3b:39:77:59: 42:9f:96:4d:4f:68:56:97:b3:18:60:3b:24:7f:7f: 26:04:0e:15:db:d2:3b:1f:a1:04:6b:b4:3c:02:6d: 28:2c:fc:4e:07:6a:a5:f5:82:91:03:73:da:dc:b9: 65:74:9a:8f:13:23:e6:7f:03:e8:7c:74:b7:ae:51: 10:72:7d:26:56:6d:9f:ef:bc:30:51:68:e2:ce:1b: 86:8a:62:42:ed:ce:e9:e1:b0:fa:3a:d7:6c:51:dc: 62:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AD:E0:8C:F8:50:A4:7B:FE:05:A2:24:A6:C4:18:80:60:50:08:F3 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/aa3gjPhQpHv-BaIkpsQYgGBQCPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.240.0/24 Signature Algorithm: sha256WithRSAEncryption 65:30:de:70:f9:e2:1f:8f:8d:9f:46:f0:c3:a0:a6:1b:ad:dc: 92:b6:42:1a:34:7b:2a:7e:bd:51:21:27:62:3d:48:89:7d:ad: 48:9a:07:c5:8e:df:42:bd:82:c4:27:ce:b2:4e:02:cd:78:e8: ac:b0:57:14:8c:94:4a:0e:b5:9d:f7:ec:a8:a5:ef:ec:ca:3e: 65:02:59:7e:6d:b2:8f:9a:8c:78:2c:41:4e:b4:b8:58:d9:8f: e6:9a:57:34:d3:7b:ca:f6:4f:f4:bd:0a:c0:ce:8e:22:9d:d8: c4:9d:46:a7:74:e8:18:c5:e1:d7:cf:a1:0a:60:2a:35:85:8f: 2d:be:dd:a0:29:a6:c7:14:a4:d0:db:09:f8:3b:ec:23:7c:02: 76:8e:5e:29:d6:a6:43:ab:a7:38:77:35:c6:a5:b5:d0:fa:58: 30:69:a3:48:bf:aa:6e:23:86:f5:d0:cb:0d:62:37:77:1f:e7: cf:ba:22:5d:53:d5:fb:31:ae:47:33:ff:dc:3c:20:9a:aa:c5: 34:89:75:c2:db:39:38:42:7a:79:a9:6e:6c:5f:ce:e9:6a:49: 0f:d1:87:a0:96:8a:59:64:cd:67:1d:13:38:ca:40:b3:81:ee: 26:fc:6b:73:f6:e9:fd:86:eb:ae:68:8c:0a:40:0b:8b:80:ad: c7:19:7d:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZsZaP7sC6u737IBjv0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWFkZTA4Y2Y4NTBhNDdiZmUwNWEyMjRhNmM0MTg4MDYwNTAwOGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsOY7SUYt4asTJwWQenHFReUiowA mHTWr2GpSG7dv22+d4Qg3WC3RWOValalmf9sCnMdKKad94Vno4NEUPxTgee+EHK/ jLR1rBHCR/6iUl7Hty7Mx4hrsleTN8B48nQ6LdwwGOJJ9eWdhpWPMoTxnz9nHD8I w5YkVD5q0MkHzX83E6Q42R4wKDAKxWsNVo5BJLJIghy+NrPzsugb6JcSozs5d1lC n5ZNT2hWl7MYYDskf38mBA4V29I7H6EEa7Q8Am0oLPxOB2ql9YKRA3Pa3LlldJqP EyPmfwPofHS3rlEQcn0mVm2f77wwUWjizhuGimJC7c7p4bD6OtdsUdxi4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGmt4Iz4UKR7/gWiJKbEGIBgUAjzMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvYWEzZ2pQaFFwSHYtQmFJa3BzUVlnR0JRQ1BNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTwMA0G CSqGSIb3DQEBCwUAA4IBAQBlMN5w+eIfj42fRvDDoKYbrdyStkIaNHsqfr1RISdi PUiJfa1ImgfFjt9CvYLEJ86yTgLNeOissFcUjJRKDrWd9+yope/syj5lAll+bbKP mox4LEFOtLhY2Y/mmlc003vK9k/0vQrAzo4indjEnUandOgYxeHXz6EKYCo1hY8t vt2gKabHFKTQ2wn4O+wjfAJ2jl4p1qZDq6c4dzXGpbXQ+lgwaaNIv6puI4b10MsN Yjd3H+fPuiJdU9X7Ma5HM//cPCCaqsU0iXXC2zk4Qnp5qW5sX87pakkP0YeglopZ ZM1nHRM4ykCzge4m/Gtz9un9huuuaIwKQAuLgK3HGX1X -----END CERTIFICATE-----Generated at Wed Jan 21 09:22:09 2026 by rpki-client