This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3NnjXoVPTTxos8i5gR112-dKJXg.roa File: 3NnjXoVPTTxos8i5gR112-dKJXg.roa (raw, json) Hash identifier: y8Tn9Ne6tesFc4sKxh8uyJYpohtadtLxiPsvsHwG8II= Subject key identifier: DC:D9:E3:5E:85:4F:4D:3C:68:B3:C8:B9:81:1D:75:DB:E7:4A:25:78 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B361DA5E838F3BCA4FA1F0EA217C6E5 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3NnjXoVPTTxos8i5gR112-dKJXg.roa Signing time: Thu 01 Jan 2026 20:18:22 +0000 ROA not before: Thu 01 Jan 2026 20:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395092 IP address blocks: 45.139.54.0/24 maxlen: 24 92.119.161.0/24 maxlen: 24 92.119.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1d:a5:e8:38:f3:bc:a4:fa:1f:0e:a2:17:c6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcd9e35e854f4d3c68b3c8b9811d75dbe74a2578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:bc:f9:16:35:a5:30:9a:b0:7f:b4:89:c0: ea:67:9c:86:ab:1c:f4:5e:05:fb:80:66:68:9f:25: fc:41:cf:8f:87:97:3b:21:60:0f:dd:f0:69:72:36: 0b:aa:2c:39:47:30:a5:5c:18:58:ee:90:4e:1e:30: c6:f6:a4:fe:7c:35:90:5c:d8:f1:54:eb:cd:1b:ad: 94:1d:98:cb:1f:f1:1b:ca:0a:92:7b:c2:00:9d:8b: 8f:ce:43:e4:86:36:4d:cd:e7:4b:53:2b:61:c4:f9: 52:a2:96:c8:99:3b:da:eb:3e:cd:c2:6b:3d:6c:c8: 8c:13:d1:47:d0:26:17:48:ce:44:12:f9:dc:01:74: 2a:16:e3:f7:3f:dc:9f:2a:50:ad:92:3f:91:a7:45: af:2b:8a:27:ba:2d:c6:30:af:cb:6f:79:4a:2c:e4: 76:21:d5:7e:4f:a3:b1:0d:7f:fa:4d:3d:29:f0:e0: a5:81:b0:a7:78:00:38:a5:c2:19:d3:d3:5f:92:9c: 9f:55:5f:c6:f8:06:3b:5c:ba:f9:bf:01:62:36:93: 33:0b:b3:48:07:38:82:fc:cf:6e:5b:66:83:5e:4e: 1f:b4:4d:55:00:ff:d7:37:94:49:c0:13:cc:97:8c: 93:59:28:21:1c:97:44:76:2f:00:0f:d9:ba:84:f3: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D9:E3:5E:85:4F:4D:3C:68:B3:C8:B9:81:1D:75:DB:E7:4A:25:78 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3NnjXoVPTTxos8i5gR112-dKJXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.54.0/24 92.119.161.0/24 92.119.163.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:6a:c2:e7:85:28:49:8d:3e:0b:ab:14:57:98:6b:ef:46:05: 93:ae:39:99:d8:42:97:7d:52:1e:c0:3c:70:ab:13:eb:29:54: 3d:bb:0f:3d:7b:c5:de:0a:4b:46:98:c6:89:e1:b6:7e:27:f9: a5:cd:15:30:ea:bd:ce:85:96:d5:ff:55:17:11:cb:4f:bd:4b: 6f:a5:0f:30:e9:a8:a9:1a:7c:f2:6a:f9:da:fb:83:44:3c:9e: 3d:c3:5a:20:5a:d8:a0:30:80:b9:d0:f8:30:76:f3:7f:05:62: 0d:19:f1:e1:ac:5a:c3:86:d6:af:66:77:33:f1:7c:81:5b:6f: 87:61:75:85:4e:82:de:e6:03:cd:80:32:a0:23:3f:05:92:e0: 6e:9f:95:fa:33:eb:c7:97:12:07:aa:cb:c8:e0:8b:dd:ac:8e: 2d:b6:49:47:50:58:c4:d5:d2:1c:73:ce:b6:43:b2:8b:8a:10: dc:d3:d2:14:a2:aa:48:16:12:22:03:6e:f3:4e:92:b4:39:ae: 49:b4:71:06:a3:26:e6:48:55:d1:52:b5:6f:3b:f5:b4:9a:08: 8f:79:aa:7d:b6:49:55:97:f8:c0:ee:80:c2:5b:37:d8:52:f5: 1c:bc:ec:5d:27:bb:07:b8:3f:01:c3:f8:de:2c:c9:c1:06:ee: d9:37:e2:74 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7Nh2l6DjzvKT6Hw6iF8blMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2Q5ZTM1ZTg1NGY0ZDNjNjhiM2M4Yjk4MTFkNzVkYmU3NGEyNTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1S8+RY1pTCasH+0icDqZ5yGqxz0 XgX7gGZonyX8Qc+Ph5c7IWAP3fBpcjYLqiw5RzClXBhY7pBOHjDG9qT+fDWQXNjx VOvNG62UHZjLH/EbygqSe8IAnYuPzkPkhjZNzedLUythxPlSopbImTva6z7Nwms9 bMiME9FH0CYXSM5EEvncAXQqFuP3P9yfKlCtkj+Rp0WvK4onui3GMK/Lb3lKLOR2 IdV+T6OxDX/6TT0p8OClgbCneAA4pcIZ09NfkpyfVV/G+AY7XLr5vwFiNpMzC7NI BziC/M9uW2aDXk4ftE1VAP/XN5RJwBPMl4yTWSghHJdEdi8AD9m6hPN9QQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNzZ416FT008aLPIuYEdddvnSiV4MB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvM05ualhvVlBUVHhvczhpNWdSMTEyLWRLSlhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYs2AwQA XHehAwQAXHejMA0GCSqGSIb3DQEBCwUAA4IBAQBaasLnhShJjT4LqxRXmGvvRgWT rjmZ2EKXfVIewDxwqxPrKVQ9uw89e8XeCktGmMaJ4bZ+J/mlzRUw6r3OhZbV/1UX EctPvUtvpQ8w6aipGnzyavna+4NEPJ49w1ogWtigMIC50PgwdvN/BWINGfHhrFrD htavZncz8XyBW2+HYXWFToLe5gPNgDKgIz8FkuBun5X6M+vHlxIHqsvI4IvdrI4t tklHUFjE1dIcc862Q7KLihDc09IUoqpIFhIiA27zTpK0Oa5JtHEGoybmSFXRUrVv O/W0mgiPeap9tklVl/jA7oDCWzfYUvUcvOxdJ7sHuD8Bw/jeLMnBBu7ZN+J0 -----END CERTIFICATE-----Generated at Thu Jan 15 13:19:25 2026 by rpki-client