This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3Od8fkiX1npNiDZbFwY_RwqIDb0.roa File: 3Od8fkiX1npNiDZbFwY_RwqIDb0.roa (raw, json) Hash identifier: YkQ0Ohp5FtKM5KyAeZ1EG5zQjArcLpeRdP8tRQhDW5o= Subject key identifier: DC:E7:7C:7E:48:97:D6:7A:4D:88:36:5B:17:06:3F:47:0A:88:0D:BD Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA1F185F71CFD55B23F01DEAE7A019 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3Od8fkiX1npNiDZbFwY_RwqIDb0.roa Signing time: Fri 02 Jan 2026 08:19:16 +0000 ROA not before: Fri 02 Jan 2026 08:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10103 IP address blocks: 45.141.130.0/24 maxlen: 24 212.87.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:1f:18:5f:71:cf:d5:5b:23:f0:1d:ea:e7:a0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dce77c7e4897d67a4d88365b17063f470a880dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:cb:5a:52:dc:82:37:2b:33:42:4f:c9:b3: 2e:64:51:79:3d:dd:c8:49:92:7c:4b:c1:25:5f:c7: 16:fb:1f:26:5b:9e:84:48:26:14:1f:11:91:30:56: 33:fb:93:14:97:bb:a1:3f:62:ca:08:fa:f7:36:e9: 32:9c:57:94:9f:51:cf:01:06:0b:2f:03:81:a3:ec: c0:5a:62:3a:57:f9:42:3f:94:e1:bd:e7:e6:38:42: 9c:44:c9:6a:0c:65:a2:19:17:cd:49:bf:5a:27:f0: c7:8a:ba:f7:f3:36:d6:45:8c:78:d6:2e:17:fb:80: 56:f6:94:b0:00:64:5d:16:b6:28:4d:0d:08:47:3e: 3f:d1:b2:4f:9c:39:d0:d7:78:79:39:7a:a0:08:cb: 62:c0:05:0a:a5:17:bd:e7:93:42:e4:29:7d:4f:b0: a6:8a:cc:5c:b7:c6:33:9b:83:d8:f9:68:6c:6f:ed: 87:96:52:b3:6f:dd:af:33:2b:4e:29:9f:58:7c:78: 6d:78:bc:d3:c9:08:dd:50:39:c5:af:cd:be:1d:50: f9:fb:fe:b6:df:37:30:e5:20:4d:48:a5:0d:2a:6b: a4:ec:2e:ec:89:88:42:84:d5:68:6e:2a:39:4d:11: b7:af:14:14:34:8a:f4:a8:53:bd:92:34:f0:ae:51: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E7:7C:7E:48:97:D6:7A:4D:88:36:5B:17:06:3F:47:0A:88:0D:BD X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3Od8fkiX1npNiDZbFwY_RwqIDb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.130.0/24 212.87.217.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:c2:1a:43:f8:d0:95:58:f0:36:f7:65:9c:aa:7d:4a:47:f1: 8c:26:b5:e9:6a:04:3a:ca:5a:f4:35:50:aa:86:08:a0:35:f8: ea:0e:fd:0a:d6:71:3e:7d:f8:71:a2:dd:9b:00:21:30:22:52: fc:1a:31:d1:c3:10:a4:0b:52:80:cc:c0:31:81:f6:88:4c:10: cf:6d:61:05:ab:86:17:88:63:a4:7a:2b:84:81:7c:9b:3b:5d: ac:ad:e1:cc:c4:1d:8f:34:89:bd:51:e7:d1:75:90:4a:ef:8e: 6f:b7:c3:fa:f4:1f:c7:44:aa:37:e5:20:52:66:e5:9b:45:2a: c8:de:df:ab:ce:0e:8d:5b:e6:a7:c8:7d:54:a3:f2:3b:d1:2a: a5:3f:07:5a:d0:bc:0f:c1:fa:3d:13:a0:b6:7e:21:c3:56:d9: d5:18:61:cc:f4:00:33:e2:48:0a:07:0d:c0:4a:52:f4:35:64: 4c:1a:b3:83:f1:aa:fd:21:3d:79:89:b3:0d:8e:31:23:d3:00: 16:72:bf:c2:ec:c6:18:7d:df:48:90:24:1d:2a:f6:ba:38:63: 40:ef:d6:09:f1:4b:01:b3:45:d2:fb:d0:25:cd:11:54:59:fe: 1d:f5:92:42:3c:1f:91:d0:ee:10:96:fc:88:aa:11:73:ce:3e: fb:d7:a1:78 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yh8YX3HP1Vsj8B3q56AZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2U3N2M3ZTQ4OTdkNjdhNGQ4ODM2NWIxNzA2M2Y0NzBhODgwZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6bLWlLcgjcrM0JPybMuZFF5Pd3I SZJ8S8ElX8cW+x8mW56ESCYUHxGRMFYz+5MUl7uhP2LKCPr3NukynFeUn1HPAQYL LwOBo+zAWmI6V/lCP5ThvefmOEKcRMlqDGWiGRfNSb9aJ/DHirr38zbWRYx41i4X +4BW9pSwAGRdFrYoTQ0IRz4/0bJPnDnQ13h5OXqgCMtiwAUKpRe955NC5Cl9T7Cm isxct8Yzm4PY+Whsb+2HllKzb92vMytOKZ9YfHhteLzTyQjdUDnFr82+HVD5+/62 3zcw5SBNSKUNKmuk7C7siYhChNVobio5TRG3rxQUNIr0qFO9kjTwrlGK7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNznfH5Il9Z6TYg2WxcGP0cKiA29MB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvM09kOGZraVgxbnBOaURaYkZ3WV9Sd3FJRGIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY2CAwQA 1FfZMA0GCSqGSIb3DQEBCwUAA4IBAQCbwhpD+NCVWPA292Wcqn1KR/GMJrXpagQ6 ylr0NVCqhgigNfjqDv0K1nE+ffhxot2bACEwIlL8GjHRwxCkC1KAzMAxgfaITBDP bWEFq4YXiGOkeiuEgXybO12sreHMxB2PNIm9UefRdZBK745vt8P69B/HRKo35SBS ZuWbRSrI3t+rzg6NW+anyH1Uo/I70SqlPwda0LwPwfo9E6C2fiHDVtnVGGHM9AAz 4kgKBw3ASlL0NWRMGrOD8ar9IT15ibMNjjEj0wAWcr/C7MYYfd9IkCQdKva6OGNA 79YJ8UsBs0XS+9AlzRFUWf4d9ZJCPB+R0O4QlvyIqhFzzj7716F4 -----END CERTIFICATE-----Generated at Mon Jan 19 21:25:08 2026 by rpki-client