This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/05WyMyWcwnVDoZCr0BbmBiMaPoc.roa File: 05WyMyWcwnVDoZCr0BbmBiMaPoc.roa (raw, json) Hash identifier: ZxXNQ2QkuA/tbUaOYs+oznQKVfcUfC5jKVIgdvSVmnk= Subject key identifier: D3:95:B2:33:25:9C:C2:75:43:A1:90:AB:D0:16:E6:06:23:1A:3E:87 Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3 Certificate serial: 019B7C135993B3F2434BE6B89DADC8933AD8 Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/05WyMyWcwnVDoZCr0BbmBiMaPoc.roa Signing time: Fri 02 Jan 2026 00:20:01 +0000 ROA not before: Fri 02 Jan 2026 00:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48305 IP address blocks: 45.148.0.0/22 maxlen: 22 91.242.128.0/22 maxlen: 24 91.242.128.0/24 maxlen: 24 91.242.130.0/23 maxlen: 23 91.242.132.0/22 maxlen: 24 91.242.133.0/24 maxlen: 24 185.86.184.0/22 maxlen: 22 2a03:77e0:3301::/48 maxlen: 48 2a03:77e0:3302::/48 maxlen: 48 2a03:77e0:4401::/48 maxlen: 48 2a03:77e0:5301::/48 maxlen: 48 2a0f:4400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:59:93:b3:f2:43:4b:e6:b8:9d:ad:c8:93:3a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d395b233259cc27543a190abd016e606231a3e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:bc:a5:bc:1f:3c:aa:23:f1:5f:a4:2f:f1: df:50:78:76:3f:d1:b2:0e:67:c3:18:28:17:d9:08: 80:b5:11:fc:76:49:73:4b:7f:52:8d:49:9d:20:03: 66:79:29:bf:ed:fb:f2:72:80:04:30:d8:8a:6e:44: 9e:4e:ad:01:73:25:76:58:bb:1e:bc:f2:00:dc:2f: bc:52:43:9e:2a:0a:23:9d:bc:0c:3b:14:d7:de:5e: eb:ae:a4:76:47:43:ae:8f:43:dc:48:91:f8:5a:da: 1e:17:16:77:d0:e9:25:28:4b:62:82:83:71:19:2b: b8:9f:d5:fe:60:fc:f9:4f:fc:d1:7d:11:bd:87:f7: 19:a5:8c:aa:19:f2:c4:31:d5:ed:6d:f1:9b:00:b7: d5:ee:43:61:cc:b5:7d:fc:0c:6a:40:f7:49:88:ca: dd:29:d4:6e:33:ec:06:1f:b8:b1:32:bf:9b:53:61: 09:2c:ae:8b:1e:8c:6a:d6:10:a9:49:2c:44:de:f7: 5b:4e:a9:3d:69:71:2f:12:33:ad:df:45:9a:e2:fe: c3:a9:db:43:20:a2:61:03:a8:24:9c:c0:0e:69:90: 85:52:00:19:68:28:02:6f:bd:87:49:65:a6:3c:38: 57:40:f0:03:a5:78:39:f3:65:e9:b3:91:c8:f0:8b: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:95:B2:33:25:9C:C2:75:43:A1:90:AB:D0:16:E6:06:23:1A:3E:87 X509v3 Authority Key Identifier: keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/05WyMyWcwnVDoZCr0BbmBiMaPoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.0.0/22 91.242.128.0/21 185.86.184.0/22 IPv6: 2a03:77e0:3301::-2a03:77e0:3302:ffff:ffff:ffff:ffff:ffff 2a03:77e0:4401::/48 2a03:77e0:5301::/48 2a0f:4400::/29 Signature Algorithm: sha256WithRSAEncryption 47:44:5b:fe:ae:78:46:c5:ae:68:09:73:ab:fe:d4:f6:c3:e1: 16:32:16:f0:44:43:e9:c7:ff:22:81:d9:ac:f0:4f:19:1b:0a: d1:fa:56:45:86:b5:57:55:18:00:51:f2:75:f3:27:f8:a8:b7: 1c:23:70:d1:fa:39:b4:81:c5:e5:23:73:0f:e0:b3:6d:fd:91: f6:75:e7:70:de:63:b2:34:c8:32:13:61:c8:d6:54:52:55:bb: f7:18:2b:f7:ae:e9:bc:5d:7d:2e:6b:11:b4:8d:f3:7d:48:35: aa:90:22:c7:d7:a8:91:64:8b:df:d2:b8:d3:ba:bb:81:f1:9c: e9:af:75:0d:b9:88:59:6b:cf:12:c6:e3:35:79:c6:4b:cc:3d: 3b:2b:47:9b:50:51:bd:92:84:c0:71:b7:be:86:71:e7:3b:8f: 58:b1:29:c5:53:fb:00:74:03:68:60:5f:84:dd:74:7e:9d:16: 34:1c:14:a7:c1:09:29:23:08:c7:15:d7:5c:b8:a9:ae:1b:11: 82:41:54:bb:56:34:63:24:3f:01:79:3e:c0:9c:09:e9:eb:c3: d1:fa:81:5e:d8:06:84:a8:1d:53:bb:18:f9:15:5c:13:28:6a: f0:a8:27:60:e7:cd:28:c5:81:3c:c9:0e:b2:3a:1c:fa:c6:a0: 8c:b2:69:49 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt8E1mTs/JDS+a4na3IkzrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZjhhODg1Zjc3NzZkMmFiOTliYjRmMjBlODRkMzA2ZTAz OTRhYTMwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzk1YjIzMzI1OWNjMjc1NDNhMTkwYWJkMDE2ZTYwNjIzMWEzZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNu8pbwfPKoj8V+kL/HfUHh2P9Gy DmfDGCgX2QiAtRH8dklzS39SjUmdIANmeSm/7fvycoAEMNiKbkSeTq0BcyV2WLse vPIA3C+8UkOeKgojnbwMOxTX3l7rrqR2R0Ouj0PcSJH4WtoeFxZ30OklKEtigoNx GSu4n9X+YPz5T/zRfRG9h/cZpYyqGfLEMdXtbfGbALfV7kNhzLV9/AxqQPdJiMrd KdRuM+wGH7ixMr+bU2EJLK6LHoxq1hCpSSxE3vdbTqk9aXEvEjOt30Wa4v7DqdtD IKJhA6gknMAOaZCFUgAZaCgCb72HSWWmPDhXQPADpXg582Xps5HI8IvFFQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNOVsjMlnMJ1Q6GQq9AW5gYjGj6HMB8GA1UdIwQY MBaAFLD4qIX3d20quZu08g6E0wbgOUqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Bpb2hmZDNiU3E1bTdUeURvVFRCdUE1U3FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iMTI4MmYtNzFjNS00N2U3LWFlYTEt NGQwNTQ5OGFhOTdkLzEvMDVXeU15V2N3blZEb1pDcjBCYm1CaU1hUG9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iMTI4MmYtNzFjNS00N2U3LWFlYTEtNGQwNTQ5OGFhOTdk LzEvc1Bpb2hmZDNiU3E1bTdUeURvVFRCdUE1U3FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzAYBAIAATASAwQCLZQAAwQD W/KAAwQCuVa4MDMEAgACMC0wEgMHACoDd+AzAQMHACoDd+AzAgMHACoDd+BEAQMH ACoDd+BTAQMFAyoPRAAwDQYJKoZIhvcNAQELBQADggEBAEdEW/6ueEbFrmgJc6v+ 1PbD4RYyFvBEQ+nH/yKB2azwTxkbCtH6VkWGtVdVGABR8nXzJ/iotxwjcNH6ObSB xeUjcw/gs239kfZ153DeY7I0yDITYcjWVFJVu/cYK/eu6bxdfS5rEbSN831INaqQ IsfXqJFki9/SuNO6u4HxnOmvdQ25iFlrzxLG4zV5xkvMPTsrR5tQUb2ShMBxt76G cec7j1ixKcVT+wB0A2hgX4TddH6dFjQcFKfBCSkjCMcV11y4qa4bEYJBVLtWNGMk PwF5PsCcCenrw9H6gV7YBoSoHVO7GPkVXBMoavCoJ2DnzSjFgTzJDrI6HPrGoIyy aUk= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:46 2026 by rpki-client