This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/3ltc2E-XV23FLAhFLiFXgGH2y1M.roa File: 3ltc2E-XV23FLAhFLiFXgGH2y1M.roa (raw, json) Hash identifier: Ke9aQJV5yF1N+FQzT+5CimXwYEH8WFL1M6bre7/tYY4= Subject key identifier: DE:5B:5C:D8:4F:97:57:6D:C5:2C:08:45:2E:21:57:80:61:F6:CB:53 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019BBC69F4A105F9AC9BEF2F3C2F2F613E25 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/3ltc2E-XV23FLAhFLiFXgGH2y1M.roa Signing time: Wed 14 Jan 2026 12:10:19 +0000 ROA not before: Wed 14 Jan 2026 12:10:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 83.147.194.0/24 maxlen: 24 83.147.217.0/24 maxlen: 24 178.253.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:69:f4:a1:05:f9:ac:9b:ef:2f:3c:2f:2f:61:3e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 14 12:10:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de5b5cd84f97576dc52c08452e21578061f6cb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:60:38:86:d2:6b:b5:0d:27:2e:ba:a9:f0:4e: dc:a6:2b:32:95:d8:e9:84:2f:de:8c:56:b4:d6:b9: d3:92:51:84:21:d0:98:aa:c1:ed:54:b3:e6:00:98: 57:bf:9f:08:2a:e1:d9:19:7b:68:dd:4f:6f:2f:c8: 17:91:66:71:3c:9d:e1:cd:fd:25:b8:e9:93:c3:1b: 2b:5d:23:ce:f9:ee:71:c7:8f:5d:91:e2:d7:f3:2a: fc:36:ef:46:87:b9:fe:41:47:1e:27:b3:eb:aa:cd: 79:d0:fe:07:db:88:3d:79:12:06:33:87:6e:26:40: 42:3f:0c:8b:6c:8b:c0:4b:40:91:82:a9:44:7d:ad: 52:ea:22:3f:59:0c:98:12:09:45:f4:4c:b5:4d:c5: 2e:11:2b:b2:53:2d:9e:11:aa:8c:52:7d:0c:6a:36: ff:ef:b9:d6:91:5d:2a:3a:80:b2:36:d1:c7:22:77: 6e:35:c4:01:66:47:31:0e:b7:16:66:b3:0c:0f:8f: 54:b8:9e:a3:e3:af:ef:ac:fb:d1:42:4b:04:31:9b: 2f:6c:c9:83:b4:60:4e:f8:de:ad:28:86:8f:03:34: cf:13:30:bd:6d:ec:b8:a4:c7:13:25:2d:96:a2:04: 1f:42:2e:e2:fa:f7:40:47:33:fa:a3:4c:fb:53:58: 7b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5B:5C:D8:4F:97:57:6D:C5:2C:08:45:2E:21:57:80:61:F6:CB:53 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/3ltc2E-XV23FLAhFLiFXgGH2y1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.194.0/24 83.147.217.0/24 178.253.38.0/23 Signature Algorithm: sha256WithRSAEncryption c7:42:d9:25:59:ee:86:b8:c6:60:e2:21:64:1c:0c:ec:b4:f1: c8:16:50:de:08:11:da:9a:a9:d1:e0:33:f9:a7:6b:e2:57:e1: ed:17:95:3a:33:14:da:88:3e:24:43:38:df:e9:b1:a0:de:16: 9c:be:80:a9:3e:f1:90:fa:e3:71:f6:a5:77:26:23:40:7f:9d: 65:fc:2e:60:64:83:1c:c3:77:70:82:f8:a0:1e:73:4f:1d:ae: 01:06:f2:8c:e7:33:20:e2:f4:d0:c4:9c:f7:45:9e:73:72:e1: cf:24:72:c2:d6:f4:ee:27:31:dd:e8:be:bc:1d:93:5a:f8:c8: f3:be:fe:51:97:e8:ac:5e:27:3b:57:ea:10:d7:43:52:d0:72: 18:bf:fe:ae:b0:f0:5e:8f:7a:02:3b:c5:03:22:16:6a:62:ae: 43:e7:4a:67:20:98:1c:2a:ee:88:95:5a:0c:92:ed:b9:d0:67: 41:7a:f7:d6:88:df:18:1d:d6:0a:ac:f1:8a:8f:d5:c0:f6:d1: 74:e6:8d:50:ff:9a:53:7f:c6:cc:2c:25:04:b8:b9:d3:45:72: 8b:32:a9:e9:39:a5:1e:ac:6b:a9:31:28:7f:01:fa:f2:86:a5: 72:b7:33:23:3c:f4:2e:70:7c:9a:31:cf:46:fe:70:e0:82:05: 3d:6e:e0:c2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZu8afShBfmsm+8vPC8vYT4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTE0MTIxMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTViNWNkODRmOTc1NzZkYzUyYzA4NDUyZTIxNTc4MDYxZjZjYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GA4htJrtQ0nLrqp8E7cpisyldjp hC/ejFa01rnTklGEIdCYqsHtVLPmAJhXv58IKuHZGXto3U9vL8gXkWZxPJ3hzf0l uOmTwxsrXSPO+e5xx49dkeLX8yr8Nu9Gh7n+QUceJ7Prqs150P4H24g9eRIGM4du JkBCPwyLbIvAS0CRgqlEfa1S6iI/WQyYEglF9Ey1TcUuESuyUy2eEaqMUn0Majb/ 77nWkV0qOoCyNtHHInduNcQBZkcxDrcWZrMMD49UuJ6j46/vrPvRQksEMZsvbMmD tGBO+N6tKIaPAzTPEzC9bey4pMcTJS2WogQfQi7i+vdARzP6o0z7U1h7cQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN5bXNhPl1dtxSwIRS4hV4Bh9stTMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvM2x0YzJFLVhWMjNGTEFoRkxpRlhnR0gyeTFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU5PCAwQA U5PZAwQBsv0mMA0GCSqGSIb3DQEBCwUAA4IBAQDHQtklWe6GuMZg4iFkHAzstPHI FlDeCBHamqnR4DP5p2viV+HtF5U6MxTaiD4kQzjf6bGg3hacvoCpPvGQ+uNx9qV3 JiNAf51l/C5gZIMcw3dwgvigHnNPHa4BBvKM5zMg4vTQxJz3RZ5zcuHPJHLC1vTu JzHd6L68HZNa+Mjzvv5Rl+isXic7V+oQ10NS0HIYv/6usPBej3oCO8UDIhZqYq5D 50pnIJgcKu6IlVoMku250GdBevfWiN8YHdYKrPGKj9XA9tF05o1Q/5pTf8bMLCUE uLnTRXKLMqnpOaUerGupMSh/AfryhqVytzMjPPQucHyaMc9G/nDgggU9buDC -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:24 2026 by rpki-client