This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/3lE-OFcZg5HBfiXy0gupENM3iyk.roa File: 3lE-OFcZg5HBfiXy0gupENM3iyk.roa (raw, json) Hash identifier: bLLbFDCXQ+hwG1ZI2hchMxCwkBA94qpajMIUIPVAa8Q= Subject key identifier: DE:51:3E:38:57:19:83:91:C1:7E:25:F2:D2:0B:A9:10:D3:37:8B:29 Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234 Certificate serial: 019B7DC9FCEF97FBC859BA7F96895A1E74C4 Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/3lE-OFcZg5HBfiXy0gupENM3iyk.roa Signing time: Fri 02 Jan 2026 08:19:07 +0000 ROA not before: Fri 02 Jan 2026 08:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4809 IP address blocks: 5.10.136.112/29 maxlen: 29 5.10.136.208/30 maxlen: 30 5.10.137.0/24 maxlen: 24 5.10.138.0/24 maxlen: 24 5.10.139.0/24 maxlen: 24 5.10.140.0/24 maxlen: 24 5.10.141.8/30 maxlen: 30 5.10.141.136/30 maxlen: 30 5.10.142.0/24 maxlen: 24 5.10.143.0/24 maxlen: 24 5.154.132.0/24 maxlen: 24 5.154.133.0/24 maxlen: 24 5.154.136.0/24 maxlen: 24 5.154.137.0/24 maxlen: 24 5.154.138.0/24 maxlen: 24 5.154.139.0/24 maxlen: 24 5.154.140.0/24 maxlen: 24 5.154.141.0/24 maxlen: 24 5.154.158.0/24 maxlen: 24 5.154.159.0/24 maxlen: 24 145.14.64.0/24 maxlen: 24 145.14.65.0/24 maxlen: 24 145.14.66.0/24 maxlen: 24 145.14.67.0/24 maxlen: 24 145.14.68.0/24 maxlen: 24 145.14.69.0/24 maxlen: 24 145.14.70.0/24 maxlen: 24 145.14.71.0/24 maxlen: 24 145.14.72.0/24 maxlen: 24 145.14.73.0/24 maxlen: 24 145.14.74.0/24 maxlen: 24 145.14.75.0/24 maxlen: 24 145.14.76.0/24 maxlen: 24 145.14.77.0/24 maxlen: 24 145.14.78.0/24 maxlen: 24 145.14.79.0/24 maxlen: 24 145.14.80.0/24 maxlen: 24 145.14.81.0/24 maxlen: 24 145.14.82.0/24 maxlen: 24 145.14.83.0/24 maxlen: 24 145.14.84.0/24 maxlen: 24 145.14.85.0/24 maxlen: 24 145.14.86.0/24 maxlen: 24 145.14.87.0/24 maxlen: 24 145.14.88.0/24 maxlen: 24 145.14.89.0/24 maxlen: 24 145.14.90.0/24 maxlen: 24 145.14.91.0/24 maxlen: 24 145.14.92.0/24 maxlen: 24 145.14.93.0/24 maxlen: 24 185.75.172.0/24 maxlen: 24 185.75.173.0/24 maxlen: 24 185.75.174.0/24 maxlen: 24 2a04:f580:9000::/48 maxlen: 48 2a04:f580:9001::/48 maxlen: 48 2a04:f580:9002::/48 maxlen: 48 2a04:f580:9010::/48 maxlen: 48 2a04:f580:9012::/48 maxlen: 48 2a04:f580:9013::/48 maxlen: 48 2a04:f580:9020::/48 maxlen: 48 2a04:f580:9030::/48 maxlen: 48 2a04:f580:9040::/48 maxlen: 48 2a04:f580:9050::/48 maxlen: 48 2a04:f580:9060::/48 maxlen: 48 2a04:f580:9070::/48 maxlen: 48 2a04:f580:9080::/48 maxlen: 48 2a04:f580:9090::/48 maxlen: 48 2a04:f580:9200::/48 maxlen: 48 2a04:f580:9201::/48 maxlen: 48 2a04:f580:9202::/48 maxlen: 48 2a04:f580:9210::/48 maxlen: 48 2a04:f580:9212::/48 maxlen: 48 2a04:f580:9213::/48 maxlen: 48 2a04:f580:9220::/48 maxlen: 48 2a04:f580:9230::/48 maxlen: 48 2a04:f580:9240::/48 maxlen: 48 2a04:f580:9250::/48 maxlen: 48 2a04:f580:9260::/48 maxlen: 48 2a04:f580:9270::/48 maxlen: 48 2a04:f580:9280::/48 maxlen: 48 2a04:f580:9290::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fc:ef:97:fb:c8:59:ba:7f:96:89:5a:1e:74:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234 Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de513e3857198391c17e25f2d20ba910d3378b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:aa:5a:95:62:e0:6a:ee:12:7a:aa:11:b0:70: 57:43:93:14:0a:4a:c2:96:03:36:20:d3:5e:9d:17: 7f:2f:ec:e1:90:bf:64:e5:e2:db:a5:88:a5:91:8d: 10:ca:a8:9b:3e:04:72:8b:4c:00:87:31:78:7b:69: 66:9a:4b:d5:a8:68:80:75:8d:ec:16:2c:fe:52:dc: ac:ea:98:b4:5c:f2:ad:11:99:29:68:38:21:40:42: 8c:59:98:bb:38:16:91:0d:d1:5e:c1:34:40:98:05: 1d:59:23:7e:be:5a:b6:43:c4:e2:44:80:10:8b:e2: db:f6:01:14:a1:31:c7:1a:34:1f:34:d1:e5:0d:d6: 1f:df:9e:ea:e6:5c:96:ff:48:ca:bb:20:14:eb:b5: a6:d7:64:31:6d:f7:31:b0:73:ed:71:96:31:e6:c7: 7a:39:3e:10:e8:3b:df:bf:bc:65:d8:fa:f3:ff:04: d6:56:69:27:2e:1b:6d:3b:1e:ca:30:11:7b:f2:ca: 43:32:d3:d2:01:b9:86:2e:2c:3c:7f:b6:76:80:0a: 39:ee:4c:af:0e:23:8e:63:d3:9a:bd:24:a2:a1:bc: 79:c2:91:e0:93:32:17:de:78:1c:98:f1:c4:79:48: 4f:11:a2:83:a7:26:a0:a2:e5:ae:ab:5b:74:18:2a: 09:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:51:3E:38:57:19:83:91:C1:7E:25:F2:D2:0B:A9:10:D3:37:8B:29 X509v3 Authority Key Identifier: keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/3lE-OFcZg5HBfiXy0gupENM3iyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.136.112/29 5.10.136.208/30 5.10.137.0-5.10.140.255 5.10.141.8/30 5.10.141.136/30 5.10.142.0/23 5.154.132.0/23 5.154.136.0-5.154.141.255 5.154.158.0/23 145.14.64.0-145.14.93.255 185.75.172.0-185.75.174.255 IPv6: 2a04:f580:9000::-2a04:f580:9002:ffff:ffff:ffff:ffff:ffff 2a04:f580:9010::/48 2a04:f580:9012::/47 2a04:f580:9020::/48 2a04:f580:9030::/48 2a04:f580:9040::/48 2a04:f580:9050::/48 2a04:f580:9060::/48 2a04:f580:9070::/48 2a04:f580:9080::/48 2a04:f580:9090::/48 2a04:f580:9200::-2a04:f580:9202:ffff:ffff:ffff:ffff:ffff 2a04:f580:9210::/48 2a04:f580:9212::/47 2a04:f580:9220::/48 2a04:f580:9230::/48 2a04:f580:9240::/48 2a04:f580:9250::/48 2a04:f580:9260::/48 2a04:f580:9270::/48 2a04:f580:9280::/48 2a04:f580:9290::/48 Signature Algorithm: sha256WithRSAEncryption 34:e9:71:14:44:bc:62:b7:71:7a:64:f9:fa:e6:5e:6e:76:ee: d1:96:ed:15:3f:a4:d2:2d:43:fb:60:60:d8:7f:30:68:0c:8a: 44:bf:6a:f8:ed:91:52:c9:df:b6:ad:90:85:f7:d4:9b:39:26: 14:ab:5d:2e:b5:46:5a:b3:ca:a4:77:cc:fe:47:57:56:94:a6: ac:f2:c2:32:3a:48:55:d4:6d:e5:26:24:9d:12:e7:79:31:0f: 33:bf:5a:32:e1:3b:54:c0:7f:7e:19:09:50:9f:84:5c:8c:6d: fb:e3:1d:1c:d3:e2:41:ea:88:42:06:b6:f5:da:e4:d9:41:b3: a5:8b:59:5c:0a:47:9d:a5:b8:83:95:f5:6d:f0:96:5b:73:44: 51:5b:99:04:8e:65:ae:10:2b:b0:95:3c:e9:0d:fb:1a:e9:d5: 11:2d:f6:d5:95:a9:07:a5:c0:8b:c6:d3:ff:54:a6:ac:e0:a9: 6a:dc:8a:d4:71:fb:cb:72:53:13:9a:74:c3:59:28:f1:72:8d: 94:eb:71:09:55:07:72:46:6e:6d:dd:be:b9:10:9f:5e:67:78: b2:4c:34:c7:99:02:bd:f3:b2:9f:48:4e:2f:ab:ec:0d:cb:62: 16:21:67:34:be:d5:22:62:a2:72:8a:6a:62:ac:65:5b:52:95: 0b:ab:5b:73 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgISAZt9yfzvl/vIWbp/lolaHnTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZjNlZjNlMGVhOTVhOTc1NTM3ZDVjMjVkOTNjYjc2YWY2 ODcyMzQwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTUxM2UzODU3MTk4MzkxYzE3ZTI1ZjJkMjBiYTkxMGQzMzc4YjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76palWLgau4SeqoRsHBXQ5MUCkrC lgM2INNenRd/L+zhkL9k5eLbpYilkY0QyqibPgRyi0wAhzF4e2lmmkvVqGiAdY3s Fiz+Utys6pi0XPKtEZkpaDghQEKMWZi7OBaRDdFewTRAmAUdWSN+vlq2Q8TiRIAQ i+Lb9gEUoTHHGjQfNNHlDdYf357q5lyW/0jKuyAU67Wm12QxbfcxsHPtcZYx5sd6 OT4Q6Dvfv7xl2Prz/wTWVmknLhttOx7KMBF78spDMtPSAbmGLiw8f7Z2gAo57kyv DiOOY9OavSSiobx5wpHgkzIX3ngcmPHEeUhPEaKDpyagouWuq1t0GCoJyQIDAQAB o4IDUzCCA08wHQYDVR0OBBYEFN5RPjhXGYORwX4l8tILqRDTN4spMB8GA1UdIwQY MBaAFAHz7z4OqVqXVTfVwl2Ty3avaHI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEt MzUzYjNhNjMzYWRhLzEvM2xFLU9GY1pnNUhCZmlYeTBndXBFTk0zaXlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEtMzUzYjNhNjMzYWRh LzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBZwYIKwYBBQUHAQcBAf8EggFWMIIBUjBsBAIAATBmAwUD BQqIcAMFAgUKiNAwDAMEAAUKiQMEAAUKjAMFAgUKjQgDBQIFCo2IAwQBBQqOAwQB BZqEMAwDBAMFmogDBAEFmowDBAEFmp4wDAMEBpEOQAMEAZEOXDAMAwQCuUusAwQA uUuuMIHhBAIAAjCB2jARAwYEKgT1gJADBwAqBPWAkAIDBwAqBPWAkBADBwEqBPWA kBIDBwAqBPWAkCADBwAqBPWAkDADBwAqBPWAkEADBwAqBPWAkFADBwAqBPWAkGAD BwAqBPWAkHADBwAqBPWAkIADBwAqBPWAkJAwEQMGASoE9YCSAwcAKgT1gJICAwcA KgT1gJIQAwcBKgT1gJISAwcAKgT1gJIgAwcAKgT1gJIwAwcAKgT1gJJAAwcAKgT1 gJJQAwcAKgT1gJJgAwcAKgT1gJJwAwcAKgT1gJKAAwcAKgT1gJKQMA0GCSqGSIb3 DQEBCwUAA4IBAQA06XEURLxit3F6ZPn65l5udu7Rlu0VP6TSLUP7YGDYfzBoDIpE v2r47ZFSyd+2rZCF99SbOSYUq10utUZas8qkd8z+R1dWlKas8sIyOkhV1G3lJiSd Eud5MQ8zv1oy4TtUwH9+GQlQn4RcjG374x0c0+JB6ohCBrb12uTZQbOli1lcCked pbiDlfVt8JZbc0RRW5kEjmWuECuwlTzpDfsa6dURLfbVlakHpcCLxtP/VKas4Klq 3IrUcfvLclMTmnTDWSjxco2U63EJVQdyRm5t3b65EJ9eZ3iyTDTHmQK987KfSE4v q+wNy2IWIWc0vtUiYqJyimpirGVbUpULq1tz -----END CERTIFICATE-----Generated at Mon Jan 26 21:18:53 2026 by rpki-client