This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/3v5keHAqK4zqhQB_uQznSph1Diw.roa File: 3v5keHAqK4zqhQB_uQznSph1Diw.roa (raw, json) Hash identifier: jCOl+4ngxgebTeflrMMZ3kTPxa3cepM3MbMRipIrhQc= Subject key identifier: DE:FE:64:78:70:2A:2B:8C:EA:85:00:7F:B9:0C:E7:4A:98:75:0E:2C Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D1C1A1FE5286C1812AC7BEE1076A8 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/3v5keHAqK4zqhQB_uQznSph1Diw.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52000 IP address blocks: 45.8.146.0/24 maxlen: 24 45.87.152.0/24 maxlen: 24 141.98.168.0/24 maxlen: 24 141.98.170.0/24 maxlen: 24 188.119.121.0/24 maxlen: 24 194.116.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1c:1a:1f:e5:28:6c:18:12:ac:7b:ee:10:76:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=defe6478702a2b8cea85007fb90ce74a98750e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:70:99:33:db:52:73:1c:d3:e5:12:7b:36: 6d:5f:c3:73:8d:69:db:25:06:85:79:c8:81:48:95: 4a:42:fa:6d:27:9e:24:bc:c5:f0:df:fa:70:d9:c5: 30:9a:82:f6:96:af:37:0f:07:d0:40:c2:70:c5:e3: 9b:5d:4a:22:95:8c:d6:97:91:b3:4f:d5:67:f7:42: 8d:16:24:62:20:9f:26:2e:14:60:2d:b9:a9:0a:16: 7e:72:e4:04:4b:64:1f:e3:99:c1:a9:f0:f3:dd:f3: 3d:bb:3f:1c:23:f2:67:9f:fc:d4:2b:55:86:ba:be: cb:2c:97:5a:65:a3:ca:16:d7:cd:01:2f:51:50:c1: 39:75:e9:76:7d:20:26:9a:3a:48:b7:c0:b3:b4:ff: 62:72:2d:df:42:45:9a:79:bc:94:06:fe:36:ad:ef: 74:75:2a:5e:5c:d7:8c:e2:50:9f:4c:a0:92:9e:9a: 63:9f:e1:cf:88:56:c5:7b:33:b7:cf:53:d0:c0:70: 52:f0:bb:32:b4:8e:ab:3b:41:1a:fd:d6:0a:2f:33: 2b:9c:f8:77:91:52:a1:e4:8e:db:0b:60:3c:3f:5e: b6:d6:9f:dd:ae:77:fe:35:32:ca:95:cb:59:37:c6: bc:93:03:fd:85:0c:d8:0a:94:a7:da:c3:6a:a0:01: d3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FE:64:78:70:2A:2B:8C:EA:85:00:7F:B9:0C:E7:4A:98:75:0E:2C X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/3v5keHAqK4zqhQB_uQznSph1Diw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.146.0/24 45.87.152.0/24 141.98.168.0/24 141.98.170.0/24 188.119.121.0/24 194.116.173.0/24 Signature Algorithm: sha256WithRSAEncryption 26:66:bc:3d:3b:52:10:8f:a0:66:57:db:8b:cc:3d:2c:59:da: f3:41:4a:4e:42:99:c2:a7:c2:83:30:20:80:2d:e1:d1:80:c8: 6b:64:c1:bd:45:b8:52:bb:90:94:4d:8c:01:3a:25:62:e0:6d: 83:b5:3b:28:ca:6c:4b:1c:9f:18:c5:3b:5e:c6:fc:50:6f:2b: 54:c9:1e:e8:f4:aa:76:58:03:7d:44:51:e7:a0:9b:c9:fe:da: c8:dc:ae:77:13:a2:1c:90:17:23:ad:58:3e:63:59:a2:04:f0: 64:27:df:31:76:86:81:06:ba:15:36:98:95:ac:db:0c:98:f8: ac:48:00:2a:0a:7a:89:25:ce:3d:37:c3:1f:9a:7c:fb:f8:64: 22:4b:4c:80:ce:42:a3:00:f2:49:21:fd:70:f2:1d:e4:19:a9: a1:80:d0:59:00:9e:bc:bc:31:b3:95:f5:4e:47:a2:bd:62:7d: 63:1a:8b:f4:9b:65:d1:2d:07:2d:e7:be:9b:f6:19:4a:4d:4b: f3:12:ef:aa:77:f9:82:ec:2c:be:60:af:13:3b:b6:c9:ce:f7: 1b:53:54:f4:22:f7:3d:93:10:61:df:e2:3a:62:2a:4b:1e:d5: 67:9c:a6:d8:25:46:be:ca:1e:6e:56:33:be:5f:7b:9e:88:dd: 79:7f:f0:8d -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9XRwaH+UobBgSrHvuEHaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWZlNjQ3ODcwMmEyYjhjZWE4NTAwN2ZiOTBjZTc0YTk4NzUwZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIpwmTPbUnMc0+USezZtX8NzjWnb JQaFeciBSJVKQvptJ54kvMXw3/pw2cUwmoL2lq83DwfQQMJwxeObXUoilYzWl5Gz T9Vn90KNFiRiIJ8mLhRgLbmpChZ+cuQES2Qf45nBqfDz3fM9uz8cI/Jnn/zUK1WG ur7LLJdaZaPKFtfNAS9RUME5del2fSAmmjpIt8CztP9ici3fQkWaebyUBv42re90 dSpeXNeM4lCfTKCSnppjn+HPiFbFezO3z1PQwHBS8LsytI6rO0Ea/dYKLzMrnPh3 kVKh5I7bC2A8P1621p/drnf+NTLKlctZN8a8kwP9hQzYCpSn2sNqoAHTmwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFN7+ZHhwKiuM6oUAf7kM50qYdQ4sMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvM3Y1a2VIQXFLNHpxaFFCX3VRem5TcGgxRGl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALQiSAwQA LVeYAwQAjWKoAwQAjWKqAwQAvHd5AwQAwnStMA0GCSqGSIb3DQEBCwUAA4IBAQAm Zrw9O1IQj6BmV9uLzD0sWdrzQUpOQpnCp8KDMCCALeHRgMhrZMG9RbhSu5CUTYwB OiVi4G2DtTsoymxLHJ8YxTtexvxQbytUyR7o9Kp2WAN9RFHnoJvJ/trI3K53E6Ic kBcjrVg+Y1miBPBkJ98xdoaBBroVNpiVrNsMmPisSAAqCnqJJc49N8Mfmnz7+GQi S0yAzkKjAPJJIf1w8h3kGamhgNBZAJ68vDGzlfVOR6K9Yn1jGov0m2XRLQct576b 9hlKTUvzEu+qd/mC7Cy+YK8TO7bJzvcbU1T0Ivc9kxBh3+I6YipLHtVnnKbYJUa+ yh5uVjO+X3ueiN15f/CN -----END CERTIFICATE-----Generated at Thu Jan 8 23:54:35 2026 by rpki-client