This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/k3T33aZGj24vxqNw1UfxEFrHk44.roa File: k3T33aZGj24vxqNw1UfxEFrHk44.roa (raw, json) Hash identifier: 3m3SCEsy+0+eUIAdjTP7HM49Wof/8SG/a2XAHOJJcbg= Subject key identifier: 93:74:F7:DD:A6:46:8F:6E:2F:C6:A3:70:D5:47:F1:10:5A:C7:93:8E Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612 Certificate serial: 019B77C764CE8B834760BAACE65F667800C9 Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/k3T33aZGj24vxqNw1UfxEFrHk44.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197240 IP address blocks: 46.30.104.0/23 maxlen: 24 46.30.106.0/23 maxlen: 24 46.30.108.0/24 maxlen: 24 46.30.109.0/24 maxlen: 24 46.30.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:64:ce:8b:83:47:60:ba:ac:e6:5f:66:78:00:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9374f7dda6468f6e2fc6a370d547f1105ac7938e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1a:67:6a:c8:f3:0f:4d:7f:84:7b:c6:55:9a: da:03:70:69:13:68:5c:8f:79:09:01:f2:36:c9:65: 0f:14:25:ff:38:23:d1:57:10:d3:a5:54:04:db:e0: 49:77:48:f8:d4:33:69:d0:e1:5d:63:63:5a:96:53: 36:d4:93:b1:fd:0d:f9:6a:84:00:af:d7:fa:e5:df: 48:5d:21:ed:15:0b:7d:9b:25:90:6a:8e:b1:53:c8: 0d:ab:e4:30:e7:67:99:3d:bc:e3:3b:8a:d9:1f:aa: aa:bf:cd:0a:20:c8:c2:68:27:87:c3:91:0b:38:b2: 50:22:3a:5b:ce:d8:9c:cd:50:64:1f:3f:45:31:ef: b4:76:26:3e:e6:2c:3f:30:e0:7f:6e:12:0b:06:00: b1:4f:9e:15:d9:ed:d5:29:12:7a:d6:1e:52:60:98: be:4d:24:17:97:22:d7:8e:28:ea:ab:27:0e:94:8a: 68:51:07:03:be:c1:db:be:e8:2a:ee:85:8a:6a:79: 28:ec:5b:4b:37:25:40:6b:32:b2:b3:dc:ef:76:29: a0:bb:a4:4b:62:d9:2b:ea:0e:6d:b6:87:9f:16:1e: 22:51:fc:db:78:5a:9c:45:2a:bd:20:0f:bb:7a:22: 9b:e0:11:bc:38:72:5b:6a:d6:91:54:c7:20:eb:da: 9d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:74:F7:DD:A6:46:8F:6E:2F:C6:A3:70:D5:47:F1:10:5A:C7:93:8E X509v3 Authority Key Identifier: keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/k3T33aZGj24vxqNw1UfxEFrHk44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.104.0/21 Signature Algorithm: sha256WithRSAEncryption 86:22:88:ed:02:60:40:37:ff:d2:f9:84:c6:c7:e4:20:7f:ed: ee:63:46:7c:77:e9:11:a2:53:23:77:af:bd:6f:9c:b4:eb:2b: aa:1b:29:cc:fe:54:a6:4c:7e:d7:4c:a4:1e:d9:f3:ff:b5:85: 8f:c0:95:c6:5e:c0:f7:09:c5:50:3c:be:95:48:b4:d9:48:aa: a8:54:ef:1b:2a:1e:61:76:21:b7:60:52:9f:2b:ad:81:4b:2c: 74:9d:7d:3e:11:95:04:d3:b2:7a:63:4c:9e:ff:c5:51:00:7e: a9:7a:ab:a2:e6:7f:15:62:b3:32:65:43:4c:bc:c7:a4:1c:ae: a7:be:bc:e1:2e:a3:4c:31:cb:fa:5a:64:99:16:fa:7e:6b:aa: ac:7e:e7:bb:4f:98:e1:b9:e3:ce:17:16:7c:46:18:74:ad:5b: 1d:59:63:54:eb:1e:64:45:83:9e:72:71:d0:96:fb:f9:21:36: 2a:2c:3c:a5:a3:9a:7c:0d:03:c9:cd:0c:39:94:d0:a7:e0:27: 1a:e2:ec:b2:9a:87:4f:8f:82:7b:f9:8c:d5:6b:ef:0b:ae:59: 74:3f:05:03:a8:82:91:81:27:0b:a9:b6:d7:05:57:e2:ef:eb: c4:32:92:51:3f:17:a7:8b:73:0e:82:94:a2:68:15:10:69:bf: 43:99:57:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2TOi4NHYLqs5l9meADJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2ExYTFlM2QwOTI1NDIzMzEwYzE1NGI1MDJjMjg0Mjg4 OGU2MTIwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mzc0ZjdkZGE2NDY4ZjZlMmZjNmEzNzBkNTQ3ZjExMDVhYzc5MzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hpnasjzD01/hHvGVZraA3BpE2hc j3kJAfI2yWUPFCX/OCPRVxDTpVQE2+BJd0j41DNp0OFdY2NallM21JOx/Q35aoQA r9f65d9IXSHtFQt9myWQao6xU8gNq+Qw52eZPbzjO4rZH6qqv80KIMjCaCeHw5EL OLJQIjpbzticzVBkHz9FMe+0diY+5iw/MOB/bhILBgCxT54V2e3VKRJ61h5SYJi+ TSQXlyLXjijqqycOlIpoUQcDvsHbvugq7oWKanko7FtLNyVAazKys9zvdimgu6RL Ytkr6g5ttoefFh4iUfzbeFqcRSq9IA+7eiKb4BG8OHJbataRVMcg69qdzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJN0992mRo9uL8ajcNVH8RBax5OOMB8GA1UdIwQY MBaAFELKGh49CSVCMxDBVLUCwoQoiOYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEt NDM2YmZiOWU3N2VkLzEvazNUMzNhWkdqMjR2eHFOdzFVZnhFRnJIazQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEtNDM2YmZiOWU3N2Vk LzEvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLh5oMA0G CSqGSIb3DQEBCwUAA4IBAQCGIojtAmBAN//S+YTGx+Qgf+3uY0Z8d+kRolMjd6+9 b5y06yuqGynM/lSmTH7XTKQe2fP/tYWPwJXGXsD3CcVQPL6VSLTZSKqoVO8bKh5h diG3YFKfK62BSyx0nX0+EZUE07J6Y0ye/8VRAH6pequi5n8VYrMyZUNMvMekHK6n vrzhLqNMMcv6WmSZFvp+a6qsfue7T5jhuePOFxZ8Rhh0rVsdWWNU6x5kRYOecnHQ lvv5ITYqLDylo5p8DQPJzQw5lNCn4Cca4uyymodPj4J7+YzVa+8Lrll0PwUDqIKR gScLqbbXBVfi7+vEMpJRPxeni3MOgpSiaBUQab9DmVf+ -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:50 2026 by rpki-client