This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-3NJM9Mi49d0o6FNJ2SY34TNozE.roa File: 1-3NJM9Mi49d0o6FNJ2SY34TNozE.roa (raw, json) Hash identifier: zgFN/dPkiau04oJznX47zdEZt6uah4sJeo2cSjRBJP8= Subject key identifier: FB:73:49:33:D3:22:E3:D7:74:A3:A1:4D:27:64:98:DF:84:CD:A3:31 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79113E700485B85CFD7D3E2FFAAD78E1 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-3NJM9Mi49d0o6FNJ2SY34TNozE.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.43.140.0/24 maxlen: 24 45.43.141.0/24 maxlen: 24 104.239.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3e:70:04:85:b8:5c:fd:7d:3e:2f:fa:ad:78:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb734933d322e3d774a3a14d276498df84cda331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:c6:de:e2:da:0a:54:18:46:d3:9a:87:01: f5:2b:a7:c3:ee:d9:bc:fd:7f:93:a2:8b:29:ed:10: 17:5c:b7:4d:57:04:d3:b9:52:b6:4e:d8:20:d4:d6: c6:90:3b:53:10:be:35:34:6e:a0:71:ed:5c:15:81: 0b:cc:6b:7f:e9:1d:d0:b3:df:20:f0:50:e9:ba:97: 97:c4:7d:8e:1b:79:c1:c7:d4:12:08:ac:3d:6c:63: 11:93:92:1c:42:ca:ed:01:3c:f6:8e:5f:82:bb:26: 2f:a1:07:29:8f:78:f1:1b:a3:5f:56:83:12:83:c3: 08:1b:09:f0:a9:be:30:50:57:a4:26:89:c0:52:34: 03:fd:20:f5:f9:bb:5a:85:81:3d:92:d1:e4:8f:27: 13:f2:2b:c8:92:b1:f5:12:86:14:59:82:c2:53:04: 0e:ab:cb:b1:62:56:50:fd:fc:f2:29:8a:2e:24:4a: 4b:57:3d:7b:d0:69:bd:15:f9:92:ff:fb:ec:45:46: a4:0e:52:38:14:7b:12:97:5e:35:4e:17:64:b5:a0: 65:10:5f:a7:f7:c3:e1:c4:42:86:14:80:98:d8:63: 25:ef:0f:dd:62:29:55:56:ae:22:b0:a4:f9:c9:44: 32:9b:5a:5d:07:ef:fd:a5:6d:63:33:eb:f3:9c:9e: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:73:49:33:D3:22:E3:D7:74:A3:A1:4D:27:64:98:DF:84:CD:A3:31 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-3NJM9Mi49d0o6FNJ2SY34TNozE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.140.0/23 104.239.67.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:0a:ef:e8:af:5d:60:a8:01:08:6d:c8:68:c7:8b:69:72:1d: d7:8b:d7:ed:25:79:ec:49:dc:50:16:d8:d0:0f:24:53:51:6f: 88:c7:67:f5:6a:94:c7:25:88:12:28:b9:b5:32:05:5d:08:ff: 9c:6e:98:1c:8c:e0:f2:24:c9:f1:12:d9:9a:17:5c:8a:95:ce: ee:ca:f1:f4:18:2b:96:3f:3e:39:fa:6f:12:91:bc:ff:2a:40: 5b:c5:dd:64:ab:a5:29:f5:76:b9:c3:5f:99:78:64:88:91:d2: 94:c6:72:cd:79:c1:06:b0:6d:f2:01:55:55:37:cb:4d:40:d4: 4b:91:b4:ad:40:13:42:db:85:d9:3f:61:e4:e3:ad:73:e9:37: 2e:34:eb:ae:6e:53:db:b8:e9:dc:4a:70:d4:0a:90:ca:ca:2e: 8f:02:8e:56:33:e6:b4:d7:f2:66:01:07:52:2f:0e:89:48:41: 43:ae:30:b8:e5:27:10:15:9b:de:1f:c7:b4:e5:e4:0b:c6:5d: 91:82:73:83:f2:d9:3b:a6:7f:a0:26:1b:6e:e2:98:d5:c9:49: 94:26:7b:86:96:96:41:1e:02:6f:4a:be:fd:96:6e:a7:4b:f5: 6b:70:bd:d0:dd:21:d3:e3:48:75:06:5b:38:a4:39:20:5a:28: 79:a9:45:15 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt5ET5wBIW4XP19Pi/6rXjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjczNDkzM2QzMjJlM2Q3NzRhM2ExNGQyNzY0OThkZjg0Y2RhMzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXPG3uLaClQYRtOahwH1K6fD7tm8 /X+Toosp7RAXXLdNVwTTuVK2Ttgg1NbGkDtTEL41NG6gce1cFYELzGt/6R3Qs98g 8FDpupeXxH2OG3nBx9QSCKw9bGMRk5IcQsrtATz2jl+CuyYvoQcpj3jxG6NfVoMS g8MIGwnwqb4wUFekJonAUjQD/SD1+btahYE9ktHkjycT8ivIkrH1EoYUWYLCUwQO q8uxYlZQ/fzyKYouJEpLVz170Gm9FfmS//vsRUakDlI4FHsSl141ThdktaBlEF+n 98PhxEKGFICY2GMl7w/dYilVVq4isKT5yUQym1pdB+/9pW1jM+vznJ7B5wIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPtzSTPTIuPXdKOhTSdkmN+EzaMxMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvMS0zTkpNOU1pNDlkMG82Rk5KMlNZMzRUTm96RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWEvZmRkNjMzLWM2NTgtNDljNS05ZThmLWZiMDc5NTVmM2Fh YS8xL1lGZ2VaejJBOTBkSk5ySVROLXI4d2IzRGhlay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAS0rjAME AGjvQzANBgkqhkiG9w0BAQsFAAOCAQEAigrv6K9dYKgBCG3IaMeLaXId14vX7SV5 7EncUBbY0A8kU1FviMdn9WqUxyWIEii5tTIFXQj/nG6YHIzg8iTJ8RLZmhdcipXO 7srx9Bgrlj8+OfpvEpG8/ypAW8XdZKulKfV2ucNfmXhkiJHSlMZyzXnBBrBt8gFV VTfLTUDUS5G0rUATQtuF2T9h5OOtc+k3LjTrrm5T27jp3Epw1AqQysoujwKOVjPm tNfyZgEHUi8OiUhBQ64wuOUnEBWb3h/HtOXkC8ZdkYJzg/LZO6Z/oCYbbuKY1clJ lCZ7hpaWQR4Cb0q+/ZZup0v1a3C90N0h0+NIdQZbOKQ5IFooealFFQ== -----END CERTIFICATE-----Generated at Fri Jan 2 02:41:20 2026 by rpki-client