This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/m3qUzGT_uLHWYqFpZqnWQIwzKzE.roa File: m3qUzGT_uLHWYqFpZqnWQIwzKzE.roa (raw, json) Hash identifier: XS4YxFcmDJRQbBU2KWFAQ1B06Gdmh7DnEpOK4AfF8y8= Subject key identifier: 9B:7A:94:CC:64:FF:B8:B1:D6:62:A1:69:66:A9:D6:40:8C:33:2B:31 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB566ADAFA65CF2C9F945D00D1A317 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/m3qUzGT_uLHWYqFpZqnWQIwzKzE.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.131.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:56:6a:da:fa:65:cf:2c:9f:94:5d:00:d1:a3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b7a94cc64ffb8b1d662a16966a9d6408c332b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:92:f3:06:4d:29:8f:4b:12:b7:3a:2c:0a: 26:57:08:4c:98:e9:65:ab:87:cf:24:d4:5f:32:c8: ca:53:08:0b:b4:ee:e8:cd:d7:a1:95:b9:c9:15:08: 4f:47:c1:61:0b:b8:13:49:49:40:80:90:3e:0b:57: be:c9:f0:d9:17:b0:36:21:e8:17:94:73:01:3f:41: f2:b3:f9:a6:4b:fe:66:66:7a:6c:ad:52:e3:ce:25: c9:9d:34:0d:3f:a2:87:57:c8:fe:f9:5a:b5:ae:0a: a8:15:dc:39:fb:4d:da:b5:30:56:58:ab:8c:c9:2e: 76:51:47:2c:b3:55:8f:54:b4:a1:94:00:52:e4:81: 12:9d:e4:6e:28:e0:74:f4:85:a5:5d:84:b5:f5:98: c8:35:6f:98:ee:11:5a:66:75:2e:8c:6b:1b:af:59: 80:a3:cc:36:ea:1e:66:9e:83:8e:87:9b:f9:38:b7: 07:96:23:2c:be:ed:8c:4f:1a:a1:e8:12:ed:d5:9b: 29:f7:0e:04:ca:2b:46:fb:67:5e:42:8e:9c:a7:fa: 00:8b:c3:6b:ed:1c:62:36:77:b5:3d:cc:02:d0:de: c1:b1:38:c6:07:53:92:53:62:36:85:60:8f:64:e9: eb:3c:6c:2c:59:6a:b4:0c:a6:1f:f3:c3:c5:e4:f6: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7A:94:CC:64:FF:B8:B1:D6:62:A1:69:66:A9:D6:40:8C:33:2B:31 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/m3qUzGT_uLHWYqFpZqnWQIwzKzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.162.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:bd:7d:95:51:c9:6d:8f:53:33:3e:98:4d:e0:52:a9:a6:d0: 63:1f:e7:9f:1a:d7:b4:0c:9c:7d:3c:c1:bb:07:95:19:85:1d: 47:f4:39:dd:f7:01:42:dc:cb:6e:68:48:a3:b3:6d:ed:89:91: 4a:41:28:06:f9:16:12:57:42:c4:2c:07:c9:2d:33:dd:d1:c9: 9b:46:a5:99:81:32:4b:4c:68:f1:ba:12:17:94:36:10:dd:17: b2:0d:30:cd:f1:c1:da:04:8e:65:11:a6:87:25:45:f1:10:05: 43:7f:2e:61:9f:c1:99:6e:d7:d2:e1:f4:f5:12:18:68:4e:64: 10:41:9b:28:a5:96:41:9a:88:d4:95:57:bc:ee:9c:9e:86:6e: 00:14:2a:0e:50:8c:95:79:f2:77:d0:a2:22:bc:85:96:df:dc: 1c:f9:64:9f:be:e2:1e:7b:08:c7:78:7c:eb:55:45:91:83:52: b7:2d:cd:1a:e8:9f:cb:98:3c:1f:b1:45:9c:a7:02:63:76:79: 72:08:5d:db:dd:f2:0b:92:3f:0c:43:7f:2b:50:4b:9b:75:c9: 1a:57:74:9f:71:f6:38:e1:96:e5:36:f7:bb:bf:04:15:5a:31: 6e:88:89:96:dd:8e:df:5f:fd:b3:59:e1:94:2b:9c:5a:8a:9a: 28:71:51:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1Zq2vplzyyflF0A0aMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjdhOTRjYzY0ZmZiOGIxZDY2MmExNjk2NmE5ZDY0MDhjMzMyYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGiS8wZNKY9LErc6LAomVwhMmOll q4fPJNRfMsjKUwgLtO7ozdehlbnJFQhPR8FhC7gTSUlAgJA+C1e+yfDZF7A2IegX lHMBP0Hys/mmS/5mZnpsrVLjziXJnTQNP6KHV8j++Vq1rgqoFdw5+03atTBWWKuM yS52UUcss1WPVLShlABS5IESneRuKOB09IWlXYS19ZjINW+Y7hFaZnUujGsbr1mA o8w26h5mnoOOh5v5OLcHliMsvu2MTxqh6BLt1Zsp9w4EyitG+2deQo6cp/oAi8Nr 7RxiNne1PcwC0N7BsTjGB1OSU2I2hWCPZOnrPGwsWWq0DKYf88PF5PaLkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJt6lMxk/7ix1mKhaWap1kCMMysxMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvbTNxVXpHVF91TEhXWXFGcFpxbldRSXd6S3pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYOiMA0G CSqGSIb3DQEBCwUAA4IBAQA9vX2VUcltj1MzPphN4FKpptBjH+efGte0DJx9PMG7 B5UZhR1H9Dnd9wFC3MtuaEijs23tiZFKQSgG+RYSV0LELAfJLTPd0cmbRqWZgTJL TGjxuhIXlDYQ3ReyDTDN8cHaBI5lEaaHJUXxEAVDfy5hn8GZbtfS4fT1EhhoTmQQ QZsopZZBmojUlVe87pyehm4AFCoOUIyVefJ30KIivIWW39wc+WSfvuIeewjHeHzr VUWRg1K3Lc0a6J/LmDwfsUWcpwJjdnlyCF3b3fILkj8MQ38rUEubdckaV3SfcfY4 4ZblNve7vwQVWjFuiImW3Y7fX/2zWeGUK5xaipoocVE/ -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:51 2026 by rpki-client