This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/3PK45Mc8PRaXojUs0ZBQA83YcGQ.roa File: 3PK45Mc8PRaXojUs0ZBQA83YcGQ.roa (raw, json) Hash identifier: JXEf/2aFK3BkZHNCEWJcH/8ouUNCu/50cDZ97h1t3QI= Subject key identifier: DC:F2:B8:E4:C7:3C:3D:16:97:A2:35:2C:D1:90:50:03:CD:D8:70:64 Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f Certificate serial: 019B7CEE43FD4D18657B82A5F16B9AB03319 Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/3PK45Mc8PRaXojUs0ZBQA83YcGQ.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44033 IP address blocks: 185.186.216.0/22 maxlen: 22 193.22.83.0/24 maxlen: 24 193.218.132.0/22 maxlen: 22 194.116.192.0/23 maxlen: 23 194.126.207.0/24 maxlen: 24 2001:67c:2118::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:43:fd:4d:18:65:7b:82:a5:f1:6b:9a:b0:33:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcf2b8e4c73c3d1697a2352cd1905003cdd87064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:92:c3:e7:a5:17:f3:d2:25:f8:9c:c4:fc: a3:1b:54:0b:85:85:ab:6c:5d:03:7a:d3:7b:08:16: 3d:a5:48:c2:f7:55:1a:ae:ba:e2:0d:f1:7c:eb:50: 51:ba:a7:73:88:62:e5:9d:86:f8:bf:27:56:01:9e: 88:68:e8:fd:a8:c8:86:a4:a5:df:7f:61:53:22:cd: 50:09:84:37:3a:3e:8f:0e:ec:5d:7f:32:5a:9a:15: 87:1a:e7:a2:b0:40:c3:cc:e3:3f:69:34:28:d4:9e: 00:12:79:79:6d:92:b1:fa:21:c6:85:57:08:b6:5f: 36:67:d9:37:e1:0b:02:51:26:fc:fb:dd:55:97:31: 1c:26:1b:b4:55:83:a1:00:c9:9b:85:fb:f2:75:4e: 32:c1:62:0c:a7:b5:4b:e5:79:11:2f:33:5f:70:af: 7f:2f:bf:5d:11:be:79:f8:fd:93:88:be:b5:63:6f: 32:ea:e5:ae:dd:df:fa:9e:80:3b:dc:49:22:70:6e: d5:41:28:f4:60:89:f9:a1:11:c1:26:29:76:bd:1e: 87:b9:10:1b:6e:03:92:46:a9:a7:79:99:b3:dc:a7: b8:3b:f1:35:a1:9f:a7:fe:32:a9:91:81:55:1c:60: 52:08:4b:89:9e:ed:6e:db:c7:f7:0f:8b:59:d7:20: 7e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F2:B8:E4:C7:3C:3D:16:97:A2:35:2C:D1:90:50:03:CD:D8:70:64 X509v3 Authority Key Identifier: keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/3PK45Mc8PRaXojUs0ZBQA83YcGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.216.0/22 193.22.83.0/24 193.218.132.0/22 194.116.192.0/23 194.126.207.0/24 IPv6: 2001:67c:2118::/48 Signature Algorithm: sha256WithRSAEncryption 37:23:33:e2:ab:c2:bd:98:76:b2:ff:75:40:28:b7:5b:20:5b: b5:da:f1:2b:ab:69:ed:63:b7:3f:52:86:d2:58:9c:7f:2a:ca: 91:59:be:d6:9d:ac:17:e4:d4:44:16:7e:f3:82:3a:81:bc:06: dc:d0:6e:c5:4f:84:bd:f6:e4:86:e8:53:3e:54:ad:79:b6:de: a7:6c:f7:71:bb:32:81:29:51:e2:03:35:04:bc:37:df:b5:d9: 7c:af:fa:39:fb:cd:5b:c4:6d:db:23:5d:9b:24:66:34:04:4c: 9d:f1:75:49:cb:1c:dd:eb:be:5e:91:fb:b8:5e:81:d1:2e:7c: 4b:81:c5:73:4f:b5:d7:9a:8c:de:f7:74:27:a4:e1:c5:6b:10: 91:14:36:3d:2f:76:9d:e5:2b:de:1a:bf:01:c6:19:0a:ac:da: b9:e9:a8:2d:7f:e2:b7:e8:ba:40:6d:59:64:4a:e8:20:d2:ef: 89:c5:f0:97:9e:33:44:8b:af:29:23:cd:81:62:6c:f6:21:04: 10:48:67:bd:d9:81:f2:b7:3a:b8:6a:2e:51:4b:2b:3d:53:9e: 17:bf:de:97:d9:74:63:25:61:52:37:d4:90:57:d9:12:4b:81: 0e:0d:5c:fd:f4:d5:6d:08:77:54:1e:b4:01:b7:13:2a:a3:35: 2d:23:f0:05 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt87kP9TRhle4Kl8WuasDMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjM1ZTM4M2U5Y2Q0NGE3MjQ5YWM1ZDQxYjZkZmFkZjQz NTdiNGYwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2YyYjhlNGM3M2MzZDE2OTdhMjM1MmNkMTkwNTAwM2NkZDg3MDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhiSw+elF/PSJficxPyjG1QLhYWr bF0DetN7CBY9pUjC91UarrriDfF861BRuqdziGLlnYb4vydWAZ6IaOj9qMiGpKXf f2FTIs1QCYQ3Oj6PDuxdfzJamhWHGueisEDDzOM/aTQo1J4AEnl5bZKx+iHGhVcI tl82Z9k34QsCUSb8+91VlzEcJhu0VYOhAMmbhfvydU4ywWIMp7VL5XkRLzNfcK9/ L79dEb55+P2TiL61Y28y6uWu3d/6noA73EkicG7VQSj0YIn5oRHBJil2vR6HuRAb bgOSRqmneZmz3Ke4O/E1oZ+n/jKpkYFVHGBSCEuJnu1u28f3D4tZ1yB+zwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFNzyuOTHPD0Wl6I1LNGQUAPN2HBkMB8GA1UdIwQY MBaAFK/zXjg+nNRKckmsXUG23630NXtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTIt NTcwYWVkNThjMTk0LzEvM1BLNDVNYzhQUmFYb2pVczBaQlFBODNZY0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTItNTcwYWVkNThjMTk0 LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQCubrYAwQA wRZTAwQCwdqEAwQBwnTAAwQAwn7PMA8EAgACMAkDBwAgAQZ8IRgwDQYJKoZIhvcN AQELBQADggEBADcjM+Krwr2YdrL/dUAot1sgW7Xa8Surae1jtz9ShtJYnH8qypFZ vtadrBfk1EQWfvOCOoG8BtzQbsVPhL325IboUz5UrXm23qds93G7MoEpUeIDNQS8 N9+12Xyv+jn7zVvEbdsjXZskZjQETJ3xdUnLHN3rvl6R+7hegdEufEuBxXNPtdea jN73dCek4cVrEJEUNj0vdp3lK94avwHGGQqs2rnpqC1/4rfoukBtWWRK6CDS74nF 8JeeM0SLrykjzYFibPYhBBBIZ73ZgfK3OrhqLlFLKz1Tnhe/3pfZdGMlYVI31JBX 2RJLgQ4NXP301W0Id1QetAG3EyqjNS0j8AU= -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:31 2026 by rpki-client