This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/45DCEj3I-Z92QzZKt8etJDqECTc.roa File: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (raw, json) Hash identifier: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg= Subject key identifier: E3:90:C2:12:3D:C8:F9:9F:76:43:36:4A:B7:C7:AD:24:3A:84:09:37 Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a Certificate serial: 019B7834FABF66B9B64CEF39914053D645BE Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/45DCEj3I-Z92QzZKt8etJDqECTc.roa Signing time: Thu 01 Jan 2026 06:18:16 +0000 ROA not before: Thu 01 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41108 IP address blocks: 193.3.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fa:bf:66:b9:b6:4c:ef:39:91:40:53:d6:45:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e390c2123dc8f99f7643364ab7c7ad243a840937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:30:9c:c5:4a:34:11:b1:fd:a5:14:82:e5: 99:0d:9a:f4:a4:e9:32:a9:40:0a:83:d0:12:8b:ae: e2:26:fd:21:16:74:f5:c0:a5:75:88:0f:d6:70:d8: 12:e1:66:5a:de:ef:43:ff:3c:ed:cd:15:f5:d3:af: a6:04:0b:68:15:8a:8c:b0:b5:22:5a:5e:7e:8e:47: f9:d1:48:46:62:9c:ab:9a:8c:50:1d:44:4f:27:93: 20:d4:3e:10:52:bb:78:3d:6c:c3:6b:31:cd:de:86: 7b:d4:f9:0f:ad:58:24:ae:d6:ea:9c:e2:a9:ea:60: 9f:20:27:24:5d:1e:a8:3a:cd:66:03:33:8e:d5:2e: 6e:e6:87:85:1b:8c:46:40:f8:37:40:ed:79:a1:f1: e5:1c:ad:8b:17:3a:0b:13:71:7a:14:6f:b3:e5:d5: e1:c8:13:97:df:c4:20:2b:c8:64:23:4c:d7:a8:f3: bc:10:3b:6b:7f:9d:5b:73:87:87:4a:bc:38:33:83: 57:f3:98:f5:4f:0d:7a:c7:1e:21:44:55:76:30:8d: d0:92:8e:df:82:1e:17:10:f9:ec:19:60:ab:b3:c9: e9:d4:26:e9:65:51:8d:5f:b3:9e:3c:c1:3f:0f:2f: 7b:b4:48:a4:8a:02:f7:fd:ed:28:7f:50:94:bd:0e: 9f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:90:C2:12:3D:C8:F9:9F:76:43:36:4A:B7:C7:AD:24:3A:84:09:37 X509v3 Authority Key Identifier: keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/45DCEj3I-Z92QzZKt8etJDqECTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.157.0/24 Signature Algorithm: sha256WithRSAEncryption 29:0a:dc:5d:80:39:df:9a:51:5b:94:a6:c7:b5:11:27:47:db: f4:dd:49:eb:f9:71:85:58:65:40:e2:72:af:2b:e7:10:9b:38: 32:4a:1c:c1:8c:41:d0:8d:0e:20:a9:c2:fe:a2:e0:c2:42:ba: f0:f5:11:f5:8b:d4:03:de:e6:07:6b:48:ff:fc:9d:2d:fe:b5: 3a:5f:70:98:ff:36:a4:55:00:1b:0f:0b:ca:fc:16:fd:28:34: 39:86:d5:df:2b:db:1f:87:5a:98:f5:45:c8:f7:60:c0:ad:73: 6a:74:29:d2:97:77:1e:22:29:0e:b0:70:1b:a6:b6:32:a2:88: e6:18:6c:22:f7:cb:29:bb:e8:72:d0:1a:70:8b:86:22:a6:92: c3:98:95:f6:96:35:18:46:2b:b3:52:60:68:52:9f:ed:ee:c9: d9:d1:3a:98:c0:71:13:57:0f:a1:29:79:1e:c1:54:47:8d:e9: 2e:cc:b8:44:c9:a6:2a:27:9d:27:19:d2:5d:6b:b8:8d:9c:7a: ed:6e:df:03:c3:ef:a1:3f:a8:d8:9e:56:4b:69:bf:76:e9:12: d2:6b:81:ef:8e:79:8d:b2:58:8c:8c:77:6d:0f:aa:6c:86:fa: 18:84:81:1b:3e:5b:a4:fc:18:eb:9e:de:f2:bf:43:eb:6d:42: cd:81:27:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPq/Zrm2TO85kUBT1kW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjM2NiNjFhYjRmNDNmMDdlMzc4MzMwN2RkMzM4NGY5ZGNj MWMzMWEwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzkwYzIxMjNkYzhmOTlmNzY0MzM2NGFiN2M3YWQyNDNhODQwOTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bcwnMVKNBGx/aUUguWZDZr0pOky qUAKg9ASi67iJv0hFnT1wKV1iA/WcNgS4WZa3u9D/zztzRX106+mBAtoFYqMsLUi Wl5+jkf50UhGYpyrmoxQHURPJ5Mg1D4QUrt4PWzDazHN3oZ71PkPrVgkrtbqnOKp 6mCfICckXR6oOs1mAzOO1S5u5oeFG4xGQPg3QO15ofHlHK2LFzoLE3F6FG+z5dXh yBOX38QgK8hkI0zXqPO8EDtrf51bc4eHSrw4M4NX85j1Tw16xx4hRFV2MI3Qko7f gh4XEPnsGWCrs8np1CbpZVGNX7OePME/Dy97tEikigL3/e0of1CUvQ6fuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOOQwhI9yPmfdkM2SrfHrSQ6hAk3MB8GA1UdIwQY MBaAFAw8thq09D8H43gzB90zhPncwcMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEt MmM2NjRjZTA4MDc3LzEvNDVEQ0VqM0ktWjkyUXpaS3Q4ZXRKRHFFQ1RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEtMmM2NjRjZTA4MDc3 LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQOdMA0G CSqGSIb3DQEBCwUAA4IBAQApCtxdgDnfmlFblKbHtREnR9v03Unr+XGFWGVA4nKv K+cQmzgyShzBjEHQjQ4gqcL+ouDCQrrw9RH1i9QD3uYHa0j//J0t/rU6X3CY/zak VQAbDwvK/Bb9KDQ5htXfK9sfh1qY9UXI92DArXNqdCnSl3ceIikOsHAbprYyoojm GGwi98spu+hy0Bpwi4YippLDmJX2ljUYRiuzUmBoUp/t7snZ0TqYwHETVw+hKXke wVRHjekuzLhEyaYqJ50nGdJda7iNnHrtbt8Dw++hP6jYnlZLab926RLSa4HvjnmN sliMjHdtD6pshvoYhIEbPluk/Bjrnt7yv0PrbULNgSfb -----END CERTIFICATE-----Generated at Mon Jan 19 18:01:33 2026 by rpki-client