This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3m9SkDvN9R9loygW2g0U300rr4g.roa File: 3m9SkDvN9R9loygW2g0U300rr4g.roa (raw, json) Hash identifier: sULkg404nila2FIIhy4h5/OgGvmj/U5y0EvRqhDRNg0= Subject key identifier: DE:6F:52:90:3B:CD:F5:1F:65:A3:28:16:DA:0D:14:DF:4D:2B:AF:88 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37BC2DA0CFE26A14A731BF2A19DB06 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3m9SkDvN9R9loygW2g0U300rr4g.roa Signing time: Fri 02 Jan 2026 10:19:00 +0000 ROA not before: Fri 02 Jan 2026 10:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55410 IP address blocks: 45.116.105.0/24 maxlen: 24 45.116.106.0/23 maxlen: 24 62.169.140.0/22 maxlen: 24 110.172.180.0/24 maxlen: 24 110.172.181.0/24 maxlen: 24 110.172.182.0/23 maxlen: 24 114.69.236.0/23 maxlen: 24 114.69.238.0/24 maxlen: 24 114.69.239.0/24 maxlen: 24 118.91.180.0/23 maxlen: 24 118.91.182.0/24 maxlen: 24 118.91.183.0/24 maxlen: 24 203.188.160.0/22 maxlen: 24 212.56.60.0/22 maxlen: 24 212.104.144.0/24 maxlen: 24 212.104.145.0/24 maxlen: 24 212.104.146.0/23 maxlen: 24 213.254.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:bc:2d:a0:cf:e2:6a:14:a7:31:bf:2a:19:db:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de6f52903bcdf51f65a32816da0d14df4d2baf88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:aa:dd:02:50:ae:f7:b0:e5:6b:26:1e:88: 9a:39:37:64:c8:66:d7:de:90:8b:9a:df:9e:a6:65: 4c:7a:7b:76:14:31:67:0e:96:00:cf:b3:a9:35:92: da:b4:ec:80:52:e5:a3:6c:30:a1:13:93:ea:6a:0d: e3:ce:0d:2a:f4:d3:72:91:77:c8:3c:9a:e7:f7:8a: d4:a3:00:78:46:e3:20:58:35:83:b9:b7:d9:30:48: b2:3d:a4:63:b4:ac:38:e7:2f:b3:5c:b5:fc:10:89: 26:fa:76:24:02:35:dc:72:7d:b7:f4:b8:ef:de:de: f5:bf:dd:5c:a2:50:d3:b8:b3:9f:57:73:15:92:a6: 61:b2:db:42:e8:bd:cf:52:62:8c:98:fa:cc:2a:bc: 7f:98:7f:36:f1:3e:bc:24:e9:7a:15:72:e3:62:c5: e5:c2:ed:5a:19:f7:9a:0d:35:33:a3:1e:f3:79:10: fa:46:fc:03:6c:cf:23:37:26:ab:0a:ae:68:7e:de: ba:ee:04:19:cd:f7:af:82:d6:93:42:ab:84:b1:5e: 0b:b9:a3:6a:5d:08:3e:ef:7e:56:8f:10:a6:97:08: 81:2c:cc:0a:8b:09:9b:60:3c:8e:1a:97:e1:26:25: ad:97:67:dc:59:fe:05:c4:52:14:77:20:74:3f:8f: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6F:52:90:3B:CD:F5:1F:65:A3:28:16:DA:0D:14:DF:4D:2B:AF:88 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3m9SkDvN9R9loygW2g0U300rr4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.105.0-45.116.107.255 62.169.140.0/22 110.172.180.0/22 114.69.236.0/22 118.91.180.0/22 203.188.160.0/22 212.56.60.0/22 212.104.144.0/22 213.254.188.0/22 Signature Algorithm: sha256WithRSAEncryption d5:18:5c:64:2c:95:d9:76:a3:d3:20:4a:78:1a:37:83:6c:88: 8f:a4:4d:0b:7a:5a:91:a4:ad:6b:64:8e:ec:cd:14:3e:3f:23: 1d:7e:b3:35:bf:57:34:86:1e:f4:fb:91:ff:87:03:6f:89:a8: 9a:d4:b4:58:85:52:b4:8a:c9:06:0a:cd:80:95:bf:64:1c:4b: c3:47:01:89:9c:f9:3d:6e:f8:1c:15:64:0d:c3:ca:61:3b:7f: 76:b8:23:c3:bb:93:b0:eb:2a:27:e9:65:85:31:b5:d8:de:7b: b3:34:a5:61:14:09:2e:ee:40:d6:14:0d:79:f9:4f:2a:ff:53: de:bd:b5:a3:44:d2:7a:89:b7:c1:df:f7:6b:a6:45:f0:72:51: 42:2c:4e:2b:fd:78:df:9d:7b:5e:8f:8c:16:3b:6f:99:61:1b: fa:10:2d:67:4d:73:b1:73:0b:f6:ea:e0:87:cf:1d:78:2e:16: b8:02:c7:bc:49:ad:61:0b:4d:e5:bb:46:9f:76:32:4d:59:70: 46:83:3d:ae:26:86:08:ba:b3:73:38:14:db:37:85:a3:fb:f4: ca:28:9d:63:b6:26:a9:c7:d6:e4:1f:a9:00:4c:f4:f5:04:8c: 4b:8a:49:a5:e1:5c:f2:bd:4d:fc:eb:76:d6:bd:5b:1a:e6:d6: 5d:0d:51:7e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt+N7wtoM/iahSnMb8qGdsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTZmNTI5MDNiY2RmNTFmNjVhMzI4MTZkYTBkMTRkZjRkMmJhZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0USq3QJQrvew5WsmHoiaOTdkyGbX 3pCLmt+epmVMent2FDFnDpYAz7OpNZLatOyAUuWjbDChE5Pqag3jzg0q9NNykXfI PJrn94rUowB4RuMgWDWDubfZMEiyPaRjtKw45y+zXLX8EIkm+nYkAjXccn239Ljv 3t71v91colDTuLOfV3MVkqZhsttC6L3PUmKMmPrMKrx/mH828T68JOl6FXLjYsXl wu1aGfeaDTUzox7zeRD6RvwDbM8jNyarCq5oft667gQZzfevgtaTQquEsV4LuaNq XQg+735WjxCmlwiBLMwKiwmbYDyOGpfhJiWtl2fcWf4FxFIUdyB0P4+/hwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFN5vUpA7zfUfZaMoFtoNFN9NK6+IMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvM205U2tEdk45Ujlsb3lnVzJnMFUzMDBycjRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+MAwDBAAtdGkD BAItdGgDBAI+qYwDBAJurLQDBAJyRewDBAJ2W7QDBALLvKADBALUODwDBALUaJAD BALV/rwwDQYJKoZIhvcNAQELBQADggEBANUYXGQsldl2o9MgSngaN4NsiI+kTQt6 WpGkrWtkjuzNFD4/Ix1+szW/VzSGHvT7kf+HA2+JqJrUtFiFUrSKyQYKzYCVv2Qc S8NHAYmc+T1u+BwVZA3DymE7f3a4I8O7k7DrKifpZYUxtdjee7M0pWEUCS7uQNYU DXn5Tyr/U969taNE0nqJt8Hf92umRfByUUIsTiv9eN+de16PjBY7b5lhG/oQLWdN c7FzC/bq4IfPHXguFrgCx7xJrWELTeW7Rp92Mk1ZcEaDPa4mhgi6s3M4FNs3haP7 9MoonWO2JqnH1uQfqQBM9PUEjEuKSaXhXPK9Tfzrdta9Wxrm1l0NUX4= -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:39 2026 by rpki-client