This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/3vwyO3W8Bh0zjBGqPTD-ZCPrVBE.roa File: 3vwyO3W8Bh0zjBGqPTD-ZCPrVBE.roa (raw, json) Hash identifier: 7TJhddJ8dfgM4Myf26icmLUk9o2uV/+aWcO5kEfM5+A= Subject key identifier: DE:FC:32:3B:75:BC:06:1D:33:8C:11:AA:3D:30:FE:64:23:EB:54:11 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019B7A5AAA52B0B6BA287BEBCEE4E11FEE5B Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/3vwyO3W8Bh0zjBGqPTD-ZCPrVBE.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 45.10.69.0/24 maxlen: 24 45.10.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:aa:52:b0:b6:ba:28:7b:eb:ce:e4:e1:1f:ee:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=defc323b75bc061d338c11aa3d30fe6423eb5411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:47:20:1e:b5:7a:e3:57:e2:02:30:ab:f5: 13:25:af:53:bb:0b:d8:ea:f2:a7:4b:37:fb:f5:74: 7b:12:78:77:45:04:dc:cf:5d:28:23:ef:13:65:ff: 32:e0:28:02:5b:76:76:25:5b:c8:82:a5:56:45:df: 62:40:23:b6:3a:ff:6d:fa:fb:f2:93:09:db:ec:14: 02:81:37:03:ee:d2:7a:cc:59:f7:d1:f0:5b:22:ac: 0d:4e:49:bc:03:24:85:89:80:ca:2d:85:f2:f0:fb: c0:a3:0c:85:69:85:54:16:fe:31:50:e1:4f:ad:b3: 13:60:04:d4:26:09:e8:0e:de:db:69:87:e0:e1:3b: cc:4e:56:a7:0e:5d:34:83:e0:09:82:89:72:ea:62: 8d:28:2b:64:be:20:79:f2:99:c7:53:f9:09:46:3e: a7:71:4a:06:98:4a:d0:ba:b8:c6:96:b5:01:51:00: 36:b1:08:d4:e6:67:63:2f:bf:68:5b:f2:b9:38:cc: c7:4c:ec:2f:d9:4b:77:19:44:6c:3e:84:71:66:35: 50:d6:ed:92:c1:60:ac:9d:5f:a2:48:08:50:96:80: 70:99:29:72:ea:46:a7:61:0d:a3:99:14:87:38:32: 70:3b:8e:16:c1:be:64:05:eb:2c:9e:8e:83:02:29: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FC:32:3B:75:BC:06:1D:33:8C:11:AA:3D:30:FE:64:23:EB:54:11 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/3vwyO3W8Bh0zjBGqPTD-ZCPrVBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.69.0-45.10.71.255 Signature Algorithm: sha256WithRSAEncryption 07:5d:db:b0:3c:f6:74:d9:af:f3:72:82:6a:e2:e8:10:65:a8: 74:59:0b:82:ea:d9:75:7c:e6:25:a6:2b:52:2e:21:a3:cc:3c: e8:81:ce:5d:df:6b:c6:7d:84:31:32:37:ed:de:31:75:65:ca: c2:b6:96:f7:31:c5:02:5d:e1:d6:08:1c:e8:c1:fc:6e:5a:0d: 61:02:c1:06:ba:52:b1:43:78:0f:41:ed:b9:01:e2:85:72:cc: 43:31:62:ca:d3:eb:be:11:34:d9:62:d8:0c:d8:1c:5a:bf:eb: ed:ce:fa:b9:ce:1b:4a:fa:8d:6c:13:7f:ce:94:3b:5e:56:95: 6a:42:af:c1:2c:5c:54:74:0c:45:91:47:79:2b:b7:60:2b:81: 15:81:f0:c4:02:b3:1f:81:ad:04:b5:62:d0:bf:44:b5:09:6a: c1:bc:7c:03:48:1e:2e:80:88:4c:30:6f:67:02:03:cc:d6:bd: 97:a7:82:2a:ff:40:1c:a4:6e:a8:af:ad:ee:f9:98:b3:8a:f9: aa:a2:a1:d3:ef:ca:16:ce:85:ff:59:bd:ec:38:7f:51:b8:59: f9:5f:db:37:b4:44:8f:be:41:66:54:87:4b:d9:dd:79:1c:11: 31:9b:e3:8f:51:0f:d6:3c:cc:9b:8c:1a:7a:79:89:bc:74:14: b1:dc:f6:8c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6WqpSsLa6KHvrzuThH+5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWZjMzIzYjc1YmMwNjFkMzM4YzExYWEzZDMwZmU2NDIzZWI1NDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBhHIB61euNX4gIwq/UTJa9TuwvY 6vKnSzf79XR7Enh3RQTcz10oI+8TZf8y4CgCW3Z2JVvIgqVWRd9iQCO2Ov9t+vvy kwnb7BQCgTcD7tJ6zFn30fBbIqwNTkm8AySFiYDKLYXy8PvAowyFaYVUFv4xUOFP rbMTYATUJgnoDt7baYfg4TvMTlanDl00g+AJgoly6mKNKCtkviB58pnHU/kJRj6n cUoGmErQurjGlrUBUQA2sQjU5mdjL79oW/K5OMzHTOwv2Ut3GURsPoRxZjVQ1u2S wWCsnV+iSAhQloBwmSly6kanYQ2jmRSHODJwO44Wwb5kBessno6DAim5lwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFN78Mjt1vAYdM4wRqj0w/mQj61QRMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvM3Z3eU8zVzhCaDB6akJHcVBURC1aQ1ByVkJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtCkUD BAMtCkAwDQYJKoZIhvcNAQELBQADggEBAAdd27A89nTZr/Nygmri6BBlqHRZC4Lq 2XV85iWmK1IuIaPMPOiBzl3fa8Z9hDEyN+3eMXVlysK2lvcxxQJd4dYIHOjB/G5a DWECwQa6UrFDeA9B7bkB4oVyzEMxYsrT674RNNli2AzYHFq/6+3O+rnOG0r6jWwT f86UO15WlWpCr8EsXFR0DEWRR3krt2ArgRWB8MQCsx+BrQS1YtC/RLUJasG8fANI Hi6AiEwwb2cCA8zWvZengir/QBykbqivre75mLOK+aqiodPvyhbOhf9Zvew4f1G4 Wflf2ze0RI++QWZUh0vZ3XkcETGb449RD9Y8zJuMGnp5ibx0FLHc9ow= -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:52 2026 by rpki-client