This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/g_q3_hFJu6HXUUHSAWggSZhKtYc.roa File: g_q3_hFJu6HXUUHSAWggSZhKtYc.roa (raw, json) Hash identifier: CYiIktGrTnexqrcegKNOYzL4d50/QWocPqLENQVDSYI= Subject key identifier: 83:FA:B7:FE:11:49:BB:A1:D7:51:41:D2:01:68:20:49:98:4A:B5:87 Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b Certificate serial: 019B7C131FB140357458CB995DECAA658A4D Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/g_q3_hFJu6HXUUHSAWggSZhKtYc.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.154.18.0/24 maxlen: 24 45.154.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1f:b1:40:35:74:58:cb:99:5d:ec:aa:65:8a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83fab7fe1149bba1d75141d201682049984ab587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:16:3b:05:65:60:88:ee:bd:1d:36:c4:94: 1c:de:99:f2:49:a4:e5:d5:73:d8:3d:f4:eb:68:03: 68:a1:63:6d:02:44:71:50:77:44:53:0d:c9:00:7b: cc:ce:24:d4:85:f7:3e:3f:6b:7c:94:56:1a:21:6c: f4:b7:46:b6:1f:e8:52:b4:17:77:1d:a0:94:62:b0: d9:c8:84:c6:57:ff:57:ed:ca:db:07:14:73:b1:87: df:b2:67:e1:6a:5a:8d:47:16:78:12:39:cc:85:bc: 21:1e:43:d4:48:20:1e:17:6d:a1:04:f5:42:ff:cd: b6:8f:1c:c1:9b:c2:ec:cb:b1:0d:26:78:82:02:ff: dc:05:6e:8a:5d:08:cc:1b:d3:46:03:44:6e:08:17: 6f:65:76:cf:68:0f:1c:56:7c:22:53:78:88:24:ce: 17:ed:2e:83:3a:03:9b:82:2d:78:9d:17:f5:5a:8d: c3:37:03:f1:94:5c:16:ad:a9:bc:ac:36:6d:bd:64: 67:6f:11:4b:62:15:c0:2d:44:fd:b3:c2:67:78:4f: da:eb:ed:69:56:be:68:d4:b2:0e:f8:79:b9:d6:0a: dd:e0:1f:b4:16:22:a3:12:42:b9:44:1d:14:a4:a2: 62:c2:5a:87:44:5a:15:a4:d6:fa:53:9a:69:c3:0f: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FA:B7:FE:11:49:BB:A1:D7:51:41:D2:01:68:20:49:98:4A:B5:87 X509v3 Authority Key Identifier: keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/g_q3_hFJu6HXUUHSAWggSZhKtYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.18.0/23 Signature Algorithm: sha256WithRSAEncryption 93:66:a8:00:3e:4f:1e:60:18:0c:d5:20:44:0d:82:76:e3:c7: fa:39:a6:90:ed:62:7a:bd:f9:48:66:b8:aa:90:82:db:43:7e: c4:10:eb:20:91:34:fe:82:9f:7b:c0:72:83:55:cb:e0:5e:5a: 00:7d:7a:72:84:d7:1b:8a:52:9e:56:c3:cf:42:96:a1:26:ab: b1:fc:26:01:08:de:e3:0e:31:26:8b:0a:01:98:40:1e:be:71: 97:b7:69:cf:63:3c:bc:38:d9:50:52:fb:a0:70:8b:fd:b4:ce: a1:36:34:c3:57:b1:d5:d8:5a:26:11:3f:44:41:6b:69:fa:03: 80:09:5d:c3:ff:3b:2b:cc:94:56:3e:e4:52:16:51:17:f9:14: f1:bd:39:28:3e:28:61:ed:95:46:db:79:3e:c9:13:60:0a:2e: 21:b9:b5:37:88:5b:21:12:7a:15:7b:54:28:12:a7:9a:e2:4d: ab:da:db:61:1e:61:a7:e4:30:7e:77:f9:7f:5e:70:b5:39:f3: 90:0f:a8:1a:fe:5a:1b:12:8a:24:08:27:67:3c:f1:23:95:1d: 6d:25:66:a5:0c:6f:50:d0:a2:3c:d9:37:c2:99:f9:13:4b:34: ad:38:08:4b:40:a1:0d:c2:4a:3e:fc:8e:45:28:ca:0f:41:8c: d0:ef:98:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ex+xQDV0WMuZXeyqZYpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzhlYzZiMGI5NjlhYTIyMjhmMTI1ZWRhYTQxOWJhY2Ri YmYyNWIwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2ZhYjdmZTExNDliYmExZDc1MTQxZDIwMTY4MjA0OTk4NGFiNTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoEWOwVlYIjuvR02xJQc3pnySaTl 1XPYPfTraANooWNtAkRxUHdEUw3JAHvMziTUhfc+P2t8lFYaIWz0t0a2H+hStBd3 HaCUYrDZyITGV/9X7crbBxRzsYffsmfhalqNRxZ4EjnMhbwhHkPUSCAeF22hBPVC /822jxzBm8Lsy7ENJniCAv/cBW6KXQjMG9NGA0RuCBdvZXbPaA8cVnwiU3iIJM4X 7S6DOgObgi14nRf1Wo3DNwPxlFwWram8rDZtvWRnbxFLYhXALUT9s8JneE/a6+1p Vr5o1LIO+Hm51grd4B+0FiKjEkK5RB0UpKJiwlqHRFoVpNb6U5ppww/j8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIP6t/4RSbuh11FB0gFoIEmYSrWHMB8GA1UdIwQY MBaAFN947GsLlpqiIo8SXtqkGbrNu/JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTIt N2U4YzU1MjZkZTdlLzEvZ19xM19oRkp1NkhYVVVIU0FXZ2dTWmhLdFljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTItN2U4YzU1MjZkZTdl LzEvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZoSMA0G CSqGSIb3DQEBCwUAA4IBAQCTZqgAPk8eYBgM1SBEDYJ248f6OaaQ7WJ6vflIZriq kILbQ37EEOsgkTT+gp97wHKDVcvgXloAfXpyhNcbilKeVsPPQpahJqux/CYBCN7j DjEmiwoBmEAevnGXt2nPYzy8ONlQUvugcIv9tM6hNjTDV7HV2FomET9EQWtp+gOA CV3D/zsrzJRWPuRSFlEX+RTxvTkoPihh7ZVG23k+yRNgCi4hubU3iFshEnoVe1Qo Eqea4k2r2tthHmGn5DB+d/l/XnC1OfOQD6ga/lobEookCCdnPPEjlR1tJWalDG9Q 0KI82TfCmfkTSzStOAhLQKENwko+/I5FKMoPQYzQ75h1 -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:59 2026 by rpki-client