This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/3PKCULxC54YfqV3U-g_OsLMdG4I.roa File: 3PKCULxC54YfqV3U-g_OsLMdG4I.roa (raw, json) Hash identifier: WuO+o37MC5UTrmL5BlbVaqBH7Yb1+XaFfMlfVLFjofw= Subject key identifier: DC:F2:82:50:BC:42:E7:86:1F:A9:5D:D4:FA:0F:CE:B0:B3:1D:1B:82 Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db Certificate serial: 019B220C4B4D2487312A3A4789C6213F0136 Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/3PKCULxC54YfqV3U-g_OsLMdG4I.roa Signing time: Mon 15 Dec 2025 12:46:29 +0000 ROA not before: Mon 15 Dec 2025 12:46:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60813 IP address blocks: 45.148.221.0/24 maxlen: 24 45.148.222.0/24 maxlen: 24 45.148.223.0/24 maxlen: 24 81.90.96.0/20 maxlen: 20 81.90.96.0/24 maxlen: 24 81.90.97.0/24 maxlen: 24 81.90.98.0/24 maxlen: 24 81.90.99.0/24 maxlen: 24 81.90.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:0c:4b:4d:24:87:31:2a:3a:47:89:c6:21:3f:01:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db Validity Not Before: Dec 15 12:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dcf28250bc42e7861fa95dd4fa0fceb0b31d1b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:12:06:de:43:39:4a:35:ea:fd:38:b7:25: 6e:a4:bf:7e:07:9f:e4:e0:33:91:ed:ab:a8:3d:c3: b3:07:12:b5:05:47:39:92:0e:21:3b:55:12:29:47: ce:cc:dc:f7:9a:1f:78:98:08:85:fa:11:02:a2:f2: 45:bf:c0:86:94:6a:2b:13:73:12:41:f5:7a:6b:b1: 96:67:e8:24:3b:f1:26:5a:42:f0:fc:8a:ea:cd:59: 9d:4a:22:39:9c:37:a2:28:74:e7:0f:bf:99:42:d5: b7:c1:5b:c6:4c:f9:f2:02:27:4c:59:42:46:f3:4d: 73:63:1c:58:21:88:e9:fe:7d:67:67:f1:ac:94:2e: 47:a7:bd:97:a3:57:cc:af:6d:75:bd:30:53:ac:33: 78:1c:d6:5f:d7:1e:a4:cc:99:c7:35:bc:a5:bb:a9: 8a:3c:60:0f:40:ab:e3:76:03:5f:87:c4:ca:94:4f: c9:94:4c:b8:48:48:fa:05:97:bb:07:6a:8e:7e:2d: 22:c4:4b:e2:a9:74:68:3d:c0:03:5e:73:d4:0f:5a: 3b:ba:6e:77:93:18:4c:95:2c:4c:70:af:ab:27:55: c5:23:46:06:91:a0:e5:59:92:be:10:8f:fe:9a:80: 70:50:df:7d:07:ce:11:6f:e5:a0:de:3c:bc:69:34: 16:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F2:82:50:BC:42:E7:86:1F:A9:5D:D4:FA:0F:CE:B0:B3:1D:1B:82 X509v3 Authority Key Identifier: keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/3PKCULxC54YfqV3U-g_OsLMdG4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.221.0-45.148.223.255 81.90.96.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:4d:26:f8:77:21:34:e3:9f:2f:f7:1e:5e:51:c4:41:f2:61: da:36:f5:82:87:ac:43:6a:0c:a5:42:4c:db:40:29:4b:47:97: 00:70:5f:62:b1:89:9f:17:40:45:73:97:52:47:ef:7e:a8:47: 22:30:3e:1a:b8:9c:8b:e8:a5:96:ef:9e:47:0f:66:a6:83:a2: c4:1a:f3:17:fb:ba:f0:89:2f:d2:0e:b8:10:d2:52:af:dc:af: 24:a8:0a:a8:b0:de:92:cf:57:a6:bc:71:78:2d:06:ac:17:1b: 48:85:83:07:0a:bb:af:ef:c7:8d:9a:11:8c:bd:4b:31:4a:ff: d1:ef:c0:f4:f1:c6:dc:18:f2:36:d1:29:c7:14:04:e6:80:45: 91:9a:8b:ac:b6:aa:df:08:c0:a1:10:4f:2a:ab:6a:26:0d:4d: 6d:a6:6c:d4:19:33:93:0d:45:c1:18:34:b4:1d:04:f9:84:0f: 86:b8:45:9b:f4:a0:72:38:1c:e7:68:2e:5c:06:47:98:0a:43: 07:b8:78:90:6f:7d:3a:14:48:26:e5:0c:4a:ee:f8:c9:3b:10: a9:18:be:c3:51:fb:46:90:cb:c8:bf:d7:be:d2:4b:e5:a0:6a: 8a:6a:2b:61:3b:e8:ef:75:12:39:4c:68:0e:2b:58:a9:42:5a: d5:5d:41:ab -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZsiDEtNJIcxKjpHicYhPwE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYzhhOWJiYzJiYzNhNGM4YmI4NzZjY2RkOTVmZDg2NTI1 MGI2ZGIwHhcNMjUxMjE1MTI0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2YyODI1MGJjNDJlNzg2MWZhOTVkZDRmYTBmY2ViMGIzMWQxYjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EISBt5DOUo16v04tyVupL9+B5/k 4DOR7auoPcOzBxK1BUc5kg4hO1USKUfOzNz3mh94mAiF+hECovJFv8CGlGorE3MS QfV6a7GWZ+gkO/EmWkLw/IrqzVmdSiI5nDeiKHTnD7+ZQtW3wVvGTPnyAidMWUJG 801zYxxYIYjp/n1nZ/GslC5Hp72Xo1fMr211vTBTrDN4HNZf1x6kzJnHNbylu6mK PGAPQKvjdgNfh8TKlE/JlEy4SEj6BZe7B2qOfi0ixEviqXRoPcADXnPUD1o7um53 kxhMlSxMcK+rJ1XFI0YGkaDlWZK+EI/+moBwUN99B84Rb+Wg3jy8aTQWowIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNzyglC8QueGH6ld1PoPzrCzHRuCMB8GA1UdIwQY MBaAFK3IqbvCvDpMi7h2zN2V/YZSULbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUt MTY1NGE4MGRiYzM2LzEvM1BLQ1VMeEM1NFlmcVYzVS1nX09zTE1kRzRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUtMTY1NGE4MGRiYzM2 LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtlN0D BAUtlMADBARRWmAwDQYJKoZIhvcNAQELBQADggEBADxNJvh3ITTjny/3Hl5RxEHy Ydo29YKHrENqDKVCTNtAKUtHlwBwX2KxiZ8XQEVzl1JH736oRyIwPhq4nIvopZbv nkcPZqaDosQa8xf7uvCJL9IOuBDSUq/crySoCqiw3pLPV6a8cXgtBqwXG0iFgwcK u6/vx42aEYy9SzFK/9HvwPTxxtwY8jbRKccUBOaARZGai6y2qt8IwKEQTyqraiYN TW2mbNQZM5MNRcEYNLQdBPmED4a4RZv0oHI4HOdoLlwGR5gKQwe4eJBvfToUSCbl DEru+Mk7EKkYvsNR+0aQy8i/177SS+WgaopqK2E76O91EjlMaA4rWKlCWtVdQas= -----END CERTIFICATE-----Generated at Fri Dec 19 10:50:17 2025 by rpki-client