This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/3OShaLp1tgG0w6F8SnVFUGGGJJU.roa File: 3OShaLp1tgG0w6F8SnVFUGGGJJU.roa (raw, json) Hash identifier: 6F9cP81CAB2z6kxGDavpoTqFUUII+JeGSAu6vLBGSQA= Subject key identifier: DC:E4:A1:68:BA:75:B6:01:B4:C3:A1:7C:4A:75:45:50:61:86:24:95 Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31 Certificate serial: 019B7910435B1D2B8BADBB6AAE2DA03EEE1E Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/3OShaLp1tgG0w6F8SnVFUGGGJJU.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212700 IP address blocks: 45.13.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:43:5b:1d:2b:8b:ad:bb:6a:ae:2d:a0:3e:ee:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dce4a168ba75b601b4c3a17c4a75455061862495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:e5:43:29:81:f3:19:9f:bb:7a:86:76:d5: 65:a0:61:69:07:83:25:58:b3:d4:80:7f:f6:23:4f: f0:5a:84:94:d7:15:b6:5b:a4:24:20:3f:da:54:57: da:de:c5:aa:29:95:fd:98:b6:a0:c2:13:5c:72:31: 52:33:8d:71:c5:38:d8:42:65:c7:1b:5c:d8:ac:ed: d6:c8:a4:52:5c:04:ca:e5:aa:40:c2:db:a6:e4:b0: 70:ba:fe:c9:e1:6a:f1:75:78:fe:66:13:ef:ea:c8: 13:19:80:aa:7f:ba:f6:7e:e5:38:75:17:8c:15:4c: 24:96:1d:a9:01:6a:c9:39:db:80:c5:6e:b3:7d:68: 44:c2:86:96:78:c1:89:ea:54:06:32:50:a6:9c:83: 65:7a:f7:ba:35:df:fb:37:6c:21:59:8b:77:fe:b9: 52:1a:00:c8:05:1f:f4:f0:bb:5c:a8:0d:7a:87:1b: 0f:09:03:1b:5e:08:eb:e7:f1:0c:6c:af:e5:87:12: 1a:b8:d2:e1:87:7f:a9:ea:9a:bf:40:76:40:d5:a6: 87:b5:ee:a2:17:fa:82:b4:13:6a:b9:f1:8c:82:65: 4e:d7:5f:17:3a:4e:f9:f1:4a:f0:da:fa:e3:19:93: 39:00:89:3f:fa:c1:1f:74:dd:3e:74:f0:e1:b0:b0: 23:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E4:A1:68:BA:75:B6:01:B4:C3:A1:7C:4A:75:45:50:61:86:24:95 X509v3 Authority Key Identifier: keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/3OShaLp1tgG0w6F8SnVFUGGGJJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.146.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:ce:d1:62:12:6e:58:14:d6:45:2c:5c:6c:96:17:67:4e:2a: 5f:5c:b8:f4:28:7d:06:2d:79:2f:10:bc:76:f1:e3:03:3b:2a: dc:b3:6c:84:26:3a:23:19:44:f9:b1:e4:79:0e:3e:f0:ae:49: 53:54:dd:6e:28:37:c3:f6:c8:e7:b3:9e:39:30:5b:34:aa:b2: 91:33:da:c3:20:a3:06:50:c6:aa:0f:f3:89:af:4c:13:b8:a8: e1:d0:6a:3c:89:12:90:57:17:4d:7b:00:20:62:b6:75:f0:9d: c8:07:61:44:98:ed:d7:08:48:46:ec:9c:3d:12:82:a6:9a:6d: b5:e2:4d:6a:d6:76:14:08:38:3f:c5:7d:4a:99:93:94:15:eb: bf:fd:02:b7:42:3a:74:ca:89:7a:a6:43:6e:e9:8d:48:e7:29: 15:d1:da:b7:49:39:b8:e0:29:b4:5c:ad:e3:c3:d3:15:10:45: 8e:b3:5f:ed:a5:87:77:57:f4:86:69:0d:c0:18:98:d3:df:67: 0b:ea:39:b3:e9:bf:26:e2:bd:80:a6:5e:ce:02:fa:2c:d8:f0: f0:87:7a:fe:0a:93:3d:d5:00:02:a7:16:4a:cf:00:3e:6a:d4: 22:d1:d0:b8:cc:c2:b1:30:60:42:66:8f:e7:50:0e:28:24:20: 7c:ba:79:7f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5EENbHSuLrbtqri2gPu4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5N2ZkZWNhZGIzMjYxMzM0Mzg3Y2YwOTFkMDJlMDcxM2I3 ODFkMzEwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2U0YTE2OGJhNzViNjAxYjRjM2ExN2M0YTc1NDU1MDYxODYyNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2flQymB8xmfu3qGdtVloGFpB4Ml WLPUgH/2I0/wWoSU1xW2W6QkID/aVFfa3sWqKZX9mLagwhNccjFSM41xxTjYQmXH G1zYrO3WyKRSXATK5apAwtum5LBwuv7J4WrxdXj+ZhPv6sgTGYCqf7r2fuU4dReM FUwklh2pAWrJOduAxW6zfWhEwoaWeMGJ6lQGMlCmnINleve6Nd/7N2whWYt3/rlS GgDIBR/08LtcqA16hxsPCQMbXgjr5/EMbK/lhxIauNLhh3+p6pq/QHZA1aaHte6i F/qCtBNqufGMgmVO118XOk758Urw2vrjGZM5AIk/+sEfdN0+dPDhsLAjdQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNzkoWi6dbYBtMOhfEp1RVBhhiSVMB8GA1UdIwQY MBaAFPl/3srbMmEzQ4fPCR0C4HE7eB0xMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YX2V5dHN5WVRORGg4OEpIUUxnY1R0NEhURS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYThhMzY0LTc0MzAtNGRhNi04ZjQz LWViN2JmMmJkZGQwOC8xLzNPU2hhTHAxdGdHMHc2RjhTblZGVUdHR0pKVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYThhMzY0LTc0MzAtNGRhNi04ZjQzLWViN2JmMmJkZGQw OC8xLzEtWF9leXRzeVlUTkRoODhKSFFMZ2NUdDRIVEUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtDZIw DQYJKoZIhvcNAQELBQADggEBAFvO0WISblgU1kUsXGyWF2dOKl9cuPQofQYteS8Q vHbx4wM7KtyzbIQmOiMZRPmx5HkOPvCuSVNU3W4oN8P2yOeznjkwWzSqspEz2sMg owZQxqoP84mvTBO4qOHQajyJEpBXF017ACBitnXwncgHYUSY7dcISEbsnD0Sgqaa bbXiTWrWdhQIOD/FfUqZk5QV67/9ArdCOnTKiXqmQ27pjUjnKRXR2rdJObjgKbRc rePD0xUQRY6zX+2lh3dX9IZpDcAYmNPfZwvqObPpvybivYCmXs4C+izY8PCHev4K kz3VAAKnFkrPAD5q1CLR0LjMwrEwYEJmj+dQDigkIHy6eX8= -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:24 2026 by rpki-client