This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/3OtLzFbkywxj4bXOGTjeuqnS8SE.roa File: 3OtLzFbkywxj4bXOGTjeuqnS8SE.roa (raw, json) Hash identifier: 2jeNVVe54GmP1BBES9FaoxamDKF2feBho25yOVUyHaw= Subject key identifier: DC:EB:4B:CC:56:E4:CB:0C:63:E1:B5:CE:19:38:DE:BA:A9:D2:F1:21 Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Certificate serial: 019BDBAFAC4C65A07DD8A71E0BF6A8769DFE Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/3OtLzFbkywxj4bXOGTjeuqnS8SE.roa Signing time: Tue 20 Jan 2026 13:54:41 +0000 ROA not before: Tue 20 Jan 2026 13:54:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.12.205.0/24 maxlen: 24 45.12.206.0/24 maxlen: 24 45.12.207.0/24 maxlen: 24 45.66.132.0/24 maxlen: 24 45.85.3.0/24 maxlen: 24 45.144.240.0/24 maxlen: 24 45.144.241.0/24 maxlen: 24 45.144.242.0/24 maxlen: 24 45.144.243.0/24 maxlen: 24 81.90.190.0/24 maxlen: 24 185.120.19.0/24 maxlen: 24 185.126.119.0/24 maxlen: 24 185.126.139.0/24 maxlen: 24 185.160.25.0/24 maxlen: 24 185.172.115.0/24 maxlen: 24 2a0c:8a40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:af:ac:4c:65:a0:7d:d8:a7:1e:0b:f6:a8:76:9d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Validity Not Before: Jan 20 13:54:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dceb4bcc56e4cb0c63e1b5ce1938debaa9d2f121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:af:a7:87:63:fc:99:0b:c5:9a:a4:fa:ba:e7: 47:d5:f4:83:ec:67:2f:b8:78:81:94:d3:e0:f0:dd: b1:ff:de:26:2c:20:b5:4a:26:6e:4b:60:20:35:b6: 06:08:44:d4:67:4a:35:60:70:ee:b5:a2:f2:10:8d: 5b:56:99:4b:b1:33:aa:c8:64:2e:1b:65:5a:7b:f6: f8:fa:f2:05:39:93:14:6c:3d:78:cc:c0:b9:e7:0a: 98:e7:1d:f7:41:9b:e4:24:02:9f:0c:0d:c7:77:91: 6f:bb:31:06:16:6f:03:ab:c3:aa:b8:9e:ad:19:a5: ba:43:46:26:c1:40:3e:05:7b:e7:32:06:24:44:c6: 85:65:5c:4a:57:ee:cb:94:9f:65:bf:ff:10:2a:ba: aa:bd:44:bd:eb:52:58:fb:e1:4f:a0:35:f8:a9:b6: 50:51:e8:ae:9a:64:0f:9c:e8:02:f3:e8:69:57:ab: 29:88:9e:65:42:50:bd:da:61:26:4e:71:9d:55:47: 57:70:96:eb:ed:02:52:43:c7:6c:1f:5a:f1:cf:5b: 4b:ff:1b:f2:0f:20:a0:6f:0e:6f:17:82:75:d2:f5: d6:79:da:59:88:68:62:84:f0:b9:4f:69:49:ea:db: 86:54:60:f2:44:91:34:e7:96:a2:e4:a1:25:1f:92: dc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EB:4B:CC:56:E4:CB:0C:63:E1:B5:CE:19:38:DE:BA:A9:D2:F1:21 X509v3 Authority Key Identifier: keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/3OtLzFbkywxj4bXOGTjeuqnS8SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.205.0-45.12.207.255 45.66.132.0/24 45.85.3.0/24 45.144.240.0/22 81.90.190.0/24 185.120.19.0/24 185.126.119.0/24 185.126.139.0/24 185.160.25.0/24 185.172.115.0/24 IPv6: 2a0c:8a40:2::/48 Signature Algorithm: sha256WithRSAEncryption a1:ee:cf:45:a1:99:8a:89:f2:9c:0c:53:54:2f:be:92:46:ee: 9e:f6:d6:f0:fb:18:77:11:c3:8b:f4:47:ec:20:9a:35:b7:b5: 02:50:8c:3a:fc:82:cc:17:2d:f7:32:84:84:df:9a:b8:78:e8: 04:6f:1d:35:ea:48:24:6e:ea:6c:19:d6:f5:34:cd:da:6b:19: 8c:78:b0:e7:80:e3:f3:a6:0f:63:e2:de:1d:93:6c:05:3a:38: 1f:ae:5b:7b:67:9d:87:1f:e2:5e:76:22:56:0f:e1:cd:f2:d1: 83:65:22:f1:52:02:a9:47:ac:d3:ab:a6:55:0e:1e:69:08:47: ca:a5:93:e9:2e:c2:ea:45:99:61:8d:f4:17:c0:d5:b6:fc:a8: 4d:01:c6:da:37:0f:ce:52:15:f6:35:f9:9c:e2:d0:65:33:c9: 31:ff:1b:c4:13:db:10:38:c3:aa:5c:8c:14:10:71:40:00:e0: 57:4d:81:1a:df:c9:51:f0:8d:06:83:5a:83:5a:4a:94:8c:10: e3:be:12:74:42:6b:3c:95:f4:10:e3:b1:e5:79:51:c8:17:7c: 8c:6c:86:1a:99:f8:fd:73:dd:27:73:fa:3e:83:d7:1d:81:3a: 14:36:7e:ae:8f:c0:fb:29:82:c2:a0:8d:d5:7b:65:83:67:bc: 98:48:29:36 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZvbr6xMZaB92KceC/aodp3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy ODhmMTMwHhcNMjYwMTIwMTM1NDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2ViNGJjYzU2ZTRjYjBjNjNlMWI1Y2UxOTM4ZGViYWE5ZDJmMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a+nh2P8mQvFmqT6uudH1fSD7Gcv uHiBlNPg8N2x/94mLCC1SiZuS2AgNbYGCETUZ0o1YHDutaLyEI1bVplLsTOqyGQu G2Vae/b4+vIFOZMUbD14zMC55wqY5x33QZvkJAKfDA3Hd5FvuzEGFm8Dq8OquJ6t GaW6Q0YmwUA+BXvnMgYkRMaFZVxKV+7LlJ9lv/8QKrqqvUS961JY++FPoDX4qbZQ UeiummQPnOgC8+hpV6spiJ5lQlC92mEmTnGdVUdXcJbr7QJSQ8dsH1rxz1tL/xvy DyCgbw5vF4J10vXWedpZiGhihPC5T2lJ6tuGVGDyRJE055ai5KElH5LcxwIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFNzrS8xW5MsMY+G1zhk43rqp0vEhMB8GA1UdIwQY MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt NzM2Nzg5ZWU2ZmQwLzEvM090THpGYmt5d3hqNGJYT0dUamV1cW5TOFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBKBAIAATBEMAwDBAAtDM0D BAQtDMADBAAtQoQDBAAtVQMDBAItkPADBABRWr4DBAC5eBMDBAC5fncDBAC5fosD BAC5oBkDBAC5rHMwDwQCAAIwCQMHACoMikAAAjANBgkqhkiG9w0BAQsFAAOCAQEA oe7PRaGZionynAxTVC++kkbunvbW8PsYdxHDi/RH7CCaNbe1AlCMOvyCzBct9zKE hN+auHjoBG8dNepIJG7qbBnW9TTN2msZjHiw54Dj86YPY+LeHZNsBTo4H65be2ed hx/iXnYiVg/hzfLRg2Ui8VICqUes06umVQ4eaQhHyqWT6S7C6kWZYY30F8DVtvyo TQHG2jcPzlIV9jX5nOLQZTPJMf8bxBPbEDjDqlyMFBBxQADgV02BGt/JUfCNBoNa g1pKlIwQ474SdEJrPJX0EOOx5XlRyBd8jGyGGpn4/XPdJ3P6PoPXHYE6FDZ+ro/A +ymCwqCN1Xtlg2e8mEgpNg== -----END CERTIFICATE-----Generated at Fri Jan 23 02:19:25 2026 by rpki-client