This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3cQ2uUgVaFwqDMpAAyQlK5uz700.roa File: 3cQ2uUgVaFwqDMpAAyQlK5uz700.roa (raw, json) Hash identifier: s4w31CQwbAw6IqHqOJwGKTTEKbwjoQ/2aTgwz/G/L4g= Subject key identifier: DD:C4:36:B9:48:15:68:5C:2A:0C:CA:40:03:24:25:2B:9B:B3:EF:4D Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA55D6C70BEE7BEEEA50979850073FB Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3cQ2uUgVaFwqDMpAAyQlK5uz700.roa Signing time: Thu 01 Jan 2026 22:19:53 +0000 ROA not before: Thu 01 Jan 2026 22:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206238 IP address blocks: 45.137.88.0/22 maxlen: 24 45.137.100.0/22 maxlen: 24 45.138.52.0/22 maxlen: 24 45.142.16.0/22 maxlen: 24 45.142.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:5d:6c:70:be:e7:be:ee:a5:09:79:85:00:73:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddc436b94815685c2a0cca400324252b9bb3ef4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:52:42:55:6f:9d:86:06:5a:1f:29:d1:ec: 61:81:c5:99:ae:30:9c:4f:d4:e8:a4:5e:97:29:9a: e1:b0:1a:a7:1c:af:34:f8:54:55:fd:01:7b:cb:70: 01:93:31:6f:f4:b9:90:ca:20:27:81:b0:6f:84:27: 1c:3d:6d:86:ad:7e:4e:ed:86:34:1e:ef:9a:43:fd: 9a:84:90:d4:8f:da:74:c1:28:0f:70:bb:9d:8f:b8: 3c:89:6c:a1:ca:2d:47:89:3a:24:f0:a8:ce:b0:f0: 52:54:f3:ee:94:45:f5:fa:d7:19:6e:0e:1c:ad:8c: 2d:4e:74:57:11:da:fa:71:c8:2c:e3:87:c1:fc:86: 22:2f:a1:f6:a5:3c:f6:6d:3f:ea:a1:f3:ed:8b:62: 9d:c1:48:7c:c7:2b:fb:6a:7c:04:4c:39:34:eb:d9: 9c:dd:e8:d1:3b:16:62:4b:0f:bc:8c:d9:40:1e:dc: ac:55:a4:e8:28:69:e6:1f:6b:b0:3d:6d:3a:0a:31: e8:18:3e:ea:b5:7b:f8:3e:40:82:41:73:e3:77:47: 4f:ca:12:fc:f8:42:16:9f:ef:79:43:56:35:80:d9: 60:9c:06:da:d5:08:13:70:2a:04:4e:50:0e:8a:3c: 1e:e5:43:b3:72:a0:3e:3b:b2:bf:ba:6f:7f:e3:80: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C4:36:B9:48:15:68:5C:2A:0C:CA:40:03:24:25:2B:9B:B3:EF:4D X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3cQ2uUgVaFwqDMpAAyQlK5uz700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.88.0/22 45.137.100.0/22 45.138.52.0/22 45.142.16.0/22 45.142.144.0/22 Signature Algorithm: sha256WithRSAEncryption ae:a0:87:fd:a8:de:20:d6:b5:c1:60:a2:32:79:9a:a2:04:f5: ab:e7:32:82:ab:10:78:a8:98:15:65:7d:b2:92:a3:20:dd:3b: f5:32:47:e5:dc:26:e9:c8:e6:a5:eb:78:56:eb:0a:03:dc:78: 25:68:f0:e1:47:8f:02:29:7c:e5:aa:ef:69:dd:1a:a9:02:19: 3e:da:b1:8a:01:b4:28:a3:36:4b:98:69:ca:97:fb:3f:2b:02: fd:fc:3b:dd:8c:6e:75:8c:f3:54:72:18:01:c1:80:78:16:f8: 7b:26:5c:cc:8b:a8:2f:10:98:59:9f:61:47:ee:e0:4c:94:31: 40:4e:ed:d4:be:ed:2f:cb:ac:d3:31:5c:4b:0b:2e:01:e8:71: c9:0d:16:27:59:bc:24:2f:c7:d2:6a:b5:e1:95:63:6e:aa:29: ca:ec:cb:fb:56:be:07:79:63:34:24:84:4e:5d:e4:d8:9a:23: 0f:55:17:2e:09:19:0e:3f:95:d9:17:eb:7a:50:17:0e:48:1a: f5:fc:60:ed:d2:9f:51:fe:42:d3:46:25:81:2b:7d:43:5f:34: cd:ab:63:95:8b:78:18:fc:9b:c0:9a:fa:fb:d6:ea:d5:99:fd: ec:2b:31:c7:56:e5:e0:7d:19:45:bf:02:c0:a7:56:ca:d9:69: 32:45:03:4e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7pV1scL7nvu6lCXmFAHP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGM0MzZiOTQ4MTU2ODVjMmEwY2NhNDAwMzI0MjUyYjliYjNlZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0JSQlVvnYYGWh8p0exhgcWZrjCc T9TopF6XKZrhsBqnHK80+FRV/QF7y3ABkzFv9LmQyiAngbBvhCccPW2GrX5O7YY0 Hu+aQ/2ahJDUj9p0wSgPcLudj7g8iWyhyi1HiTok8KjOsPBSVPPulEX1+tcZbg4c rYwtTnRXEdr6ccgs44fB/IYiL6H2pTz2bT/qofPti2KdwUh8xyv7anwETDk069mc 3ejROxZiSw+8jNlAHtysVaToKGnmH2uwPW06CjHoGD7qtXv4PkCCQXPjd0dPyhL8 +EIWn+95Q1Y1gNlgnAba1QgTcCoETlAOijwe5UOzcqA+O7K/um9/44DhPwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFN3ENrlIFWhcKgzKQAMkJSubs+9NMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvM2NRMnVVZ1ZhRndxRE1wQUF5UWxLNXV6NzAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLYlYAwQC LYlkAwQCLYo0AwQCLY4QAwQCLY6QMA0GCSqGSIb3DQEBCwUAA4IBAQCuoIf9qN4g 1rXBYKIyeZqiBPWr5zKCqxB4qJgVZX2ykqMg3Tv1Mkfl3CbpyOal63hW6woD3Hgl aPDhR48CKXzlqu9p3RqpAhk+2rGKAbQoozZLmGnKl/s/KwL9/DvdjG51jPNUchgB wYB4Fvh7JlzMi6gvEJhZn2FH7uBMlDFATu3Uvu0vy6zTMVxLCy4B6HHJDRYnWbwk L8fSarXhlWNuqinK7Mv7Vr4HeWM0JIROXeTYmiMPVRcuCRkOP5XZF+t6UBcOSBr1 /GDt0p9R/kLTRiWBK31DXzTNq2OVi3gY/JvAmvr71urVmf3sKzHHVuXgfRlFvwLA p1bK2WkyRQNO -----END CERTIFICATE-----Generated at Tue Jan 13 11:19:16 2026 by rpki-client