This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/3DigKmaWxP-qw4TMo5nSEFFHNlw.roa File: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (raw, json) Hash identifier: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA= Subject key identifier: DC:38:A0:2A:66:96:C4:FF:AA:C3:84:CC:A3:99:D2:10:51:47:36:5C Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7CC3D1593C5222B93C4BBD571ACFA Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/3DigKmaWxP-qw4TMo5nSEFFHNlw.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138195 IP address blocks: 45.93.28.0/24 maxlen: 24 45.93.29.0/24 maxlen: 24 45.93.30.0/24 maxlen: 24 45.93.31.0/24 maxlen: 24 45.94.68.0/24 maxlen: 24 45.94.69.0/24 maxlen: 24 45.94.70.0/24 maxlen: 24 45.141.136.0/24 maxlen: 24 45.141.137.0/24 maxlen: 24 45.141.138.0/24 maxlen: 24 45.141.139.0/24 maxlen: 24 45.154.12.0/24 maxlen: 24 45.154.13.0/24 maxlen: 24 45.154.14.0/24 maxlen: 24 45.154.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cc:3d:15:93:c5:22:2b:93:c4:bb:d5:71:ac:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc38a02a6696c4ffaac384cca399d2105147365c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:20:20:ba:41:4c:84:a6:86:ec:b2:45:d4: 8d:a4:df:c7:d5:1c:ee:43:b1:9f:fc:3c:83:aa:07: 98:a7:25:14:bf:0a:37:24:2f:69:31:44:42:c0:2c: 6f:e5:89:fa:5b:f7:ac:84:51:9b:84:73:4b:56:eb: b6:53:51:6c:d0:84:a2:91:ea:a4:1e:8e:75:e1:69: 61:3b:ab:d0:49:1b:db:45:09:2e:dc:99:48:2b:b8: 30:a6:19:46:5d:c7:79:21:ad:85:2e:d7:41:af:21: 5b:21:b8:f2:1f:52:ea:f4:a1:71:36:75:9c:5e:bc: 76:a1:0a:29:e1:77:e6:a6:75:e6:65:db:59:b1:7e: 41:09:f1:34:f6:49:e9:82:65:fb:17:c0:35:21:30: df:18:29:9e:ae:1b:e6:c9:68:50:88:b8:6e:55:f7: 70:bc:8c:be:c6:30:5a:44:90:9b:77:57:67:f1:0e: 6f:f1:07:ef:11:df:86:9e:d4:3d:b3:b2:2b:34:21: f0:bd:49:9f:bf:b6:27:cf:5a:26:8f:89:65:4e:c3: 7d:8a:38:93:00:b6:c1:1e:a8:fd:a2:e9:a9:d3:b0: 26:91:10:8a:09:59:c9:2e:42:ba:65:27:61:46:ef: d8:cd:6a:06:fc:d3:e4:6c:a9:ec:c1:ab:77:e3:0f: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:38:A0:2A:66:96:C4:FF:AA:C3:84:CC:A3:99:D2:10:51:47:36:5C X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/3DigKmaWxP-qw4TMo5nSEFFHNlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.28.0/22 45.94.68.0-45.94.70.255 45.141.136.0/22 45.154.12.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:9e:e1:fe:83:1c:53:f6:31:cd:b0:f5:57:2c:51:9c:71:ce: 68:d2:b1:8c:2f:57:b1:a0:4e:15:14:eb:86:ef:7d:1a:5c:dc: 1e:06:b8:09:88:6a:2f:0d:39:72:09:fe:c6:c5:0f:bf:70:c8: 7e:e1:31:6d:82:28:c8:bb:b8:d0:e8:f2:fd:f8:4d:a4:f0:19: ad:52:5c:8b:69:40:60:ad:aa:fe:c1:4d:3d:c1:5c:8c:6a:e3: 45:99:54:24:e2:e0:ab:53:65:35:4c:f1:2f:48:15:86:d7:7d: 7b:87:be:e3:fa:ca:bb:63:0a:7e:42:f1:fc:8a:a2:0d:98:59: 48:7f:fe:53:11:4a:38:12:14:8e:5e:e2:67:a6:4e:10:02:58: bd:4b:0c:ef:2f:a0:ef:cf:24:36:12:07:a8:a0:41:fb:47:2e: b8:7d:fb:e4:a9:cd:67:00:c4:42:4a:73:26:aa:78:04:8a:d2: 78:cb:e8:df:8f:07:25:48:0e:c5:e1:59:12:c1:6e:03:db:ee: 35:16:b1:a9:ad:27:a1:5b:46:cc:21:54:2f:f7:1b:6d:e1:47: be:76:aa:2a:6a:6f:70:62:70:27:7a:64:89:cf:b0:a4:5a:f0: ec:32:86:0b:29:24:85:64:39:70:11:39:8c:36:d7:0c:a1:81: c1:63:6f:04 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6x8w9FZPFIiuTxLvVcaz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzM4YTAyYTY2OTZjNGZmYWFjMzg0Y2NhMzk5ZDIxMDUxNDczNjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIYgILpBTISmhuyyRdSNpN/H1Rzu Q7Gf/DyDqgeYpyUUvwo3JC9pMURCwCxv5Yn6W/eshFGbhHNLVuu2U1Fs0ISikeqk Ho514WlhO6vQSRvbRQku3JlIK7gwphlGXcd5Ia2FLtdBryFbIbjyH1Lq9KFxNnWc Xrx2oQop4XfmpnXmZdtZsX5BCfE09knpgmX7F8A1ITDfGCmerhvmyWhQiLhuVfdw vIy+xjBaRJCbd1dn8Q5v8QfvEd+GntQ9s7IrNCHwvUmfv7Ynz1omj4llTsN9ijiT ALbBHqj9oump07AmkRCKCVnJLkK6ZSdhRu/YzWoG/NPkbKnswat34w9H/wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNw4oCpmlsT/qsOEzKOZ0hBRRzZcMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvM0RpZ0ttYVd4UC1xdzRUTW81blNFRkZITmx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCLV0cMAwD BAItXkQDBAAtXkYDBAItjYgDBAItmgwwDQYJKoZIhvcNAQELBQADggEBAG6e4f6D HFP2Mc2w9VcsUZxxzmjSsYwvV7GgThUU64bvfRpc3B4GuAmIai8NOXIJ/sbFD79w yH7hMW2CKMi7uNDo8v34TaTwGa1SXItpQGCtqv7BTT3BXIxq40WZVCTi4KtTZTVM 8S9IFYbXfXuHvuP6yrtjCn5C8fyKog2YWUh//lMRSjgSFI5e4memThACWL1LDO8v oO/PJDYSB6igQftHLrh9++SpzWcAxEJKcyaqeASK0njL6N+PByVIDsXhWRLBbgPb 7jUWsamtJ6FbRswhVC/3G23hR752qipqb3BicCd6ZInPsKRa8OwyhgspJIVkOXAR OYw21wyhgcFjbwQ= -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:37 2026 by rpki-client