This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/3DT3B1NHAodibv8HfsiWBpQZkkw.roa File: 3DT3B1NHAodibv8HfsiWBpQZkkw.roa (raw, json) Hash identifier: be2IZuet6G8U53Y1IKjxfCGpLOGP/WsLRkFMJumAGEg= Subject key identifier: DC:34:F7:07:53:47:02:87:62:6E:FF:07:7E:C8:96:06:94:19:92:4C Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0 Certificate serial: 019B7F157C9249F69B8A6F3477131ED61514 Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/3DT3B1NHAodibv8HfsiWBpQZkkw.roa Signing time: Fri 02 Jan 2026 14:21:13 +0000 ROA not before: Fri 02 Jan 2026 14:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208131 IP address blocks: 45.157.148.0/24 maxlen: 24 45.157.149.0/24 maxlen: 24 45.157.150.0/24 maxlen: 24 45.157.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7c:92:49:f6:9b:8a:6f:34:77:13:1e:d6:15:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0 Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc34f70753470287626eff077ec896069419924c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:c1:90:ad:67:c1:36:c2:a6:3c:1e:7e:3a: 99:5f:aa:eb:54:be:75:83:03:40:e6:41:13:c2:93: 7b:90:9c:18:91:d0:01:d2:50:9a:2c:98:10:30:22: 41:50:56:e3:cf:68:25:17:55:67:ea:eb:7b:b4:ec: 93:f4:9f:29:5b:11:29:f8:eb:6a:fe:da:6d:28:fd: 5e:c2:5f:4b:14:cb:f2:55:8e:05:a5:b1:e4:65:04: c4:36:13:ce:ec:2b:8c:45:d1:b3:1f:5b:41:d7:b1: 29:a5:82:6a:4e:30:b7:99:79:2e:f0:86:5c:cb:cb: ee:35:71:47:b7:34:12:69:f5:cc:1c:05:10:ae:99: 1b:f8:ed:2b:e7:c9:32:2f:da:cd:82:ba:cb:db:25: b0:1a:f7:e5:33:d3:36:b4:09:03:30:05:90:b2:30: 05:68:c7:2e:f4:05:91:db:c7:0b:fb:0c:69:53:75: 93:23:07:b1:5b:a0:f3:85:fd:47:cc:17:4f:a1:83: b0:83:28:61:b8:dd:32:7b:de:74:1a:21:b9:3f:ba: 80:36:59:a0:33:51:47:fc:88:17:2f:73:78:00:f0: fd:1d:f6:f3:7e:71:9f:b5:64:94:9c:29:18:91:b9: bd:e3:5d:34:78:32:62:58:21:7e:fb:b0:b0:a8:af: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:34:F7:07:53:47:02:87:62:6E:FF:07:7E:C8:96:06:94:19:92:4C X509v3 Authority Key Identifier: keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/3DT3B1NHAodibv8HfsiWBpQZkkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.148.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:8c:eb:f7:03:39:9b:0a:03:4a:77:93:86:6c:4a:58:58:84: 87:9d:f0:bc:2a:fa:9d:cb:d6:e7:c6:3a:17:5e:10:88:a3:a6: 6d:83:a5:ba:2e:2a:39:b8:bb:93:c7:57:ff:ef:94:ef:99:e1: eb:97:28:5a:e6:c5:af:52:a0:66:6e:70:00:e5:05:b1:28:7d: 90:e3:89:42:37:68:fb:1a:2d:1d:0f:5a:4d:8c:6c:28:e3:33: aa:f4:29:00:bb:8c:de:58:9b:02:80:aa:a1:97:f4:2c:73:ca: c1:cf:ca:4b:d0:c4:ab:63:36:5b:e0:32:50:1a:fd:8b:33:43: 8e:81:e3:23:c5:6f:5a:99:32:d0:cf:cf:24:b1:02:0a:72:1b: a3:77:08:38:bb:4b:31:aa:e7:a8:7a:ed:b1:4b:31:a1:0e:e2: 02:40:41:94:20:03:c1:e3:cd:4a:53:b5:68:c5:07:74:02:f3: a2:5d:8a:35:ad:01:cb:d7:00:6f:63:9e:c2:b3:e6:e9:55:e3: 4c:1b:69:0f:2f:e6:d8:7c:62:08:19:06:8f:5c:d7:83:83:22: 96:6a:5f:6b:61:e6:91:9d:be:28:04:4d:45:a2:0e:b1:7a:e2: 0b:e7:9b:41:85:5f:5e:17:f4:42:ba:d4:b2:38:c0:c8:92:53: d7:6c:99:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXySSfabim80dxMe1hUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGU5Zjc1YzczMjZmNzY1Yzg5NjZjMmVkYzAwYTk4MmE1 ZWE3ZjAwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzM0ZjcwNzUzNDcwMjg3NjI2ZWZmMDc3ZWM4OTYwNjk0MTk5MjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9vBkK1nwTbCpjwefjqZX6rrVL51 gwNA5kETwpN7kJwYkdAB0lCaLJgQMCJBUFbjz2glF1Vn6ut7tOyT9J8pWxEp+Otq /tptKP1ewl9LFMvyVY4FpbHkZQTENhPO7CuMRdGzH1tB17EppYJqTjC3mXku8IZc y8vuNXFHtzQSafXMHAUQrpkb+O0r58kyL9rNgrrL2yWwGvflM9M2tAkDMAWQsjAF aMcu9AWR28cL+wxpU3WTIwexW6Dzhf1HzBdPoYOwgyhhuN0ye950GiG5P7qANlmg M1FH/IgXL3N4APD9HfbzfnGftWSUnCkYkbm94100eDJiWCF++7CwqK/2SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNw09wdTRwKHYm7/B37IlgaUGZJMMB8GA1UdIwQY MBaAFCNOn3XHMm92XIlmwu3ACpgqXqfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQt NzdkZWUyZDc5YWU0LzEvM0RUM0IxTkhBb2RpYnY4SGZzaVdCcFFaa2t3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQtNzdkZWUyZDc5YWU0 LzEvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ2UMA0G CSqGSIb3DQEBCwUAA4IBAQCOjOv3AzmbCgNKd5OGbEpYWISHnfC8Kvqdy9bnxjoX XhCIo6Ztg6W6Lio5uLuTx1f/75TvmeHrlyha5sWvUqBmbnAA5QWxKH2Q44lCN2j7 Gi0dD1pNjGwo4zOq9CkAu4zeWJsCgKqhl/Qsc8rBz8pL0MSrYzZb4DJQGv2LM0OO geMjxW9amTLQz88ksQIKchujdwg4u0sxqueoeu2xSzGhDuICQEGUIAPB481KU7Vo xQd0AvOiXYo1rQHL1wBvY57Cs+bpVeNMG2kPL+bYfGIIGQaPXNeDgyKWal9rYeaR nb4oBE1Fog6xeuIL55tBhV9eF/RCutSyOMDIklPXbJlk -----END CERTIFICATE-----Generated at Mon Feb 9 18:34:05 2026 by rpki-client