This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/3MEm9k86Krnq6wM36cluZIFqGPg.roa File: 3MEm9k86Krnq6wM36cluZIFqGPg.roa (raw, json) Hash identifier: WOCoI9HcLnxBGRGXT70xKNe6H/yvXh7uvM6Oo5uJP3Q= Subject key identifier: DC:C1:26:F6:4F:3A:2A:B9:EA:EB:03:37:E9:C9:6E:64:81:6A:18:F8 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B7D5B79ABF94A58F51C6267D80805028F Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/3MEm9k86Krnq6wM36cluZIFqGPg.roa Signing time: Fri 02 Jan 2026 06:18:25 +0000 ROA not before: Fri 02 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6461 IP address blocks: 83.245.12.0/24 maxlen: 24 83.245.53.0/24 maxlen: 24 83.245.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:79:ab:f9:4a:58:f5:1c:62:67:d8:08:05:02:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jan 2 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcc126f64f3a2ab9eaeb0337e9c96e64816a18f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:5b:b1:7a:28:4a:61:bb:1d:77:cc:40:6b: c0:70:69:d3:6d:23:8f:4f:7b:31:48:ff:71:e6:60: 43:37:67:bb:c3:65:ed:9f:c8:b5:eb:ef:4c:2a:1a: 60:7b:a3:37:4c:e7:0f:9b:8b:29:b8:ea:0b:07:24: 5e:2c:1b:70:05:69:a7:d5:52:6b:a6:66:e9:1a:f8: 8c:3d:14:7f:a1:d3:10:ef:67:04:bf:36:b9:b4:9a: a1:67:06:a2:b2:15:9b:34:50:6d:89:1a:fc:4b:26: 56:2a:76:7e:2b:67:c3:95:c4:0e:12:e5:f2:f1:23: 48:de:fa:6a:12:54:b8:b2:6d:02:e5:1c:8a:2e:e9: 40:c6:c8:c2:64:ed:e9:b8:2b:51:cd:d1:ee:3a:23: 63:cf:0d:96:4a:c1:e6:07:3a:cc:46:8b:12:a8:00: db:e3:0a:49:a3:c2:2e:d4:2d:7d:45:7f:ed:99:20: f8:63:29:3c:ab:7a:3f:72:50:30:8e:b7:fb:6c:e2: ed:95:7b:cd:31:4a:e8:db:57:6c:0d:eb:fb:9c:ff: 06:3f:5c:9f:ea:51:74:7b:51:f0:f8:87:ff:57:22: 67:51:a4:78:ac:73:a7:ab:8d:76:69:c2:1f:1d:17: 72:fd:28:16:02:81:82:6f:9f:d2:68:12:21:07:46: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C1:26:F6:4F:3A:2A:B9:EA:EB:03:37:E9:C9:6E:64:81:6A:18:F8 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/3MEm9k86Krnq6wM36cluZIFqGPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.245.12.0/24 83.245.53.0/24 83.245.57.0/24 Signature Algorithm: sha256WithRSAEncryption 82:33:20:63:9a:19:12:5e:df:3c:47:f3:20:4d:a2:33:85:84: a5:d5:34:b7:c3:35:a4:f3:f5:b2:da:0e:34:d2:a7:3c:38:15: b7:ed:14:ec:b6:7b:92:a9:95:1b:ae:43:bf:26:45:e6:a0:ce: 0f:75:d9:87:40:70:86:59:f2:9b:97:6f:39:34:b2:ff:25:3d: d5:34:2d:df:97:ef:d8:eb:3c:50:f3:45:44:c8:7b:f4:7d:99: 3a:5f:05:16:96:84:b8:07:f4:24:1e:7a:50:bd:f2:8f:fa:fd: cd:c8:f3:07:1e:79:52:da:e0:db:7d:ed:8d:f4:1f:b7:28:ce: 4a:5e:da:8b:32:42:25:d3:0d:b2:31:d2:4b:bb:18:c7:11:22: 7b:3d:89:95:f2:fc:67:87:ce:4c:5b:93:24:ee:56:22:be:43: 88:0c:eb:37:1f:65:c4:4c:40:73:8e:4f:a6:20:e7:fa:5a:e4: a4:48:17:1f:ec:93:bc:1f:0d:36:1d:7f:c8:56:19:1e:92:a0: 01:7b:84:5d:68:f1:34:02:92:53:b3:8e:83:a6:2d:f9:4a:9e: 10:ad:ac:4e:df:13:f9:f5:83:9c:c0:be:ed:9e:00:e6:e5:ee: 9d:6a:3b:da:03:f4:2c:f2:d3:40:e0:6e:ac:85:a1:ea:16:f0: 66:42:a5:10 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9W3mr+UpY9RxiZ9gIBQKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMTAyMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2MxMjZmNjRmM2EyYWI5ZWFlYjAzMzdlOWM5NmU2NDgxNmExOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0blbsXooSmG7HXfMQGvAcGnTbSOP T3sxSP9x5mBDN2e7w2Xtn8i16+9MKhpge6M3TOcPm4spuOoLByReLBtwBWmn1VJr pmbpGviMPRR/odMQ72cEvza5tJqhZwaishWbNFBtiRr8SyZWKnZ+K2fDlcQOEuXy 8SNI3vpqElS4sm0C5RyKLulAxsjCZO3puCtRzdHuOiNjzw2WSsHmBzrMRosSqADb 4wpJo8Iu1C19RX/tmSD4Yyk8q3o/clAwjrf7bOLtlXvNMUro21dsDev7nP8GP1yf 6lF0e1Hw+If/VyJnUaR4rHOnq412acIfHRdy/SgWAoGCb5/SaBIhB0ZMMQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNzBJvZPOiq56usDN+nJbmSBahj4MB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvM01FbTlrODZLcm5xNndNMzZjbHVaSUZxR1BnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU/UMAwQA U/U1AwQAU/U5MA0GCSqGSIb3DQEBCwUAA4IBAQCCMyBjmhkSXt88R/MgTaIzhYSl 1TS3wzWk8/Wy2g400qc8OBW37RTstnuSqZUbrkO/JkXmoM4PddmHQHCGWfKbl285 NLL/JT3VNC3fl+/Y6zxQ80VEyHv0fZk6XwUWloS4B/QkHnpQvfKP+v3NyPMHHnlS 2uDbfe2N9B+3KM5KXtqLMkIl0w2yMdJLuxjHESJ7PYmV8vxnh85MW5Mk7lYivkOI DOs3H2XETEBzjk+mIOf6WuSkSBcf7JO8Hw02HX/IVhkekqABe4RdaPE0ApJTs46D pi35Sp4QraxO3xP59YOcwL7tngDm5e6dajvaA/Qs8tNA4G6shaHqFvBmQqUQ -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:06 2026 by rpki-client