This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3I0lSMBMzUY8_kRaFUK1ixCmD58.roa File: 3I0lSMBMzUY8_kRaFUK1ixCmD58.roa (raw, json) Hash identifier: ZxAyFc0EylPDQsmfzy9g8aQyPguLdKVVIRaEz5STKGM= Subject key identifier: DC:8D:25:48:C0:4C:CD:46:3C:FE:44:5A:15:42:B5:8B:10:A6:0F:9F Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13637BF9574E2F42131112995BBC50 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3I0lSMBMzUY8_kRaFUK1ixCmD58.roa Signing time: Fri 02 Jan 2026 00:20:04 +0000 ROA not before: Fri 02 Jan 2026 00:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.90.17.0/24 maxlen: 24 185.222.30.0/24 maxlen: 24 185.223.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:63:7b:f9:57:4e:2f:42:13:11:12:99:5b:bc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc8d2548c04ccd463cfe445a1542b58b10a60f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:36:fa:89:37:ef:b2:68:7a:25:e2:54:34: 94:c9:f9:f1:5b:b1:8e:cb:98:86:f5:ac:9a:b4:3c: 4c:4a:a9:60:8e:00:b5:dd:2a:83:ea:d6:e9:ba:93: 08:03:af:65:ab:d5:2b:d1:74:38:4c:e1:bf:cb:d1: d5:5d:05:47:dd:4f:46:08:c9:1d:60:b5:8d:59:2c: 0e:ba:16:0f:78:bf:b1:4b:7e:87:83:8a:24:66:55: ac:b1:af:6e:13:34:8a:fb:96:ba:aa:8a:38:33:ee: 20:34:89:c1:67:e3:6b:94:93:df:8f:01:c1:32:10: 66:72:ef:24:b8:a9:d8:8b:dd:cc:e9:87:41:70:91: 82:13:d2:43:9c:f6:93:a5:4b:af:f6:37:0f:02:b3: 21:0e:38:ba:73:57:75:a5:43:03:cd:28:25:55:47: bf:1b:3f:f5:ea:7c:fc:18:40:b9:ec:5b:51:34:71: 05:b9:a6:ff:99:ba:6d:8c:1d:33:86:80:cb:fd:ac: 3d:a6:c3:d4:1a:d1:ac:a6:18:58:9b:fb:19:0f:3c: 3e:2c:af:a3:4c:4a:d5:92:dd:7b:2f:6e:1e:77:50: 5a:bc:67:88:20:96:9f:6d:40:e5:dc:13:38:fd:9e: 50:ae:53:a2:a5:4e:f9:dc:d5:53:a2:a8:b9:6c:5e: e5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8D:25:48:C0:4C:CD:46:3C:FE:44:5A:15:42:B5:8B:10:A6:0F:9F X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3I0lSMBMzUY8_kRaFUK1ixCmD58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.17.0/24 185.222.30.0/24 185.223.82.0/24 Signature Algorithm: sha256WithRSAEncryption 61:34:a3:22:07:e9:3d:66:6e:8d:6b:3b:a4:1a:0b:7f:29:ec: 21:56:be:5e:ad:d0:8d:ba:ab:c8:d7:c2:ea:36:6f:22:71:54: e5:16:70:f6:e2:21:99:ec:d3:ef:95:8b:ed:46:64:2e:bc:03: 33:19:df:48:49:0a:15:9d:e0:44:04:60:db:5c:a5:13:e5:8c: 1b:a0:e3:a1:b9:ae:26:c7:3c:c0:fc:b6:8a:47:e9:90:65:70: cd:7e:a7:ad:eb:5f:9c:26:fe:59:55:bf:ea:ab:83:48:e2:f0: 43:b1:0b:3e:e7:cc:fe:15:a8:16:9d:01:f5:a8:35:a0:c2:04: 90:ff:35:44:19:3d:fb:c7:78:9b:94:0b:68:89:40:aa:14:ac: 57:39:7e:07:23:33:23:46:da:e8:ea:7b:b8:96:f5:c4:c9:42: b8:23:9e:36:ab:c7:67:ac:a5:bf:11:6d:12:26:ab:f2:de:07: c9:d4:9e:89:9d:a8:bb:2a:2a:bb:fe:bc:95:95:89:db:fe:36: 22:d9:74:fe:e8:eb:09:cd:18:b9:3a:3b:6c:83:92:1c:3e:80: 6c:61:27:11:d9:93:5d:b7:dc:b8:c2:cb:72:bb:40:a3:75:ed: c2:8d:a0:84:28:3b:4b:8b:54:28:f3:41:8b:a6:0b:1f:e6:89: 60:b5:60:c5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8E2N7+VdOL0ITERKZW7xQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzhkMjU0OGMwNGNjZDQ2M2NmZTQ0NWExNTQyYjU4YjEwYTYwZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunU2+ok377JoeiXiVDSUyfnxW7GO y5iG9ayatDxMSqlgjgC13SqD6tbpupMIA69lq9Ur0XQ4TOG/y9HVXQVH3U9GCMkd YLWNWSwOuhYPeL+xS36Hg4okZlWssa9uEzSK+5a6qoo4M+4gNInBZ+NrlJPfjwHB MhBmcu8kuKnYi93M6YdBcJGCE9JDnPaTpUuv9jcPArMhDji6c1d1pUMDzSglVUe/ Gz/16nz8GEC57FtRNHEFuab/mbptjB0zhoDL/aw9psPUGtGsphhYm/sZDzw+LK+j TErVkt17L24ed1BavGeIIJafbUDl3BM4/Z5QrlOipU753NVToqi5bF7l8wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNyNJUjATM1GPP5EWhVCtYsQpg+fMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvM0kwbFNNQk16VVk4X2tSYUZVSzFpeENtRDU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVoRAwQA ud4eAwQAud9SMA0GCSqGSIb3DQEBCwUAA4IBAQBhNKMiB+k9Zm6NazukGgt/Kewh Vr5erdCNuqvI18LqNm8icVTlFnD24iGZ7NPvlYvtRmQuvAMzGd9ISQoVneBEBGDb XKUT5YwboOOhua4mxzzA/LaKR+mQZXDNfqet61+cJv5ZVb/qq4NI4vBDsQs+58z+ FagWnQH1qDWgwgSQ/zVEGT37x3iblAtoiUCqFKxXOX4HIzMjRtro6nu4lvXEyUK4 I542q8dnrKW/EW0SJqvy3gfJ1J6Jnai7Kiq7/ryVlYnb/jYi2XT+6OsJzRi5Ojts g5IcPoBsYScR2ZNdt9y4wstyu0Cjde3CjaCEKDtLi1Qo80GLpgsf5olgtWDF -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:19 2026 by rpki-client