This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/B3ZEk8Cap2g9KplZIsoRlruoyZE.roa File: B3ZEk8Cap2g9KplZIsoRlruoyZE.roa (raw, json) Hash identifier: g43dat6xdrbXP10ocqQ6N9VTX+6RhA4yXEtNgHAbATA= Subject key identifier: 07:76:44:93:C0:9A:A7:68:3D:2A:99:59:22:CA:11:96:BB:A8:C9:91 Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a Certificate serial: 019B77C669D095A6823F16A592B2DD19FCD1 Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/B3ZEk8Cap2g9KplZIsoRlruoyZE.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211680 IP address blocks: 45.156.128.0/24 maxlen: 24 45.156.129.0/24 maxlen: 24 45.156.130.0/24 maxlen: 24 185.180.140.0/24 maxlen: 24 185.180.143.0/24 maxlen: 24 185.226.198.0/24 maxlen: 24 2a10:3c0:1::/48 maxlen: 48 2a10:3c0:2::/48 maxlen: 48 2a10:3c0:100::/48 maxlen: 48 2a10:3c0:101::/48 maxlen: 48 2a10:3c0:102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:69:d0:95:a6:82:3f:16:a5:92:b2:dd:19:fc:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07764493c09aa7683d2a995922ca1196bba8c991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:bd:60:44:2f:2f:aa:b6:6f:d8:09:e5:ce: d9:e5:73:aa:bc:fa:35:fb:0b:90:9f:b9:fd:dd:b9: 09:b9:fe:ce:17:4c:d3:fb:a5:ad:77:1b:ce:b4:c2: 15:b8:ce:33:da:62:3f:23:29:2b:7d:69:da:d2:75: a8:5f:39:8d:25:16:09:47:7e:e8:88:0b:a4:da:26: 00:90:96:56:8c:d2:cf:0e:95:fd:57:9d:da:d4:91: 4a:05:f7:e2:e7:af:f6:be:d2:4c:a6:2c:ce:16:85: a2:e4:c0:dd:3c:6a:bb:85:af:53:6d:53:aa:81:0a: cd:45:5c:90:c1:53:a9:de:5e:f2:ba:8b:4a:51:d9: c4:53:8d:7d:64:d3:db:4b:c4:77:c9:aa:ca:77:97: 20:10:1e:cc:4e:a5:11:2b:c0:d8:11:e5:18:f8:e5: 04:4f:6b:81:33:00:0e:99:30:03:3e:6f:eb:b9:f8: 81:70:1e:89:0f:a1:2e:8a:56:85:51:f8:d7:93:17: 8e:7c:84:22:b2:d3:b3:48:e8:5b:13:b4:b4:bc:ab: 4e:ed:0f:49:34:a8:e7:ea:94:94:5c:c7:bb:1b:a2: ba:d7:0d:00:5e:24:44:06:a8:d6:1a:f6:bd:5f:fd: 9b:39:74:a7:fb:e5:7a:9c:da:8d:47:9a:56:2a:06: 57:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:76:44:93:C0:9A:A7:68:3D:2A:99:59:22:CA:11:96:BB:A8:C9:91 X509v3 Authority Key Identifier: keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/B3ZEk8Cap2g9KplZIsoRlruoyZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.128.0-45.156.130.255 185.180.140.0/24 185.180.143.0/24 185.226.198.0/24 IPv6: 2a10:3c0:1::-2a10:3c0:2:ffff:ffff:ffff:ffff:ffff 2a10:3c0:100::-2a10:3c0:102:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1f:c4:8e:80:fa:2d:fc:4f:fe:e8:1a:8d:53:eb:c2:68:99:ff: a4:99:f3:e4:33:5b:37:16:83:19:f4:97:30:2a:b0:f0:6f:78: 75:0b:c7:cf:4a:5b:22:5a:57:53:5e:f4:43:d2:d9:07:d3:19: 5d:61:0d:bb:16:a1:2d:72:2c:f8:ea:38:33:f8:f1:3c:fe:16: 01:9c:94:b2:57:74:c6:df:d3:b9:af:16:19:9f:05:fc:1b:f7: ff:bc:a9:64:56:66:d6:c4:03:4f:86:48:4c:0c:4f:f9:7c:94: 51:5b:ef:71:d3:e5:a4:51:f4:85:b5:ae:6e:86:b8:81:33:6e: ce:3c:f3:cc:1e:86:6d:8a:78:f2:e8:8f:1e:23:39:53:57:50: e1:fd:d3:8d:da:50:f2:e8:b0:d6:06:83:94:e7:5e:f9:ad:fe: 15:d0:f8:fa:82:7c:3c:0b:44:a6:5c:de:80:8f:7a:58:b9:33: 43:0e:1a:d1:96:e9:3c:b0:74:c6:9d:2b:e9:73:b5:c8:1e:5e: 49:f8:f9:fc:07:2f:79:cf:ea:52:b0:02:15:b0:5e:ee:34:88: eb:98:00:17:e3:a6:02:79:53:20:05:b2:6c:c2:d5:5a:51:c9: dc:3c:c8:cd:20:90:18:a1:d6:d5:a6:b8:6a:94:5b:af:4e:84: 97:c9:a9:9d -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZt3xmnQlaaCPxalkrLdGfzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhY2ZhYzg2NDVhM2M2ZjEwMDQyZGM0YTc0ZDcwMGQ5ZDA2 YWYxN2EwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzc2NDQ5M2MwOWFhNzY4M2QyYTk5NTkyMmNhMTE5NmJiYThjOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxha9YEQvL6q2b9gJ5c7Z5XOqvPo1 +wuQn7n93bkJuf7OF0zT+6WtdxvOtMIVuM4z2mI/IykrfWna0nWoXzmNJRYJR37o iAuk2iYAkJZWjNLPDpX9V53a1JFKBffi56/2vtJMpizOFoWi5MDdPGq7ha9TbVOq gQrNRVyQwVOp3l7yuotKUdnEU419ZNPbS8R3yarKd5cgEB7MTqURK8DYEeUY+OUE T2uBMwAOmTADPm/rufiBcB6JD6EuilaFUfjXkxeOfIQistOzSOhbE7S0vKtO7Q9J NKjn6pSUXMe7G6K61w0AXiREBqjWGva9X/2bOXSn++V6nNqNR5pWKgZX4wIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFAd2RJPAmqdoPSqZWSLKEZa7qMmRMB8GA1UdIwQY MBaAFErPrIZFo8bxAELcSnTXANnQavF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYt N2JmODI3N2Q4YTJmLzEvQjNaRWs4Q2FwMmc5S3BsWklzb1JscnVveVpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYtN2JmODI3N2Q4YTJm LzEvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzAmBAIAATAgMAwDBActnIAD BAAtnIIDBAC5tIwDBAC5tI8DBAC54sYwLQQCAAIwJzASAwcAKhADwAABAwcAKhAD wAACMBEDBgAqEAPAAQMHACoQA8ABAjANBgkqhkiG9w0BAQsFAAOCAQEAH8SOgPot /E/+6BqNU+vCaJn/pJnz5DNbNxaDGfSXMCqw8G94dQvHz0pbIlpXU170Q9LZB9MZ XWENuxahLXIs+Oo4M/jxPP4WAZyUsld0xt/Tua8WGZ8F/Bv3/7ypZFZm1sQDT4ZI TAxP+XyUUVvvcdPlpFH0hbWuboa4gTNuzjzzzB6GbYp48uiPHiM5U1dQ4f3TjdpQ 8uiw1gaDlOde+a3+FdD4+oJ8PAtEplzegI96WLkzQw4a0ZbpPLB0xp0r6XO1yB5e Sfj5/Acvec/qUrACFbBe7jSI65gAF+OmAnlTIAWybMLVWlHJ3DzIzSCQGKHW1aa4 apRbr06El8mpnQ== -----END CERTIFICATE-----Generated at Sat Jan 10 01:49:52 2026 by rpki-client