This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa File: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (raw, json) Hash identifier: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo= Subject key identifier: C3:7A:A8:75:B7:28:6B:66:6F:82:80:C9:78:EE:72:80:22:36:68:09 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019B78347C18B936626FEBDC1E4E1D37C405 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa Signing time: Thu 01 Jan 2026 06:17:44 +0000 ROA not before: Thu 01 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.140.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7c:18:b9:36:62:6f:eb:dc:1e:4e:1d:37:c4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c37aa875b7286b666f8280c978ee728022366809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:75:4f:3f:d3:ec:95:22:b2:89:cf:e8:35: 57:75:8f:74:2c:af:da:7f:ec:f7:bc:b9:6a:58:e6: 40:df:0b:5b:db:9c:be:8a:76:dc:6c:40:01:7c:e8: 37:17:c3:ea:c9:c5:90:5a:66:0d:1a:c4:36:80:50: aa:a1:96:6a:74:b0:08:72:f4:55:46:f2:4c:af:e9: 4e:3f:57:b9:93:15:eb:0c:51:08:08:d1:62:88:ac: 26:f2:da:5e:77:4c:4b:0a:31:86:7f:2b:42:b8:1c: ba:3c:da:d9:a3:0a:d8:b4:1a:65:f8:d9:62:62:37: c5:41:7e:97:3d:5c:28:51:bb:12:18:e9:c1:08:7a: 03:54:fe:6a:0b:49:25:f8:9f:01:6c:33:84:0f:7a: ba:c3:30:69:11:43:46:8a:88:06:a2:a0:8e:a2:2f: a6:5a:7e:0a:6d:49:b2:2e:9f:93:0d:18:84:fd:e8: b9:3e:eb:04:cb:a5:b3:e1:98:fc:d5:33:d7:90:91: 2e:2d:6f:3f:9e:4e:80:ef:78:1d:5c:9e:e8:ac:52: 06:5e:b0:53:12:60:cc:0f:21:54:68:41:50:8d:3e: de:50:53:70:48:89:fa:97:71:bb:8b:8b:5c:63:e9: fa:61:cf:31:94:65:00:04:51:dd:61:41:59:56:65: fe:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7A:A8:75:B7:28:6B:66:6F:82:80:C9:78:EE:72:80:22:36:68:09 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.57.0/24 Signature Algorithm: sha256WithRSAEncryption 81:8a:af:5a:f6:5a:93:ef:fd:99:d2:5a:0d:36:5b:aa:fe:bb: 85:c2:d8:ce:e3:69:31:c4:db:fb:f2:8c:c0:b6:13:56:0b:6a: 89:cf:76:35:24:a8:f0:05:45:30:e2:3d:e8:6f:5a:6f:27:51: 67:6c:b6:d6:8b:f0:90:4e:f5:33:d9:68:6d:37:03:e4:0b:a4: 1d:f8:58:7b:64:de:71:7b:fe:d6:bf:8c:33:74:54:a3:d2:1f: 22:1b:c6:c8:41:cd:5f:49:8f:af:9b:2f:40:7c:eb:69:05:95: 9c:fd:86:0c:40:c0:d6:c0:b6:b4:76:68:be:13:50:29:41:9b: f4:06:f9:c1:c0:e3:d7:77:ae:3c:61:bd:f9:2a:18:37:fa:b7: a6:0b:3a:55:6e:36:f6:08:7f:76:9d:60:6a:b4:0e:33:d5:f9: e0:e1:67:22:b5:90:3c:d8:ed:08:2f:fe:07:92:b4:66:e7:29: 0a:be:a1:bd:a8:6c:e6:40:33:8d:cc:cb:24:6f:bc:48:08:4b: 4a:3f:27:91:be:98:a5:47:b7:14:5a:e7:aa:6a:02:2b:46:35: 7f:8e:54:08:71:c4:8d:fd:3b:1d:b7:d5:76:2d:89:bf:7d:5b: 25:c4:19:f9:c6:70:68:93:f7:cd:65:ec:27:d8:bf:0d:23:16: cd:27:da:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NHwYuTZib+vcHk4dN8QFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzdhYTg3NWI3Mjg2YjY2NmY4MjgwYzk3OGVlNzI4MDIyMzY2ODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7d1Tz/T7JUisonP6DVXdY90LK/a f+z3vLlqWOZA3wtb25y+inbcbEABfOg3F8PqycWQWmYNGsQ2gFCqoZZqdLAIcvRV RvJMr+lOP1e5kxXrDFEICNFiiKwm8tped0xLCjGGfytCuBy6PNrZowrYtBpl+Nli YjfFQX6XPVwoUbsSGOnBCHoDVP5qC0kl+J8BbDOED3q6wzBpEUNGiogGoqCOoi+m Wn4KbUmyLp+TDRiE/ei5PusEy6Wz4Zj81TPXkJEuLW8/nk6A73gdXJ7orFIGXrBT EmDMDyFUaEFQjT7eUFNwSIn6l3G7i4tcY+n6Yc8xlGUABFHdYUFZVmX+KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMN6qHW3KGtmb4KAyXjucoAiNmgJMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvdzNxb2RiY29hMlp2Z29ESmVPNXlnQ0kyYUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYw5MA0G CSqGSIb3DQEBCwUAA4IBAQCBiq9a9lqT7/2Z0loNNluq/ruFwtjO42kxxNv78ozA thNWC2qJz3Y1JKjwBUUw4j3ob1pvJ1FnbLbWi/CQTvUz2WhtNwPkC6Qd+Fh7ZN5x e/7Wv4wzdFSj0h8iG8bIQc1fSY+vmy9AfOtpBZWc/YYMQMDWwLa0dmi+E1ApQZv0 BvnBwOPXd648Yb35Khg3+remCzpVbjb2CH92nWBqtA4z1fng4WcitZA82O0IL/4H krRm5ykKvqG9qGzmQDONzMskb7xICEtKPyeRvpilR7cUWueqagIrRjV/jlQIccSN /Tsdt9V2LYm/fVslxBn5xnBok/fNZewn2L8NIxbNJ9pW -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:32 2026 by rpki-client