This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/ai3r6amtS95W5Ne0tp1NdS71pYk.roa File: ai3r6amtS95W5Ne0tp1NdS71pYk.roa (raw, json) Hash identifier: hHWGzOuZ4CYJyZkMuwn0BTL6IjKeXJop9yKsyHJPpsI= Subject key identifier: 6A:2D:EB:E9:A9:AD:4B:DE:56:E4:D7:B4:B6:9D:4D:75:2E:F5:A5:89 Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe Certificate serial: 019B7CED630D38E3F45CE8515605F27F9C3F Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/ai3r6amtS95W5Ne0tp1NdS71pYk.roa Signing time: Fri 02 Jan 2026 04:18:10 +0000 ROA not before: Fri 02 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208569 IP address blocks: 45.128.8.0/22 maxlen: 22 45.128.8.0/24 maxlen: 24 45.128.9.0/24 maxlen: 24 45.128.10.0/24 maxlen: 24 45.128.11.0/24 maxlen: 24 89.45.241.0/24 maxlen: 24 2a0e:3b40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:63:0d:38:e3:f4:5c:e8:51:56:05:f2:7f:9c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe Validity Not Before: Jan 2 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a2debe9a9ad4bde56e4d7b4b69d4d752ef5a589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:55:f2:41:6a:fb:e6:5c:78:8e:2d:06:47: 94:86:d5:0d:83:db:ec:18:e8:6a:ae:ca:9c:d2:8f: ea:3b:9b:07:5e:a9:8d:5b:1d:f9:3a:64:75:87:11: 8a:8b:a5:13:54:7c:e3:1d:a2:b8:bb:0b:1d:41:e2: bf:7b:92:33:c0:9d:a2:78:22:a3:c5:4c:b1:6d:08: 37:8b:1c:5b:39:a4:69:f5:94:50:5f:48:c2:41:7b: 31:4f:47:39:c2:29:a2:2c:4b:4f:77:6b:98:03:65: 83:8c:c9:37:e4:9d:0e:15:bd:c7:9f:00:0b:12:a8: e0:1f:27:e8:6f:ca:35:cc:07:38:dd:a0:07:b0:0e: dd:60:73:1f:54:79:c0:20:01:1a:12:ab:a3:70:6d: b2:8e:88:85:23:22:46:b6:ba:19:fb:9f:3d:c6:75: 87:26:ce:d3:e5:75:7c:3a:86:d3:a7:6a:b9:ab:dd: 35:d4:d0:00:a0:de:54:df:43:a8:9c:ec:40:77:b6: 2a:3c:7d:93:df:7b:b4:80:a6:6b:d9:c2:69:b9:5c: f5:d4:c1:dc:af:d4:e2:8f:68:0c:0d:5a:74:02:fa: d7:e1:bf:20:b0:fe:6f:fa:0f:1d:d9:16:f4:1d:42: 25:68:cf:a0:53:23:3a:c2:89:cd:96:57:c9:3f:64: 8c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2D:EB:E9:A9:AD:4B:DE:56:E4:D7:B4:B6:9D:4D:75:2E:F5:A5:89 X509v3 Authority Key Identifier: keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/ai3r6amtS95W5Ne0tp1NdS71pYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.8.0/22 89.45.241.0/24 IPv6: 2a0e:3b40::/29 Signature Algorithm: sha256WithRSAEncryption 13:21:33:0b:84:36:78:b2:a5:9f:0a:cd:0f:ff:f0:40:c9:60: 96:68:57:53:44:ea:9b:92:41:70:02:28:b2:db:09:90:57:d1: bf:80:15:b9:69:b7:6d:55:9e:80:f0:b3:23:02:7c:6f:2d:b0: 0c:34:f8:b9:2a:c0:df:37:48:c8:50:a3:2a:c8:86:4b:b7:a0: 12:44:2f:89:5a:88:ae:0e:9e:1f:d3:b7:9f:d9:e8:82:68:9f: 12:dc:71:00:5e:77:42:3f:9e:fe:91:f5:dc:cb:f4:11:76:be: 87:11:ca:96:22:48:e3:69:a9:e5:0a:5d:56:c2:39:bd:5b:7a: c2:6b:ec:71:21:4e:d9:a6:f8:fe:02:11:f9:e8:08:3e:e6:8c: 90:d2:36:c8:61:d2:1f:26:0a:a5:aa:92:19:f8:1e:01:f5:e7: ba:9a:f0:cd:7f:8c:d9:2d:d9:87:f5:42:3d:a9:cb:fe:e0:76: 3d:37:49:31:a3:68:8b:03:a4:4b:8e:73:09:a2:f9:46:15:7d: 58:2f:e6:28:f0:96:f3:16:cb:bc:50:58:4f:4e:f4:4b:d4:22: fd:e8:56:30:09:2b:fc:25:46:84:a3:af:87:08:36:e5:6a:0b: c1:a4:e5:bb:d0:e3:63:18:cc:f8:7d:f4:be:a5:4d:c6:f5:83: 43:45:d3:67 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87WMNOOP0XOhRVgXyf5w/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODMxZWRjMGJhMDdjN2UzNGFiYTcwMWMzNTczZDhlNzJh ZjE4ZmUwHhcNMjYwMTAyMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTJkZWJlOWE5YWQ0YmRlNTZlNGQ3YjRiNjlkNGQ3NTJlZjVhNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydZV8kFq++ZceI4tBkeUhtUNg9vs GOhqrsqc0o/qO5sHXqmNWx35OmR1hxGKi6UTVHzjHaK4uwsdQeK/e5IzwJ2ieCKj xUyxbQg3ixxbOaRp9ZRQX0jCQXsxT0c5wimiLEtPd2uYA2WDjMk35J0OFb3HnwAL EqjgHyfob8o1zAc43aAHsA7dYHMfVHnAIAEaEqujcG2yjoiFIyJGtroZ+589xnWH Js7T5XV8OobTp2q5q9011NAAoN5U30OonOxAd7YqPH2T33u0gKZr2cJpuVz11MHc r9Tij2gMDVp0AvrX4b8gsP5v+g8d2Rb0HUIlaM+gUyM6wonNllfJP2SMMQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGot6+mprUveVuTXtLadTXUu9aWJMB8GA1UdIwQY MBaAFMODHtwLoHx+NKunAcNXPY5yrxj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRNZTNBdWdmSDQwcTZjQncxYzlqbkt2R1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83ZjEyNzUtMTJmYy00Mzk3LTllM2It ZWRmNmNhZDEyNDlkLzEvYWkzcjZhbXRTOTVXNU5lMHRwMU5kUzcxcFlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83ZjEyNzUtMTJmYy00Mzk3LTllM2ItZWRmNmNhZDEyNDlk LzEvdzRNZTNBdWdmSDQwcTZjQncxYzlqbkt2R1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLYAIAwQA WS3xMA0EAgACMAcDBQMqDjtAMA0GCSqGSIb3DQEBCwUAA4IBAQATITMLhDZ4sqWf Cs0P//BAyWCWaFdTROqbkkFwAiiy2wmQV9G/gBW5abdtVZ6A8LMjAnxvLbAMNPi5 KsDfN0jIUKMqyIZLt6ASRC+JWoiuDp4f07ef2eiCaJ8S3HEAXndCP57+kfXcy/QR dr6HEcqWIkjjaanlCl1Wwjm9W3rCa+xxIU7Zpvj+AhH56Ag+5oyQ0jbIYdIfJgql qpIZ+B4B9ee6mvDNf4zZLdmH9UI9qcv+4HY9N0kxo2iLA6RLjnMJovlGFX1YL+Yo 8JbzFsu8UFhPTvRL1CL96FYwCSv8JUaEo6+HCDblagvBpOW70ONjGMz4ffS+pU3G 9YNDRdNn -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:11 2026 by rpki-client