This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa File: 3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa (raw, json) Hash identifier: vjrwzp/zqZBxc6wOSE5N6kztkRal6ScIrhGe+5Xi3bI= Subject key identifier: DC:8D:1C:71:B5:83:0E:6D:80:27:43:A0:DE:FD:94:62:04:E6:D2:45 Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6 Certificate serial: 019B7C80DD4AEEC21383147A71DF8B1C54D2 Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa Signing time: Fri 02 Jan 2026 02:19:38 +0000 ROA not before: Fri 02 Jan 2026 02:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203101 IP address blocks: 45.56.224.0/21 maxlen: 21 45.56.232.0/24 maxlen: 24 45.56.233.0/24 maxlen: 24 45.56.234.0/23 maxlen: 23 45.56.236.0/22 maxlen: 23 45.56.238.0/23 maxlen: 23 45.56.240.0/20 maxlen: 20 72.46.154.0/23 maxlen: 23 72.46.154.0/24 maxlen: 24 72.46.155.0/24 maxlen: 24 172.93.4.0/23 maxlen: 23 185.98.100.0/22 maxlen: 22 199.5.180.0/23 maxlen: 23 199.195.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:dd:4a:ee:c2:13:83:14:7a:71:df:8b:1c:54:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6 Validity Not Before: Jan 2 02:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc8d1c71b5830e6d802743a0defd946204e6d245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:02:50:78:3d:b0:2d:0c:ac:1e:15:2b:11:b5: c0:31:25:a6:45:6e:cc:48:e7:ce:62:ca:5d:7b:1b: 6c:41:79:10:d4:51:57:22:db:7c:79:dd:80:aa:8a: 1e:73:1f:f8:f1:fb:be:75:2d:c3:e3:96:54:d4:b2: 05:1e:5d:27:5a:92:38:58:b0:65:7b:cd:44:54:4d: 88:ed:9c:f8:36:f4:94:b4:88:36:36:a4:e7:01:4c: e9:b6:b4:4d:83:61:5a:73:2b:78:89:24:df:7c:fa: 83:42:a4:a4:90:1b:a3:35:2e:0c:ff:f8:ba:4f:e9: c5:2c:0d:97:1a:e9:a5:f4:fb:bb:5f:8e:96:40:5f: fe:17:0e:75:83:79:52:59:a2:2f:5f:71:20:22:db: b2:e1:50:03:ac:e6:23:66:c8:c6:ef:8f:8f:4f:c9: 4c:94:e6:3d:c8:ad:7a:f7:35:b0:5a:eb:de:60:85: 06:e6:fd:16:30:94:84:95:de:36:33:96:75:67:06: dd:16:ff:a9:9e:ef:f6:e5:b1:aa:d7:ca:46:19:3b: 59:36:46:bd:ad:e1:53:02:ee:fb:d7:91:71:8f:c4: cb:55:fd:d8:a5:75:35:d7:32:45:04:8b:ec:0a:b5: 35:29:ac:3f:b6:3b:00:23:b1:b7:db:96:de:19:6f: a3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8D:1C:71:B5:83:0E:6D:80:27:43:A0:DE:FD:94:62:04:E6:D2:45 X509v3 Authority Key Identifier: keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.56.224.0/19 72.46.154.0/23 172.93.4.0/23 185.98.100.0/22 199.5.180.0/23 199.195.130.0/23 Signature Algorithm: sha256WithRSAEncryption 11:6b:73:cc:59:ed:fe:0a:48:c8:a0:c0:fa:c3:bc:49:f3:4b: 83:a5:4d:d0:3f:1c:a7:64:05:6d:15:73:34:ed:ac:c1:53:54: b3:c2:fd:ab:b3:06:2c:13:b7:9d:31:29:e6:08:42:40:e1:3e: 96:b7:74:f3:8a:ba:61:f0:1d:ef:b8:31:e7:c0:e4:1b:a9:9b: 83:19:83:11:a2:c5:48:aa:a1:8c:53:34:31:2f:f9:14:d4:57: 50:0b:53:3b:96:e1:85:ca:04:d9:ce:b7:2d:87:35:e1:6c:51: 26:0b:a0:25:52:14:2e:26:ab:32:35:34:50:1a:8a:a9:cd:a3: 72:26:28:ea:89:ed:8e:d4:0c:a0:bb:0c:9e:68:0b:93:c4:6e: 30:bb:fa:3d:53:c5:2a:76:73:34:a8:c0:26:d3:3c:c4:a0:2a: 06:77:e4:77:e7:c4:b8:e5:cb:7f:cf:96:cb:42:f1:c8:8b:bc: 6a:99:db:7c:5e:9f:3c:ea:71:ad:e5:50:50:d2:04:4c:e7:fc: 16:40:5d:88:9e:87:6b:f2:55:16:ad:f7:70:18:3b:1d:b5:2c: 1d:e3:69:5f:f8:ab:32:98:6e:18:c7:bf:77:7a:38:83:9a:09: 20:76:d2:8b:42:2b:3e:73:e2:6e:93:06:e3:af:f4:b3:c3:60: cf:9a:86:83 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8gN1K7sITgxR6cd+LHFTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx NjQwYjYwHhcNMjYwMTAyMDIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzhkMWM3MWI1ODMwZTZkODAyNzQzYTBkZWZkOTQ2MjA0ZTZkMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQJQeD2wLQysHhUrEbXAMSWmRW7M SOfOYspdextsQXkQ1FFXItt8ed2Aqooecx/48fu+dS3D45ZU1LIFHl0nWpI4WLBl e81EVE2I7Zz4NvSUtIg2NqTnAUzptrRNg2Facyt4iSTffPqDQqSkkBujNS4M//i6 T+nFLA2XGuml9Pu7X46WQF/+Fw51g3lSWaIvX3EgItuy4VADrOYjZsjG74+PT8lM lOY9yK169zWwWuveYIUG5v0WMJSEld42M5Z1ZwbdFv+pnu/25bGq18pGGTtZNka9 reFTAu7715Fxj8TLVf3YpXU11zJFBIvsCrU1Kaw/tjsAI7G325beGW+jDwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNyNHHG1gw5tgCdDoN79lGIE5tJFMB8GA1UdIwQY MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt OGFiZjVlZTZjNGFkLzEvM0kwY2NiV0REbTJBSjBPZzN2MlVZZ1RtMGtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFLTjgAwQB SC6aAwQBrF0EAwQCuWJkAwQBxwW0AwQBx8OCMA0GCSqGSIb3DQEBCwUAA4IBAQAR a3PMWe3+CkjIoMD6w7xJ80uDpU3QPxynZAVtFXM07azBU1Szwv2rswYsE7edMSnm CEJA4T6Wt3Tzirph8B3vuDHnwOQbqZuDGYMRosVIqqGMUzQxL/kU1FdQC1M7luGF ygTZzrcthzXhbFEmC6AlUhQuJqsyNTRQGoqpzaNyJijqie2O1AyguwyeaAuTxG4w u/o9U8UqdnM0qMAm0zzEoCoGd+R358S45ct/z5bLQvHIi7xqmdt8Xp886nGt5VBQ 0gRM5/wWQF2Inodr8lUWrfdwGDsdtSwd42lf+KsymG4Yx793ejiDmgkgdtKLQis+ c+Jukwbjr/Szw2DPmoaD -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:52 2026 by rpki-client