This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/3Q5j-7Pt8HcUq6bBHu3dKDediOU.roa File: 3Q5j-7Pt8HcUq6bBHu3dKDediOU.roa (raw, json) Hash identifier: 5c1NCBuQPjwD9eR+7rowyJnrFaKqJ48pXAIHslQmr00= Subject key identifier: DD:0E:63:FB:B3:ED:F0:77:14:AB:A6:C1:1E:ED:DD:28:37:9D:88:E5 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6D0A55E4D8DC132FDF2A7742E7B30 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/3Q5j-7Pt8HcUq6bBHu3dKDediOU.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215762 IP address blocks: 46.23.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d0:a5:5e:4d:8d:c1:32:fd:f2:a7:74:2e:7b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd0e63fbb3edf07714aba6c11eeddd28379d88e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:db:8d:ee:43:3f:8c:81:05:28:e3:e7:b9: f3:57:3f:aa:06:89:ae:74:c2:d1:38:f3:d4:16:17: e3:cf:bb:8d:a5:d2:01:b7:1f:fa:19:12:e0:08:54: dd:97:2c:55:4c:86:5a:43:c3:b9:e0:b8:a0:41:d1: d4:af:1d:fa:ed:d9:06:af:38:d0:3d:0d:e8:54:a0: 14:9e:b9:38:67:0b:0d:34:6e:93:fa:71:a1:6e:e8: 68:c9:5d:ad:b0:d4:44:38:21:a5:a6:0e:a8:eb:0f: d2:68:55:72:2b:e5:cc:08:16:27:94:7c:61:be:e0: 6e:82:60:0e:76:38:c5:02:ee:94:b7:1b:ee:d7:9d: 27:6f:bb:12:af:ce:bb:d2:c2:c6:1b:2c:97:c6:1e: 85:44:c4:9c:c8:d6:88:97:2c:74:f4:2e:a2:1e:91: 53:cb:23:3a:51:43:1c:43:27:60:1a:76:61:36:1d: 61:9d:d3:81:a3:70:a1:3a:65:4c:1b:34:3b:6d:06: 4d:66:63:8d:5e:37:ec:13:f3:06:a1:f7:96:0b:2c: 5e:9e:a7:69:5a:fe:fe:23:ea:4a:a8:78:b9:7f:c7: 45:6c:3b:93:96:88:a7:1b:a6:d1:46:48:fb:30:16: 9a:7e:c6:60:00:18:b3:2f:a7:85:d6:d1:cc:9b:b7: 23:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0E:63:FB:B3:ED:F0:77:14:AB:A6:C1:1E:ED:DD:28:37:9D:88:E5 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/3Q5j-7Pt8HcUq6bBHu3dKDediOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.23.108.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:e2:f6:ee:82:83:62:ce:4f:2d:d8:27:3f:f4:a9:51:01:61: d5:18:55:59:d6:3f:dc:6d:0a:53:db:3a:0f:e7:95:ff:07:ed: 83:12:77:60:eb:51:57:88:3d:ab:7a:9a:61:5e:8b:3f:9b:cb: 05:fd:34:16:8c:54:9f:89:7f:43:e5:a9:3b:95:f4:82:55:2d: 4c:48:77:a3:69:e8:ff:ed:86:ae:2c:10:52:0f:bd:8b:6c:5a: 00:70:ad:bf:37:92:a5:87:10:e9:4d:68:e3:50:32:d1:28:e4: 19:60:2f:99:b6:24:30:d3:e8:ab:b6:db:3f:5a:53:c3:d9:0d: f2:50:0d:45:9d:6d:43:ce:9c:6a:d1:81:9b:51:1e:c3:11:9b: 68:c8:d3:c9:11:f2:da:dc:25:47:87:62:e5:08:59:bc:2e:a3: 14:53:6a:22:15:2d:2d:53:d7:81:97:21:d4:00:97:2f:e1:89: fa:3e:58:70:64:1e:7d:1d:ad:77:80:b4:6e:18:19:ad:f0:99: 10:7a:d7:f4:29:97:56:36:46:f9:63:46:b6:e1:10:3e:b7:f4: c5:78:8e:2c:93:fe:77:0d:75:50:68:cb:2d:49:b9:73:f9:72: 17:9c:17:f7:ab:3b:81:39:6e:9f:4b:13:6b:33:f1:21:c8:9a: 99:fc:72:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtClXk2NwTL98qd0LnswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDBlNjNmYmIzZWRmMDc3MTRhYmE2YzExZWVkZGQyODM3OWQ4OGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQvbje5DP4yBBSjj57nzVz+qBomu dMLROPPUFhfjz7uNpdIBtx/6GRLgCFTdlyxVTIZaQ8O54LigQdHUrx367dkGrzjQ PQ3oVKAUnrk4ZwsNNG6T+nGhbuhoyV2tsNREOCGlpg6o6w/SaFVyK+XMCBYnlHxh vuBugmAOdjjFAu6Utxvu150nb7sSr8670sLGGyyXxh6FRMScyNaIlyx09C6iHpFT yyM6UUMcQydgGnZhNh1hndOBo3ChOmVMGzQ7bQZNZmONXjfsE/MGofeWCyxenqdp Wv7+I+pKqHi5f8dFbDuTloinG6bRRkj7MBaafsZgABizL6eF1tHMm7cjVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN0OY/uz7fB3FKumwR7t3Sg3nYjlMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvM1E1ai03UHQ4SGNVcTZiQkh1M2RLRGVkaU9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhdsMA0G CSqGSIb3DQEBCwUAA4IBAQAK4vbugoNizk8t2Cc/9KlRAWHVGFVZ1j/cbQpT2zoP 55X/B+2DEndg61FXiD2repphXos/m8sF/TQWjFSfiX9D5ak7lfSCVS1MSHejaej/ 7YauLBBSD72LbFoAcK2/N5KlhxDpTWjjUDLRKOQZYC+ZtiQw0+irtts/WlPD2Q3y UA1FnW1Dzpxq0YGbUR7DEZtoyNPJEfLa3CVHh2LlCFm8LqMUU2oiFS0tU9eBlyHU AJcv4Yn6PlhwZB59Ha13gLRuGBmt8JkQetf0KZdWNkb5Y0a24RA+t/TFeI4sk/53 DXVQaMstSblz+XIXnBf3qzuBOW6fSxNrM/EhyJqZ/HIB -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:52 2026 by rpki-client