This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/1-3zUelmkTSgTStRjVWxjNNQBiM4.roa File: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (raw, json) Hash identifier: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA= Subject key identifier: FB:7C:D4:7A:59:A4:4D:28:13:4A:D4:63:55:6C:63:34:D4:01:88:CE Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92 Certificate serial: 019B7F8313793B10101A726F5442F34B5FAE Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/1-3zUelmkTSgTStRjVWxjNNQBiM4.roa Signing time: Fri 02 Jan 2026 16:20:55 +0000 ROA not before: Fri 02 Jan 2026 16:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49544 IP address blocks: 45.147.87.0/24 maxlen: 24 2a13:3ec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:13:79:3b:10:10:1a:72:6f:54:42:f3:4b:5f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92 Validity Not Before: Jan 2 16:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb7cd47a59a44d28134ad463556c6334d40188ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:e7:56:08:f5:8d:69:66:4c:07:c4:03:8a: b5:ae:a6:ea:1f:69:9c:04:57:6c:2d:b9:33:0d:97: 9b:aa:78:de:7f:87:b7:78:b1:98:09:48:f0:a0:d5: 35:bd:e2:bc:8f:f4:45:21:2a:0d:f5:17:ea:cf:36: c5:ed:80:ca:f4:eb:40:db:ef:4f:2e:27:9e:dd:3c: 53:e2:56:9f:d4:c9:43:fd:03:23:c5:42:9c:d6:9e: 98:f5:a3:5e:1f:36:60:75:6d:44:bd:1b:ec:7c:05: 88:10:fc:c4:5c:2c:94:b6:6d:13:99:84:35:98:29: 31:45:e4:a3:7b:2a:60:1c:41:a5:9d:47:5f:36:12: f0:c8:d1:bf:ed:70:de:22:dc:6c:6b:ea:45:2b:b2: 63:41:8a:84:4f:18:09:5d:58:35:ee:fb:3c:a7:a9: e1:92:74:5d:53:30:6d:46:46:2c:a5:0b:46:5f:2a: b7:30:3a:72:a1:2c:82:b4:92:79:bf:26:6f:c0:1c: 2a:1a:bd:cb:c8:9b:5b:9b:73:98:cd:07:7a:17:d3: d6:aa:94:d5:b0:d7:60:de:74:30:0a:64:c6:c3:45: de:02:51:1c:89:10:b3:78:21:be:1a:4f:90:05:1b: 57:97:3e:54:e4:57:ff:fd:f9:42:b9:b0:34:94:ef: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7C:D4:7A:59:A4:4D:28:13:4A:D4:63:55:6C:63:34:D4:01:88:CE X509v3 Authority Key Identifier: keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/1-3zUelmkTSgTStRjVWxjNNQBiM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.87.0/24 IPv6: 2a13:3ec0::/29 Signature Algorithm: sha256WithRSAEncryption 46:53:b8:8f:e9:a8:d0:df:ed:bf:15:ec:35:3b:cb:38:7b:d1: 55:e5:8b:19:50:cd:90:29:ad:54:67:85:7b:27:42:ff:24:bd: e1:c5:55:92:be:57:64:6b:9b:16:6a:36:de:bb:0f:90:d1:ab: 35:69:a4:24:a3:96:22:41:97:e4:4e:d9:9e:7c:a0:27:f6:a9: cc:a7:06:e5:4f:6b:bb:56:e2:f1:a4:d5:fe:59:55:12:26:60: b0:fb:6e:c1:87:a3:18:c5:24:81:ce:f5:bf:66:2a:f1:ed:f4: e2:bd:88:10:ec:f5:bd:aa:e3:f5:dc:c8:61:c1:a3:ff:91:d0: 15:bf:cd:49:ea:2c:3f:76:4a:cb:c2:9b:3c:82:18:87:48:46: 4d:a0:69:85:57:50:a3:ea:c8:b0:28:fc:8d:c7:8c:71:8b:b4: 39:48:03:02:fd:f7:9c:bb:92:40:a1:e4:a6:02:ad:31:7e:7b: 5d:24:57:74:6a:e7:11:3d:aa:2a:fe:71:19:9d:78:91:c0:62: e4:14:9e:62:e4:55:d3:01:6b:f0:27:99:24:56:ea:5f:9c:73: f3:da:8b:84:14:30:d7:1b:3b:31:3f:74:b3:c8:87:f5:0f:dc: 9d:74:21:0e:ad:bc:33:62:fd:f3:3f:cc:f9:88:8b:1a:05:fe: e4:da:a9:30 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/gxN5OxAQGnJvVELzS1+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmFhMzJlYmVjOWNlYTFjOTNjNGJkNTVmODVlZjdlMGE1 ZDRmOTIwHhcNMjYwMTAyMTYyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjdjZDQ3YTU5YTQ0ZDI4MTM0YWQ0NjM1NTZjNjMzNGQ0MDE4OGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGHnVgj1jWlmTAfEA4q1rqbqH2mc BFdsLbkzDZebqnjef4e3eLGYCUjwoNU1veK8j/RFISoN9RfqzzbF7YDK9OtA2+9P Liee3TxT4laf1MlD/QMjxUKc1p6Y9aNeHzZgdW1EvRvsfAWIEPzEXCyUtm0TmYQ1 mCkxReSjeypgHEGlnUdfNhLwyNG/7XDeItxsa+pFK7JjQYqETxgJXVg17vs8p6nh knRdUzBtRkYspQtGXyq3MDpyoSyCtJJ5vyZvwBwqGr3LyJtbm3OYzQd6F9PWqpTV sNdg3nQwCmTGw0XeAlEciRCzeCG+Gk+QBRtXlz5U5Ff//flCubA0lO/2bQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPt81HpZpE0oE0rUY1VsYzTUAYjOMB8GA1UdIwQY MBaAFJYqoy6+yc6hyTxL1V+F734KXU+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMt ODU4YzZmODgyOWViLzEvMS0zelVlbG1rVFNnVFN0UmpWV3hqTk5RQmlNNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmEvMmUzOGVhLWM5ZmEtNDAxMy05ZmQzLTg1OGM2Zjg4Mjll Yi8xL2xpcWpMcjdKenFISlBFdlZYNFh2ZmdwZFQ1SS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC2TVzAN BAIAAjAHAwUDKhM+wDANBgkqhkiG9w0BAQsFAAOCAQEARlO4j+mo0N/tvxXsNTvL OHvRVeWLGVDNkCmtVGeFeydC/yS94cVVkr5XZGubFmo23rsPkNGrNWmkJKOWIkGX 5E7ZnnygJ/apzKcG5U9ru1bi8aTV/llVEiZgsPtuwYejGMUkgc71v2Yq8e304r2I EOz1varj9dzIYcGj/5HQFb/NSeosP3ZKy8KbPIIYh0hGTaBphVdQo+rIsCj8jceM cYu0OUgDAv33nLuSQKHkpgKtMX57XSRXdGrnET2qKv5xGZ14kcBi5BSeYuRV0wFr 8CeZJFbqX5xz89qLhBQw1xs7MT90s8iH9Q/cnXQhDq28M2L98z/M+YiLGgX+5Nqp MA== -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:54 2026 by rpki-client