This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/3El05iYRSjjsnnMmSgg5UzcIJzI.roa File: 3El05iYRSjjsnnMmSgg5UzcIJzI.roa (raw, json) Hash identifier: lu4N0zTDe8PsZfTOKcSd8MPmVfa3fQOGOtCh01kU1Ak= Subject key identifier: DC:49:74:E6:26:11:4A:38:EC:9E:73:26:4A:08:39:53:37:08:27:32 Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c Certificate serial: 019B7DC8A5C172EF64113A58BFBA6D77487E Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/3El05iYRSjjsnnMmSgg5UzcIJzI.roa Signing time: Fri 02 Jan 2026 08:17:40 +0000 ROA not before: Fri 02 Jan 2026 08:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25148 IP address blocks: 46.31.184.0/22 maxlen: 22 46.31.188.0/22 maxlen: 22 79.171.80.0/21 maxlen: 21 81.93.160.0/20 maxlen: 20 89.250.112.0/20 maxlen: 20 109.68.88.0/21 maxlen: 21 194.24.252.0/23 maxlen: 23 195.28.172.0/23 maxlen: 23 195.225.0.0/19 maxlen: 19 2a01:600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a5:c1:72:ef:64:11:3a:58:bf:ba:6d:77:48:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c Validity Not Before: Jan 2 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc4974e626114a38ec9e73264a08395337082732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:0c:67:5b:b4:86:3d:cd:cd:a0:9f:6b:58: f3:34:ca:98:9e:b3:7a:4d:42:1a:4e:e3:99:f9:de: 4a:e2:72:4b:e1:31:e7:c8:c2:66:f4:55:6c:58:a9: 4a:37:75:53:1e:dc:d9:25:6b:08:a6:31:75:91:13: 4e:02:0b:c9:b0:86:d1:5e:6b:42:08:19:a6:c2:91: b8:4a:02:96:35:fd:af:d6:bf:9f:cb:0f:b0:b8:1b: 93:c2:0b:1b:fe:1d:9b:75:d0:e6:77:e2:89:c4:b1: 77:bf:90:53:01:15:e1:06:b4:dc:53:cb:84:6a:83: ee:73:01:09:17:54:1b:9f:48:c2:c9:83:59:f9:55: b0:ae:e8:64:e2:07:5b:3c:0e:ef:20:8c:e2:e7:d0: 7f:0e:aa:4b:c0:32:2f:45:ab:d7:2f:40:3b:86:74: 21:c7:64:94:5a:fd:99:7f:60:75:29:0b:68:53:e5: 71:4e:e4:f7:e2:1f:1d:fd:96:74:b2:ea:89:6f:dc: b8:4e:3b:cc:45:81:62:bf:79:f9:38:d3:86:01:d8: c7:46:c7:9a:48:c4:6e:1e:67:3f:5e:4a:60:10:e4: e4:13:53:be:1b:68:a1:b8:88:f1:2d:a5:cf:b5:62: 47:7d:18:b1:3d:65:4a:57:99:1a:21:30:75:66:bd: d5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:49:74:E6:26:11:4A:38:EC:9E:73:26:4A:08:39:53:37:08:27:32 X509v3 Authority Key Identifier: keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/3El05iYRSjjsnnMmSgg5UzcIJzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.184.0/21 79.171.80.0/21 81.93.160.0/20 89.250.112.0/20 109.68.88.0/21 194.24.252.0/23 195.28.172.0/23 195.225.0.0/19 IPv6: 2a01:600::/32 Signature Algorithm: sha256WithRSAEncryption 07:fb:6e:ea:b5:9b:27:49:7e:08:49:73:b5:5a:e6:ab:b1:2d: e8:23:38:30:d1:6c:1f:04:6b:db:18:3a:18:f1:eb:a5:5c:a5: 00:77:37:14:f6:b8:1f:97:3c:e6:d1:40:fe:9c:57:e4:33:80: a7:35:ba:09:8d:45:9d:8b:04:20:7c:55:65:1c:e9:04:c8:12: 49:f2:ae:01:9f:99:f5:e7:e0:86:6d:3a:07:3d:12:4a:c4:7e: 79:a9:8f:b8:14:19:10:30:72:47:25:3d:81:29:b5:55:00:ac: 2b:92:7e:b3:61:13:db:7c:f9:23:90:89:d6:22:b6:43:6d:e2: ef:2d:8c:3c:21:00:42:f4:a2:c9:c9:f0:22:9f:3a:94:3b:fa: 9a:b5:dc:05:ad:51:af:91:3e:63:ad:d1:8d:59:96:cf:89:2c: 96:cf:1a:c8:31:1b:af:f9:b1:a3:be:38:8b:16:13:59:ae:b7: 81:40:ca:ec:3a:0b:54:de:18:a4:84:84:9a:36:cd:59:58:43: 86:ce:dc:27:ef:4e:e6:07:de:1d:de:32:9d:9f:26:14:46:cd: 53:13:e1:37:d1:14:f2:7e:a3:24:2b:e9:48:26:09:d8:5b:b0: 5c:12:61:aa:39:c9:5f:fd:52:2a:97:16:2b:a1:fa:6e:a8:55: da:5d:b4:0c -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt9yKXBcu9kETpYv7ptd0h+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzhlZDNlYWQ2MjdmY2UxNmM1MTgwMjUwYzQ2NjIxNzMx OGQ2NWMwHhcNMjYwMTAyMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzQ5NzRlNjI2MTE0YTM4ZWM5ZTczMjY0YTA4Mzk1MzM3MDgyNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6IMZ1u0hj3NzaCfa1jzNMqYnrN6 TUIaTuOZ+d5K4nJL4THnyMJm9FVsWKlKN3VTHtzZJWsIpjF1kRNOAgvJsIbRXmtC CBmmwpG4SgKWNf2v1r+fyw+wuBuTwgsb/h2bddDmd+KJxLF3v5BTARXhBrTcU8uE aoPucwEJF1Qbn0jCyYNZ+VWwruhk4gdbPA7vIIzi59B/DqpLwDIvRavXL0A7hnQh x2SUWv2Zf2B1KQtoU+VxTuT34h8d/ZZ0suqJb9y4TjvMRYFiv3n5ONOGAdjHRsea SMRuHmc/XkpgEOTkE1O+G2ihuIjxLaXPtWJHfRixPWVKV5kaITB1Zr3V0QIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFNxJdOYmEUo47J5zJkoIOVM3CCcyMB8GA1UdIwQY MBaAFJR47T6tYn/OFsUYAlDEZiFzGNZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWIt NWQ1ZDAyYmI3MTk5LzEvM0VsMDVpWVJTampzbm5NbVNnZzVVemNJSnpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWItNWQ1ZDAyYmI3MTk5 LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDLh+4AwQD T6tQAwQEUV2gAwQEWfpwAwQDbURYAwQBwhj8AwQBwxysAwQFw+EAMA0EAgACMAcD BQAqAQYAMA0GCSqGSIb3DQEBCwUAA4IBAQAH+27qtZsnSX4ISXO1WuarsS3oIzgw 0WwfBGvbGDoY8eulXKUAdzcU9rgflzzm0UD+nFfkM4CnNboJjUWdiwQgfFVlHOkE yBJJ8q4Bn5n15+CGbToHPRJKxH55qY+4FBkQMHJHJT2BKbVVAKwrkn6zYRPbfPkj kInWIrZDbeLvLYw8IQBC9KLJyfAinzqUO/qatdwFrVGvkT5jrdGNWZbPiSyWzxrI MRuv+bGjvjiLFhNZrreBQMrsOgtU3hikhISaNs1ZWEOGztwn707mB94d3jKdnyYU Rs1TE+E30RTyfqMkK+lIJgnYW7BcEmGqOclf/VIqlxYrofpuqFXaXbQM -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:43 2026 by rpki-client