This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa File: u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa (raw, json) Hash identifier: oA/e5+fvQLLxtw5lvTdOJVbmZhfodYNiZ+D6A/AnOCY= Subject key identifier: BB:CA:41:01:0F:99:DE:9D:87:F5:60:FA:83:32:F2:C7:B3:8A:B5:13 Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Certificate serial: 019B78A228455AA8E15C247F498882EAF67F Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa Signing time: Thu 01 Jan 2026 08:17:31 +0000 ROA not before: Thu 01 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49009 IP address blocks: 2a03:2267::/32 maxlen: 32 2a03:2267:4e16::/48 maxlen: 48 2a03:2267:54ae::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:28:45:5a:a8:e1:5c:24:7f:49:88:82:ea:f6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbca41010f99de9d87f560fa8332f2c7b38ab513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:cc:22:e3:55:77:4a:c9:47:f3:0c:cb:0e: ab:ef:b8:e3:e7:21:19:67:6c:2a:ff:93:24:fb:0a: 9f:b1:40:b8:83:a9:df:52:a7:75:a2:59:bd:06:0a: 66:ad:5e:80:00:58:f8:56:d3:42:e4:06:1e:4b:17: 73:b5:ef:6e:bc:d5:83:2d:b2:01:80:18:76:81:51: 64:13:66:20:9c:52:d1:6a:8a:75:8a:8a:4a:4a:d5: 3e:14:73:81:f3:e2:67:81:a0:cd:e3:2a:94:ea:81: 33:5d:25:cc:f2:3e:a5:fd:5a:c0:09:7d:13:ac:c9: 97:ad:b0:47:dc:f9:af:6b:43:f1:70:a7:c6:00:3a: 5c:05:4b:d9:b5:c2:11:37:12:9c:ac:ca:32:9b:33: 3a:b1:6a:a4:5b:b0:4f:82:84:28:cc:a5:97:d7:94: 69:ff:bb:4f:df:d2:92:df:88:5f:95:07:d4:33:46: af:92:89:4e:26:ae:ab:b0:0d:3d:fd:c5:6b:aa:7e: c4:1f:f4:d9:21:2f:34:0d:a1:6b:60:e4:60:9a:ab: ae:95:c1:c9:f2:4f:4e:17:98:c2:78:0a:51:9f:51: 3a:e8:a2:e9:92:82:4c:3b:c4:a9:39:eb:cc:79:36: 6f:16:05:73:6f:29:35:07:aa:10:a5:73:1e:f1:fb: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CA:41:01:0F:99:DE:9D:87:F5:60:FA:83:32:F2:C7:B3:8A:B5:13 X509v3 Authority Key Identifier: keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:2267::/32 Signature Algorithm: sha256WithRSAEncryption 74:c0:57:3c:5d:11:50:7f:02:ed:2d:92:ae:94:79:25:3d:10: 54:f7:c0:46:e8:40:a9:04:81:75:58:d5:99:83:b6:e3:88:09: 50:fc:7f:ee:e0:27:fd:87:8f:19:87:f6:ff:c3:87:1b:87:83: a3:89:13:d0:0c:ba:89:07:3a:86:eb:47:21:36:b6:b1:f7:9f: e1:d2:17:0e:f4:4c:bd:70:4a:63:bf:7b:21:e3:61:8c:3b:05: 20:e5:60:a3:c3:52:cd:23:2f:0c:dd:a6:75:bf:d8:75:5d:f4: 7e:7c:0a:ea:e2:d8:46:05:c8:80:1b:6a:d9:4e:7d:1c:41:18: 64:ee:ef:27:82:c8:ca:bb:18:da:7b:72:0b:0c:41:71:27:1d: fa:f8:15:7c:96:71:f1:da:a7:1d:4c:6d:38:ee:77:0f:df:20: f1:61:cf:60:97:5d:b6:8c:0d:ea:e4:50:8d:c7:c9:0a:f5:d9: 8f:93:51:d3:3b:94:93:28:f4:7d:90:48:83:38:92:4a:62:7e: be:53:f6:3b:6e:db:42:e8:52:bc:19:f0:31:7a:14:3f:7d:7c: d2:95:31:bb:a7:5a:0e:64:fd:ed:04:16:c6:de:5c:76:c7:14: 42:d0:40:fa:f9:a0:04:97:2a:cb:97:4d:13:a3:e7:e3:b8:46: 3a:55:2a:1a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4oihFWqjhXCR/SYiC6vZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjYyYzlhOTgwYWQ3NTg0NjUwYWJhYTM1NDViOWVhOTFk M2UzNWUwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmNhNDEwMTBmOTlkZTlkODdmNTYwZmE4MzMyZjJjN2IzOGFiNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzibMIuNVd0rJR/MMyw6r77jj5yEZ Z2wq/5Mk+wqfsUC4g6nfUqd1olm9BgpmrV6AAFj4VtNC5AYeSxdzte9uvNWDLbIB gBh2gVFkE2YgnFLRaop1iopKStU+FHOB8+JngaDN4yqU6oEzXSXM8j6l/VrACX0T rMmXrbBH3Pmva0PxcKfGADpcBUvZtcIRNxKcrMoymzM6sWqkW7BPgoQozKWX15Rp /7tP39KS34hflQfUM0avkolOJq6rsA09/cVrqn7EH/TZIS80DaFrYORgmquulcHJ 8k9OF5jCeApRn1E66KLpkoJMO8SpOevMeTZvFgVzbyk1B6oQpXMe8fstLwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLvKQQEPmd6dh/Vg+oMy8sezirUTMB8GA1UdIwQY MBaAFCNmLJqYCtdYRlCrqjVFueqR0+NeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEt ODIzMmUzNTBkNDU4LzEvdThwQkFRLVozcDJIOVdENmd6THl4N09LdFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEtODIzMmUzNTBkNDU4 LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgMiZzAN BgkqhkiG9w0BAQsFAAOCAQEAdMBXPF0RUH8C7S2SrpR5JT0QVPfARuhAqQSBdVjV mYO244gJUPx/7uAn/YePGYf2/8OHG4eDo4kT0Ay6iQc6hutHITa2sfef4dIXDvRM vXBKY797IeNhjDsFIOVgo8NSzSMvDN2mdb/YdV30fnwK6uLYRgXIgBtq2U59HEEY ZO7vJ4LIyrsY2ntyCwxBcScd+vgVfJZx8dqnHUxtOO53D98g8WHPYJddtowN6uRQ jcfJCvXZj5NR0zuUkyj0fZBIgziSSmJ+vlP2O27bQuhSvBnwMXoUP3180pUxu6da DmT97QQWxt5cdscUQtBA+vmgBJcqy5dNE6Pn47hGOlUqGg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:18 2026 by rpki-client