This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/3ysBshLGfFUkO4R9WFntyTKDLJg.roa File: 3ysBshLGfFUkO4R9WFntyTKDLJg.roa (raw, json) Hash identifier: o/4zJLtevorj8ig3Iu9MQ3MlmidPOIfdoU+Dc49NbUo= Subject key identifier: DF:2B:01:B2:12:C6:7C:55:24:3B:84:7D:58:59:ED:C9:32:83:2C:98 Certificate issuer: /CN=8ad9281aafefc8375ad8b4b7e604899555952237 Certificate serial: 019B7B36866C5A9BFDF648076995E29DB29A Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/3ysBshLGfFUkO4R9WFntyTKDLJg.roa Signing time: Thu 01 Jan 2026 20:18:49 +0000 ROA not before: Thu 01 Jan 2026 20:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35365 IP address blocks: 2a07:bbc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:86:6c:5a:9b:fd:f6:48:07:69:95:e2:9d:b2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237 Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df2b01b212c67c55243b847d5859edc932832c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:64:f5:91:dc:1b:f1:00:f3:73:db:ae:65:33: 23:69:55:c4:cd:9d:fe:5a:47:2f:a1:96:0c:cc:74: 8b:54:1f:a4:33:b5:89:1b:7d:73:c1:bd:89:24:c9: 0a:cf:29:c7:6a:b2:33:5b:a1:48:f6:9a:92:f4:d7: db:91:28:7a:c9:02:1c:2e:c0:e2:ab:4e:64:73:5c: 82:18:e2:98:da:2a:c8:39:b7:2d:2a:9a:35:fb:44: 07:b3:62:0e:ef:81:17:99:5b:99:5f:31:f2:7c:9b: 1a:5b:79:60:73:11:8b:70:7e:ee:12:6a:24:31:ce: 38:c8:a7:87:e6:4b:e8:6d:ee:27:01:19:45:af:38: a6:c4:64:2b:03:54:ab:35:8c:01:20:1d:a9:3f:7f: 98:49:48:fc:70:08:97:b8:ed:4c:02:c9:b0:b8:2e: 1e:6f:5e:9c:04:48:8e:ef:46:5e:8e:d5:31:d4:a7: 22:4b:e9:76:eb:e4:c8:1f:40:a9:64:fd:b4:81:29: 6d:07:d6:08:f3:6b:d8:5a:17:3b:cc:79:22:ec:30: 46:f3:a3:04:a2:3f:3f:b5:55:58:3c:81:6f:d8:44: 57:8a:95:34:6c:f3:f9:d5:d3:10:ba:91:12:2f:0f: a6:0d:18:18:3e:2c:56:f0:a2:74:a1:80:97:a6:6e: 00:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2B:01:B2:12:C6:7C:55:24:3B:84:7D:58:59:ED:C9:32:83:2C:98 X509v3 Authority Key Identifier: keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/3ysBshLGfFUkO4R9WFntyTKDLJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:bbc0:1::/48 Signature Algorithm: sha256WithRSAEncryption 53:ee:65:f2:14:2e:ef:8e:c4:c4:f3:3f:42:e8:7c:0b:65:81: 68:0e:57:45:0d:6e:68:80:16:d1:2e:d2:19:8a:b0:ea:b5:b9: e4:0b:6b:ed:6b:bc:00:0a:ff:4e:04:80:77:d6:33:9c:cd:1e: ef:8e:6c:4a:64:4c:4c:9f:a0:80:04:94:eb:a0:e6:fb:ed:28: 70:32:5d:f8:16:8a:7e:6c:7c:36:a2:dd:51:7d:79:d5:98:e3: d9:85:6a:03:49:49:ed:95:77:94:57:78:74:d2:18:aa:fc:45: 97:f9:df:3e:09:9f:89:39:47:6f:ed:3e:e2:7d:85:48:d5:43: 91:29:77:14:2c:a3:da:29:ea:ba:e4:84:88:22:c1:1f:70:ca: 08:65:ba:ba:59:2a:c7:a7:fd:a8:da:80:44:16:0b:6c:5b:7f: 57:b9:87:f8:8f:28:81:cd:96:77:d6:94:33:38:d4:14:68:59: 02:dd:55:27:ec:36:3c:1f:5d:80:bc:56:08:fe:d8:62:da:bc: 95:77:e3:dd:43:e6:ab:a9:b4:19:15:a8:20:ce:4a:90:ba:9f: 34:3d:55:7c:cc:69:30:f1:3b:0e:fd:33:37:cc:6e:f0:50:24: d4:51:ab:90:52:62:10:cb:b1:3b:ed:71:3e:6b:1b:f2:8d:b4: 32:98:ba:ac -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NoZsWpv99kgHaZXinbKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDkyODFhYWZlZmM4Mzc1YWQ4YjRiN2U2MDQ4OTk1NTU5 NTIyMzcwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjJiMDFiMjEyYzY3YzU1MjQzYjg0N2Q1ODU5ZWRjOTMyODMyYzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WT1kdwb8QDzc9uuZTMjaVXEzZ3+ WkcvoZYMzHSLVB+kM7WJG31zwb2JJMkKzynHarIzW6FI9pqS9NfbkSh6yQIcLsDi q05kc1yCGOKY2irIObctKpo1+0QHs2IO74EXmVuZXzHyfJsaW3lgcxGLcH7uEmok Mc44yKeH5kvobe4nARlFrzimxGQrA1SrNYwBIB2pP3+YSUj8cAiXuO1MAsmwuC4e b16cBEiO70ZejtUx1KciS+l26+TIH0CpZP20gSltB9YI82vYWhc7zHki7DBG86ME oj8/tVVYPIFv2ERXipU0bPP51dMQupESLw+mDRgYPixW8KJ0oYCXpm4AOwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN8rAbISxnxVJDuEfVhZ7ckygyyYMB8GA1UdIwQY MBaAFIrZKBqv78g3Wti0t+YEiZVVlSI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wNTg1MDktMmZlNy00ODZiLWI0YWQt OGM3NGY5ZGQ2N2ZjLzEvM3lzQnNoTEdmRlVrTzRSOVdGbnR5VEtETEpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wNTg1MDktMmZlNy00ODZiLWI0YWQtOGM3NGY5ZGQ2N2Zj LzEvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKge7wAAB MA0GCSqGSIb3DQEBCwUAA4IBAQBT7mXyFC7vjsTE8z9C6HwLZYFoDldFDW5ogBbR LtIZirDqtbnkC2vta7wACv9OBIB31jOczR7vjmxKZExMn6CABJTroOb77ShwMl34 Fop+bHw2ot1RfXnVmOPZhWoDSUntlXeUV3h00hiq/EWX+d8+CZ+JOUdv7T7ifYVI 1UORKXcULKPaKeq65ISIIsEfcMoIZbq6WSrHp/2o2oBEFgtsW39XuYf4jyiBzZZ3 1pQzONQUaFkC3VUn7DY8H12AvFYI/thi2ryVd+PdQ+arqbQZFaggzkqQup80PVV8 zGkw8TsO/TM3zG7wUCTUUauQUmIQy7E77XE+axvyjbQymLqs -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:42 2026 by rpki-client