This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/3NOrjUUXoOBps7g76eT4cBgMn0c.roa File: 3NOrjUUXoOBps7g76eT4cBgMn0c.roa (raw, json) Hash identifier: XqkosB51AijOWz9MHvqZ12a9zCU3hBMKLZ1zDiSsIVU= Subject key identifier: DC:D3:AB:8D:45:17:A0:E0:69:B3:B8:3B:E9:E4:F8:70:18:0C:9F:47 Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019B7DCB5CDAFAD7967579C359E6DB657E1C Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/3NOrjUUXoOBps7g76eT4cBgMn0c.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202437 IP address blocks: 2a12:4946:4020::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5c:da:fa:d7:96:75:79:c3:59:e6:db:65:7e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcd3ab8d4517a0e069b3b83be9e4f870180c9f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:68:6d:d6:02:59:34:82:29:6a:a5:4f:bd: b0:bb:5b:f5:4d:d9:a2:86:77:29:a4:e8:3f:fd:ff: f1:79:69:87:42:22:0c:7f:39:2a:a4:4e:44:a0:53: b9:ef:a0:5c:18:45:f7:e1:c9:ad:d9:2f:b1:62:a0: 7c:1d:3e:dd:b1:a5:57:54:a8:bd:ae:a7:74:cc:76: 6e:e5:38:c8:bd:7e:ba:2d:04:75:f0:43:2c:38:a2: f0:7e:2a:eb:5f:9f:80:36:4d:2d:2d:6f:1c:89:7a: 2e:4a:c0:96:0f:62:a8:78:89:b2:b5:e6:4f:81:45: a5:7b:5b:47:4d:8d:fd:e8:1d:86:63:d8:59:63:0d: 87:29:2b:c8:b7:24:47:69:36:fe:d4:6b:5e:5d:41: 3d:61:93:51:fc:24:35:a4:9d:1d:29:d3:05:80:9c: 69:1d:db:10:58:7f:10:78:14:48:e3:c8:da:f4:29: 42:3b:82:9b:84:61:ee:fa:1d:ec:8b:c3:d4:f7:ef: be:be:14:ca:b6:7a:e3:98:c1:a2:1a:6c:bf:43:1a: e1:d7:76:67:5d:68:41:1a:b0:4d:9d:35:f5:4d:9a: 17:f9:ea:6a:8b:78:ff:bf:a7:5d:f7:b3:20:a2:12: e5:48:b3:e9:81:35:3e:c4:8c:28:93:c9:0c:75:3c: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D3:AB:8D:45:17:A0:E0:69:B3:B8:3B:E9:E4:F8:70:18:0C:9F:47 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/3NOrjUUXoOBps7g76eT4cBgMn0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:4946:4020::/44 Signature Algorithm: sha256WithRSAEncryption 8f:63:2b:69:ea:51:15:0a:41:df:43:86:a5:2b:49:21:8c:71: d1:00:ad:c9:91:59:5f:53:d9:66:61:9d:67:5b:2f:86:34:47: 32:b8:49:22:c3:d8:da:d8:84:e2:85:18:dd:a6:a1:a9:04:e3: 66:77:f7:29:ab:b7:b1:db:ce:2c:67:e6:a3:53:39:3f:10:93: 5d:0d:27:31:d7:cd:ab:88:26:29:7e:8f:a8:46:a1:d0:ee:c5: f0:e8:18:c9:ab:8f:ba:1d:a7:8d:64:47:91:90:72:ef:d6:51: cd:3b:c8:84:4c:3d:cb:b4:73:2b:ad:7f:f0:91:2a:75:55:28: bc:14:02:90:ea:7b:03:9d:fc:c5:63:b8:1a:da:a8:6f:1d:5b: fb:ae:fb:8d:4a:06:bd:8d:2f:7c:ec:94:e3:01:d4:45:71:91: a9:9b:84:77:25:d8:9f:a6:10:1e:2d:f0:46:9d:9c:72:fa:bd: f7:1c:04:31:f5:a5:e0:ec:75:ce:40:93:c7:ff:f7:b1:ea:cb: 8a:72:56:d9:0f:c3:46:a6:5a:69:08:90:12:94:3d:52:96:24: d6:08:ca:34:99:64:5b:29:ea:b4:b0:cd:4b:0c:23:f2:4e:c3: 07:e8:83:96:7f:0f:f6:0e:ee:79:02:64:f6:6b:14:06:d9:bd: 3c:04:68:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9y1za+teWdXnDWebbZX4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2QzYWI4ZDQ1MTdhMGUwNjliM2I4M2JlOWU0Zjg3MDE4MGM5ZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL5obdYCWTSCKWqlT72wu1v1Tdmi hncppOg//f/xeWmHQiIMfzkqpE5EoFO576BcGEX34cmt2S+xYqB8HT7dsaVXVKi9 rqd0zHZu5TjIvX66LQR18EMsOKLwfirrX5+ANk0tLW8ciXouSsCWD2KoeImyteZP gUWle1tHTY396B2GY9hZYw2HKSvItyRHaTb+1GteXUE9YZNR/CQ1pJ0dKdMFgJxp HdsQWH8QeBRI48ja9ClCO4KbhGHu+h3si8PU9+++vhTKtnrjmMGiGmy/Qxrh13Zn XWhBGrBNnTX1TZoX+epqi3j/v6dd97MgohLlSLPpgTU+xIwok8kMdTwKhwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNzTq41FF6DgabO4O+nk+HAYDJ9HMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvM05PcmpVVVhvT0JwczdnNzZlVDRjQmdNbjBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhJJRkAg MA0GCSqGSIb3DQEBCwUAA4IBAQCPYytp6lEVCkHfQ4alK0khjHHRAK3JkVlfU9lm YZ1nWy+GNEcyuEkiw9ja2ITihRjdpqGpBONmd/cpq7ex284sZ+ajUzk/EJNdDScx 182riCYpfo+oRqHQ7sXw6BjJq4+6HaeNZEeRkHLv1lHNO8iETD3LtHMrrX/wkSp1 VSi8FAKQ6nsDnfzFY7ga2qhvHVv7rvuNSga9jS987JTjAdRFcZGpm4R3JdifphAe LfBGnZxy+r33HAQx9aXg7HXOQJPH//ex6suKclbZD8NGplppCJASlD1SliTWCMo0 mWRbKeq0sM1LDCPyTsMH6IOWfw/2Du55AmT2axQG2b08BGjy -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:38 2026 by rpki-client