This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/3tKmiO3AB99F4oo_sIAeCKAChbU.roa File: 3tKmiO3AB99F4oo_sIAeCKAChbU.roa (raw, json) Hash identifier: wGU6+rI5qSflyKTBPmryjTsvgXOgOM1GCVxGEevXa3U= Subject key identifier: DE:D2:A6:88:ED:C0:07:DF:45:E2:8A:3F:B0:80:1E:08:A0:02:85:B5 Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019B7DCB62844053C6030FA3AFBACFFC7FD3 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/3tKmiO3AB99F4oo_sIAeCKAChbU.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215767 IP address blocks: 2a12:4946:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:62:84:40:53:c6:03:0f:a3:af:ba:cf:fc:7f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ded2a688edc007df45e28a3fb0801e08a00285b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:a1:a2:10:b4:f5:b2:55:58:41:e8:31:1d: fb:a6:b0:e1:66:80:7f:1b:4c:14:d8:be:dd:e3:fe: b4:8e:23:f3:fc:45:fc:e9:88:92:33:4b:27:0c:12: a1:41:50:97:3d:20:05:4b:31:2b:ad:6c:41:fc:f4: eb:5d:77:36:27:4b:54:23:05:03:57:a8:d6:6e:28: 86:9d:c5:27:03:1b:bd:59:78:11:1f:96:44:f0:b1: 34:22:bb:a8:c5:87:80:9f:be:6d:72:fc:10:7c:2b: 91:3b:e4:e5:e7:28:85:72:45:8e:43:6c:fd:e9:86: c6:59:4e:2d:01:1f:63:c6:2d:8c:0d:99:ce:66:95: 55:fe:09:8a:d6:f4:c0:76:5d:cc:e8:1d:70:43:16: 95:a7:1c:47:6b:5e:66:7a:f0:5b:84:a3:16:e0:45: 19:15:cc:c0:b4:46:b1:e5:ef:2e:1a:34:44:d9:80: 65:1e:50:c9:20:97:cd:76:e0:ca:54:c3:ea:38:42: 32:cc:1d:36:49:49:81:74:6f:bc:e5:8d:5f:e6:26: 0b:04:7a:dd:ab:69:b0:ba:7c:d7:d5:22:0f:5c:33: d6:93:22:7c:c7:a4:59:99:51:42:8e:3b:fb:0c:2c: d4:bf:d9:4f:37:eb:b6:f7:b1:bf:e0:b3:96:e7:56: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D2:A6:88:ED:C0:07:DF:45:E2:8A:3F:B0:80:1E:08:A0:02:85:B5 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/3tKmiO3AB99F4oo_sIAeCKAChbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:4946:2000::/48 Signature Algorithm: sha256WithRSAEncryption 1d:86:4e:99:ea:18:f4:4d:79:54:fa:c8:ff:fe:c5:0d:36:38: cb:fa:5f:74:5d:bf:6e:0a:3c:48:9d:14:a2:03:65:c5:2f:1b: c2:76:2c:54:b7:b6:06:96:1b:0c:12:76:c8:dc:9b:78:d2:82: 4b:61:1a:3e:2a:a9:26:a3:10:90:7d:fa:e7:46:01:c6:c0:07: e4:58:61:a1:33:17:eb:87:78:92:a3:80:b0:49:8e:75:02:89: f0:e8:9c:9e:d9:b1:0c:22:9e:a6:ae:f5:61:16:43:3a:b9:40: ff:a1:1a:dd:9e:bb:97:54:5c:eb:74:3a:e6:e7:92:bb:e3:04: 05:f1:b9:47:f2:1a:f7:fa:7a:0c:85:15:2d:70:36:09:af:7e: 71:0a:64:32:0e:24:4e:3d:7a:06:88:e9:6d:9d:a7:03:31:4f: d6:29:50:df:86:07:71:2f:1b:69:53:1c:bc:58:19:94:b2:e7: 8f:e7:2d:cc:f3:ec:66:3a:8b:a9:b0:36:1b:70:5b:21:a1:91: 92:36:27:93:dc:b4:4d:be:75:70:13:8d:06:b6:c9:e7:f1:45: 63:71:6e:03:40:87:d8:a6:51:a7:40:8f:d7:b9:7d:b1:dc:1a: e4:19:55:88:a0:86:85:d9:d1:81:17:9e:3b:67:e1:3a:3f:45: 9b:d2:e2:ec -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9y2KEQFPGAw+jr7rP/H/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWQyYTY4OGVkYzAwN2RmNDVlMjhhM2ZiMDgwMWUwOGEwMDI4NWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHWhohC09bJVWEHoMR37prDhZoB/ G0wU2L7d4/60jiPz/EX86YiSM0snDBKhQVCXPSAFSzErrWxB/PTrXXc2J0tUIwUD V6jWbiiGncUnAxu9WXgRH5ZE8LE0IruoxYeAn75tcvwQfCuRO+Tl5yiFckWOQ2z9 6YbGWU4tAR9jxi2MDZnOZpVV/gmK1vTAdl3M6B1wQxaVpxxHa15mevBbhKMW4EUZ FczAtEax5e8uGjRE2YBlHlDJIJfNduDKVMPqOEIyzB02SUmBdG+85Y1f5iYLBHrd q2mwunzX1SIPXDPWkyJ8x6RZmVFCjjv7DCzUv9lPN+u297G/4LOW51afBQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN7SpojtwAffReKKP7CAHgigAoW1MB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvM3RLbWlPM0FCOTlGNG9vX3NJQWVDS0FDaGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhJJRiAA MA0GCSqGSIb3DQEBCwUAA4IBAQAdhk6Z6hj0TXlU+sj//sUNNjjL+l90Xb9uCjxI nRSiA2XFLxvCdixUt7YGlhsMEnbI3Jt40oJLYRo+KqkmoxCQffrnRgHGwAfkWGGh Mxfrh3iSo4CwSY51Aonw6Jye2bEMIp6mrvVhFkM6uUD/oRrdnruXVFzrdDrm55K7 4wQF8blH8hr3+noMhRUtcDYJr35xCmQyDiROPXoGiOltnacDMU/WKVDfhgdxLxtp Uxy8WBmUsueP5y3M8+xmOoupsDYbcFshoZGSNieT3LRNvnVwE40Gtsnn8UVjcW4D QIfYplGnQI/XuX2x3BrkGVWIoIaF2dGBF547Z+E6P0Wb0uLs -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:53 2026 by rpki-client