This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/3-vvvwv4tUZPRVYLco5dYLcKOig.roa File: 3-vvvwv4tUZPRVYLco5dYLcKOig.roa (raw, json) Hash identifier: qd0VBxrvHFGJvFVcu73W5K8cFS+yhuHypJI01YtY3b8= Subject key identifier: DF:EB:EF:BF:0B:F8:B5:46:4F:45:56:0B:72:8E:5D:60:B7:0A:3A:28 Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da Certificate serial: 019B7B3663AEDF7727E49FD503B04CFBC92C Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/3-vvvwv4tUZPRVYLco5dYLcKOig.roa Signing time: Thu 01 Jan 2026 20:18:40 +0000 ROA not before: Thu 01 Jan 2026 20:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213915 IP address blocks: 2a07:2486:4ff0::/44 maxlen: 44 2a07:2486:4ff0::/48 maxlen: 48 2a07:2486:4ff1::/48 maxlen: 48 2a07:2486:4ff2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:63:ae:df:77:27:e4:9f:d5:03:b0:4c:fb:c9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfebefbf0bf8b5464f45560b728e5d60b70a3a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:e0:bc:9c:50:65:83:5c:70:1e:55:8e:2c: 9c:bb:8b:98:20:dd:b1:a4:89:02:9c:af:2e:2d:3e: e1:35:eb:d7:0c:31:e4:53:d3:bb:a2:2f:74:6f:45: 3a:40:76:21:3c:db:b6:20:3d:9b:5a:7e:9e:81:c5: 62:12:f3:ca:c7:f7:0b:31:9e:4e:d9:78:55:0d:c5: af:01:c1:89:1d:48:c3:89:ee:50:e8:f7:73:56:a1: fb:5c:1a:f4:95:15:1f:84:7f:f2:34:2b:51:48:75: f2:5d:88:61:0c:51:b9:af:06:3c:b9:a2:fc:4c:77: 7b:9d:a9:63:51:92:44:65:15:fe:67:90:52:08:f0: 33:37:26:27:62:5d:ef:c2:e8:c9:e3:37:8c:05:43: 96:fe:8f:89:a3:4f:2b:6f:3f:57:8c:ec:3f:f1:0f: b3:98:da:1d:df:58:a0:7e:ce:f8:e8:e7:b0:ad:b9: 7d:3f:e4:4a:ea:8b:04:db:40:39:56:4a:7b:0d:c0: 4f:54:ee:24:b2:00:46:85:3f:aa:8e:15:bb:1d:04: 0e:f6:af:c1:87:c0:af:7c:d6:c6:32:87:86:33:a5: 0a:1c:27:d8:99:f2:80:e1:5b:f0:d6:b5:36:9a:ce: 6a:82:a2:33:85:61:d9:e1:61:ad:8a:4a:7d:88:40: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EB:EF:BF:0B:F8:B5:46:4F:45:56:0B:72:8E:5D:60:B7:0A:3A:28 X509v3 Authority Key Identifier: keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/3-vvvwv4tUZPRVYLco5dYLcKOig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:2486:4ff0::/44 Signature Algorithm: sha256WithRSAEncryption 13:13:7e:5d:44:81:d4:89:b7:6c:5c:9d:f8:20:50:f3:96:5f: 32:ae:a1:79:c0:f8:79:c2:1d:d9:d7:30:81:70:1d:12:f7:d7: 60:eb:cd:f2:f4:29:81:39:19:41:4c:2a:61:b0:a8:d2:ba:d3: 94:fa:e9:86:11:59:4f:06:d2:e4:7c:e8:f9:3a:90:51:57:26: c3:af:11:76:92:dd:56:ef:96:97:e6:e0:cc:79:b0:6c:f6:7c: bc:51:e7:93:b3:db:02:3e:6e:02:9a:d1:b2:cb:65:44:44:b8: c1:65:b9:69:1a:bb:cb:3b:85:84:d7:9a:12:fa:18:6c:71:ee: 4b:50:e3:41:8b:44:5b:0c:b6:51:83:09:29:6f:96:98:ca:05: 49:9d:ec:f6:04:44:50:e0:20:09:f1:57:4e:1b:fc:5c:0a:ef: 12:7a:43:0f:a2:b5:76:55:67:6e:bf:57:dc:2c:89:ee:19:cf: 1a:f8:46:fa:52:e8:f6:e6:9a:4b:68:31:e7:74:cc:cd:82:0e: 46:eb:28:f8:00:d5:86:20:9c:b7:ea:9a:1c:a6:bb:1f:18:c1: 76:f7:04:76:6f:3d:4a:5b:6a:0d:74:ba:f0:12:9b:7d:e6:3f: b6:ca:d7:48:53:ae:62:75:a6:63:6b:ce:cf:70:cb:85:5c:07: 64:9e:ce:4a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NmOu33cn5J/VA7BM+8ksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMzZlOGMyMTZmMDVhOWQ5ZTAzMjdmMTIyMmJmMTIxOThh YmE1ZGEwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmViZWZiZjBiZjhiNTQ2NGY0NTU2MGI3MjhlNWQ2MGI3MGEzYTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1/gvJxQZYNccB5Vjiycu4uYIN2x pIkCnK8uLT7hNevXDDHkU9O7oi90b0U6QHYhPNu2ID2bWn6egcViEvPKx/cLMZ5O 2XhVDcWvAcGJHUjDie5Q6PdzVqH7XBr0lRUfhH/yNCtRSHXyXYhhDFG5rwY8uaL8 THd7naljUZJEZRX+Z5BSCPAzNyYnYl3vwujJ4zeMBUOW/o+Jo08rbz9XjOw/8Q+z mNod31igfs746Oewrbl9P+RK6osE20A5Vkp7DcBPVO4ksgBGhT+qjhW7HQQO9q/B h8CvfNbGMoeGM6UKHCfYmfKA4Vvw1rU2ms5qgqIzhWHZ4WGtikp9iECDoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN/r778L+LVGT0VWC3KOXWC3CjooMB8GA1UdIwQY MBaAFMI26MIW8FqdngMn8SIr8SGYq6XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgt Mzg0ZmZjZTc3ZjUyLzEvMy12dnZ3djR0VVpQUlZZTGNvNWRZTGNLT2lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgtMzg0ZmZjZTc3ZjUy LzEvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgckhk/w MA0GCSqGSIb3DQEBCwUAA4IBAQATE35dRIHUibdsXJ34IFDzll8yrqF5wPh5wh3Z 1zCBcB0S99dg683y9CmBORlBTCphsKjSutOU+umGEVlPBtLkfOj5OpBRVybDrxF2 kt1W75aX5uDMebBs9ny8UeeTs9sCPm4CmtGyy2VERLjBZblpGrvLO4WE15oS+hhs ce5LUONBi0RbDLZRgwkpb5aYygVJnez2BERQ4CAJ8VdOG/xcCu8SekMPorV2VWdu v1fcLInuGc8a+Eb6Uuj25ppLaDHndMzNgg5G6yj4ANWGIJy36pocprsfGMF29wR2 bz1KW2oNdLrwEpt95j+2ytdIU65idaZja87PcMuFXAdkns5K -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:12 2026 by rpki-client