This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/3O0Jx2Z7uS77XzKQjDLJgefRDU4.roa File: 3O0Jx2Z7uS77XzKQjDLJgefRDU4.roa (raw, json) Hash identifier: mTSPl2/i72Uzjsz/bmIER2rP7ZrpmVRXp35zfMqJjrs= Subject key identifier: DC:ED:09:C7:66:7B:B9:2E:FB:5F:32:90:8C:32:C9:81:E7:D1:0D:4E Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df Certificate serial: 019B7910E20459EC96268917189CEF1F1B62 Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/3O0Jx2Z7uS77XzKQjDLJgefRDU4.roa Signing time: Thu 01 Jan 2026 10:18:28 +0000 ROA not before: Thu 01 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64404 IP address blocks: 2001:678:814::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e2:04:59:ec:96:26:89:17:18:9c:ef:1f:1b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dced09c7667bb92efb5f32908c32c981e7d10d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:39:a3:98:15:a8:9e:a4:44:2e:dd:26:b5: 35:85:7c:c5:31:38:ee:d7:cb:67:77:04:c4:f1:eb: 6c:ac:1f:7c:cc:3d:4b:40:26:6a:8c:f4:11:1a:6e: 1a:02:40:0a:9e:5e:e3:40:02:bb:ed:31:09:65:5b: f4:4a:f3:37:02:0f:5e:fa:ce:db:fa:5e:41:b1:ec: 65:28:ab:a8:5c:ea:d4:c2:61:7e:db:ba:f0:28:90: bd:be:a4:54:8f:98:83:78:06:e4:e8:38:bc:fe:a7: e5:82:15:2c:39:23:96:9c:e4:58:3a:1e:3f:85:3e: 6e:81:e5:19:ab:8c:bd:5e:c5:30:18:a9:f6:10:aa: 7d:09:37:8c:69:09:fd:50:3e:75:81:32:11:aa:71: 89:d2:0f:62:49:89:b5:33:46:62:7f:b6:fe:b7:fa: b6:f2:4f:be:7e:b1:43:5b:7a:b0:47:a7:28:6f:99: 5d:0e:02:4b:0e:d9:ac:a0:d4:a4:3f:ab:d0:f2:7c: 63:48:13:d3:ee:41:6b:63:ab:92:23:63:89:08:03: 5c:fa:73:58:d4:68:d8:b0:03:0b:fa:9a:8b:2f:be: 16:d4:10:3c:b7:65:70:e6:2f:9d:07:db:7f:66:5d: d6:23:fc:97:11:6f:ac:08:a4:90:b7:c7:83:ed:cc: 21:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:ED:09:C7:66:7B:B9:2E:FB:5F:32:90:8C:32:C9:81:E7:D1:0D:4E X509v3 Authority Key Identifier: keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/3O0Jx2Z7uS77XzKQjDLJgefRDU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:814::/48 Signature Algorithm: sha256WithRSAEncryption 53:a8:84:a8:19:37:4a:90:b6:8c:7f:97:54:dd:c9:54:d5:05: a8:e4:8d:74:bf:ae:d5:7f:f0:02:47:eb:ba:de:24:da:0f:6b: 23:d0:78:40:64:e8:a0:42:f2:a9:0d:d0:72:a2:9d:86:a2:7f: 04:1d:81:87:a3:29:20:a2:c0:d0:c5:96:e8:de:fb:2a:36:39: d2:4c:47:44:e3:9f:0f:27:d1:e5:df:0c:bd:61:8a:b9:61:b0: fa:97:a9:96:ae:ac:6b:0d:4b:bb:5e:cc:37:3f:93:cd:4f:5c: a8:1c:fc:2c:63:e8:c2:cc:01:27:fd:22:1f:b3:47:55:a7:a3: 6c:79:c1:12:2e:14:33:6b:df:f4:50:32:dc:2d:42:20:5a:eb: 79:a5:63:51:fe:ff:63:ad:e0:8e:a3:f6:5a:13:a4:2d:85:db: ef:b2:13:c0:b3:10:bd:42:38:74:41:e0:f2:e5:da:88:ce:2c: 74:f5:e3:99:2b:82:c0:1e:1e:38:66:61:e4:8f:46:62:25:9d: 19:00:85:59:c1:8e:9e:ab:e8:76:be:50:5a:0b:f5:9f:4d:b5: 25:3a:ad:38:b0:77:b3:1f:be:f4:7f:5d:d8:22:72:a4:47:79: 9d:44:1a:e9:f6:22:5f:c0:84:37:16:63:c2:65:00:bc:1d:cd: 4a:90:49:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EOIEWeyWJokXGJzvHxtiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDk0MmQ5NmVlOTRhN2E1YTY1MmVmN2FjODU1ZGM5NDAx NDE1ZGYwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2VkMDljNzY2N2JiOTJlZmI1ZjMyOTA4YzMyYzk4MWU3ZDEwZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaE5o5gVqJ6kRC7dJrU1hXzFMTju 18tndwTE8etsrB98zD1LQCZqjPQRGm4aAkAKnl7jQAK77TEJZVv0SvM3Ag9e+s7b +l5BsexlKKuoXOrUwmF+27rwKJC9vqRUj5iDeAbk6Di8/qflghUsOSOWnORYOh4/ hT5ugeUZq4y9XsUwGKn2EKp9CTeMaQn9UD51gTIRqnGJ0g9iSYm1M0Zif7b+t/q2 8k++frFDW3qwR6cob5ldDgJLDtmsoNSkP6vQ8nxjSBPT7kFrY6uSI2OJCANc+nNY 1GjYsAML+pqLL74W1BA8t2Vw5i+dB9t/Zl3WI/yXEW+sCKSQt8eD7cwhbwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNztCcdme7ku+18ykIwyyYHn0Q1OMB8GA1UdIwQY MBaAFMvZQtlu6Up6WmUu96yFXclAFBXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEt YzZmNmQ0NDQ5MTVmLzEvM08wSngyWjd1Uzc3WHpLUWpETEpnZWZSRFU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEtYzZmNmQ0NDQ5MTVm LzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAgU MA0GCSqGSIb3DQEBCwUAA4IBAQBTqISoGTdKkLaMf5dU3clU1QWo5I10v67Vf/AC R+u63iTaD2sj0HhAZOigQvKpDdByop2Gon8EHYGHoykgosDQxZbo3vsqNjnSTEdE 458PJ9Hl3wy9YYq5YbD6l6mWrqxrDUu7Xsw3P5PNT1yoHPwsY+jCzAEn/SIfs0dV p6NsecESLhQza9/0UDLcLUIgWut5pWNR/v9jreCOo/ZaE6QthdvvshPAsxC9Qjh0 QeDy5dqIzix09eOZK4LAHh44ZmHkj0ZiJZ0ZAIVZwY6eq+h2vlBaC/WfTbUlOq04 sHezH770f13YInKkR3mdRBrp9iJfwIQ3FmPCZQC8Hc1KkEmS -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:24 2026 by rpki-client