This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/3RcYNcaV_HxsbvSRBKmeMn-8kXQ.roa File: 3RcYNcaV_HxsbvSRBKmeMn-8kXQ.roa (raw, json) Hash identifier: UxELvj3/BwuEYvPZpfgXSHe6qxTJGCYo6ChpgKnBJA0= Subject key identifier: DD:17:18:35:C6:95:FC:7C:6C:6E:F4:91:04:A9:9E:32:7F:BC:91:74 Certificate issuer: /CN=2578e66d757f95ea6d693aa7f84fcb274975c8bb Certificate serial: 019B7F8551D0853007E26464B0B3509EC4F6 Authority key identifier: 25:78:E6:6D:75:7F:95:EA:6D:69:3A:A7:F8:4F:CB:27:49:75:C8:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/3RcYNcaV_HxsbvSRBKmeMn-8kXQ.roa Signing time: Fri 02 Jan 2026 16:23:22 +0000 ROA not before: Fri 02 Jan 2026 16:23:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203918 IP address blocks: 2001:67c:2e90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:51:d0:85:30:07:e2:64:64:b0:b3:50:9e:c4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2578e66d757f95ea6d693aa7f84fcb274975c8bb Validity Not Before: Jan 2 16:23:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd171835c695fc7c6c6ef49104a99e327fbc9174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:07:8c:a1:25:45:2b:86:c4:37:d3:dd:69: 63:42:ae:af:22:73:76:de:f2:d7:ec:9f:cc:c7:89: 7b:a2:5f:8e:59:23:a1:4f:b0:99:e4:d5:37:11:4f: 4c:a0:49:6d:e3:cb:ed:79:36:d7:de:5b:d4:83:24: 2a:c6:ec:a7:af:7a:6e:c7:e6:c3:43:49:90:4e:14: 32:90:af:76:bc:15:92:95:b9:76:b9:f9:a4:b5:77: 05:de:f8:90:94:e1:e3:8e:78:12:3c:39:7e:6c:3a: da:ac:2b:89:90:a1:b8:9e:3b:75:4c:fa:24:1d:7a: c8:4d:c5:bb:78:a8:5e:ee:0e:20:f2:c9:56:30:6a: 96:99:f4:b1:16:fa:8c:f1:60:cc:e7:b9:92:18:1e: 9c:67:c0:50:01:f7:66:ba:ac:2f:a4:3c:6d:48:49: 99:d8:3f:63:78:1d:08:a7:bf:bf:c8:4d:b2:5b:cd: ba:38:bd:36:3a:60:b4:a7:f2:5f:d7:e4:b9:e4:e4: 67:75:dc:59:40:ca:81:98:b2:08:06:f0:f5:d7:2f: 68:c5:2c:7b:23:40:c0:d3:81:7f:86:8f:50:cf:37: 51:3e:e5:a6:be:82:48:3e:7e:46:9f:43:bf:12:88: e5:c1:a3:06:7f:cf:95:9a:71:de:c6:21:29:93:ce: cd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:17:18:35:C6:95:FC:7C:6C:6E:F4:91:04:A9:9E:32:7F:BC:91:74 X509v3 Authority Key Identifier: keyid:25:78:E6:6D:75:7F:95:EA:6D:69:3A:A7:F8:4F:CB:27:49:75:C8:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/3RcYNcaV_HxsbvSRBKmeMn-8kXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2e90::/48 Signature Algorithm: sha256WithRSAEncryption d1:22:e7:5f:45:f0:c8:7a:f9:11:b6:6e:4b:96:d4:b5:db:2e: d9:e1:ee:c2:31:d7:06:a8:72:75:96:b8:cc:a3:78:f3:67:ac: 04:d2:75:42:f1:54:04:66:0b:a6:8a:71:22:da:95:bb:c1:d8: c1:e5:51:df:ab:00:49:90:72:ea:a7:d7:f5:74:30:31:0e:63: 09:1a:2e:66:9a:99:75:79:75:59:b9:61:9f:2c:16:aa:cb:e2: 18:93:64:02:e5:4a:e5:c2:87:7d:19:da:56:e8:b2:dc:7b:26: 50:9c:41:63:eb:c3:32:d2:b7:ab:6e:38:a8:0f:54:57:2f:da: 2d:8e:32:71:29:f6:18:fb:25:1c:83:5b:89:9d:c3:88:03:f3: 2b:c5:7c:1d:e9:21:c0:66:04:7b:95:a7:07:57:f3:e5:1a:dc: cd:01:14:85:5b:f1:26:c3:75:fb:1e:57:f8:3c:a2:df:29:35: 08:6b:dc:1c:c0:72:73:6b:39:1c:11:37:d1:a9:c6:fc:4d:ec: cf:c7:8d:fd:9d:3b:84:7b:fc:74:3a:42:19:a3:cd:11:d5:09: eb:f1:f5:87:ae:aa:7a:74:44:4a:05:3d:f2:95:ee:4a:cb:b2: 2b:fd:6b:fe:e2:f7:8f:a5:6c:17:61:c4:f4:31:41:c0:64:65: 4e:dd:69:9d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hVHQhTAH4mRksLNQnsT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NzhlNjZkNzU3Zjk1ZWE2ZDY5M2FhN2Y4NGZjYjI3NDk3 NWM4YmIwHhcNMjYwMTAyMTYyMzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDE3MTgzNWM2OTVmYzdjNmM2ZWY0OTEwNGE5OWUzMjdmYmM5MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxsHjKElRSuGxDfT3WljQq6vInN2 3vLX7J/Mx4l7ol+OWSOhT7CZ5NU3EU9MoElt48vteTbX3lvUgyQqxuynr3pux+bD Q0mQThQykK92vBWSlbl2ufmktXcF3viQlOHjjngSPDl+bDrarCuJkKG4njt1TPok HXrITcW7eKhe7g4g8slWMGqWmfSxFvqM8WDM57mSGB6cZ8BQAfdmuqwvpDxtSEmZ 2D9jeB0Ip7+/yE2yW826OL02OmC0p/Jf1+S55ORnddxZQMqBmLIIBvD11y9oxSx7 I0DA04F/ho9QzzdRPuWmvoJIPn5Gn0O/EojlwaMGf8+VmnHexiEpk87NawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN0XGDXGlfx8bG70kQSpnjJ/vJF0MB8GA1UdIwQY MBaAFCV45m11f5XqbWk6p/hPyydJdci7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhqbWJYVl9sZXB0YVRxbi1FX0xKMGwxeUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jNWI1ZDktMGFlNy00NjI5LWEwMWIt ZmJhZDYzN2M0MTQyLzEvM1JjWU5jYVZfSHhzYnZTUkJLbWVNbi04a1hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jNWI1ZDktMGFlNy00NjI5LWEwMWItZmJhZDYzN2M0MTQy LzEvSlhqbWJYVl9sZXB0YVRxbi1FX0xKMGwxeUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC6Q MA0GCSqGSIb3DQEBCwUAA4IBAQDRIudfRfDIevkRtm5LltS12y7Z4e7CMdcGqHJ1 lrjMo3jzZ6wE0nVC8VQEZguminEi2pW7wdjB5VHfqwBJkHLqp9f1dDAxDmMJGi5m mpl1eXVZuWGfLBaqy+IYk2QC5Urlwod9GdpW6LLceyZQnEFj68My0rerbjioD1RX L9otjjJxKfYY+yUcg1uJncOIA/MrxXwd6SHAZgR7lacHV/PlGtzNARSFW/Emw3X7 Hlf4PKLfKTUIa9wcwHJzazkcETfRqcb8TezPx439nTuEe/x0OkIZo80R1Qnr8fWH rqp6dERKBT3yle5Ky7Ir/Wv+4vePpWwXYcT0MUHAZGVO3Wmd -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:29 2026 by rpki-client