This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/3wCTKZJQPis0KQk9Utd2SXEOMQo.roa File: 3wCTKZJQPis0KQk9Utd2SXEOMQo.roa (raw, json) Hash identifier: tAgV9CKvm/cmiM8EtlRfwVodU066LHap/WgiRXzET/w= Subject key identifier: DF:00:93:29:92:50:3E:2B:34:29:09:3D:52:D7:76:49:71:0E:31:0A Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025 Certificate serial: 019B7EA6CFB74B7095A7C9FBA02877E85F4C Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/3wCTKZJQPis0KQk9Utd2SXEOMQo.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42649 IP address blocks: 2a14:57c0:b1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cf:b7:4b:70:95:a7:c9:fb:a0:28:77:e8:5f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e475c9202606e6667e94a779e903db697a59025 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df00932992503e2b3429093d52d77649710e310a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:a2:cd:77:c1:db:df:56:57:ce:fe:f7:b1: bc:43:49:78:6f:ef:74:d1:9a:37:9c:5c:80:ba:ea: ff:1f:18:2a:9b:45:f7:ea:fc:c5:29:18:b5:fa:e3: 58:88:2b:3a:83:f0:51:fa:db:a8:5a:c4:de:80:8c: 4a:42:eb:46:f0:cc:95:36:ea:61:15:f4:76:1e:74: 50:ed:92:5f:64:35:4b:83:c0:84:00:fa:4c:24:5b: 9f:b1:f5:01:3f:d0:64:d9:9b:bc:ce:31:fd:42:f5: a4:e2:b9:6f:14:38:00:24:a8:7e:93:25:9d:08:23: b0:6f:52:71:71:45:e1:df:33:38:ea:db:b9:a6:5b: 8b:de:15:19:c3:d7:a9:0d:54:60:de:80:c9:0b:e6: 33:9b:a2:b5:b7:b3:da:d2:7a:6f:57:d6:7e:88:aa: 50:e3:47:78:d9:2c:5e:26:fb:73:0e:3a:7e:f6:e0: d7:32:6d:bf:f4:69:35:71:d4:e8:2c:34:2b:dc:fa: 8e:44:c7:0f:24:4c:f5:37:15:59:f5:cf:e6:3e:56: 6b:7f:d8:f3:53:e4:1d:cd:f6:85:e9:66:50:d5:b7: ca:67:67:21:52:20:d5:cf:27:e9:56:da:02:4e:bd: 9c:46:56:b2:0c:43:38:38:e2:78:04:8a:78:62:1c: ac:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:00:93:29:92:50:3E:2B:34:29:09:3D:52:D7:76:49:71:0E:31:0A X509v3 Authority Key Identifier: keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/3wCTKZJQPis0KQk9Utd2SXEOMQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:57c0:b1::/48 Signature Algorithm: sha256WithRSAEncryption 75:8e:48:c5:79:06:f6:44:ac:25:ab:ae:cc:89:af:6d:d0:ea: 9f:cc:11:e0:d2:4d:cd:97:8f:5b:75:ec:21:06:36:4b:ae:0c: 15:57:84:e5:3f:77:09:56:b4:7b:7e:ad:64:ca:e0:7d:d2:e6: ad:0e:25:09:c0:10:db:1a:34:b1:99:4e:66:a4:0b:16:c1:ca: ff:35:bd:e0:f3:ad:99:74:e6:aa:57:04:53:c2:4b:87:fb:29: 0e:5f:3d:2e:71:c8:3e:ef:a7:a8:22:49:d5:dd:a5:4d:fd:b5: a2:83:c9:f1:58:54:36:3f:c9:7a:e8:64:8d:17:31:2a:8f:81: 67:aa:07:83:0c:e6:42:27:c0:e4:23:53:ca:15:02:fc:b0:ec: 21:03:bb:64:50:18:b8:bb:9e:79:76:3b:d8:e5:3b:fb:85:47: 3f:12:19:d8:1f:e0:75:9f:9a:bb:fc:4c:84:c1:6d:15:af:e5: a5:6d:57:e7:de:5e:a4:58:95:b7:ca:f0:0f:ed:72:7f:5e:a4: c8:35:80:27:ce:47:da:5b:49:48:a0:6e:0b:3e:f2:85:59:f5: 4b:c6:84:63:f9:57:2a:5d:f9:c1:21:51:60:19:83:09:45:01: 92:7d:02:ab:b6:dc:3f:39:d3:81:af:78:05:13:35:71:7e:68: 3b:7d:77:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ps+3S3CVp8n7oCh36F9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh NTkwMjUwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjAwOTMyOTkyNTAzZTJiMzQyOTA5M2Q1MmQ3NzY0OTcxMGUzMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI6izXfB299WV87+97G8Q0l4b+90 0Zo3nFyAuur/Hxgqm0X36vzFKRi1+uNYiCs6g/BR+tuoWsTegIxKQutG8MyVNuph FfR2HnRQ7ZJfZDVLg8CEAPpMJFufsfUBP9Bk2Zu8zjH9QvWk4rlvFDgAJKh+kyWd CCOwb1JxcUXh3zM46tu5pluL3hUZw9epDVRg3oDJC+Yzm6K1t7Pa0npvV9Z+iKpQ 40d42SxeJvtzDjp+9uDXMm2/9Gk1cdToLDQr3PqORMcPJEz1NxVZ9c/mPlZrf9jz U+QdzfaF6WZQ1bfKZ2chUiDVzyfpVtoCTr2cRlayDEM4OOJ4BIp4YhysmQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN8AkymSUD4rNCkJPVLXdklxDjEKMB8GA1UdIwQY MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt Y2NiYjZlOTBhMTliLzEvM3dDVEtaSlFQaXMwS1FrOVV0ZDJTWEVPTVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRXwACx MA0GCSqGSIb3DQEBCwUAA4IBAQB1jkjFeQb2RKwlq67Mia9t0OqfzBHg0k3Nl49b dewhBjZLrgwVV4TlP3cJVrR7fq1kyuB90uatDiUJwBDbGjSxmU5mpAsWwcr/Nb3g 862ZdOaqVwRTwkuH+ykOXz0uccg+76eoIknV3aVN/bWig8nxWFQ2P8l66GSNFzEq j4FnqgeDDOZCJ8DkI1PKFQL8sOwhA7tkUBi4u555djvY5Tv7hUc/EhnYH+B1n5q7 /EyEwW0Vr+WlbVfn3l6kWJW3yvAP7XJ/XqTINYAnzkfaW0lIoG4LPvKFWfVLxoRj +VcqXfnBIVFgGYMJRQGSfQKrttw/OdOBr3gFEzVxfmg7fXfY -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:37 2026 by rpki-client