This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/3kr5oYfp9V4uP3ft7fU_luP3qW4.roa File: 3kr5oYfp9V4uP3ft7fU_luP3qW4.roa (raw, json) Hash identifier: HAdCLnnKIvgSKudpZEIhpADZADlQBM8bR9nxOEhnmHY= Subject key identifier: DE:4A:F9:A1:87:E9:F5:5E:2E:3F:77:ED:ED:F5:3F:96:E3:F7:A9:6E Certificate issuer: /CN=d0113dd5d0759c03009380140c668ebbd1f9c168 Certificate serial: 019B7DCA578208E9C1FB3EB70B716F3AD29D Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/3kr5oYfp9V4uP3ft7fU_luP3qW4.roa Signing time: Fri 02 Jan 2026 08:19:31 +0000 ROA not before: Fri 02 Jan 2026 08:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21641 IP address blocks: 2a0e:8a84::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:57:82:08:e9:c1:fb:3e:b7:0b:71:6f:3a:d2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de4af9a187e9f55e2e3f77ededf53f96e3f7a96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:43:b8:db:32:8c:09:4e:82:89:c9:54:91:c3: 78:87:a1:1b:47:91:98:78:76:f7:1e:14:ef:7e:e7: 18:19:6b:dc:26:11:be:07:c3:ba:fa:5a:3a:53:9a: d3:7a:dc:b9:06:9f:69:0c:eb:b6:fb:5d:1d:83:97: 27:4a:d5:2d:4d:94:82:56:0d:04:a7:4f:13:78:bf: 57:8a:42:97:e7:9b:57:5d:21:d3:43:1d:9d:6b:da: 4b:7e:3f:65:fd:11:13:c9:24:5b:2e:85:77:5e:c1: 0a:a7:e3:c5:ca:c0:8c:7f:06:5d:88:0e:17:a1:49: 53:b1:55:1c:6b:a7:13:57:a8:dc:48:45:21:f2:d7: 38:22:54:b3:7e:3b:a5:a4:ec:3b:17:b5:8b:62:09: 89:91:c7:f5:18:23:db:ae:0a:69:76:4f:5b:15:20: f7:bd:19:95:81:7b:15:ed:a9:74:03:4b:41:37:7f: 49:0d:f8:c5:69:b7:02:9b:6f:f7:d6:11:c6:22:1e: 55:dc:8e:ea:0a:4e:00:e5:10:7c:7d:04:7e:cf:61: 58:c6:13:ad:c2:6a:d9:29:fa:21:08:f3:9d:4a:f4: 25:05:b4:77:df:cd:78:25:4a:7e:45:43:79:99:78: 0a:7f:65:b3:eb:6e:64:43:93:c3:dd:1b:74:4c:74: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4A:F9:A1:87:E9:F5:5E:2E:3F:77:ED:ED:F5:3F:96:E3:F7:A9:6E X509v3 Authority Key Identifier: keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/3kr5oYfp9V4uP3ft7fU_luP3qW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8a84::/32 Signature Algorithm: sha256WithRSAEncryption 81:20:27:2a:aa:71:67:27:33:1c:c3:ef:0c:38:c0:7e:19:05: de:a1:60:a5:bb:db:db:ff:73:0a:17:13:67:44:22:36:34:12: 34:26:1a:b6:6e:39:c9:ad:6d:ea:66:5e:95:29:40:4f:74:17: 28:8c:24:bb:83:42:c3:92:64:a8:58:6b:ed:11:46:ba:4d:9c: df:0b:f1:e9:34:6a:cb:c7:09:e1:2b:6b:4c:13:6a:0c:a4:26: 1d:a8:f0:79:da:93:56:49:44:1a:aa:a9:8d:1f:c0:ce:d4:61: ed:8c:4a:1f:fc:b2:68:ba:44:19:ea:ed:ad:0a:ec:dc:ef:bf: 0b:94:76:e6:96:c1:08:e2:cb:99:60:e3:2a:74:10:73:ad:a3: 00:ca:95:3d:29:b8:c7:1b:d3:5b:1e:74:d8:79:17:24:4e:28: 40:19:26:e5:62:f3:59:32:95:3c:a1:c2:ab:18:60:ff:cc:ca: d6:d1:91:5d:bc:fe:44:af:fb:3a:02:48:5f:c1:3a:2c:cd:b0: 78:b7:1f:7e:9d:17:2b:a5:fb:03:9b:6e:10:dc:67:46:1a:0f: c1:73:ce:06:2e:c9:e4:98:48:47:83:01:f1:c4:bb:67:2a:55: 90:cb:11:31:67:a3:a0:a5:86:fa:d6:c2:35:a9:38:98:2c:e2: 92:94:88:af -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yleCCOnB+z63C3FvOtKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMTEzZGQ1ZDA3NTljMDMwMDkzODAxNDBjNjY4ZWJiZDFm OWMxNjgwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTRhZjlhMTg3ZTlmNTVlMmUzZjc3ZWRlZGY1M2Y5NmUzZjdhOTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40O42zKMCU6CiclUkcN4h6EbR5GY eHb3HhTvfucYGWvcJhG+B8O6+lo6U5rTety5Bp9pDOu2+10dg5cnStUtTZSCVg0E p08TeL9XikKX55tXXSHTQx2da9pLfj9l/RETySRbLoV3XsEKp+PFysCMfwZdiA4X oUlTsVUca6cTV6jcSEUh8tc4IlSzfjulpOw7F7WLYgmJkcf1GCPbrgppdk9bFSD3 vRmVgXsV7al0A0tBN39JDfjFabcCm2/31hHGIh5V3I7qCk4A5RB8fQR+z2FYxhOt wmrZKfohCPOdSvQlBbR33814JUp+RUN5mXgKf2Wz625kQ5PD3Rt0THRKkQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFN5K+aGH6fVeLj937e31P5bj96luMB8GA1UdIwQY MBaAFNARPdXQdZwDAJOAFAxmjrvR+cFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjct YTJkNjM2ZjMyNWU2LzEvM2tyNW9ZZnA5VjR1UDNmdDdmVV9sdVAzcVc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjctYTJkNjM2ZjMyNWU2 LzEvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg6KhDAN BgkqhkiG9w0BAQsFAAOCAQEAgSAnKqpxZyczHMPvDDjAfhkF3qFgpbvb2/9zChcT Z0QiNjQSNCYatm45ya1t6mZelSlAT3QXKIwku4NCw5JkqFhr7RFGuk2c3wvx6TRq y8cJ4StrTBNqDKQmHajwedqTVklEGqqpjR/AztRh7YxKH/yyaLpEGertrQrs3O+/ C5R25pbBCOLLmWDjKnQQc62jAMqVPSm4xxvTWx502HkXJE4oQBkm5WLzWTKVPKHC qxhg/8zK1tGRXbz+RK/7OgJIX8E6LM2weLcffp0XK6X7A5tuENxnRhoPwXPOBi7J 5JhIR4MB8cS7ZypVkMsRMWejoKWG+tbCNak4mCzikpSIrw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:36 2026 by rpki-client