This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/3vVG8o2ITJwtPnNIQhuIxnCqGaY.roa File: 3vVG8o2ITJwtPnNIQhuIxnCqGaY.roa (raw, json) Hash identifier: 8/W7Ss/HYT0cvaLGI01I8cqgEGbSHHWsxyzYNVKNbA0= Subject key identifier: DE:F5:46:F2:8D:88:4C:9C:2D:3E:73:48:42:1B:88:C6:70:AA:19:A6 Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3 Certificate serial: 019BC932F6BAD7EE9B5FDC52F8902EE02141 Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/3vVG8o2ITJwtPnNIQhuIxnCqGaY.roa Signing time: Fri 16 Jan 2026 23:45:18 +0000 ROA not before: Fri 16 Jan 2026 23:45:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215369 IP address blocks: 2a10:18c6::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c9:32:f6:ba:d7:ee:9b:5f:dc:52:f8:90:2e:e0:21:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3 Validity Not Before: Jan 16 23:45:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=def546f28d884c9c2d3e7348421b88c670aa19a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:51:4b:74:7b:6d:97:af:da:f4:63:c3:f7: 93:25:f3:cd:b3:c1:69:45:d2:63:ed:6d:5e:f0:a2: 40:2a:84:7b:d3:de:df:aa:c8:61:08:06:c9:44:6b: 51:6e:44:11:3e:d4:31:02:bb:26:77:c0:9a:af:6b: 00:3e:a2:c5:0f:37:99:b7:14:2d:61:4a:ff:6b:4d: aa:c1:4b:aa:eb:77:15:2f:37:63:86:19:90:a7:97: 39:2b:ba:b5:3f:f6:4c:9c:9f:98:46:c5:f7:c2:dd: b4:59:5f:53:8c:83:0d:3d:f0:1f:01:c4:7d:4f:eb: 1d:8e:63:b9:63:47:e7:8b:8c:9a:38:7c:9b:b2:0a: e5:ba:9b:f2:ea:d8:d7:35:4f:9a:4c:0a:f5:ea:55: 6a:ff:5f:0b:d1:6d:1f:2d:ad:a2:6a:a4:c9:7f:18: a1:39:d0:59:a0:27:35:62:a5:fc:3b:60:31:fe:1c: 22:73:96:2c:e8:5e:ba:19:74:3d:33:36:cd:73:72: e7:62:f6:47:a0:76:09:eb:a7:e3:cc:e5:84:bd:3e: 48:36:62:81:b5:99:67:12:7c:e5:37:20:46:81:c9: a4:27:2b:3c:83:83:1e:40:63:68:94:ba:9d:74:2b: ae:af:31:a5:fa:bc:21:8c:c4:54:ff:33:2d:a8:17: 06:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F5:46:F2:8D:88:4C:9C:2D:3E:73:48:42:1B:88:C6:70:AA:19:A6 X509v3 Authority Key Identifier: keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/3vVG8o2ITJwtPnNIQhuIxnCqGaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:18c6::/31 Signature Algorithm: sha256WithRSAEncryption 88:78:ef:05:f3:a7:90:da:37:1b:9d:ce:32:96:8f:b6:37:55: 2f:dd:07:c8:73:94:ab:12:9f:c0:3d:73:aa:00:5c:a3:af:08: a5:41:58:c4:cb:a0:c1:b5:05:9e:64:44:08:09:d8:32:76:a2: d4:3a:5c:68:8d:be:cb:a2:4d:07:93:4e:96:bd:7e:23:a1:8e: 22:20:c5:09:d2:ca:4e:cb:cb:e1:bd:75:20:ab:57:dc:0f:8c: b3:b7:8c:ea:4f:8c:dd:b1:01:d0:21:2c:c8:e0:59:f0:b3:b9: b7:6b:6a:3f:59:8f:86:b2:97:0e:d1:cd:d2:76:f9:1a:18:a3: 48:e6:10:40:73:e2:e2:de:00:59:37:0f:f7:7a:e2:f3:9d:8a: 9b:3a:47:a3:ef:f0:36:fb:33:ad:24:9e:92:c9:c4:2f:74:04: 63:4e:df:76:92:15:b5:15:57:dd:80:da:51:e2:3e:29:98:57: 2b:6e:56:09:49:cb:b3:6b:dc:62:f4:23:6e:d6:9e:c4:92:9f: c1:ca:a8:a3:df:9a:ad:54:5d:3f:33:a9:5d:75:0e:74:e6:93: 02:5e:c4:d0:c9:f7:6c:82:ca:2c:71:9f:a4:ef:a6:86:56:16: 9a:01:b8:19:20:db:09:dc:ac:09:a8:1b:47:09:18:a9:7c:38: c3:2f:00:7d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvJMva61+6bX9xS+JAu4CFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjUwMzQyNThmMjc1YjdjODdlNWY0ZjcwNzA2YzBjZjU4 OGVmYzMwHhcNMjYwMTE2MjM0NTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWY1NDZmMjhkODg0YzljMmQzZTczNDg0MjFiODhjNjcwYWExOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWhRS3R7bZev2vRjw/eTJfPNs8Fp RdJj7W1e8KJAKoR7097fqshhCAbJRGtRbkQRPtQxArsmd8Car2sAPqLFDzeZtxQt YUr/a02qwUuq63cVLzdjhhmQp5c5K7q1P/ZMnJ+YRsX3wt20WV9TjIMNPfAfAcR9 T+sdjmO5Y0fni4yaOHybsgrlupvy6tjXNU+aTAr16lVq/18L0W0fLa2iaqTJfxih OdBZoCc1YqX8O2Ax/hwic5Ys6F66GXQ9MzbNc3LnYvZHoHYJ66fjzOWEvT5INmKB tZlnEnzlNyBGgcmkJys8g4MeQGNolLqddCuurzGl+rwhjMRU/zMtqBcGoQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFN71RvKNiEycLT5zSEIbiMZwqhmmMB8GA1UdIwQY MBaAFAMlA0JY8nW3yH5fT3BwbAz1iO/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTIt OWEzN2M2MDY5YmMxLzEvM3ZWRzhvMklUSnd0UG5OSVFodUl4bkNxR2FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTItOWEzN2M2MDY5YmMx LzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKhAYxjAN BgkqhkiG9w0BAQsFAAOCAQEAiHjvBfOnkNo3G53OMpaPtjdVL90HyHOUqxKfwD1z qgBco68IpUFYxMugwbUFnmRECAnYMnai1DpcaI2+y6JNB5NOlr1+I6GOIiDFCdLK TsvL4b11IKtX3A+Ms7eM6k+M3bEB0CEsyOBZ8LO5t2tqP1mPhrKXDtHN0nb5Ghij SOYQQHPi4t4AWTcP93ri852KmzpHo+/wNvszrSSeksnEL3QEY07fdpIVtRVX3YDa UeI+KZhXK25WCUnLs2vcYvQjbtaexJKfwcqoo9+arVRdPzOpXXUOdOaTAl7E0Mn3 bILKLHGfpO+mhlYWmgG4GSDbCdysCagbRwkYqXw4wy8AfQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:16 2026 by rpki-client