This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/3JAtxwaL9PZhHZwQTT5YiNh22Fw.roa File: 3JAtxwaL9PZhHZwQTT5YiNh22Fw.roa (raw, json) Hash identifier: CWRHx3TZjefSlBd9NDpJRO/t7H8jBiSewFf17t/Njyw= Subject key identifier: DC:90:2D:C7:06:8B:F4:F6:61:1D:9C:10:4D:3E:58:88:D8:76:D8:5C Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019B7F1569B8A7311E39861719C96D9FB40E Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/3JAtxwaL9PZhHZwQTT5YiNh22Fw.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12722 IP address blocks: 2a02:c6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:69:b8:a7:31:1e:39:86:17:19:c9:6d:9f:b4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc902dc7068bf4f6611d9c104d3e5888d876d85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:aa:a1:15:01:25:74:d2:5b:81:c2:03:0a: 7f:55:35:da:00:00:b3:24:65:24:91:00:41:e9:7c: 23:b7:e3:f6:6f:1f:dc:38:b4:27:78:d2:2a:11:da: 0b:d4:bd:3d:cc:51:be:b7:99:48:08:85:01:e4:b6: ae:1f:ab:7a:7d:67:9e:ce:c6:5c:dc:5e:14:b2:06: c1:19:f7:0e:9b:80:d3:06:9b:79:d7:be:62:4c:92: 1b:12:52:c3:72:9b:3d:94:56:ee:16:aa:dd:94:55: 1b:39:f7:64:d7:a1:57:eb:94:f3:dd:d5:fd:54:e2: b3:7e:44:19:dd:ef:10:98:46:9c:2d:78:7f:65:a9: c7:fb:24:52:d4:b2:35:d9:df:8c:26:86:9e:40:d8: db:f3:9e:e1:30:d3:2b:09:45:06:53:2a:05:92:88: 52:5d:92:f6:93:d9:2a:b1:fa:df:73:5f:6f:54:bd: df:b2:3d:7c:f9:75:17:45:7f:97:0e:d0:ca:9b:c1: 52:34:33:21:7c:9e:75:72:ff:be:ac:11:92:ee:1e: fc:35:7d:37:ee:7d:36:a6:63:25:83:11:00:4a:d5: 1d:24:b7:56:5b:2e:ed:d5:4d:2c:61:05:1a:04:30: ed:f8:94:d3:85:33:ad:5b:2e:59:ca:5e:bb:a3:b9: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:90:2D:C7:06:8B:F4:F6:61:1D:9C:10:4D:3E:58:88:D8:76:D8:5C X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/3JAtxwaL9PZhHZwQTT5YiNh22Fw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:c6c0::/32 Signature Algorithm: sha256WithRSAEncryption 91:16:c1:79:4f:7d:ef:34:39:cd:53:f0:f3:66:5d:ca:d6:07: 6b:c0:63:b9:fc:b6:9d:92:b0:4a:76:ef:61:f8:c5:2f:fa:9c: 72:60:ed:86:a4:49:c4:20:92:46:4a:bb:d8:54:9c:24:f0:89: 02:79:d3:c9:17:75:49:ee:87:b3:29:3a:4e:59:0e:f1:e8:28: 06:26:f6:56:d9:07:15:19:65:b5:ec:38:1c:2b:21:85:99:f4: f3:9f:bc:a6:94:c5:4f:95:b5:e9:77:a2:04:cd:89:ae:87:06: a0:75:1d:a6:71:ae:53:b7:93:46:21:f7:f9:3e:fe:ce:a6:b6: 0d:70:21:53:40:35:8e:82:39:5b:65:2f:3b:d5:31:7d:93:18: 75:e9:00:34:be:d6:5b:de:e8:e6:e2:35:e5:99:9e:61:a1:e2: f4:8c:36:24:e8:a4:5c:5a:d4:a1:34:ff:e2:01:66:c1:07:85: 96:ce:9f:21:f6:96:e4:f8:a4:c7:5b:d4:40:1c:58:7e:bf:46: fb:87:b1:21:38:c7:98:ff:58:cc:98:7d:bf:1f:02:07:4d:98: e2:d7:6a:63:86:5f:97:6e:07:90:0b:5f:a6:2d:89:ae:99:54: 16:dd:34:cb:c7:58:0f:0d:33:70:d5:a3:39:db:be:58:3c:f0: d3:7c:ae:d5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/FWm4pzEeOYYXGcltn7QOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzkwMmRjNzA2OGJmNGY2NjExZDljMTA0ZDNlNTg4OGQ4NzZkODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOaqoRUBJXTSW4HCAwp/VTXaAACz JGUkkQBB6Xwjt+P2bx/cOLQneNIqEdoL1L09zFG+t5lICIUB5LauH6t6fWeezsZc 3F4UsgbBGfcOm4DTBpt5175iTJIbElLDcps9lFbuFqrdlFUbOfdk16FX65Tz3dX9 VOKzfkQZ3e8QmEacLXh/ZanH+yRS1LI12d+MJoaeQNjb857hMNMrCUUGUyoFkohS XZL2k9kqsfrfc19vVL3fsj18+XUXRX+XDtDKm8FSNDMhfJ51cv++rBGS7h78NX03 7n02pmMlgxEAStUdJLdWWy7t1U0sYQUaBDDt+JTThTOtWy5Zyl67o7n/awIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNyQLccGi/T2YR2cEE0+WIjYdthcMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvM0pBdHh3YUw5UFpoSFp3UVRUNVlpTmgyMkZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgLGwDAN BgkqhkiG9w0BAQsFAAOCAQEAkRbBeU997zQ5zVPw82ZdytYHa8Bjufy2nZKwSnbv YfjFL/qccmDthqRJxCCSRkq72FScJPCJAnnTyRd1Se6Hsyk6TlkO8egoBib2VtkH FRlltew4HCshhZn085+8ppTFT5W16XeiBM2JrocGoHUdpnGuU7eTRiH3+T7+zqa2 DXAhU0A1joI5W2UvO9UxfZMYdekANL7WW97o5uI15ZmeYaHi9Iw2JOikXFrUoTT/ 4gFmwQeFls6fIfaW5Pikx1vUQBxYfr9G+4exITjHmP9YzJh9vx8CB02Y4tdqY4Zf l24HkAtfpi2JrplUFt00y8dYDw0zcNWjOdu+WDzw03yu1Q== -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:17 2026 by rpki-client