This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/a3_aA8o-Hdj3p1zSlS7CIv-PMNA.roa File: a3_aA8o-Hdj3p1zSlS7CIv-PMNA.roa (raw, json) Hash identifier: d3XqhyCeJJcJXCDGdv5KzGLONzJ74f2hEc/ZEGAlyf0= Subject key identifier: 6B:7F:DA:03:CA:3E:1D:D8:F7:A7:5C:D2:95:2E:C2:22:FF:8F:30:D0 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019B7F15695714285A65007DEC70555A1A8A Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/a3_aA8o-Hdj3p1zSlS7CIv-PMNA.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10929 IP address blocks: 2a02:c6c1:1::/48 maxlen: 48 2a02:c6c1:142::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:69:57:14:28:5a:65:00:7d:ec:70:55:5a:1a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b7fda03ca3e1dd8f7a75cd2952ec222ff8f30d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:35:e1:c0:fb:ea:17:07:62:e5:1c:99:3c: e6:d3:d7:27:2a:5b:9f:ed:5e:91:eb:9c:92:c0:a9: e9:ad:3e:36:0a:bc:67:a3:eb:5d:a1:07:26:c3:b2: d4:63:a5:18:b2:eb:ae:3f:21:99:45:f3:2b:a8:7f: 99:25:12:9d:e6:c2:c2:6f:16:42:75:59:91:1a:04: e8:f5:e8:9b:9d:01:45:bd:9f:83:c2:c4:e7:c2:c8: f9:fb:6d:a2:4d:23:50:d7:26:53:3d:7b:2e:ef:9b: e1:07:2e:ce:fc:78:5e:6a:8c:e6:db:af:03:ec:84: d2:5d:e0:31:50:44:59:b6:3f:3a:35:b0:56:75:c8: ac:df:b1:b5:f7:90:f1:c0:57:b7:07:f0:6f:a6:4f: f4:44:24:4b:ca:55:b2:fe:d9:5d:21:7d:4f:f9:67: 72:54:c6:81:d5:d5:52:7f:9f:f5:55:62:03:9c:62: c4:64:1d:c3:66:aa:40:c5:38:4f:55:1e:d6:02:29: 1c:f7:be:de:6b:2a:98:69:55:f3:c9:33:43:f1:71: 3e:9f:35:d7:62:fa:7c:4b:87:ef:52:e5:56:41:32: 64:30:68:af:ab:85:03:4c:0e:0c:cf:ce:3b:ed:0e: 47:3e:78:95:74:e0:dd:a1:30:af:9a:16:ab:83:0b: a7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7F:DA:03:CA:3E:1D:D8:F7:A7:5C:D2:95:2E:C2:22:FF:8F:30:D0 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/a3_aA8o-Hdj3p1zSlS7CIv-PMNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:c6c1:1::/48 2a02:c6c1:142::/48 Signature Algorithm: sha256WithRSAEncryption 08:c6:8a:40:8b:ca:6b:60:90:39:a0:ae:75:1c:b5:24:5d:df: ed:40:b9:97:d7:4c:7e:24:e4:23:77:c3:2e:5e:53:0b:f4:18: 46:34:02:82:21:dc:2c:93:32:d3:d7:77:2d:e5:5a:8d:07:a0: cc:f0:56:c5:dc:5e:00:80:8e:b9:24:2b:50:ea:20:6a:d6:28: 02:78:dc:19:a2:b5:54:94:8b:8a:e8:50:9b:5b:e5:f5:a6:17: 69:df:74:e0:0f:6e:45:83:33:cd:23:51:f8:07:32:ea:88:3e: 44:e6:a9:a0:67:da:1e:c1:d0:d2:c6:fd:00:73:49:2e:3d:c6: 84:92:09:0b:39:77:0e:f2:22:b2:ed:60:87:f5:90:c8:5d:4c: 86:2d:f4:97:bf:77:bf:61:9e:c9:4f:03:f1:16:c8:61:d6:55: 6f:1e:9d:d0:75:c3:6b:a9:cd:d9:dc:c8:a9:08:fe:76:0e:c0: 29:f4:a6:f1:ca:ac:ea:d9:ad:d4:81:a0:33:87:51:06:c6:f2: 3e:e1:eb:04:77:47:62:7a:25:a0:0c:84:3b:48:fc:36:dd:9d: 7d:15:aa:c9:19:da:d7:e0:7f:16:85:fe:4b:49:03:aa:2e:1f: 8c:63:d1:d3:8a:ad:7f:6e:57:a2:67:01:78:54:f0:eb:ca:c7: de:5f:44:15 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FWlXFChaZQB97HBVWhqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjdmZGEwM2NhM2UxZGQ4ZjdhNzVjZDI5NTJlYzIyMmZmOGYzMGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQg14cD76hcHYuUcmTzm09cnKluf 7V6R65ySwKnprT42Crxno+tdoQcmw7LUY6UYsuuuPyGZRfMrqH+ZJRKd5sLCbxZC dVmRGgTo9eibnQFFvZ+DwsTnwsj5+22iTSNQ1yZTPXsu75vhBy7O/Hheaozm268D 7ITSXeAxUERZtj86NbBWdcis37G195DxwFe3B/Bvpk/0RCRLylWy/tldIX1P+Wdy VMaB1dVSf5/1VWIDnGLEZB3DZqpAxThPVR7WAikc977eayqYaVXzyTND8XE+nzXX Yvp8S4fvUuVWQTJkMGivq4UDTA4Mz8477Q5HPniVdODdoTCvmhargwunRwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGt/2gPKPh3Y96dc0pUuwiL/jzDQMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvYTNfYUE4by1IZGozcDF6U2xTN0NJdi1QTU5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgLGwQAB AwcAKgLGwQFCMA0GCSqGSIb3DQEBCwUAA4IBAQAIxopAi8prYJA5oK51HLUkXd/t QLmX10x+JOQjd8MuXlML9BhGNAKCIdwskzLT13ct5VqNB6DM8FbF3F4AgI65JCtQ 6iBq1igCeNwZorVUlIuK6FCbW+X1phdp33TgD25FgzPNI1H4BzLqiD5E5qmgZ9oe wdDSxv0Ac0kuPcaEkgkLOXcO8iKy7WCH9ZDIXUyGLfSXv3e/YZ7JTwPxFshh1lVv Hp3QdcNrqc3Z3MipCP52DsAp9Kbxyqzq2a3UgaAzh1EGxvI+4esEd0dieiWgDIQ7 SPw23Z19FarJGdrX4H8Whf5LSQOqLh+MY9HTiq1/bleiZwF4VPDrysfeX0QV -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:34 2026 by rpki-client