This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/k3OU5IbsL93-_3lodtzKMZ_irSg.roa File: k3OU5IbsL93-_3lodtzKMZ_irSg.roa (raw, json) Hash identifier: N0y0RdnbxB4G2UQPBSuq2ffyQtcz3uGKqNQzZ4Z0Sic= Subject key identifier: 93:73:94:E4:86:EC:2F:DD:FE:FF:79:68:76:DC:CA:31:9F:E2:AD:28 Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e Certificate serial: 019B7CEE6669DA3FBDADA1F64E4F93745C2A Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/k3OU5IbsL93-_3lodtzKMZ_irSg.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212691 IP address blocks: 2001:678:114::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:66:69:da:3f:bd:ad:a1:f6:4e:4f:93:74:5c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=937394e486ec2fddfeff796876dcca319fe2ad28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:dc:1b:1e:b3:c6:a3:2c:b7:19:49:e3:b9: 8d:15:6f:b9:8a:34:dd:2d:d3:37:10:09:8c:28:96: b8:95:ce:57:6f:a5:62:d5:e9:3e:70:e4:e1:89:7e: ba:16:f7:e6:9c:88:e0:41:88:67:4b:32:1b:f2:f9: 7f:89:bc:fe:95:a8:d2:85:f9:c4:27:6e:a8:71:e9: e9:1a:97:2b:b8:80:20:15:4e:63:71:96:2e:ac:de: 30:00:99:86:4d:fe:62:95:27:11:35:b9:47:d7:3a: e5:12:32:33:d8:e6:49:6e:df:ff:c1:84:1f:34:3e: f6:2e:73:40:a5:69:79:ee:5e:f7:e2:b4:9a:1a:f9: ca:56:2d:7c:8f:98:82:ff:45:c4:68:f4:c3:93:fe: 61:09:37:56:3a:e7:2a:09:f1:5f:75:19:0f:a5:9c: bb:27:a5:fe:49:d2:57:84:41:9e:5c:bf:65:06:bc: c6:d6:d4:29:09:3b:6f:3c:bb:93:3e:5e:7e:ac:4f: 04:8b:6e:02:08:d9:24:e2:ef:32:15:33:8b:97:15: 65:1e:e1:55:3e:1f:a8:6c:6b:c0:0d:42:55:04:d0: 50:57:8f:41:34:b6:6c:3c:c9:dd:f1:a9:c4:01:0c: 1d:a6:8f:9a:10:6d:b7:a2:be:57:0d:13:b4:22:03: 16:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:73:94:E4:86:EC:2F:DD:FE:FF:79:68:76:DC:CA:31:9F:E2:AD:28 X509v3 Authority Key Identifier: keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/k3OU5IbsL93-_3lodtzKMZ_irSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:114::/48 Signature Algorithm: sha256WithRSAEncryption 43:a8:54:a7:d7:3c:6b:cc:0f:48:0c:07:3e:ec:64:d0:9a:20: 33:5e:b1:3f:84:fe:f0:7b:c7:0e:6f:45:ae:76:97:c0:14:5b: eb:20:bc:b4:9c:a6:74:74:b5:89:f3:74:50:cd:ce:b7:91:f4: fa:da:59:4e:46:06:90:ca:54:19:60:ff:2b:09:4e:f1:7c:5c: da:8b:9f:bd:9d:0f:2d:06:5a:e3:7d:06:1b:de:6c:88:53:e6: 65:34:3c:c4:fd:37:fd:eb:87:db:4e:cf:cc:61:af:53:ab:ad: c4:0c:51:51:88:80:ed:82:7e:f0:24:40:1f:ae:1f:8b:0c:84: 44:b9:9b:1b:b5:2e:dd:77:cb:3b:27:d9:53:a2:72:3f:95:d0: bf:d6:99:6c:31:fc:dc:e4:95:4a:eb:fc:c2:5d:5b:14:dd:84: 83:92:81:61:67:ee:81:7e:ed:57:b6:e1:e4:fc:9c:1e:0d:7c: 0b:a6:13:63:23:77:2a:e1:20:4c:fd:61:3e:f3:ba:f6:27:0a: ef:9f:d8:7f:38:17:86:8b:b2:bf:e6:de:a5:5a:e4:49:b9:e1: 00:2c:d9:e1:26:f2:6d:3e:f9:2c:a5:db:51:20:c1:16:ea:1f: 85:22:8e:80:79:5b:68:ac:24:16:2b:6b:65:fa:d2:9f:29:a1: 69:73:6c:40 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt87mZp2j+9raH2Tk+TdFwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYTc5MThiYmY1YWE4MGYxNDQ5MzdhZDE5NjVlYTAzZjAy NWMyMmUwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzczOTRlNDg2ZWMyZmRkZmVmZjc5Njg3NmRjY2EzMTlmZTJhZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY7cGx6zxqMstxlJ47mNFW+5ijTd LdM3EAmMKJa4lc5Xb6Vi1ek+cOThiX66FvfmnIjgQYhnSzIb8vl/ibz+lajShfnE J26ocenpGpcruIAgFU5jcZYurN4wAJmGTf5ilScRNblH1zrlEjIz2OZJbt//wYQf ND72LnNApWl57l734rSaGvnKVi18j5iC/0XEaPTDk/5hCTdWOucqCfFfdRkPpZy7 J6X+SdJXhEGeXL9lBrzG1tQpCTtvPLuTPl5+rE8Ei24CCNkk4u8yFTOLlxVlHuFV Ph+obGvADUJVBNBQV49BNLZsPMnd8anEAQwdpo+aEG23or5XDRO0IgMW7QIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFJNzlOSG7C/d/v95aHbcyjGf4q0oMB8GA1UdIwQY MBaAFPunkYu/WqgPFEk3rRll6gPwJcIuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02ZVJpNzlhcUE4VVNUZXRHV1hxQV9BbHdpNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODIyMjIxLTc3ZmYtNDJmNC1iMDUy LWE0MzFkN2FkNjhkZC8xL2szT1U1SWJzTDkzLV8zbG9kdHpLTVpfaXJTZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODgvODIyMjIxLTc3ZmYtNDJmNC1iMDUyLWE0MzFkN2FkNjhk ZC8xLzEtNmVSaTc5YXFBOFVTVGV0R1dYcUFfQWx3aTQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQZ4 ARQwDQYJKoZIhvcNAQELBQADggEBAEOoVKfXPGvMD0gMBz7sZNCaIDNesT+E/vB7 xw5vRa52l8AUW+sgvLScpnR0tYnzdFDNzreR9PraWU5GBpDKVBlg/ysJTvF8XNqL n72dDy0GWuN9BhvebIhT5mU0PMT9N/3rh9tOz8xhr1OrrcQMUVGIgO2CfvAkQB+u H4sMhES5mxu1Lt13yzsn2VOicj+V0L/WmWwx/NzklUrr/MJdWxTdhIOSgWFn7oF+ 7Ve24eT8nB4NfAumE2MjdyrhIEz9YT7zuvYnCu+f2H84F4aLsr/m3qVa5Em54QAs 2eEm8m0++Syl21EgwRbqH4UijoB5W2isJBYra2X60p8poWlzbEA= -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:16 2026 by rpki-client