This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/3VQqtiom1KN9zcDFbHb_HNwz1EI.roa File: 3VQqtiom1KN9zcDFbHb_HNwz1EI.roa (raw, json) Hash identifier: n7BuRmEffiATFiumwmipm2pKN3sbI8aRpEp3yWS0w6c= Subject key identifier: DD:54:2A:B6:2A:26:D4:A3:7D:CD:C0:C5:6C:76:FF:1C:DC:33:D4:42 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019B7E39207CF6294C3915434AA60A08273E Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/3VQqtiom1KN9zcDFbHb_HNwz1EI.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211509 IP address blocks: 2a0a:2c0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:20:7c:f6:29:4c:39:15:43:4a:a6:0a:08:27:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd542ab62a26d4a37dcdc0c56c76ff1cdc33d442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:32:70:cc:e9:0d:0e:69:a5:d3:7d:aa:68: 82:00:57:25:c0:1c:7d:94:8c:52:ba:c5:24:ce:2d: f8:db:73:64:1c:af:2a:40:cb:5c:f5:09:59:92:94: e1:34:36:48:30:29:6d:db:37:bf:fd:ef:5f:83:1f: c3:11:d5:0b:56:22:99:68:ba:2e:79:9a:66:20:d1: e7:67:ee:3a:6a:2e:61:91:df:ee:51:b6:21:4a:fd: 81:a4:03:cf:f1:2e:3b:22:88:bf:2f:8e:19:b1:58: 98:43:45:c3:bc:20:2a:30:4d:54:c2:72:4e:e2:92: 6c:43:91:55:f6:bb:43:44:b3:34:2c:9a:cb:a1:b4: 99:20:d6:2e:9a:c0:74:c3:16:64:9d:74:f0:47:8b: 84:68:e8:10:95:b1:51:e9:99:5b:05:95:56:4e:86: d1:40:c3:94:1d:dd:70:fa:9f:50:cb:88:59:bc:a8: 3b:89:8a:63:23:b1:b7:ca:b2:90:b3:25:a4:bf:76: a1:38:10:2e:67:3d:13:39:a2:6a:12:5d:f7:97:a0: b9:a6:87:9e:78:91:21:e7:b7:f1:9b:13:0e:be:a8: bc:90:82:b7:66:5d:dc:d9:e8:c7:4b:78:06:6e:a1: 4f:33:8d:a5:94:a6:0f:1d:7d:b0:4b:f3:8e:de:4b: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:2A:B6:2A:26:D4:A3:7D:CD:C0:C5:6C:76:FF:1C:DC:33:D4:42 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/3VQqtiom1KN9zcDFbHb_HNwz1EI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:2c0:11::/48 Signature Algorithm: sha256WithRSAEncryption 34:b8:12:70:3e:c5:fb:5c:d0:3f:be:e5:70:be:8d:a1:02:bf: c4:61:9f:b9:02:d4:d0:54:b1:b4:67:c5:40:f0:63:c9:f5:04: 2b:33:da:69:1c:83:cb:59:54:bd:b8:ad:cc:d2:62:13:5e:a8: 88:60:f8:63:36:09:14:79:af:ff:50:ec:88:b2:df:35:cf:db: ed:25:11:ba:83:8a:db:82:67:79:a9:10:98:1a:20:98:8b:4c: 24:a0:f8:66:75:88:c5:57:56:f2:96:7f:ed:07:e2:c5:0a:23: da:97:13:ce:89:06:96:f4:31:df:41:72:e5:a0:36:43:58:55: 89:ac:c4:8a:a9:b3:7e:b6:76:ad:46:22:eb:b9:f7:9f:a5:ed: 9e:87:22:ef:d2:0d:5c:48:91:27:2d:0f:e5:97:06:f1:8e:c7: 29:82:b5:bb:62:13:4f:76:6e:2d:a0:c8:60:87:45:7a:47:cd: 81:0c:54:af:9b:a6:9c:fb:b2:5d:00:95:78:92:32:dc:7c:ac: cb:4a:0d:c7:5e:15:94:c8:9b:f0:eb:ac:c0:7f:65:9c:34:ba: b6:15:0a:80:d5:a6:02:22:18:35:26:b6:79:31:cb:33:88:21: 6a:4b:bb:c0:02:e6:e9:28:a4:8e:c7:a4:b7:ad:3d:68:7d:42: 82:23:dc:38 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OSB89ilMORVDSqYKCCc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDU0MmFiNjJhMjZkNGEzN2RjZGMwYzU2Yzc2ZmYxY2RjMzNkNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzsycMzpDQ5ppdN9qmiCAFclwBx9 lIxSusUkzi3423NkHK8qQMtc9QlZkpThNDZIMClt2ze//e9fgx/DEdULViKZaLou eZpmINHnZ+46ai5hkd/uUbYhSv2BpAPP8S47Ioi/L44ZsViYQ0XDvCAqME1UwnJO 4pJsQ5FV9rtDRLM0LJrLobSZINYumsB0wxZknXTwR4uEaOgQlbFR6ZlbBZVWTobR QMOUHd1w+p9Qy4hZvKg7iYpjI7G3yrKQsyWkv3ahOBAuZz0TOaJqEl33l6C5poee eJEh57fxmxMOvqi8kIK3Zl3c2ejHS3gGbqFPM42llKYPHX2wS/OO3ksCnQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN1UKrYqJtSjfc3AxWx2/xzcM9RCMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvM1ZRcXRpb20xS045emNERmJIYl9ITnd6MUVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgoCwAAR MA0GCSqGSIb3DQEBCwUAA4IBAQA0uBJwPsX7XNA/vuVwvo2hAr/EYZ+5AtTQVLG0 Z8VA8GPJ9QQrM9ppHIPLWVS9uK3M0mITXqiIYPhjNgkUea//UOyIst81z9vtJRG6 g4rbgmd5qRCYGiCYi0wkoPhmdYjFV1byln/tB+LFCiPalxPOiQaW9DHfQXLloDZD WFWJrMSKqbN+tnatRiLrufefpe2ehyLv0g1cSJEnLQ/llwbxjscpgrW7YhNPdm4t oMhgh0V6R82BDFSvm6ac+7JdAJV4kjLcfKzLSg3HXhWUyJvw66zAf2WcNLq2FQqA 1aYCIhg1JrZ5McsziCFqS7vAAubpKKSOx6S3rT1ofUKCI9w4 -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:10 2026 by rpki-client