This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/3RUzNJxN8N-FLHx-HBIM3ssFpQs.roa File: 3RUzNJxN8N-FLHx-HBIM3ssFpQs.roa (raw, json) Hash identifier: SC6R0zqJ1csv36Fng7Scp1JucKAec+aLRs2P091gAAQ= Subject key identifier: DD:15:33:34:9C:4D:F0:DF:85:2C:7C:7E:1C:12:0C:DE:CB:05:A5:0B Certificate issuer: /CN=f76be99e8be2c5400d010542bf2058bdbb88502d Certificate serial: 019B7F13ABFE0819C30D084E69CB6CE3975A Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/3RUzNJxN8N-FLHx-HBIM3ssFpQs.roa Signing time: Fri 02 Jan 2026 14:19:14 +0000 ROA not before: Fri 02 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212925 IP address blocks: 2001:67c:8fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:ab:fe:08:19:c3:0d:08:4e:69:cb:6c:e3:97:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d Validity Not Before: Jan 2 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd1533349c4df0df852c7c7e1c120cdecb05a50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:8e:e6:e3:bf:6f:78:31:9e:1b:51:1f:03: 50:a9:a2:58:04:c1:ba:a5:0d:be:4b:b1:3b:2a:20: ed:5a:1f:ab:65:c9:c7:bd:ce:2f:d9:2d:90:3b:ed: 29:09:f5:9e:34:25:de:5e:ce:32:11:54:7f:62:cb: 8e:a3:6f:0c:83:1c:26:19:4d:3f:03:b7:05:d8:c3: 73:19:cb:09:5c:5a:1f:0e:4d:b9:f1:3c:38:7f:bd: c9:ce:3e:3c:10:db:ec:41:dc:77:c4:35:2d:b1:fa: a9:5a:1d:4c:68:cd:76:b7:07:77:bd:54:0f:c2:ac: 6a:8e:6b:67:d8:69:c3:97:cc:09:30:1e:e2:56:c7: 3a:b1:65:6b:b0:61:ff:af:7c:66:b0:af:bd:d6:db: 5a:9f:3b:e9:a5:c3:75:93:3f:22:b0:2b:8a:08:17: 19:c5:62:5e:d0:01:24:c9:9a:52:b1:fa:9f:69:e4: cd:a7:f5:c9:96:3e:e9:9a:be:a9:64:f7:b6:0b:e2: 16:79:2b:50:2d:7c:b1:79:4c:1f:72:62:83:8e:90: 62:b7:63:79:7a:9d:e9:bd:0c:26:55:6a:e1:4e:e7: 26:75:1a:7a:73:57:66:ca:9b:cd:ec:55:2f:96:ac: 98:31:dd:3a:18:84:14:50:9d:e8:b4:5d:35:5f:78: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:15:33:34:9C:4D:F0:DF:85:2C:7C:7E:1C:12:0C:DE:CB:05:A5:0B X509v3 Authority Key Identifier: keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/3RUzNJxN8N-FLHx-HBIM3ssFpQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:8fc::/48 Signature Algorithm: sha256WithRSAEncryption 5b:3c:1c:7c:dd:60:ad:74:4e:fd:73:97:e1:d9:f2:38:53:b8: 07:8b:7b:85:d1:ff:ee:3e:86:9d:4e:7c:66:21:8e:9a:6b:99: 3f:af:11:48:03:22:16:20:80:cd:e3:24:38:b3:94:04:d1:2b: 4b:a3:d9:de:b2:9f:2a:97:73:b1:80:a3:1a:f1:f6:bc:d2:97: 93:e0:de:d1:c3:14:5c:5c:e7:c4:82:84:35:e8:75:e6:22:83: 08:4c:7d:0a:0f:f2:1b:82:04:67:cd:11:17:f5:b2:ba:7e:03: 80:81:36:62:3e:51:1c:1d:51:e6:d9:6b:9c:0e:c6:cf:09:3f: 82:7c:30:92:a4:b4:7d:fe:f9:4b:3f:89:e1:78:a1:40:ee:68: 56:77:38:1b:8c:eb:80:8c:0d:13:a6:53:be:ad:28:9a:41:7e: 39:38:20:3b:17:0f:e0:0a:2b:48:48:8a:f8:8f:2d:f1:b1:ff: 2f:23:b6:6e:ed:d7:84:b8:1f:bb:82:11:a7:b2:2e:ec:db:87: eb:64:c2:2f:06:0e:f2:41:51:d5:b6:57:57:61:f0:92:45:9c: d5:d8:9f:bd:ed:43:b2:37:cb:54:50:c9:83:72:92:8c:6b:72: d6:7f:86:e4:49:8a:e7:e5:b0:64:f9:8f:dd:c5:93:10:c3:4d: d3:d7:5d:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/E6v+CBnDDQhOacts45daMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NmJlOTllOGJlMmM1NDAwZDAxMDU0MmJmMjA1OGJkYmI4 ODUwMmQwHhcNMjYwMTAyMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDE1MzMzNDljNGRmMGRmODUyYzdjN2UxYzEyMGNkZWNiMDVhNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L6O5uO/b3gxnhtRHwNQqaJYBMG6 pQ2+S7E7KiDtWh+rZcnHvc4v2S2QO+0pCfWeNCXeXs4yEVR/YsuOo28MgxwmGU0/ A7cF2MNzGcsJXFofDk258Tw4f73Jzj48ENvsQdx3xDUtsfqpWh1MaM12twd3vVQP wqxqjmtn2GnDl8wJMB7iVsc6sWVrsGH/r3xmsK+91ttanzvppcN1kz8isCuKCBcZ xWJe0AEkyZpSsfqfaeTNp/XJlj7pmr6pZPe2C+IWeStQLXyxeUwfcmKDjpBit2N5 ep3pvQwmVWrhTucmdRp6c1dmypvN7FUvlqyYMd06GIQUUJ3otF01X3h4TQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN0VMzScTfDfhSx8fhwSDN7LBaULMB8GA1UdIwQY MBaAFPdr6Z6L4sVADQEFQr8gWL27iFAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTJ2cG5vdml4VUFOQVFWQ3Z5Qll2YnVJVUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYjY0NWMtNTBlMi00MDhiLWJlNjgt NGViMzgzZmYxM2I5LzEvM1JVek5KeE44Ti1GTEh4LUhCSU0zc3NGcFFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xYjY0NWMtNTBlMi00MDhiLWJlNjgtNGViMzgzZmYxM2I5 LzEvOTJ2cG5vdml4VUFOQVFWQ3Z5Qll2YnVJVUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAj8 MA0GCSqGSIb3DQEBCwUAA4IBAQBbPBx83WCtdE79c5fh2fI4U7gHi3uF0f/uPoad TnxmIY6aa5k/rxFIAyIWIIDN4yQ4s5QE0StLo9nesp8ql3OxgKMa8fa80peT4N7R wxRcXOfEgoQ16HXmIoMITH0KD/IbggRnzREX9bK6fgOAgTZiPlEcHVHm2WucDsbP CT+CfDCSpLR9/vlLP4nheKFA7mhWdzgbjOuAjA0TplO+rSiaQX45OCA7Fw/gCitI SIr4jy3xsf8vI7Zu7deEuB+7ghGnsi7s24frZMIvBg7yQVHVtldXYfCSRZzV2J+9 7UOyN8tUUMmDcpKMa3LWf4bkSYrn5bBk+Y/dxZMQw03T111z -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:45 2026 by rpki-client