This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/3E7gIhEIxyZGtdakC2WZP0vliCQ.roa File: 3E7gIhEIxyZGtdakC2WZP0vliCQ.roa (raw, json) Hash identifier: HQgXTrZ18efs7enSODo640cTZ2I/95b8yve+A2YLQL8= Subject key identifier: DC:4E:E0:22:11:08:C7:26:46:B5:D6:A4:0B:65:99:3F:4B:E5:88:24 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F1516C1FDD4F964BD7058E6D90F1E3E Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/3E7gIhEIxyZGtdakC2WZP0vliCQ.roa Signing time: Fri 02 Jan 2026 14:20:47 +0000 ROA not before: Fri 02 Jan 2026 14:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213641 IP address blocks: 2a14:c380:220::/44 maxlen: 44 2a14:c380:220::/48 maxlen: 48 2a14:c380:221::/48 maxlen: 48 2a14:c380:222::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:16:c1:fd:d4:f9:64:bd:70:58:e6:d9:0f:1e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc4ee0221108c72646b5d6a40b65993f4be58824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:77:cc:d1:ea:a6:8e:95:54:51:07:ea:8b:c3: 2e:fb:f8:3a:f6:df:ce:8c:cc:4b:37:28:99:4a:5c: 17:0a:86:67:ca:1b:87:5d:a5:5a:cc:fa:21:5a:a4: c1:4a:2a:fb:88:fe:98:c2:9d:21:b7:a5:35:0b:04: 6a:c7:67:7a:0d:33:0b:41:c8:b3:3b:d4:9e:bb:8c: 6a:dc:19:d0:f3:a4:80:d7:b7:29:9b:54:8e:74:c8: c4:6e:28:eb:40:8f:62:8e:97:70:c6:ce:bd:ad:1e: cb:96:ca:76:26:14:a0:36:67:05:2d:42:9c:f1:db: 35:a6:ed:51:fa:ff:16:7a:cd:18:73:f8:09:69:2e: 02:f0:39:bf:d4:74:57:bb:9c:8d:0b:8e:74:3e:66: 8e:31:eb:35:4a:fa:12:ad:7a:52:cf:ee:03:29:60: b9:2b:e4:5b:ae:6b:aa:aa:da:54:8b:0e:79:9c:01: 9e:4a:cc:df:38:be:2a:92:8d:ef:28:9c:f4:90:66: 89:53:49:4b:4d:56:01:fa:b4:78:ea:c3:03:fb:6a: 4a:44:14:19:6b:44:24:4b:25:4c:e0:a1:f2:1e:a1: 37:95:53:e6:39:6c:e2:e2:54:19:af:dd:df:f7:94: 70:04:f2:29:04:c7:90:ca:e8:b3:27:2e:d4:b7:a0: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4E:E0:22:11:08:C7:26:46:B5:D6:A4:0B:65:99:3F:4B:E5:88:24 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/3E7gIhEIxyZGtdakC2WZP0vliCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:220::/44 Signature Algorithm: sha256WithRSAEncryption 95:0c:cd:6a:04:ee:56:2a:23:af:97:64:a2:c2:9e:d1:f8:4f: ff:13:3e:fe:6a:9a:a4:f7:c2:7c:2c:7a:c8:77:88:1d:72:38: 4e:e1:83:cb:40:30:76:84:24:c4:63:6c:f3:06:0b:b8:e5:fc: 3d:b8:ed:88:68:af:4d:2b:fd:45:a7:59:ef:2f:2e:4d:fd:39: 20:bb:64:13:bc:1b:bb:43:01:bc:41:6f:3b:d3:d7:e9:ba:c7: 43:1e:10:60:20:8b:f5:2e:c8:c5:24:76:0d:82:4d:a7:7e:65: a2:7c:3f:a8:2c:21:42:45:20:e1:d4:15:fe:eb:e7:70:23:42: 98:87:b1:24:c2:93:cd:d8:64:75:58:fb:9b:1b:3b:33:35:7a: 48:f1:1f:fa:6d:2a:24:60:b3:fe:19:2b:26:25:b3:f0:10:6c: e5:0a:d7:1f:9d:cb:b0:c9:5b:cf:93:4b:67:06:4b:a4:04:99: 58:0d:8f:80:72:84:e3:b9:11:59:0c:e3:28:8e:8f:23:de:6b: 60:0f:17:08:3e:1d:ee:d9:21:5b:d3:2a:c6:ba:a7:fc:83:c3: 25:03:fc:70:ec:07:ee:e3:4b:45:9c:33:bd:fd:bb:38:8d:88: 26:d5:02:47:97:b4:a8:5a:e1:8b:e3:c6:8a:99:02:bc:a1:5f: a6:4c:15:fa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FRbB/dT5ZL1wWObZDx4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzRlZTAyMjExMDhjNzI2NDZiNWQ2YTQwYjY1OTkzZjRiZTU4ODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnfM0eqmjpVUUQfqi8Mu+/g69t/O jMxLNyiZSlwXCoZnyhuHXaVazPohWqTBSir7iP6Ywp0ht6U1CwRqx2d6DTMLQciz O9Seu4xq3BnQ86SA17cpm1SOdMjEbijrQI9ijpdwxs69rR7Llsp2JhSgNmcFLUKc 8ds1pu1R+v8Wes0Yc/gJaS4C8Dm/1HRXu5yNC450PmaOMes1SvoSrXpSz+4DKWC5 K+RbrmuqqtpUiw55nAGeSszfOL4qko3vKJz0kGaJU0lLTVYB+rR46sMD+2pKRBQZ a0QkSyVM4KHyHqE3lVPmOWzi4lQZr93f95RwBPIpBMeQyuizJy7Ut6AlnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNxO4CIRCMcmRrXWpAtlmT9L5YgkMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvM0U3Z0loRUl4eVpHdGRha0MyV1pQMHZsaUNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgAIg MA0GCSqGSIb3DQEBCwUAA4IBAQCVDM1qBO5WKiOvl2Siwp7R+E//Ez7+apqk98J8 LHrId4gdcjhO4YPLQDB2hCTEY2zzBgu45fw9uO2IaK9NK/1Fp1nvLy5N/Tkgu2QT vBu7QwG8QW8709fpusdDHhBgIIv1LsjFJHYNgk2nfmWifD+oLCFCRSDh1BX+6+dw I0KYh7EkwpPN2GR1WPubGzszNXpI8R/6bSokYLP+GSsmJbPwEGzlCtcfncuwyVvP k0tnBkukBJlYDY+AcoTjuRFZDOMojo8j3mtgDxcIPh3u2SFb0yrGuqf8g8MlA/xw 7Afu40tFnDO9/bs4jYgm1QJHl7SoWuGL48aKmQK8oV+mTBX6 -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:09 2026 by rpki-client