This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/3OLOcJ5Qz9cIZzpQwKYu5c0Binw.roa File: 3OLOcJ5Qz9cIZzpQwKYu5c0Binw.roa (raw, json) Hash identifier: 5ae2wmoDPbNi6uQp4usaeZnJevEfnk481wWQdUGd7g0= Subject key identifier: DC:E2:CE:70:9E:50:CF:D7:08:67:3A:50:C0:A6:2E:E5:CD:01:8A:7C Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F151B10E0BBDD07802F316DD60340B9 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/3OLOcJ5Qz9cIZzpQwKYu5c0Binw.roa Signing time: Fri 02 Jan 2026 14:20:48 +0000 ROA not before: Fri 02 Jan 2026 14:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216078 IP address blocks: 2a14:c380:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1b:10:e0:bb:dd:07:80:2f:31:6d:d6:03:40:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dce2ce709e50cfd708673a50c0a62ee5cd018a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:2f:51:41:e9:85:d7:d1:13:8b:48:1c:d0: fb:ec:02:87:12:36:97:d8:0b:07:f9:02:10:67:90: ef:ab:11:40:42:61:ae:80:d0:39:56:c8:e6:38:73: 33:3f:ee:94:1f:55:81:98:b1:f5:00:af:9d:23:ff: 56:fc:da:ab:f6:43:71:bd:bd:ec:b5:70:47:17:16: 22:b1:bf:8a:2f:93:5f:96:16:de:d6:8f:4c:c0:4d: 89:33:04:01:25:b5:2e:be:62:01:e9:63:e6:a6:59: 31:6c:4d:df:0d:24:18:8d:26:e7:4f:f9:be:fc:ed: 8b:d8:4c:22:a9:46:13:b0:1e:f7:42:74:68:04:7d: e3:18:3e:1d:08:f5:fe:39:65:27:af:62:8f:52:7c: 52:59:c3:de:b0:ff:1d:ed:fd:ba:6f:d9:b0:4e:2a: 4d:5b:81:ff:71:77:f5:8f:48:4b:11:41:38:b3:ab: 00:5f:fc:18:5f:5b:1d:41:e9:ec:c7:fa:33:e7:4c: 41:11:69:ae:5d:b3:48:37:3e:a0:83:aa:4a:9f:31: 9e:54:b9:c6:2b:b6:34:4b:22:65:f2:c4:01:7b:da: 4a:c3:5d:60:ac:b1:97:a8:5b:13:75:91:07:d6:2f: 1b:19:f0:b7:28:e8:9c:40:ed:d9:b7:db:0a:b2:d7: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E2:CE:70:9E:50:CF:D7:08:67:3A:50:C0:A6:2E:E5:CD:01:8A:7C X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/3OLOcJ5Qz9cIZzpQwKYu5c0Binw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:16::/48 Signature Algorithm: sha256WithRSAEncryption 14:59:af:dc:90:5a:40:f9:05:00:1c:4b:21:98:3f:9b:71:94: d2:51:e3:5b:bb:72:96:6f:bc:ec:ae:b0:69:63:86:03:8f:7e: 2b:79:0c:cd:24:9a:74:c5:73:3a:20:a7:18:13:f2:78:c3:a3: 2f:e7:c9:7e:49:f9:0d:2c:08:bb:f4:9f:39:6a:a4:06:1e:41: 35:ae:19:db:b6:56:a1:73:0e:33:fa:8e:5f:4f:19:68:cf:4f: d3:ea:24:ee:77:7e:78:b5:cd:1b:5f:f3:1c:bb:b6:8b:ca:c6: 36:84:91:23:e2:28:7c:2f:c5:fa:9e:29:21:9c:90:d1:99:9a: ba:02:7c:15:04:b1:7f:8d:22:50:1a:c6:b4:d2:44:ee:cd:95: 1f:f9:5b:44:7d:42:85:cd:d5:91:8a:57:15:95:8f:3d:7b:fc: 0e:00:97:b3:dd:5d:15:b6:b9:90:b8:49:1c:6b:aa:c4:38:a8: 04:8b:82:b2:0e:94:2e:ea:ab:69:b1:40:ff:8f:74:af:25:c8: c5:64:80:46:1d:bc:1a:66:7e:77:ea:80:1e:3a:c9:03:a7:2c: 6d:7d:82:48:3b:f3:fd:d5:7e:28:c6:12:cc:74:01:c5:75:62: 5d:e0:30:d6:d5:31:64:1e:94:3d:35:bf:de:38:dd:c2:ba:df: 7d:d5:f5:b7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FRsQ4LvdB4AvMW3WA0C5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2UyY2U3MDllNTBjZmQ3MDg2NzNhNTBjMGE2MmVlNWNkMDE4YTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTsvUUHphdfRE4tIHND77AKHEjaX 2AsH+QIQZ5DvqxFAQmGugNA5VsjmOHMzP+6UH1WBmLH1AK+dI/9W/Nqr9kNxvb3s tXBHFxYisb+KL5Nflhbe1o9MwE2JMwQBJbUuvmIB6WPmplkxbE3fDSQYjSbnT/m+ /O2L2EwiqUYTsB73QnRoBH3jGD4dCPX+OWUnr2KPUnxSWcPesP8d7f26b9mwTipN W4H/cXf1j0hLEUE4s6sAX/wYX1sdQensx/oz50xBEWmuXbNINz6gg6pKnzGeVLnG K7Y0SyJl8sQBe9pKw11grLGXqFsTdZEH1i8bGfC3KOicQO3Zt9sKste94wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNziznCeUM/XCGc6UMCmLuXNAYp8MB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvM09MT2NKNVF6OWNJWnpwUXdLWXU1YzBCaW53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTDgAAW MA0GCSqGSIb3DQEBCwUAA4IBAQAUWa/ckFpA+QUAHEshmD+bcZTSUeNbu3KWb7zs rrBpY4YDj34reQzNJJp0xXM6IKcYE/J4w6Mv58l+SfkNLAi79J85aqQGHkE1rhnb tlahcw4z+o5fTxloz0/T6iTud354tc0bX/Mcu7aLysY2hJEj4ih8L8X6nikhnJDR mZq6AnwVBLF/jSJQGsa00kTuzZUf+VtEfUKFzdWRilcVlY89e/wOAJez3V0VtrmQ uEkca6rEOKgEi4KyDpQu6qtpsUD/j3SvJcjFZIBGHbwaZn536oAeOskDpyxtfYJI O/P91X4oxhLMdAHFdWJd4DDW1TFkHpQ9Nb/eON3Cut991fW3 -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:39 2026 by rpki-client