This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/r-_3l2QQDk49Rp0j80drAiEu4kU.roa File: r-_3l2QQDk49Rp0j80drAiEu4kU.roa (raw, json) Hash identifier: 0nT9J9nUi2CAiLfvcK69CvCos9Ne+xvHeMLkDsNE+kg= Subject key identifier: AF:EF:F7:97:64:10:0E:4E:3D:46:9D:23:F3:47:6B:02:21:2E:E2:45 Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b Certificate serial: 019B79ECCA55E09EEC3D4B0B5A004B71D034 Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/r-_3l2QQDk49Rp0j80drAiEu4kU.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24013 IP address blocks: 2a11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ca:55:e0:9e:ec:3d:4b:0b:5a:00:4b:71:d0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afeff79764100e4e3d469d23f3476b02212ee245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:0e:e4:4e:83:fa:15:b1:97:54:ce:fa:c8: 7b:67:cd:3e:6a:04:50:dc:86:aa:d5:23:d0:b5:4a: a7:b0:ca:0f:99:00:41:41:6a:01:44:b0:bb:ea:8e: 71:b5:72:90:af:76:b2:42:ec:e6:7e:59:78:47:99: d7:1e:30:df:1f:60:c0:e7:81:67:94:6e:10:14:0d: 91:21:f3:bc:04:9d:ed:21:21:a3:cd:f5:77:8a:65: ea:f1:33:a5:12:a8:58:d1:3b:5d:d1:63:58:79:9d: 35:4d:b0:24:d3:9b:4b:bb:39:a0:59:d3:73:cd:cd: 8b:c7:53:50:c8:51:c4:dd:be:7c:27:c2:bd:61:94: 34:65:51:20:bf:85:be:36:d9:dd:81:fa:63:10:c7: 72:dc:8a:2e:27:00:65:6c:b6:fa:2e:fe:59:3c:56: 9e:19:ef:48:2f:e3:d2:8d:e4:6f:3c:2a:e9:da:b1: e8:7c:3c:59:37:7b:5a:e7:89:8f:3f:e3:a0:cb:33: 94:3c:b3:3c:0c:de:51:9b:6a:f8:b8:3e:c3:b8:b7: 01:c1:1d:50:03:65:1a:74:6c:19:22:8a:31:b3:2c: 12:a4:96:c7:e0:fb:9f:fa:26:b0:65:16:ed:2f:da: 7b:d7:96:a6:52:0c:06:6e:f1:d8:3e:b6:05:a2:41: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EF:F7:97:64:10:0E:4E:3D:46:9D:23:F3:47:6B:02:21:2E:E2:45 X509v3 Authority Key Identifier: keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/r-_3l2QQDk49Rp0j80drAiEu4kU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11::/48 Signature Algorithm: sha256WithRSAEncryption 21:51:ed:fc:e7:32:f6:6f:3f:dd:59:f6:12:8e:1d:a5:2e:3b: 8d:5a:26:e4:15:35:a4:3b:a7:e3:7a:de:72:bd:55:4e:23:41: b4:56:40:d7:de:34:db:72:b6:46:98:45:b8:4d:bb:09:8e:3c: 79:1d:4d:56:a9:51:09:0d:57:0b:c2:c3:a3:1a:df:94:a0:4f: dc:ee:f1:68:4b:73:fe:8e:de:79:85:b5:4f:59:7c:ff:f5:86: 62:1f:31:8a:a7:5b:e0:bf:73:e4:35:f1:06:dc:14:68:55:48: b5:d9:8e:5c:41:ca:1b:56:60:20:81:74:a0:4d:23:18:f3:be: 22:29:63:b7:1f:bc:e5:df:c0:a4:5f:25:43:a9:be:8f:8a:f0: 5f:99:b6:bd:df:83:19:39:2d:5c:4f:d7:ba:21:82:9d:b4:b4: 6f:71:63:a8:fa:4a:4d:5c:af:51:99:d4:62:4a:05:0f:7f:49: 99:8f:00:81:16:cb:22:59:88:3c:c7:ad:2a:b3:fa:1b:e1:a6: fd:24:be:f5:b2:94:30:6d:6f:56:17:e1:89:be:46:13:4a:03: f9:e2:16:f2:2f:b8:23:65:13:ec:26:bb:cb:7d:87:54:99:31: 48:08:81:d1:7f:3e:73:d5:82:3d:a9:e0:1a:c9:d9:9a:77:7b: 87:d0:85:55 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57MpV4J7sPUsLWgBLcdA0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjUxMjI5NzczYWY5MTU3ZTMxNzE2MGY5ZGM4MDBmMzgx ZTBiMmIwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmVmZjc5NzY0MTAwZTRlM2Q0NjlkMjNmMzQ3NmIwMjIxMmVlMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHEO5E6D+hWxl1TO+sh7Z80+agRQ 3Iaq1SPQtUqnsMoPmQBBQWoBRLC76o5xtXKQr3ayQuzmfll4R5nXHjDfH2DA54Fn lG4QFA2RIfO8BJ3tISGjzfV3imXq8TOlEqhY0Ttd0WNYeZ01TbAk05tLuzmgWdNz zc2Lx1NQyFHE3b58J8K9YZQ0ZVEgv4W+NtndgfpjEMdy3IouJwBlbLb6Lv5ZPFae Ge9IL+PSjeRvPCrp2rHofDxZN3ta54mPP+OgyzOUPLM8DN5Rm2r4uD7DuLcBwR1Q A2UadGwZIooxsywSpJbH4Puf+iawZRbtL9p715amUgwGbvHYPrYFokFbmQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK/v95dkEA5OPUadI/NHawIhLuJFMB8GA1UdIwQY MBaAFHr1Eil3OvkVfjFxYPncgA84HgsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjIt ZWUxZWE2MzZlZDRmLzEvci1fM2wyUVFEazQ5UnAwajgwZHJBaUV1NGtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjItZWUxZWE2MzZlZDRm LzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEAAAAA MA0GCSqGSIb3DQEBCwUAA4IBAQAhUe385zL2bz/dWfYSjh2lLjuNWibkFTWkO6fj et5yvVVOI0G0VkDX3jTbcrZGmEW4TbsJjjx5HU1WqVEJDVcLwsOjGt+UoE/c7vFo S3P+jt55hbVPWXz/9YZiHzGKp1vgv3PkNfEG3BRoVUi12Y5cQcobVmAggXSgTSMY 874iKWO3H7zl38CkXyVDqb6PivBfmba934MZOS1cT9e6IYKdtLRvcWOo+kpNXK9R mdRiSgUPf0mZjwCBFssiWYg8x60qs/ob4ab9JL71spQwbW9WF+GJvkYTSgP54hby L7gjZRPsJrvLfYdUmTFICIHRfz5z1YI9qeAaydmad3uH0IVV -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:21 2026 by rpki-client