This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/3hgJnNfI5vnswL_sYLdOTjf7N5I.roa File: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (raw, json) Hash identifier: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU= Subject key identifier: DE:18:09:9C:D7:C8:E6:F9:EC:C0:BF:EC:60:B7:4E:4E:37:FB:37:92 Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54 Certificate serial: 019B7BA52CA6F18507F4510FE493E52239D8 Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/3hgJnNfI5vnswL_sYLdOTjf7N5I.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58192 IP address blocks: 2a13:6fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2c:a6:f1:85:07:f4:51:0f:e4:93:e5:22:39:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de18099cd7c8e6f9ecc0bfec60b74e4e37fb3792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:dc:5a:91:d6:47:4f:bd:70:47:49:c2:84: 58:f4:c4:15:e3:ac:e2:ea:d6:47:3f:57:ec:b8:2f: f7:71:a0:8c:b5:8b:69:3f:f3:8c:e5:6b:00:d0:1c: b3:63:30:93:d8:fa:6f:0f:00:bc:69:71:0d:82:ed: 2b:55:11:e3:78:68:a3:92:00:41:b7:12:5e:ff:9f: eb:03:c9:00:0e:ba:24:cb:08:d8:9b:68:23:5e:92: 4a:c4:21:ee:18:71:7b:0a:ad:c5:bd:be:90:10:3f: 92:c4:d4:76:0b:cf:32:66:c8:99:98:a1:f2:df:5e: 2f:19:54:01:38:6e:d2:8c:20:f3:d4:54:48:a5:71: 2b:c1:75:57:2f:ef:6c:40:bc:85:3f:02:9c:58:3f: e9:b1:f3:09:06:25:85:3e:c2:8d:ed:4c:fb:77:ec: 98:5c:61:9a:02:e5:fc:83:09:f7:fa:6d:aa:98:c4: 60:95:3e:b6:ec:d5:81:f0:05:06:37:43:94:3f:73: 4e:8e:75:19:1b:ce:a5:08:d6:86:41:51:1d:18:5f: f2:88:6a:84:e7:9a:6c:c8:0a:33:0f:78:be:d9:ec: 5e:4c:d6:49:e7:03:30:d7:2a:05:43:9a:ea:29:76: 29:72:b2:4d:d1:ca:57:1d:02:c5:23:66:64:59:98: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:18:09:9C:D7:C8:E6:F9:EC:C0:BF:EC:60:B7:4E:4E:37:FB:37:92 X509v3 Authority Key Identifier: keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/3hgJnNfI5vnswL_sYLdOTjf7N5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:6fc0::/29 Signature Algorithm: sha256WithRSAEncryption 33:74:0a:e5:73:6f:fc:3e:10:79:51:71:63:09:56:04:c3:de: e3:43:cc:73:0f:71:d1:4a:eb:8a:f7:01:64:37:23:6e:49:b9: 6e:1d:fd:59:9c:8d:5c:1b:2e:47:7a:d5:52:52:a4:65:3e:b7: 44:90:1d:aa:04:e0:d3:1a:2a:cf:11:73:38:6b:77:7f:69:4d: 36:62:55:88:89:df:60:77:59:84:b8:75:b9:9a:72:67:3d:ed: 0c:64:21:15:99:bd:ae:73:58:44:28:1f:d3:f0:5b:50:8f:48: c5:0d:3d:91:82:f7:51:cc:2f:c3:1c:3d:6c:22:63:a8:c4:76: fd:a1:0c:21:1e:76:86:fd:ee:21:0e:b7:af:63:da:16:b5:0a: 6b:38:8c:40:91:fc:c5:13:39:65:40:3a:52:b4:52:ed:33:b4: 13:fb:3e:8c:e0:da:58:33:00:fe:5b:79:f5:e9:0a:39:80:7b: f1:44:e1:e5:5f:44:84:30:b9:05:59:0d:3a:7b:01:7b:fe:80: 16:a7:c5:7c:f0:c7:6d:bd:f3:a9:3f:cb:78:4a:82:fb:37:23: 7e:53:2e:38:8e:e7:f6:d2:8b:3c:20:52:2b:18:00:ba:6d:4a: 01:e4:98:7c:41:5a:2b:ce:f4:17:5e:b1:d1:25:3a:e9:f7:f6: e9:d6:49:37 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pSym8YUH9FEP5JPlIjnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNmQxNDJiNWI2YTUyOThkNmI4ZmE1ODQ1ZjI5ODc4Y2Zl YmJjNTQwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTE4MDk5Y2Q3YzhlNmY5ZWNjMGJmZWM2MGI3NGU0ZTM3ZmIzNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszLcWpHWR0+9cEdJwoRY9MQV46zi 6tZHP1fsuC/3caCMtYtpP/OM5WsA0ByzYzCT2PpvDwC8aXENgu0rVRHjeGijkgBB txJe/5/rA8kADrokywjYm2gjXpJKxCHuGHF7Cq3Fvb6QED+SxNR2C88yZsiZmKHy 314vGVQBOG7SjCDz1FRIpXErwXVXL+9sQLyFPwKcWD/psfMJBiWFPsKN7Uz7d+yY XGGaAuX8gwn3+m2qmMRglT627NWB8AUGN0OUP3NOjnUZG86lCNaGQVEdGF/yiGqE 55psyAozD3i+2exeTNZJ5wMw1yoFQ5rqKXYpcrJN0cpXHQLFI2ZkWZhHUwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFN4YCZzXyOb57MC/7GC3Tk43+zeSMB8GA1UdIwQY MBaAFCttFCtbalKY1rj6WEXymHjP67xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUt OGJlZmVlNDllZDRkLzEvM2hnSm5OZkk1dm5zd0xfc1lMZE9UamY3TjVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUtOGJlZmVlNDllZDRk LzEvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNvwDAN BgkqhkiG9w0BAQsFAAOCAQEAM3QK5XNv/D4QeVFxYwlWBMPe40PMcw9x0UrrivcB ZDcjbkm5bh39WZyNXBsuR3rVUlKkZT63RJAdqgTg0xoqzxFzOGt3f2lNNmJViInf YHdZhLh1uZpyZz3tDGQhFZm9rnNYRCgf0/BbUI9IxQ09kYL3Ucwvwxw9bCJjqMR2 /aEMIR52hv3uIQ63r2PaFrUKaziMQJH8xRM5ZUA6UrRS7TO0E/s+jODaWDMA/lt5 9ekKOYB78UTh5V9EhDC5BVkNOnsBe/6AFqfFfPDHbb3zqT/LeEqC+zcjflMuOI7n 9tKLPCBSKxgAum1KAeSYfEFaK870F16x0SU66ff26dZJNw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:52 2026 by rpki-client