This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/n3LOmWNaywYcomz89nsEZwUgqLc.roa File: n3LOmWNaywYcomz89nsEZwUgqLc.roa (raw, json) Hash identifier: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c= Subject key identifier: 9F:72:CE:99:63:5A:CB:06:1C:A2:6C:FC:F6:7B:04:67:05:20:A8:B7 Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb Certificate serial: 019B79112CFE6550AA4FA577781FA1626A73 Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/n3LOmWNaywYcomz89nsEZwUgqLc.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216435 IP address blocks: 2a10:500::/32 maxlen: 48 2a10:500::/40 maxlen: 48 2a10:500:100::/40 maxlen: 40 2a10:500:200::/40 maxlen: 40 2a10:500:f00::/40 maxlen: 40 2a10:500:1000::/40 maxlen: 40 2a10:500:1100::/40 maxlen: 40 2a10:500:1200::/40 maxlen: 40 2a10:500:1300::/40 maxlen: 40 2a10:500:1400::/40 maxlen: 40 2a10:500:1500::/40 maxlen: 40 2a10:500:1600::/40 maxlen: 40 2a10:500:1700::/40 maxlen: 40 2a10:500:1800::/40 maxlen: 40 2a10:500:1900::/40 maxlen: 40 2a10:500:1a00::/40 maxlen: 40 2a10:500:1b00::/40 maxlen: 40 2a10:500:1c00::/40 maxlen: 40 2a10:500:1d00::/40 maxlen: 40 2a10:500:1e00::/40 maxlen: 40 2a10:500:1f00::/40 maxlen: 40 2a10:500:2000::/40 maxlen: 40 2a10:500:2100::/40 maxlen: 40 2a10:500:2200::/40 maxlen: 40 2a10:500:2300::/40 maxlen: 40 2a10:500:2400::/40 maxlen: 40 2a10:500:2500::/40 maxlen: 40 2a10:500:2600::/40 maxlen: 40 2a10:500:3600::/40 maxlen: 40 2a10:500:4800::/40 maxlen: 40 2a10:500:4900::/40 maxlen: 40 2a10:500:4d00::/40 maxlen: 40 2a10:500:5600::/40 maxlen: 40 2a10:500:5c00::/40 maxlen: 40 2a10:500:6000::/40 maxlen: 40 2a10:500:6700::/40 maxlen: 40 2a10:500:7a00::/40 maxlen: 40 2a10:500:7c00::/40 maxlen: 40 2a10:500:7e00::/40 maxlen: 40 2a10:500:8b00::/40 maxlen: 40 2a10:500:8d00::/40 maxlen: 40 2a10:500:8e00::/40 maxlen: 40 2a10:500:9400::/40 maxlen: 40 2a10:500:9500::/40 maxlen: 40 2a10:500:9600::/40 maxlen: 40 2a10:500:9800::/40 maxlen: 40 2a10:500:9e00::/40 maxlen: 40 2a10:500:b100::/40 maxlen: 40 2a10:500:c300::/40 maxlen: 40 2a10:500:ce00::/40 maxlen: 40 2a10:500:de00::/40 maxlen: 40 2a10:500:f000::/40 maxlen: 40 2a10:500:fdff::/48 maxlen: 48 2a10:500:fe00::/40 maxlen: 48 2a10:500:fe01::/48 maxlen: 48 2a10:500:fe0a::/48 maxlen: 48 2a10:502::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2c:fe:65:50:aa:4f:a5:77:78:1f:a1:62:6a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f72ce99635acb061ca26cfcf67b04670520a8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:ec:49:24:c9:6e:b2:d3:de:25:e5:bd:d5: 9f:25:aa:0f:82:da:b7:78:4e:2f:4d:cb:30:42:3e: b1:ae:df:26:05:1b:6e:22:22:b7:21:77:68:be:36: 8a:16:4e:c4:3d:29:29:f5:f9:3e:1a:6c:c0:85:97: fe:eb:d3:30:6d:30:3e:d8:8f:2b:ca:87:69:f3:01: 88:25:b8:9f:4e:2c:ec:b5:e7:73:40:54:ac:1a:93: d5:7e:81:d9:a7:86:cb:cd:a1:8c:f9:e1:3a:f2:cd: 14:af:d2:4a:d1:6a:60:f5:61:6e:8a:b0:b5:ef:17: 7b:57:91:2b:2d:c3:2d:96:b4:4c:e4:e4:1d:ae:c3: d2:d5:04:09:dd:17:c1:64:7a:f9:49:35:ad:59:bd: a1:45:34:8f:49:f0:ed:4c:30:58:3b:a0:41:78:18: 2e:f3:d0:06:96:cc:d0:be:7c:16:44:f9:3f:e8:ae: 08:37:f0:16:48:a7:63:bc:8a:99:96:1d:20:95:85: 64:7e:05:38:cf:4d:8a:0a:5f:62:4c:ea:9a:3c:8d: 55:44:a0:9c:6e:0d:46:72:d0:7c:8a:b1:47:39:d3: 6c:ef:66:97:10:7c:f7:65:7a:79:44:4e:e4:c2:2f: 28:4f:86:f2:65:17:bb:97:47:22:13:53:2e:5a:43: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:72:CE:99:63:5A:CB:06:1C:A2:6C:FC:F6:7B:04:67:05:20:A8:B7 X509v3 Authority Key Identifier: keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/n3LOmWNaywYcomz89nsEZwUgqLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:500::/32 2a10:502::/32 Signature Algorithm: sha256WithRSAEncryption 5b:d0:55:47:e2:c4:fe:0b:81:0d:b0:94:71:53:7e:62:ce:12: 03:41:77:97:86:38:cd:19:20:c5:2c:b6:15:a5:84:2f:d0:0b: 4a:99:58:a8:ca:68:70:85:eb:39:75:c6:db:fe:8c:4c:39:21: e2:95:27:7b:6d:6c:98:72:ad:53:b0:29:ba:eb:94:4b:9a:30: c7:8c:66:7a:67:a1:f5:09:5d:f1:5a:40:d8:ef:08:e0:4a:70: e9:41:10:2a:41:50:d1:ab:7e:77:20:72:11:bb:07:20:3d:95: 19:d8:8b:7b:48:66:0a:3c:e1:7a:93:4f:66:03:97:58:72:74: b6:cc:6f:66:b7:12:7e:b9:ab:1a:3a:00:14:a9:3f:c1:f2:4b: fd:2b:90:7d:6e:02:d6:54:d0:23:a2:62:90:0b:6f:56:45:a4: be:7e:0a:c9:2a:da:5f:56:f7:14:3b:74:68:55:3f:c2:79:ad: fa:95:2f:78:89:e3:0a:d5:1e:0c:f6:f2:99:60:0f:a7:d0:63: 92:34:1b:36:33:70:d9:5e:be:42:53:73:06:20:25:b5:2e:9c: 43:8d:73:44:e9:e6:22:ab:c1:18:ae:1f:8b:e8:89:39:fc:5b: 15:c6:26:ab:c4:59:00:39:0e:b8:c9:f5:14:0c:5a:2c:b6:f3: 59:09:49:51 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ESz+ZVCqT6V3eB+hYmpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw NzIwYmIwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjcyY2U5OTYzNWFjYjA2MWNhMjZjZmNmNjdiMDQ2NzA1MjBhOGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb3sSSTJbrLT3iXlvdWfJaoPgtq3 eE4vTcswQj6xrt8mBRtuIiK3IXdovjaKFk7EPSkp9fk+GmzAhZf+69MwbTA+2I8r yodp8wGIJbifTizstedzQFSsGpPVfoHZp4bLzaGM+eE68s0Ur9JK0Wpg9WFuirC1 7xd7V5ErLcMtlrRM5OQdrsPS1QQJ3RfBZHr5STWtWb2hRTSPSfDtTDBYO6BBeBgu 89AGlszQvnwWRPk/6K4IN/AWSKdjvIqZlh0glYVkfgU4z02KCl9iTOqaPI1VRKCc bg1GctB8irFHOdNs72aXEHz3ZXp5RE7kwi8oT4byZRe7l0ciE1MuWkOPkQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJ9yzpljWssGHKJs/PZ7BGcFIKi3MB8GA1UdIwQY MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt NzQwM2UxMzY3NWFiLzEvbjNMT21XTmF5d1ljb216ODluc0Vad1VncUxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhAFAAMF ACoQBQIwDQYJKoZIhvcNAQELBQADggEBAFvQVUfixP4LgQ2wlHFTfmLOEgNBd5eG OM0ZIMUsthWlhC/QC0qZWKjKaHCF6zl1xtv+jEw5IeKVJ3ttbJhyrVOwKbrrlEua MMeMZnpnofUJXfFaQNjvCOBKcOlBECpBUNGrfncgchG7ByA9lRnYi3tIZgo84XqT T2YDl1hydLbMb2a3En65qxo6ABSpP8HyS/0rkH1uAtZU0COiYpALb1ZFpL5+Cskq 2l9W9xQ7dGhVP8J5rfqVL3iJ4wrVHgz28plgD6fQY5I0GzYzcNlevkJTcwYgJbUu nEONc0Tp5iKrwRiuH4voiTn8WxXGJqvEWQA5DrjJ9RQMWiy281kJSVE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:09 2026 by rpki-client