This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/3Y2bsvd6Ko2TakhACGAC13OxWgg.roa File: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (raw, json) Hash identifier: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g= Subject key identifier: DD:8D:9B:B2:F7:7A:2A:8D:93:6A:48:40:08:60:02:D7:73:B1:5A:08 Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997 Certificate serial: 019B7F8521B67CB8FC50E567CF36FA506C87 Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/3Y2bsvd6Ko2TakhACGAC13OxWgg.roa Signing time: Fri 02 Jan 2026 16:23:09 +0000 ROA not before: Fri 02 Jan 2026 16:23:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140951 IP address blocks: 2a03:9d40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:21:b6:7c:b8:fc:50:e5:67:cf:36:fa:50:6c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997 Validity Not Before: Jan 2 16:23:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd8d9bb2f77a2a8d936a4840086002d773b15a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:d9:9c:a8:5e:cd:ba:f3:f2:8b:76:ec:91: 57:43:9c:4f:59:43:6a:4d:40:fa:8a:a0:68:a7:e8: bc:b5:ac:46:37:15:25:32:a5:06:c8:00:68:37:6c: 9c:45:c8:80:a6:d0:33:81:2d:7f:4f:4c:77:c7:3b: 2d:f9:69:07:c3:50:82:23:ed:14:0b:71:60:b4:c8: 92:77:55:06:a4:55:e3:2c:94:76:75:69:ea:83:25: 16:04:b7:72:84:a6:21:5c:fe:3b:25:de:ab:ee:e4: b9:3e:f6:bb:e6:25:c0:7e:aa:a0:36:f8:16:9d:cf: db:0f:a4:58:1d:e8:82:9f:ea:d1:90:b3:d6:19:aa: 22:df:de:73:38:cf:25:14:4f:df:6b:b2:37:dc:c1: 25:41:51:5d:fb:60:bc:f4:2d:f8:cb:8f:80:b8:a4: 58:c1:20:5e:55:c5:29:e7:91:67:4e:b4:45:1f:d2: b4:fe:72:39:73:50:c9:2b:ca:65:88:02:ab:73:bd: fb:b8:90:79:b8:40:aa:71:f1:f5:f5:55:b4:06:a2: ab:27:0e:65:e5:7d:71:de:02:14:6a:3a:53:6d:0b: 68:2c:48:a7:dd:bd:a4:eb:74:14:78:fb:38:6f:d3: 72:99:20:03:2f:10:7d:ea:c4:e7:b9:94:87:11:e2: 75:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8D:9B:B2:F7:7A:2A:8D:93:6A:48:40:08:60:02:D7:73:B1:5A:08 X509v3 Authority Key Identifier: keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/3Y2bsvd6Ko2TakhACGAC13OxWgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:9d40::/32 Signature Algorithm: sha256WithRSAEncryption 49:ba:d7:b5:0d:be:8f:e0:c8:7a:6a:ef:c1:89:64:15:33:16: a5:1e:64:f8:ba:91:bd:f9:14:3b:be:db:4b:02:b7:c0:23:f5: 73:3c:21:c6:b4:5f:41:ee:04:22:2e:b4:e5:7a:9a:78:4a:5e: 64:58:17:48:94:49:36:36:03:b3:d3:59:b5:42:e4:95:95:0a: 73:fe:f7:1d:34:e8:64:86:0a:c4:e1:05:33:49:8e:20:36:3d: 77:b9:69:87:d6:86:49:b1:46:19:db:a8:c5:71:a2:e5:8b:6f: c6:b3:e5:ad:62:d5:d0:58:91:52:3c:09:c7:39:00:c2:39:ba: a3:03:cc:5e:10:05:b3:f6:d9:0f:16:2b:79:79:bf:f3:c8:6f: a2:ac:83:6b:1b:ac:0a:82:88:8e:6d:a8:fa:b6:50:e9:41:4e: b9:41:cb:1f:1d:71:34:86:98:52:90:28:b9:7b:05:ea:ac:a3: 69:c5:56:08:38:6f:89:44:08:d9:f9:06:ef:88:d6:8f:ab:52: 61:0e:fd:68:1c:f9:39:03:41:b5:11:6b:dd:9c:8c:e5:e5:32: a9:2e:2c:2b:00:67:db:62:41:08:84:86:ea:e3:a2:c3:33:ed: 31:b8:6b:4e:5b:11:44:52:10:36:88:7b:a9:5d:97:bb:1d:81: b2:2a:c4:62 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hSG2fLj8UOVnzzb6UGyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjBjNzAwZDk4ZDc2YTljNjQwMTczODg5ZjkzNjdkYTlk ZTg5OTcwHhcNMjYwMTAyMTYyMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDhkOWJiMmY3N2EyYThkOTM2YTQ4NDAwODYwMDJkNzczYjE1YTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nLZnKhezbrz8ot27JFXQ5xPWUNq TUD6iqBop+i8taxGNxUlMqUGyABoN2ycRciAptAzgS1/T0x3xzst+WkHw1CCI+0U C3FgtMiSd1UGpFXjLJR2dWnqgyUWBLdyhKYhXP47Jd6r7uS5Pva75iXAfqqgNvgW nc/bD6RYHeiCn+rRkLPWGaoi395zOM8lFE/fa7I33MElQVFd+2C89C34y4+AuKRY wSBeVcUp55FnTrRFH9K0/nI5c1DJK8pliAKrc737uJB5uECqcfH19VW0BqKrJw5l 5X1x3gIUajpTbQtoLEin3b2k63QUePs4b9NymSADLxB96sTnuZSHEeJ1VwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFN2Nm7L3eiqNk2pIQAhgAtdzsVoIMB8GA1UdIwQY MBaAFD4gxwDZjXapxkAXOIn5Nn2p3omXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5Njgt ZTQ2ZDhkMTZhMTVmLzEvM1kyYnN2ZDZLbzJUYWtoQUNHQUMxM094V2dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5NjgtZTQ2ZDhkMTZhMTVm LzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgOdQDAN BgkqhkiG9w0BAQsFAAOCAQEASbrXtQ2+j+DIemrvwYlkFTMWpR5k+LqRvfkUO77b SwK3wCP1czwhxrRfQe4EIi605XqaeEpeZFgXSJRJNjYDs9NZtULklZUKc/73HTTo ZIYKxOEFM0mOIDY9d7lph9aGSbFGGduoxXGi5YtvxrPlrWLV0FiRUjwJxzkAwjm6 owPMXhAFs/bZDxYreXm/88hvoqyDaxusCoKIjm2o+rZQ6UFOuUHLHx1xNIaYUpAo uXsF6qyjacVWCDhviUQI2fkG74jWj6tSYQ79aBz5OQNBtRFr3ZyM5eUyqS4sKwBn 22JBCISG6uOiwzPtMbhrTlsRRFIQNoh7qV2Xux2BsirEYg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:39:55 2026 by rpki-client