This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/l3M-xr60hrpxSkxGT1zOTrb_xW8.roa File: l3M-xr60hrpxSkxGT1zOTrb_xW8.roa (raw, json) Hash identifier: 2U8pj/J8QbJGMZnyHPhC1LIrWuoDRqXzuWrV+ncciiE= Subject key identifier: 97:73:3E:C6:BE:B4:86:BA:71:4A:4C:46:4F:5C:CE:4E:B6:FF:C5:6F Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019B78352FDF8920524808998FFCFF19B585 Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/l3M-xr60hrpxSkxGT1zOTrb_xW8.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212577 IP address blocks: 2a10:fa81:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2f:df:89:20:52:48:08:99:8f:fc:ff:19:b5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97733ec6beb486ba714a4c464f5cce4eb6ffc56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:65:43:ef:5c:43:fa:32:49:40:ad:35:99: 0a:d3:fc:46:e5:23:8f:f1:bf:be:cc:48:71:8c:ef: b6:9f:1c:ad:de:c2:26:75:9b:e5:e9:25:79:e2:6f: 04:d7:c5:1f:3e:0f:9e:2b:3e:d7:a3:20:eb:ff:21: 3f:74:27:25:e8:ad:22:78:31:0f:d5:d3:39:09:7d: 2d:02:7e:d1:33:dd:b0:a1:51:b5:cb:3b:11:1b:d2: 9e:a4:d1:5c:6b:85:e1:9e:63:fa:54:aa:5b:5f:a2: 6b:19:2b:77:b2:0a:68:6f:c3:8c:2b:ce:42:a1:00: 46:6f:0e:46:fa:c7:05:cd:cf:5d:7e:09:42:e0:13: e9:7f:62:f2:37:91:68:f6:5c:d1:ae:ff:21:bf:4a: 4e:7a:3c:55:3f:36:3b:27:e1:4d:09:9c:77:fd:a0: f1:94:d7:57:6d:e8:d4:bd:82:26:2c:36:33:e8:76: 62:95:e2:53:a4:21:63:e3:f2:66:70:be:42:5b:7a: 76:48:e9:87:61:18:44:be:d6:bf:16:ea:3b:84:ed: 50:8e:c4:d7:b5:48:6d:c6:89:ef:86:bc:39:81:75: 57:04:a3:f1:bb:f1:2f:a4:e1:e9:01:af:d7:7c:fd: 26:f1:20:89:bb:82:68:14:f9:cf:32:a6:23:c7:39: 9c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:73:3E:C6:BE:B4:86:BA:71:4A:4C:46:4F:5C:CE:4E:B6:FF:C5:6F X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/l3M-xr60hrpxSkxGT1zOTrb_xW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:fa81:3::/48 Signature Algorithm: sha256WithRSAEncryption 18:18:98:a1:b2:f8:c6:4f:0b:72:89:98:52:ab:14:76:a1:c0: 74:e4:0e:6d:70:79:a9:b4:c9:91:26:da:3d:98:8c:9f:cf:30: fe:8d:cc:1c:3b:b8:ef:17:17:c3:c5:5e:c2:e2:c5:39:72:45: 6a:87:16:a4:46:45:8a:29:f6:03:fd:70:2a:56:70:46:22:53: 94:ad:1b:4d:75:dc:fb:fd:b7:78:e1:bc:a6:5d:73:24:c9:e1: 1f:df:77:46:22:fd:27:16:88:93:11:fb:05:55:1c:8e:c6:ac: 2a:97:25:e1:8d:36:b2:d8:a2:00:16:51:e0:60:3c:28:a9:79: 71:20:c3:b8:9e:4d:47:8c:23:61:f9:da:d6:b1:a7:00:5b:40: 91:85:c3:77:76:c6:63:e4:85:4a:fc:61:aa:27:80:ad:d4:9b: 33:d2:f4:a5:ee:fb:d1:de:20:31:22:7d:ae:01:85:fc:e1:28: cb:01:5c:0e:ca:a5:c9:8d:05:f8:ac:d2:c1:9f:18:ad:75:57: 59:51:3f:63:94:4b:16:28:61:a6:2a:02:b6:1d:bc:f0:76:97: 21:50:73:96:09:59:4b:88:18:b7:f6:b1:1a:5d:51:97:83:7b: 7a:33:e7:59:62:2e:fe:2c:24:78:7e:47:ae:41:f1:f5:08:71: 41:e0:b8:33 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NS/fiSBSSAiZj/z/GbWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzczM2VjNmJlYjQ4NmJhNzE0YTRjNDY0ZjVjY2U0ZWI2ZmZjNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OplQ+9cQ/oySUCtNZkK0/xG5SOP 8b++zEhxjO+2nxyt3sImdZvl6SV54m8E18UfPg+eKz7XoyDr/yE/dCcl6K0ieDEP 1dM5CX0tAn7RM92woVG1yzsRG9KepNFca4XhnmP6VKpbX6JrGSt3sgpob8OMK85C oQBGbw5G+scFzc9dfglC4BPpf2LyN5Fo9lzRrv8hv0pOejxVPzY7J+FNCZx3/aDx lNdXbejUvYImLDYz6HZileJTpCFj4/JmcL5CW3p2SOmHYRhEvta/Fuo7hO1QjsTX tUhtxonvhrw5gXVXBKPxu/EvpOHpAa/XfP0m8SCJu4JoFPnPMqYjxzmcBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJdzPsa+tIa6cUpMRk9czk62/8VvMB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvbDNNLXhyNjBocnB4U2t4R1Qxek9UcmJfeFc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhD6gQAD MA0GCSqGSIb3DQEBCwUAA4IBAQAYGJihsvjGTwtyiZhSqxR2ocB05A5tcHmptMmR Jto9mIyfzzD+jcwcO7jvFxfDxV7C4sU5ckVqhxakRkWKKfYD/XAqVnBGIlOUrRtN ddz7/bd44bymXXMkyeEf33dGIv0nFoiTEfsFVRyOxqwqlyXhjTay2KIAFlHgYDwo qXlxIMO4nk1HjCNh+drWsacAW0CRhcN3dsZj5IVK/GGqJ4Ct1Jsz0vSl7vvR3iAx In2uAYX84SjLAVwOyqXJjQX4rNLBnxitdVdZUT9jlEsWKGGmKgK2HbzwdpchUHOW CVlLiBi39rEaXVGXg3t6M+dZYi7+LCR4fkeuQfH1CHFB4Lgz -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:31 2026 by rpki-client