This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/3hk8gZRTXeoThSESdUyXemIodyY.roa File: 3hk8gZRTXeoThSESdUyXemIodyY.roa (raw, json) Hash identifier: EtnQ6xG64pJ8Zkp4+CHediwomKLAwpZwbAVhbYwHBLc= Subject key identifier: DE:19:3C:81:94:53:5D:EA:13:85:21:12:75:4C:97:7A:62:28:77:26 Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Certificate serial: 019B7EA6C12F5176399C3CF23AE24EBE5AD7 Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/3hk8gZRTXeoThSESdUyXemIodyY.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60672 IP address blocks: 2a10:c883::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c1:2f:51:76:39:9c:3c:f2:3a:e2:4e:be:5a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de193c8194535dea13852112754c977a62287726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:5a:0d:e0:3d:ea:25:a9:7d:ce:4a:38:be: 1a:5a:35:71:0d:dc:2d:7b:90:f1:1f:ed:1c:0c:25: 17:36:65:45:27:3b:2f:69:f6:65:06:4d:f1:2a:d2: 7e:a8:06:b6:fa:5d:e6:d8:18:b1:8b:bd:b4:03:83: 0f:40:b9:4f:a1:66:97:35:bf:69:cc:4f:f1:ff:c0: 5e:f1:fb:0a:3a:92:5e:9e:a0:2d:a7:82:45:4d:c0: e4:30:34:23:30:c1:57:d2:ec:7e:b3:b9:23:b4:67: 1e:33:bc:92:6f:54:b5:97:88:68:7a:7c:e8:d0:d0: d7:30:97:07:91:48:e2:a6:ca:f2:94:c6:74:eb:99: 38:42:12:ed:af:9b:f4:31:56:68:ac:68:35:ae:58: 86:4c:c6:ca:57:d3:cb:de:55:2f:a4:35:30:10:52: ae:3d:b9:05:22:5f:3e:6d:5e:47:9e:0a:d9:10:64: 6e:5f:be:cd:9b:78:2f:17:27:98:96:51:a5:51:55: d9:80:05:c0:35:57:00:c7:8f:61:30:df:ed:44:3f: ad:a2:95:39:18:80:e3:76:08:f5:da:6d:6c:4a:9c: 7e:0f:1f:2a:23:a1:b8:fa:8d:2a:ef:29:95:ca:71: 1c:97:2c:e6:e3:2e:55:f9:63:fd:09:38:47:10:5c: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:19:3C:81:94:53:5D:EA:13:85:21:12:75:4C:97:7A:62:28:77:26 X509v3 Authority Key Identifier: keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/3hk8gZRTXeoThSESdUyXemIodyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:c883::/32 Signature Algorithm: sha256WithRSAEncryption 51:ec:5f:82:bd:94:fe:92:d7:10:88:99:a0:f5:57:30:a6:da: 3e:60:5b:eb:65:bc:cc:4c:85:d6:a2:8a:df:fa:48:24:34:84: 03:27:aa:e8:b5:79:64:5c:5a:8e:ae:0e:6e:d5:00:ab:7e:0a: 24:9f:5e:43:46:3d:cf:31:d2:f2:c8:d1:e1:c0:94:71:0d:86: c9:50:f5:7f:45:a0:7f:93:63:36:50:2b:85:c8:f4:15:48:0c: 77:1d:6f:c5:53:48:0c:f5:63:62:48:12:f3:ff:10:2d:57:46: cc:4d:8c:6c:2f:eb:53:45:fa:4a:e8:c2:96:0e:75:d1:cc:14: c7:44:48:5c:04:bc:e9:40:84:0f:65:5d:32:ff:88:90:3d:14: 99:06:27:e0:9d:de:31:c0:c1:e2:05:a9:79:c7:24:88:78:7f: ee:5d:bf:aa:65:a9:a3:6d:12:8c:7a:0d:3d:a8:23:85:2c:85: cc:a8:50:e8:ef:72:91:e1:59:d2:42:ec:0a:be:71:9e:9a:65: b5:48:88:ba:90:85:d1:00:1c:6e:9c:58:d0:ac:0b:e4:06:dc: 19:c8:e5:88:70:8a:79:a4:cd:f6:a7:a1:de:98:9a:b5:4a:35: f1:17:ad:78:8c:46:90:bf:77:d7:93:ff:d4:ac:81:75:2c:54: e3:17:e1:1b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+psEvUXY5nDzyOuJOvlrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTI0YzcyODRlZjQ4ODdlNDVkNGNjZDliZGU2NzljZDlh YjRmMDAwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTE5M2M4MTk0NTM1ZGVhMTM4NTIxMTI3NTRjOTc3YTYyMjg3NzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M1aDeA96iWpfc5KOL4aWjVxDdwt e5DxH+0cDCUXNmVFJzsvafZlBk3xKtJ+qAa2+l3m2Bixi720A4MPQLlPoWaXNb9p zE/x/8Be8fsKOpJenqAtp4JFTcDkMDQjMMFX0ux+s7kjtGceM7ySb1S1l4hoenzo 0NDXMJcHkUjipsrylMZ065k4QhLtr5v0MVZorGg1rliGTMbKV9PL3lUvpDUwEFKu PbkFIl8+bV5HngrZEGRuX77Nm3gvFyeYllGlUVXZgAXANVcAx49hMN/tRD+topU5 GIDjdgj12m1sSpx+Dx8qI6G4+o0q7ymVynEclyzm4y5V+WP9CThHEFysfwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFN4ZPIGUU13qE4UhEnVMl3piKHcmMB8GA1UdIwQY MBaAFGfiTHKE70iH5F1MzZveZ5zZq08AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzct MDM3NWE5YzMyYjAwLzEvM2hrOGdaUlRYZW9UaFNFU2RVeVhlbUlvZHlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzctMDM3NWE5YzMyYjAw LzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhDIgzAN BgkqhkiG9w0BAQsFAAOCAQEAUexfgr2U/pLXEIiZoPVXMKbaPmBb62W8zEyF1qKK 3/pIJDSEAyeq6LV5ZFxajq4ObtUAq34KJJ9eQ0Y9zzHS8sjR4cCUcQ2GyVD1f0Wg f5NjNlArhcj0FUgMdx1vxVNIDPVjYkgS8/8QLVdGzE2MbC/rU0X6SujClg510cwU x0RIXAS86UCED2VdMv+IkD0UmQYn4J3eMcDB4gWpecckiHh/7l2/qmWpo20SjHoN PagjhSyFzKhQ6O9ykeFZ0kLsCr5xnppltUiIupCF0QAcbpxY0KwL5AbcGcjliHCK eaTN9qeh3piatUo18ReteIxGkL9315P/1KyBdSxU4xfhGw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:58 2026 by rpki-client