This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa File: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (raw, json) Hash identifier: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4= Subject key identifier: 13:71:77:3F:EB:35:B1:A8:50:2E:00:A3:62:3A:6A:83:97:B3:0D:C4 Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd Certificate serial: 019B7C125C0952237A7E8EC4963E9671FA51 Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa Signing time: Fri 02 Jan 2026 00:18:56 +0000 ROA not before: Fri 02 Jan 2026 00:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35659 IP address blocks: 2a01:130:42::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5c:09:52:23:7a:7e:8e:c4:96:3e:96:71:fa:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd Validity Not Before: Jan 2 00:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1371773feb35b1a8502e00a3623a6a8397b30dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:01:2a:b9:3d:93:ed:f2:08:a7:ad:d0:79:df: c1:34:13:ef:bf:33:6a:68:ab:f3:1e:ad:f3:57:b2: 73:19:e3:37:d6:14:11:31:3c:8d:1d:cf:cd:40:ca: 84:fc:d8:45:08:b0:dc:ec:57:00:31:96:cc:ae:e3: 2a:87:a1:98:c4:e3:78:00:54:06:41:70:aa:f8:55: 5e:0b:aa:b7:d2:7a:7f:ba:a5:70:54:32:35:c8:fc: 6b:f3:2e:c7:aa:95:05:0e:ce:68:13:02:5e:5d:18: a8:b0:28:20:7c:cb:ec:62:24:b7:31:20:82:0f:e3: 85:80:49:11:76:9a:fa:52:0d:fc:d7:e2:e5:f2:a8: 50:3f:8e:e0:94:70:cf:d5:23:0f:84:d5:59:e0:7d: d7:26:04:2f:60:0e:c7:79:52:49:09:e1:fa:07:f3: 16:32:1d:d3:55:31:53:f0:e9:a3:fd:18:52:81:d1: 1e:cf:47:ae:74:a9:a3:9c:cc:d7:09:c7:7f:8c:55: 7e:88:20:5a:b2:6e:ec:62:28:b0:93:04:1e:3e:57: b3:1e:23:f8:5d:b7:cf:7f:19:72:7d:50:9c:9c:28: c5:68:0e:24:88:e0:df:27:0d:72:40:2c:bc:7d:c6: e6:8d:44:09:92:6d:ef:ac:47:e2:6e:4c:23:01:0e: b9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:71:77:3F:EB:35:B1:A8:50:2E:00:A3:62:3A:6A:83:97:B3:0D:C4 X509v3 Authority Key Identifier: keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:130:42::/48 Signature Algorithm: sha256WithRSAEncryption 7f:84:3d:98:2c:71:ad:a5:67:db:d8:99:84:e2:96:7a:22:7b: f8:69:fe:b4:61:ff:29:16:bc:40:19:86:c6:e4:53:9a:c1:09: 24:dd:f7:fc:67:aa:34:67:86:f0:76:30:a2:1a:43:d0:5c:a8: b2:ff:fb:4b:f2:6e:40:be:a7:be:bf:59:3f:d4:f5:e1:bd:02: ff:fe:bb:e5:ba:8f:b4:5e:ac:8b:05:12:4d:fe:32:20:ec:e4: 70:ed:90:46:f7:7b:f5:76:c0:73:b2:9d:70:e7:de:c9:78:dd: bd:c6:d3:24:ee:25:e9:24:bd:1d:a9:74:08:a6:bd:71:42:f4: 4e:85:1f:30:ce:37:ce:cb:9a:f5:dd:99:43:ef:39:21:b2:08: 8c:7a:09:27:de:6d:f0:c0:ff:59:69:e9:53:af:e7:5d:a9:44: 82:89:79:d6:fd:7d:88:f0:50:c7:1d:b3:57:71:4b:b2:d3:49: 08:0f:fe:14:cc:b0:6b:9c:c4:fb:9f:90:22:44:c2:99:14:93: a8:b0:6e:46:66:2d:70:9a:82:47:6b:13:18:a5:f6:a2:bd:d4: 57:35:7c:5b:4e:58:14:ca:08:4e:1a:0c:ac:6b:53:5a:77:1d: 7f:6e:2b:57:25:5a:ca:13:8e:f3:96:c9:16:9d:20:51:98:b6: be:f0:be:e2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8ElwJUiN6fo7Elj6WcfpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MWUzZjZiZWJjZDA1MjkxZGM1MjY1ZTA4YjFjZDZjNDAx YjljZmQwHhcNMjYwMTAyMDAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzcxNzczZmViMzViMWE4NTAyZTAwYTM2MjNhNmE4Mzk3YjMwZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AEquT2T7fIIp63Qed/BNBPvvzNq aKvzHq3zV7JzGeM31hQRMTyNHc/NQMqE/NhFCLDc7FcAMZbMruMqh6GYxON4AFQG QXCq+FVeC6q30np/uqVwVDI1yPxr8y7HqpUFDs5oEwJeXRiosCggfMvsYiS3MSCC D+OFgEkRdpr6Ug381+Ll8qhQP47glHDP1SMPhNVZ4H3XJgQvYA7HeVJJCeH6B/MW Mh3TVTFT8Omj/RhSgdEez0eudKmjnMzXCcd/jFV+iCBasm7sYiiwkwQePlezHiP4 XbfPfxlyfVCcnCjFaA4kiODfJw1yQCy8fcbmjUQJkm3vrEfibkwjAQ65wQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBNxdz/rNbGoUC4Ao2I6aoOXsw3EMB8GA1UdIwQY MBaAFLUeP2vrzQUpHcUmXgixzWxAG5z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAt OGZhNTUxZTZhZTc1LzEvRTNGM1AtczFzYWhRTGdDallqcHFnNWV6RGNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAtOGZhNTUxZTZhZTc1 LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBMABC MA0GCSqGSIb3DQEBCwUAA4IBAQB/hD2YLHGtpWfb2JmE4pZ6Inv4af60Yf8pFrxA GYbG5FOawQkk3ff8Z6o0Z4bwdjCiGkPQXKiy//tL8m5Avqe+v1k/1PXhvQL//rvl uo+0XqyLBRJN/jIg7ORw7ZBG93v1dsBzsp1w597JeN29xtMk7iXpJL0dqXQIpr1x QvROhR8wzjfOy5r13ZlD7zkhsgiMegkn3m3wwP9ZaelTr+ddqUSCiXnW/X2I8FDH HbNXcUuy00kID/4UzLBrnMT7n5AiRMKZFJOosG5GZi1wmoJHaxMYpfaivdRXNXxb TlgUyghOGgysa1Nadx1/bitXJVrKE47zlskWnSBRmLa+8L7i -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:06 2026 by rpki-client