This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/ex0_koM3Hnul1gB4FdrgAL4TaJk.roa File: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (raw, json) Hash identifier: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ= Subject key identifier: 7B:1D:3F:92:83:37:1E:7B:A5:D6:00:78:15:DA:E0:00:BE:13:68:99 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019B7B3651374DF053D4D89394C0F478D67C Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/ex0_koM3Hnul1gB4FdrgAL4TaJk.roa Signing time: Thu 01 Jan 2026 20:18:35 +0000 ROA not before: Thu 01 Jan 2026 20:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208768 IP address blocks: 2a10:4741:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:51:37:4d:f0:53:d4:d8:93:94:c0:f4:78:d6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b1d3f9283371e7ba5d6007815dae000be136899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:ff:b2:52:7f:da:ce:af:cd:d2:1a:d9:18: 21:58:2f:8f:6c:b4:2c:97:a4:4f:65:3e:b5:51:8c: e5:f9:55:87:cd:1c:ee:c3:05:1c:ad:64:b5:9e:92: cc:03:77:51:90:76:1c:7a:9e:36:47:f3:d6:a2:6c: 0d:99:1f:b7:ec:fc:16:6d:4b:d7:d8:a1:f7:42:0a: 15:15:50:17:56:78:03:54:23:59:25:b0:1c:38:3f: fb:4f:bb:cf:4d:61:d1:91:22:66:26:d4:c1:d7:be: 64:7d:22:49:6b:e7:fe:43:08:da:45:62:55:24:e2: be:e2:fb:a5:9e:de:b1:b4:3b:27:01:96:c6:3b:9e: 75:5e:39:ae:e9:0c:47:12:d1:04:c1:ab:ed:94:12: 9e:36:a7:07:42:7f:dd:da:7b:ab:fa:a2:e9:2f:90: cb:26:83:f8:e7:55:01:cb:67:c4:03:f1:ee:24:58: 90:7f:c8:25:d0:fb:46:2e:7b:16:ed:17:73:33:d6: 77:f6:79:4f:1a:ef:a6:8c:1b:4f:bd:68:43:d8:4a: 2c:89:16:c4:83:5f:be:df:66:23:c9:c3:16:59:42: 58:09:81:9f:b5:ba:61:cf:4a:c9:ae:40:39:3e:a3: 1c:b8:53:9c:ea:97:a3:bf:d4:96:38:5d:38:ac:23: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1D:3F:92:83:37:1E:7B:A5:D6:00:78:15:DA:E0:00:BE:13:68:99 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/ex0_koM3Hnul1gB4FdrgAL4TaJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4741:22::/48 Signature Algorithm: sha256WithRSAEncryption c3:6b:31:bf:bb:50:3c:db:c5:04:00:d6:ef:69:f4:9d:b8:eb: b2:97:6f:12:7f:53:7c:4b:38:c1:cf:30:6c:08:84:7b:d0:c8: 0c:7e:b3:fb:66:b9:0e:c9:c6:92:20:74:98:8e:31:cd:e8:d2: ba:d7:67:55:44:08:0f:9d:41:37:c8:59:20:3d:35:64:4e:d2: 41:a9:0c:72:2b:d2:18:0b:08:d6:42:2f:55:ca:e5:c4:88:52: 05:f1:7c:e4:67:92:7a:51:1e:75:49:ea:1f:2a:7b:4b:a9:b7: 8a:d0:5d:f5:86:12:fc:b6:5e:57:85:c9:49:04:ab:94:b8:27: 13:16:f8:7a:35:e3:ce:c1:cc:4a:07:0b:8f:1e:3b:6f:66:15: d8:e3:2a:c9:fb:27:d2:9c:08:40:6f:64:96:c1:50:5f:99:73: c6:13:0a:cb:0c:b3:34:00:72:ff:dc:89:78:2e:c3:61:eb:39: ba:b8:10:6c:23:94:f0:6e:ba:a9:b3:ad:f2:9c:5a:af:29:07: 0c:65:ca:35:d4:2c:85:fd:83:2b:86:51:1c:1a:09:37:23:2a: b0:97:9a:4c:af:e1:24:b1:9b:ca:fa:cc:ac:23:08:20:f3:af: 8a:1f:89:bf:20:80:41:92:58:6c:00:3d:bf:f7:7a:ce:f8:f3: a7:0e:db:03 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NlE3TfBT1NiTlMD0eNZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjFkM2Y5MjgzMzcxZTdiYTVkNjAwNzgxNWRhZTAwMGJlMTM2ODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9f/slJ/2s6vzdIa2RghWC+PbLQs l6RPZT61UYzl+VWHzRzuwwUcrWS1npLMA3dRkHYcep42R/PWomwNmR+37PwWbUvX 2KH3QgoVFVAXVngDVCNZJbAcOD/7T7vPTWHRkSJmJtTB175kfSJJa+f+QwjaRWJV JOK+4vulnt6xtDsnAZbGO551Xjmu6QxHEtEEwavtlBKeNqcHQn/d2nur+qLpL5DL JoP451UBy2fEA/HuJFiQf8gl0PtGLnsW7RdzM9Z39nlPGu+mjBtPvWhD2EosiRbE g1++32YjycMWWUJYCYGftbphz0rJrkA5PqMcuFOc6pejv9SWOF04rCMR6wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHsdP5KDNx57pdYAeBXa4AC+E2iZMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvZXgwX2tvTTNIbnVsMWdCNEZkcmdBTDRUYUprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBHQQAi MA0GCSqGSIb3DQEBCwUAA4IBAQDDazG/u1A828UEANbvafSduOuyl28Sf1N8SzjB zzBsCIR70MgMfrP7ZrkOycaSIHSYjjHN6NK612dVRAgPnUE3yFkgPTVkTtJBqQxy K9IYCwjWQi9VyuXEiFIF8XzkZ5J6UR51SeofKntLqbeK0F31hhL8tl5XhclJBKuU uCcTFvh6NePOwcxKBwuPHjtvZhXY4yrJ+yfSnAhAb2SWwVBfmXPGEwrLDLM0AHL/ 3Il4LsNh6zm6uBBsI5Twbrqps63ynFqvKQcMZco11CyF/YMrhlEcGgk3Iyqwl5pM r+EksZvK+sysIwgg86+KH4m/IIBBklhsAD2/93rO+POnDtsD -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:09 2026 by rpki-client