This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/3WwCnnTd8cSzdKjbYhNI8g53NPE.roa File: 3WwCnnTd8cSzdKjbYhNI8g53NPE.roa (raw, json) Hash identifier: aIhbguXWgQO1tJI+20Jt3xw4Dn8zy1ZDD/ntTtEtp2c= Subject key identifier: DD:6C:02:9E:74:DD:F1:C4:B3:74:A8:DB:62:13:48:F2:0E:77:34:F1 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C7674C9519F79918B9062249961154 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/3WwCnnTd8cSzdKjbYhNI8g53NPE.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204490 IP address blocks: 2a0e:f04::/32 maxlen: 32 2a0e:f07::/32 maxlen: 32 2a11:15c1::/32 maxlen: 32 2a11:3180::/32 maxlen: 32 2a11:4a04::/32 maxlen: 32 2a11:4a07::/32 maxlen: 32 2a11:7883::/32 maxlen: 32 2a11:8500::/32 maxlen: 32 2a11:8507::/32 maxlen: 32 2a12:4144::/32 maxlen: 32 2a12:4147::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:67:4c:95:19:f7:99:18:b9:06:22:49:96:11:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd6c029e74ddf1c4b374a8db621348f20e7734f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:0d:f8:08:2e:3d:b3:ad:39:31:7a:65:8e: 34:dd:0a:95:e0:99:50:a4:02:f3:67:e0:50:43:58: 6d:79:a0:47:fd:0e:12:b6:dc:21:9b:ce:4d:1e:d2: 9e:f2:f1:97:19:8e:da:06:9b:42:bf:a1:0c:c6:b6: 17:b2:e1:c5:b0:c4:0f:97:bc:ec:ba:51:df:cd:fb: 00:01:47:4f:82:ce:a0:b4:9c:93:78:1b:b8:3b:d4: 3c:eb:82:12:77:ca:90:57:1f:fb:cd:16:6e:bf:37: 44:14:08:37:0c:f8:00:d9:63:2c:16:63:3b:cd:8a: 28:61:08:3d:e4:84:6a:08:3c:0f:67:d4:a4:a9:46: 53:3d:68:a3:b0:8f:6b:9c:13:32:8a:57:b1:c8:8f: 6f:e5:05:29:68:fa:be:b1:7f:3f:ed:3c:a8:7c:80: e0:2e:f2:7e:44:f7:b4:3b:a6:dd:4e:7d:24:65:1b: 92:39:41:f3:0d:b7:00:38:ef:04:fd:2e:23:6f:dd: ea:5d:b8:d9:16:3f:ca:df:12:e8:c5:ca:54:7f:31: 23:31:2e:8e:c7:33:10:07:fb:3d:52:e9:41:6b:de: aa:ea:b9:6b:fa:ea:5f:ed:01:a7:9c:cd:cf:49:72: 54:28:2b:47:92:d6:94:9c:e6:1d:ad:e3:12:d8:fc: 27:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6C:02:9E:74:DD:F1:C4:B3:74:A8:DB:62:13:48:F2:0E:77:34:F1 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/3WwCnnTd8cSzdKjbYhNI8g53NPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:f04::/32 2a0e:f07::/32 2a11:15c1::/32 2a11:3180::/32 2a11:4a04::/32 2a11:4a07::/32 2a11:7883::/32 2a11:8500::/32 2a11:8507::/32 2a12:4144::/32 2a12:4147::/32 Signature Algorithm: sha256WithRSAEncryption 29:a6:d9:53:6e:20:f4:a3:c6:23:be:07:ec:cd:ae:e9:d8:10: a0:5d:41:09:7f:ba:a1:a1:a4:7e:27:9a:ee:c1:f3:8a:79:32: a3:df:92:3d:94:5d:4e:23:bd:6b:01:0d:67:04:20:ef:b3:8e: e8:a9:5b:f0:1b:a0:7f:8b:cf:a4:f8:5c:0c:fc:d5:10:ec:b4: b5:ba:ca:29:84:60:9a:c2:59:ab:52:de:9e:3e:a7:76:2b:47: 17:ab:55:e4:b7:ab:ca:fc:07:09:f8:3f:55:ab:ea:c8:8f:c8: 50:8c:01:55:15:38:38:41:65:9a:ad:bb:a4:a6:15:24:a1:a3: 62:f5:e8:07:ae:18:8c:95:a5:f6:2c:34:ba:c3:7b:68:77:73: a4:b1:8f:f1:a6:46:b6:c0:f8:ef:fc:19:57:c2:58:a8:28:35: a5:9b:e5:64:ed:f3:d8:30:cd:57:6b:b5:43:b3:da:7b:0a:dc: 1c:c8:2b:f6:36:da:5b:48:4d:05:1d:8e:97:0a:5f:2a:73:3c: 2e:15:61:cf:a6:a0:22:bf:a7:b1:50:6a:94:9d:12:b0:75:91: 2f:7b:3b:b7:d0:2e:33:3b:7c:97:9b:15:84:39:3c:90:00:2b: f4:39:af:29:6f:05:46:a2:1b:b1:42:a2:ca:90:1f:21:3f:57: ef:e9:34:4b -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZt3x2dMlRn3mRi5BiJJlhFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDZjMDI5ZTc0ZGRmMWM0YjM3NGE4ZGI2MjEzNDhmMjBlNzczNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3oN+AguPbOtOTF6ZY403QqV4JlQ pALzZ+BQQ1hteaBH/Q4Sttwhm85NHtKe8vGXGY7aBptCv6EMxrYXsuHFsMQPl7zs ulHfzfsAAUdPgs6gtJyTeBu4O9Q864ISd8qQVx/7zRZuvzdEFAg3DPgA2WMsFmM7 zYooYQg95IRqCDwPZ9SkqUZTPWijsI9rnBMyilexyI9v5QUpaPq+sX8/7TyofIDg LvJ+RPe0O6bdTn0kZRuSOUHzDbcAOO8E/S4jb93qXbjZFj/K3xLoxcpUfzEjMS6O xzMQB/s9UulBa96q6rlr+upf7QGnnM3PSXJUKCtHktaUnOYdreMS2Pwn0QIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFN1sAp503fHEs3So22ITSPIOdzTxMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvM1d3Q25uVGQ4Y1N6ZEtqYlloTkk4ZzUzTlBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBTBAIAAjBNAwUAKg4PBAMF ACoODwcDBQAqERXBAwUAKhExgAMFACoRSgQDBQAqEUoHAwUAKhF4gwMFACoRhQAD BQAqEYUHAwUAKhJBRAMFACoSQUcwDQYJKoZIhvcNAQELBQADggEBACmm2VNuIPSj xiO+B+zNrunYEKBdQQl/uqGhpH4nmu7B84p5MqPfkj2UXU4jvWsBDWcEIO+zjuip W/AboH+Lz6T4XAz81RDstLW6yimEYJrCWatS3p4+p3YrRxerVeS3q8r8Bwn4P1Wr 6siPyFCMAVUVODhBZZqtu6SmFSSho2L16AeuGIyVpfYsNLrDe2h3c6Sxj/GmRrbA +O/8GVfCWKgoNaWb5WTt89gwzVdrtUOz2nsK3BzIK/Y22ltITQUdjpcKXypzPC4V Yc+moCK/p7FQapSdErB1kS97O7fQLjM7fJebFYQ5PJAAK/Q5rylvBUaiG7FCosqQ HyE/V+/pNEs= -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:00 2026 by rpki-client