This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/3oqgYKPHjP4c1L0WVBDxXqGTNKs.roa File: 3oqgYKPHjP4c1L0WVBDxXqGTNKs.roa (raw, json) Hash identifier: PdT5GAbt00ZEVCyICmg6bHJkYgLa1nkpbJxhAhA4vnk= Subject key identifier: DE:8A:A0:60:A3:C7:8C:FE:1C:D4:BD:16:54:10:F1:5E:A1:93:34:AB Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019B7F8489266FABE2569CD62EC625731B31 Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/3oqgYKPHjP4c1L0WVBDxXqGTNKs.roa Signing time: Fri 02 Jan 2026 16:22:30 +0000 ROA not before: Fri 02 Jan 2026 16:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208529 IP address blocks: 2a0c:e304:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:89:26:6f:ab:e2:56:9c:d6:2e:c6:25:73:1b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Jan 2 16:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de8aa060a3c78cfe1cd4bd165410f15ea19334ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:7c:d9:ba:2d:3d:3b:26:2a:de:01:0f:de: 86:12:d5:e4:4e:0d:1a:56:3f:c2:fa:26:cc:3f:aa: 53:b2:e0:0f:03:78:3f:a0:c2:4a:ac:cb:39:d0:09: 52:2a:4a:50:7a:a4:12:7e:50:d6:ac:91:80:81:11: 84:d3:cd:4d:b0:88:d1:d2:89:73:84:e9:4f:24:cf: f5:e2:ef:6a:c4:d8:fa:e3:42:38:2d:6d:c9:0e:cc: 4b:ff:0f:8b:1b:b9:ba:ca:74:8f:07:e3:13:39:9d: 88:a7:ae:c3:d3:cf:08:ad:f3:05:af:69:67:3c:1e: 23:e8:8b:51:82:41:7f:79:8c:57:18:34:03:0e:92: 04:33:23:64:3f:d8:5f:c6:ec:09:fb:c8:88:7e:8b: a0:ff:50:07:d2:88:59:66:65:1c:68:43:49:eb:6f: 4a:08:57:ff:4a:22:b0:0f:cd:6c:e6:7b:1d:7f:63: 91:95:e5:8d:8e:2b:1c:96:91:ba:de:3e:2d:61:e2: 1b:b0:21:92:c8:2b:01:18:ee:c3:b7:20:31:ec:6a: d3:83:fd:d8:14:c3:a1:3c:00:be:8a:c8:64:cf:83: d8:07:b1:07:ba:a2:29:27:58:4c:3b:b2:f9:11:c2: 1a:09:4e:65:9c:5a:d9:29:7f:16:f5:79:af:22:b8: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8A:A0:60:A3:C7:8C:FE:1C:D4:BD:16:54:10:F1:5E:A1:93:34:AB X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/3oqgYKPHjP4c1L0WVBDxXqGTNKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:e304:1::/48 Signature Algorithm: sha256WithRSAEncryption 3b:7d:98:09:57:d7:54:d2:37:3f:44:5e:9a:65:95:1e:00:09: 29:e9:56:9f:81:ba:7b:25:7a:63:3a:8e:04:f5:3b:9e:88:78: 2a:a0:68:8e:7e:97:8c:fa:69:75:8d:ab:46:ba:d4:be:b4:ad: 90:3c:7d:2d:e2:97:1f:9d:3f:d1:35:71:bc:0d:95:e2:49:1d: ad:96:90:c8:75:07:43:62:aa:b2:dc:e2:c2:61:b0:e3:37:ee: a1:c6:60:46:c6:f0:f6:99:a1:50:c4:4e:e7:fa:ec:33:8d:e2: 22:09:ed:7a:85:90:8a:5b:4b:09:b9:62:dc:91:1f:7e:e7:62: 67:19:5e:69:42:f9:92:3d:ee:c9:6c:64:47:10:4e:24:a6:ca: 18:f8:28:3c:ff:01:47:80:b1:c4:11:94:c5:9e:85:42:99:63: 15:e9:49:76:a6:5e:6a:73:e3:48:67:3f:dd:df:13:8c:0c:65: 9e:6f:00:28:31:b6:53:12:12:a1:c7:ba:d2:0c:93:f0:88:20: 29:44:28:08:8f:58:d1:54:2a:cb:c7:d6:a3:be:76:51:5d:18: 63:f8:b4:f2:ef:bf:5c:a2:18:cb:b5:32:83:9f:e3:80:71:d0: 7e:b0:8f:fd:48:92:4e:3e:df:c2:81:cb:3d:a8:68:0b:a4:6b: 0d:28:32:76 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hIkmb6viVpzWLsYlcxsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwMTAyMTYyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZThhYTA2MGEzYzc4Y2ZlMWNkNGJkMTY1NDEwZjE1ZWExOTMzNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHJ82botPTsmKt4BD96GEtXkTg0a Vj/C+ibMP6pTsuAPA3g/oMJKrMs50AlSKkpQeqQSflDWrJGAgRGE081NsIjR0olz hOlPJM/14u9qxNj640I4LW3JDsxL/w+LG7m6ynSPB+MTOZ2Ip67D088IrfMFr2ln PB4j6ItRgkF/eYxXGDQDDpIEMyNkP9hfxuwJ+8iIfoug/1AH0ohZZmUcaENJ629K CFf/SiKwD81s5nsdf2ORleWNjisclpG63j4tYeIbsCGSyCsBGO7DtyAx7GrTg/3Y FMOhPAC+ishkz4PYB7EHuqIpJ1hMO7L5EcIaCU5lnFrZKX8W9XmvIrjftwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN6KoGCjx4z+HNS9FlQQ8V6hkzSrMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvM29xZ1lLUEhqUDRjMUwwV1ZCRHhYcUdUTktzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgzjBAAB MA0GCSqGSIb3DQEBCwUAA4IBAQA7fZgJV9dU0jc/RF6aZZUeAAkp6Vafgbp7JXpj Oo4E9TueiHgqoGiOfpeM+ml1jatGutS+tK2QPH0t4pcfnT/RNXG8DZXiSR2tlpDI dQdDYqqy3OLCYbDjN+6hxmBGxvD2maFQxE7n+uwzjeIiCe16hZCKW0sJuWLckR9+ 52JnGV5pQvmSPe7JbGRHEE4kpsoY+Cg8/wFHgLHEEZTFnoVCmWMV6Ul2pl5qc+NI Zz/d3xOMDGWebwAoMbZTEhKhx7rSDJPwiCApRCgIj1jRVCrLx9ajvnZRXRhj+LTy 779cohjLtTKDn+OAcdB+sI/9SJJOPt/Cgcs9qGgLpGsNKDJ2 -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:05 2026 by rpki-client