This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/3dXQNTeYEXwgMvCj--w5pPENAJU.roa File: 3dXQNTeYEXwgMvCj--w5pPENAJU.roa (raw, json) Hash identifier: 3G9QvRM4k9jqWeSWNLfEsowBkk0Z8XBxLLqfEHkaBDM= Subject key identifier: DD:D5:D0:35:37:98:11:7C:20:32:F0:A3:FB:EC:39:A4:F1:0D:00:95 Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4 Certificate serial: 019B797F0120346DC2F7F6B39BB17239B379 Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/3dXQNTeYEXwgMvCj--w5pPENAJU.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35003 IP address blocks: 2001:1578:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:01:20:34:6d:c2:f7:f6:b3:9b:b1:72:39:b3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddd5d0353798117c2032f0a3fbec39a4f10d0095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:1f:48:94:b1:f1:57:b3:73:e7:a1:85:8c: 2a:37:f6:14:23:d9:c4:ec:95:7b:0f:13:4c:25:4e: 84:39:5d:7b:9a:0b:8d:f3:6d:7e:6a:df:d0:11:c6: 74:f4:5b:73:f3:a9:cf:7e:0a:8a:2d:ec:92:78:67: fb:dc:db:b8:8c:c7:4d:29:0a:58:cd:a7:c8:63:1e: eb:7d:f1:f2:4b:5b:87:2c:1e:9b:fa:8a:3e:2b:0e: 0d:04:a4:39:57:d0:20:24:15:a7:d1:96:7e:cd:10: 97:23:2d:79:5a:6b:e4:09:f6:eb:58:3b:69:8a:5b: 62:74:d8:05:0d:60:98:45:75:d6:b9:0f:d0:2f:d8: c8:df:a6:7e:1b:78:da:e3:f4:e8:19:00:00:e1:74: 8e:ae:2b:33:3e:84:7b:3c:43:17:fc:09:ee:1d:a3: 6e:46:2f:d6:7f:d2:61:f3:fc:6e:58:86:d8:a2:10: cf:39:95:c6:47:cb:8e:06:b0:79:fd:3e:9f:1b:71: 74:8c:3b:45:8c:cb:94:55:60:da:76:30:31:ba:91: a7:a4:70:13:01:d9:31:df:37:6e:9c:30:9d:fc:39: 17:16:71:6b:9b:ee:37:0b:71:df:c3:97:5f:68:8e: 04:53:0d:d4:e3:6a:9d:a3:7b:f0:93:0f:8d:4a:89: 5e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D5:D0:35:37:98:11:7C:20:32:F0:A3:FB:EC:39:A4:F1:0D:00:95 X509v3 Authority Key Identifier: keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/3dXQNTeYEXwgMvCj--w5pPENAJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1578:400::/40 Signature Algorithm: sha256WithRSAEncryption 0f:ae:fe:d0:3c:10:aa:5f:4f:5b:16:75:7f:57:8f:83:dc:38: 6c:cc:83:05:8a:37:9f:84:91:f6:c2:42:13:a3:5f:7d:22:a8: db:d8:3d:ad:ff:74:e2:66:7b:bc:7c:d7:3f:50:4f:43:a0:c8: f9:87:d9:7a:81:f4:1a:e9:62:91:f5:e0:b9:0f:d1:24:e0:0d: 61:f2:87:fe:42:55:a3:a6:2b:28:80:53:cf:c0:1e:2d:99:8b: ca:cd:c1:f6:58:74:53:58:60:5f:23:a4:bf:4d:50:e0:f4:f4: f3:a0:52:51:32:d2:c5:1d:11:47:31:ff:0a:ab:7e:2e:ca:7b: 39:27:25:9d:00:73:51:bd:e3:e1:34:d3:62:bb:a5:4e:3b:f3: f4:7b:e5:91:b8:a3:60:fc:49:29:ed:47:64:d7:e0:e2:0f:b7: c4:2f:06:61:5b:84:3d:ad:7c:cb:2c:31:69:c6:fc:70:6c:72: f1:37:47:60:dd:ca:77:03:97:b7:7c:ea:ba:11:5b:2b:e6:7a: e7:f0:12:7e:2d:74:ee:2a:98:d7:b5:3f:7f:f0:5d:52:a5:46: c1:da:24:a6:10:fc:86:9b:dd:0a:81:18:bb:97:87:af:bb:a7: e2:27:58:72:c6:e0:a8:ec:05:2d:6f:44:59:9b:b6:9e:86:55: bc:62:25:a7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fwEgNG3C9/azm7FyObN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDM1MWIyNzRmYzIzYTQyNzI4MzAzNjM4YTBkNjJiNjA2 NDAxYjQwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGQ1ZDAzNTM3OTgxMTdjMjAzMmYwYTNmYmVjMzlhNGYxMGQwMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgYfSJSx8Vezc+ehhYwqN/YUI9nE 7JV7DxNMJU6EOV17mguN821+at/QEcZ09Ftz86nPfgqKLeySeGf73Nu4jMdNKQpY zafIYx7rffHyS1uHLB6b+oo+Kw4NBKQ5V9AgJBWn0ZZ+zRCXIy15WmvkCfbrWDtp iltidNgFDWCYRXXWuQ/QL9jI36Z+G3ja4/ToGQAA4XSOriszPoR7PEMX/AnuHaNu Ri/Wf9Jh8/xuWIbYohDPOZXGR8uOBrB5/T6fG3F0jDtFjMuUVWDadjAxupGnpHAT Adkx3zdunDCd/DkXFnFrm+43C3Hfw5dfaI4EUw3U42qdo3vwkw+NSolepwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFN3V0DU3mBF8IDLwo/vsOaTxDQCVMB8GA1UdIwQY MBaAFLvTUbJ0/COkJygwNjig1itgZAG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYt NDZiMzAyOGEwM2IwLzEvM2RYUU5UZVlFWHdnTXZDai0tdzVwUEVOQUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYtNDZiMzAyOGEwM2Iw LzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEVeAQw DQYJKoZIhvcNAQELBQADggEBAA+u/tA8EKpfT1sWdX9Xj4PcOGzMgwWKN5+EkfbC QhOjX30iqNvYPa3/dOJme7x81z9QT0OgyPmH2XqB9BrpYpH14LkP0STgDWHyh/5C VaOmKyiAU8/AHi2Zi8rNwfZYdFNYYF8jpL9NUOD09POgUlEy0sUdEUcx/wqrfi7K ezknJZ0Ac1G94+E002K7pU478/R75ZG4o2D8SSntR2TX4OIPt8QvBmFbhD2tfMss MWnG/HBscvE3R2DdyncDl7d86roRWyvmeufwEn4tdO4qmNe1P3/wXVKlRsHaJKYQ /Iab3QqBGLuXh6+7p+InWHLG4KjsBS1vRFmbtp6GVbxiJac= -----END CERTIFICATE-----Generated at Mon Jan 26 21:18:50 2026 by rpki-client