This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa File: 3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa (raw, json) Hash identifier: ho5K0lj5JJPTZqPc5laRkOJ8PLSca4Q9mg+67aNhjzk= Subject key identifier: DC:34:6B:1B:B2:7D:D0:4E:83:EC:FF:93:09:BD:59:86:A2:9C:57:91 Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa Certificate serial: 019B7EA687696FA6C6B3F98FB304C587EB6B Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa Signing time: Fri 02 Jan 2026 12:20:01 +0000 ROA not before: Fri 02 Jan 2026 12:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21277 IP address blocks: 2a03:47c0::/29 maxlen: 29 2a03:47c0::/32 maxlen: 32 2a03:47c0:1080::/48 maxlen: 48 2a03:47c0:20c0::/48 maxlen: 48 2a03:47c0:2180::/48 maxlen: 48 2a03:47c0:2280::/48 maxlen: 48 2a03:47c0:2400::/48 maxlen: 48 2a03:47c0:2480::/48 maxlen: 48 2a03:47c1::/32 maxlen: 32 2a03:47c2::/32 maxlen: 32 2a03:47c3::/32 maxlen: 32 2a03:47c4::/32 maxlen: 32 2a03:47c5::/32 maxlen: 32 2a03:47c6::/32 maxlen: 32 2a03:47c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:87:69:6f:a6:c6:b3:f9:8f:b3:04:c5:87:eb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc346b1bb27dd04e83ecff9309bd5986a29c5791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2f:f6:2c:58:c9:1e:d6:09:56:b2:76:75:ea: 56:cb:77:46:05:39:d3:24:f5:81:94:c9:bc:f1:2b: 67:25:c1:ed:e5:65:4e:e6:be:1c:e6:48:66:8a:ac: 2b:f6:82:df:ce:0c:24:bb:13:f1:ff:d6:88:72:b8: 15:b5:e2:55:3e:89:d3:56:2d:14:91:e2:97:70:01: d9:c0:12:15:35:2a:a0:06:d2:e7:03:f5:fd:ee:00: bc:46:40:8b:ff:35:9e:cf:22:22:79:4a:96:b1:ca: b9:ac:e2:3c:8e:28:8d:b2:39:f3:2a:23:dc:80:c5: 4c:fe:13:c3:93:5e:64:88:7e:c7:e1:fb:66:55:ba: ed:94:98:c2:5c:85:e6:65:70:2b:ce:d5:94:04:47: fb:83:74:69:a4:94:ad:87:f1:e9:81:c2:05:75:56: c3:5c:2d:fd:ec:57:71:fe:e1:ff:29:49:28:55:ae: b7:04:86:3b:69:98:cc:ba:76:9f:71:f7:3e:6c:0e: 71:04:ca:55:bf:f3:7a:8a:83:43:9b:cd:a6:45:7a: 5d:d3:aa:94:27:3f:dd:d6:82:e9:42:a6:85:70:fa: 6c:cf:f4:3e:d5:8e:de:8c:1f:81:fa:a2:00:63:e0: 0b:b8:2b:91:83:5d:0d:44:20:8e:49:bd:a4:46:50: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:34:6B:1B:B2:7D:D0:4E:83:EC:FF:93:09:BD:59:86:A2:9C:57:91 X509v3 Authority Key Identifier: keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:47c0::/29 Signature Algorithm: sha256WithRSAEncryption 79:04:f1:3b:0c:19:17:8c:f9:76:04:a2:3d:fc:66:72:93:72: 16:e4:c4:3f:14:40:be:ac:30:c3:2f:b9:00:af:ba:c7:14:3f: b5:30:ae:80:c8:ba:f3:cc:42:c2:a0:99:d3:68:d1:83:71:c8: de:40:be:8a:0c:ec:3f:bb:d9:bf:d9:00:0d:db:4a:50:00:8b: 4c:69:8e:90:11:13:dd:c2:0c:e9:30:da:8a:38:ed:c2:b5:f5: 7f:9a:b6:9b:15:ea:3d:3d:9a:7c:32:74:cd:8d:b6:2e:f2:fb: 4b:5e:e6:8b:2e:2e:3d:32:3e:32:50:d8:f9:5c:e3:0f:4c:b1: 92:4d:21:fd:18:fb:c8:d4:68:3a:ae:fe:07:d9:6a:ea:0f:c1: 07:65:2d:71:d1:f8:03:c1:f9:f4:3b:5b:8c:e5:f2:d4:ba:c0: 10:17:e2:de:2a:67:c3:04:79:a9:e9:25:54:31:bc:a9:3d:7d: b7:ce:cf:e0:2e:af:18:9f:2d:fa:22:f2:d0:96:88:ab:b7:93: 86:12:d3:a0:d2:5a:d1:db:c0:37:6b:ee:ec:4c:20:61:41:13: f3:a3:cf:c1:5a:58:b3:78:c0:f3:4e:eb:44:b0:18:7b:eb:3b: 55:ea:e0:04:5d:e4:f1:96:ef:43:6c:6f:62:93:9a:bb:a1:a6: 53:0d:74:da -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+podpb6bGs/mPswTFh+trMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTNkYmM1ODI5ZWM1MDBiMzM0MjZhMTg4ZDAzOTkzOTVi ODA2YWEwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzM0NmIxYmIyN2RkMDRlODNlY2ZmOTMwOWJkNTk4NmEyOWM1NzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii/2LFjJHtYJVrJ2depWy3dGBTnT JPWBlMm88StnJcHt5WVO5r4c5khmiqwr9oLfzgwkuxPx/9aIcrgVteJVPonTVi0U keKXcAHZwBIVNSqgBtLnA/X97gC8RkCL/zWezyIieUqWscq5rOI8jiiNsjnzKiPc gMVM/hPDk15kiH7H4ftmVbrtlJjCXIXmZXArztWUBEf7g3RppJSth/HpgcIFdVbD XC397Fdx/uH/KUkoVa63BIY7aZjMunafcfc+bA5xBMpVv/N6ioNDm82mRXpd06qU Jz/d1oLpQqaFcPpsz/Q+1Y7ejB+B+qIAY+ALuCuRg10NRCCOSb2kRlCgcwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNw0axuyfdBOg+z/kwm9WYainFeRMB8GA1UdIwQY MBaAFDdT28WCnsUAszQmoYjQOZOVuAaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMt MDM3OTkzMGY4Mjg2LzEvM0RSckc3SjkwRTZEN1AtVENiMVpocUtjVjVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMtMDM3OTkzMGY4Mjg2 LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgNHwDAN BgkqhkiG9w0BAQsFAAOCAQEAeQTxOwwZF4z5dgSiPfxmcpNyFuTEPxRAvqwwwy+5 AK+6xxQ/tTCugMi688xCwqCZ02jRg3HI3kC+igzsP7vZv9kADdtKUACLTGmOkBET 3cIM6TDaijjtwrX1f5q2mxXqPT2afDJ0zY22LvL7S17miy4uPTI+MlDY+VzjD0yx kk0h/Rj7yNRoOq7+B9lq6g/BB2UtcdH4A8H59DtbjOXy1LrAEBfi3ipnwwR5qekl VDG8qT19t87P4C6vGJ8t+iLy0JaIq7eThhLToNJa0dvAN2vu7EwgYUET86PPwVpY s3jA807rRLAYe+s7VergBF3k8ZbvQ2xvYpOau6GmUw102g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:58 2026 by rpki-client