This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/b3obsj7bhISGV2ic8E0aogm2GNk.roa File: b3obsj7bhISGV2ic8E0aogm2GNk.roa (raw, json) Hash identifier: HS7Xi+YLjjvjjAzScsRz2J0IByu2Q4w1qMjo4TBFOow= Subject key identifier: 6F:7A:1B:B2:3E:DB:84:84:86:57:68:9C:F0:4D:1A:A2:09:B6:18:D9 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019BE92DC9EA8E5F7BC5B75D9509FFDFEDBC Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/b3obsj7bhISGV2ic8E0aogm2GNk.roa Signing time: Fri 23 Jan 2026 04:47:30 +0000 ROA not before: Fri 23 Jan 2026 04:47:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44812 IP address blocks: 2a12:a343::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:2d:c9:ea:8e:5f:7b:c5:b7:5d:95:09:ff:df:ed:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 23 04:47:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f7a1bb23edb84848657689cf04d1aa209b618d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9a:31:f4:88:53:d1:e9:db:8c:22:dc:18:6e: 8b:18:48:91:d0:bd:86:e4:96:68:fb:9a:6a:49:1a: 0f:2c:30:a4:8b:e3:45:bc:7d:b8:15:30:32:1c:09: 81:66:d6:91:33:4e:c6:cb:51:16:21:f9:08:6d:23: d7:27:6d:84:3e:d5:05:d0:f5:f0:2f:f3:be:32:1c: 9c:4f:a6:13:53:0e:d2:fb:02:16:94:0a:30:53:17: f9:9b:bc:c1:86:f2:30:86:b0:d1:95:c9:cf:ee:24: 1c:20:67:30:ab:dd:4f:d1:2f:1f:be:ef:1a:26:37: 47:6b:90:8b:01:d1:62:fa:9f:c7:d2:2c:b8:42:9a: 36:85:36:53:70:fe:a8:f8:15:5e:fe:ef:ec:2b:59: c6:89:42:15:6f:d0:e1:b4:44:8a:f0:3e:9a:f5:30: 38:14:5d:49:3b:a1:2a:8b:72:58:21:eb:23:81:f9: d4:1c:f1:8b:98:15:1c:6e:06:ad:bf:dd:54:cf:6a: 4d:7c:d7:d1:23:2f:4e:62:40:83:52:f9:b0:27:8c: df:c2:c8:c0:36:5d:9c:bd:9e:2d:ec:2b:5c:6d:a0: b1:b8:b2:07:07:15:fd:ad:20:39:f2:82:d6:1f:2a: ad:65:f1:a5:94:18:10:ef:96:a6:e1:b9:bc:c8:6c: 2a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7A:1B:B2:3E:DB:84:84:86:57:68:9C:F0:4D:1A:A2:09:B6:18:D9 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/b3obsj7bhISGV2ic8E0aogm2GNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:a343::/32 Signature Algorithm: sha256WithRSAEncryption 80:95:d8:bb:a0:2e:9c:dc:64:e6:49:cc:6f:ca:31:10:09:b7: 1b:4d:48:9f:00:b5:1e:32:69:f3:c9:9c:b3:78:7d:64:01:03: a5:8b:64:96:f9:7e:47:8e:72:41:a0:09:5d:11:e7:08:90:87: 4a:42:a1:fb:91:7b:f9:fb:c5:f2:6f:5b:28:e1:b2:8b:32:45: 7f:41:c0:fd:5d:15:06:82:c3:6f:bc:fc:09:f3:7e:02:2d:60: 94:e5:cc:22:88:ac:6d:fa:96:d1:2b:64:f8:8f:49:c3:26:bc: 31:7b:e6:a6:ab:0c:ad:ae:67:98:f3:44:07:fe:42:78:70:c6: a7:29:61:d7:b0:48:79:81:ae:32:ee:af:cb:27:db:4c:e0:4d: 9f:fb:f5:8a:82:2d:3b:7f:bc:3e:e2:49:df:be:fd:07:ba:68: be:de:51:5f:16:c9:9d:87:79:fe:27:3f:07:e7:bf:0a:cc:8f: f9:10:a9:ca:f4:ff:2b:1a:1a:c8:d4:d6:79:9e:66:52:67:7f: 8e:3e:5a:dd:87:cc:14:1d:7b:73:a6:61:76:93:23:89:d3:8e: 85:94:08:de:a0:53:fb:9b:1e:23:00:45:18:37:47:b0:31:c8: 6b:f5:ee:69:75:7f:15:d7:53:31:73:7c:3d:ff:14:99:e7:44: 47:52:e9:a9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvpLcnqjl97xbddlQn/3+28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTIzMDQ0NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjdhMWJiMjNlZGI4NDg0ODY1NzY4OWNmMDRkMWFhMjA5YjYxOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpox9IhT0enbjCLcGG6LGEiR0L2G 5JZo+5pqSRoPLDCki+NFvH24FTAyHAmBZtaRM07Gy1EWIfkIbSPXJ22EPtUF0PXw L/O+MhycT6YTUw7S+wIWlAowUxf5m7zBhvIwhrDRlcnP7iQcIGcwq91P0S8fvu8a JjdHa5CLAdFi+p/H0iy4Qpo2hTZTcP6o+BVe/u/sK1nGiUIVb9DhtESK8D6a9TA4 FF1JO6Eqi3JYIesjgfnUHPGLmBUcbgatv91Uz2pNfNfRIy9OYkCDUvmwJ4zfwsjA Nl2cvZ4t7CtcbaCxuLIHBxX9rSA58oLWHyqtZfGllBgQ75am4bm8yGwqHQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFG96G7I+24SEhldonPBNGqIJthjZMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvYjNvYnNqN2JoSVNHVjJpYzhFMGFvZ20yR05rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhKjQzAN BgkqhkiG9w0BAQsFAAOCAQEAgJXYu6AunNxk5knMb8oxEAm3G01InwC1HjJp88mc s3h9ZAEDpYtklvl+R45yQaAJXRHnCJCHSkKh+5F7+fvF8m9bKOGyizJFf0HA/V0V BoLDb7z8CfN+Ai1glOXMIoisbfqW0Stk+I9Jwya8MXvmpqsMra5nmPNEB/5CeHDG pylh17BIeYGuMu6vyyfbTOBNn/v1ioItO3+8PuJJ3779B7povt5RXxbJnYd5/ic/ B+e/CsyP+RCpyvT/KxoayNTWeZ5mUmd/jj5a3YfMFB17c6ZhdpMjidOOhZQI3qBT +5seIwBFGDdHsDHIa/XuaXV/FddTMXN8Pf8UmedER1LpqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:17 2026 by rpki-client