This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3BIsVbKJRMFw7Yh90j2TVuuNoKc.roa File: 3BIsVbKJRMFw7Yh90j2TVuuNoKc.roa (raw, json) Hash identifier: pybLyqLsHu1u7LfSshDpGAJbmZ32UC60dCcDRkVOlvk= Subject key identifier: DC:12:2C:55:B2:89:44:C1:70:ED:88:7D:D2:3D:93:56:EB:8D:A0:A7 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6CB113CDD1DEBFB9730A579E58AD5 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3BIsVbKJRMFw7Yh90j2TVuuNoKc.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50131 IP address blocks: 2a0c:9a40:808d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cb:11:3c:dd:1d:eb:fb:97:30:a5:79:e5:8a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc122c55b28944c170ed887dd23d9356eb8da0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:25:44:bf:df:3c:4f:02:f9:53:0d:cf:e3: 03:90:23:f0:c3:aa:bd:f9:b8:00:93:69:89:d6:40: fb:d3:85:c5:12:64:b9:de:1f:af:2c:1a:b0:c3:dd: ed:e6:4d:5e:7a:8b:3d:0c:44:1f:a3:bf:bf:ab:1e: d8:96:b7:ce:cf:cb:52:49:9f:a9:a8:b4:79:0c:6a: 64:ec:3a:24:33:86:73:38:9f:59:56:fb:63:06:02: 80:94:f4:38:e7:b9:6f:d4:17:b2:b8:90:04:fa:2d: 30:03:cd:47:e9:24:b3:c6:2d:e6:83:59:b2:84:59: a6:89:f0:80:26:22:28:10:13:14:63:ab:94:3e:5d: 9a:ad:7d:c1:10:3e:e3:72:b6:be:49:11:6e:db:23: 09:bf:ba:a2:54:24:aa:76:43:14:f2:ef:99:00:4f: ef:cb:ab:0d:22:f9:c3:62:8a:1f:72:cf:4d:1e:40: 1d:6b:13:97:58:da:97:c5:5c:94:4a:65:41:04:d2: b5:f2:c9:d8:d4:da:37:ab:e2:cf:a1:a9:28:b1:00: 38:95:d2:d8:ee:b6:e0:12:c4:10:27:56:04:83:4d: a1:c6:59:bf:bb:c0:9a:9e:89:cc:7e:ea:37:dc:b6: d8:7b:b0:ba:8a:8a:09:5f:20:bf:41:aa:78:72:bd: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:12:2C:55:B2:89:44:C1:70:ED:88:7D:D2:3D:93:56:EB:8D:A0:A7 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3BIsVbKJRMFw7Yh90j2TVuuNoKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:808d::/48 Signature Algorithm: sha256WithRSAEncryption cf:df:a6:d1:39:b0:be:0c:77:f5:95:8a:de:59:04:0d:50:9c: 10:ae:9a:29:47:de:94:6d:e2:f5:07:f1:8f:66:5a:3c:de:2b: 57:37:5e:35:80:60:7c:30:85:a3:e8:44:5d:c9:32:32:78:e6: e9:44:cf:11:67:09:ca:cc:99:3e:c0:6e:7a:bd:8e:00:cc:69: cd:8e:dc:a5:61:6b:50:1e:5c:62:a1:49:b4:f0:85:69:ae:f6: 6a:80:4f:f9:ed:af:1b:85:c5:ed:54:66:ae:60:23:5e:cf:6d: ea:62:56:a1:5a:8f:64:32:95:61:8a:c7:ee:11:e1:22:45:4a: 5b:00:cf:61:17:d8:71:c8:04:9a:7e:41:6d:9c:1d:bb:40:68: 5b:d5:20:2d:33:85:e7:39:fa:c5:85:82:b5:60:ba:34:08:d2: 6d:97:7f:bd:dd:5e:5c:0c:41:c3:ad:4d:46:1a:3b:64:aa:4a: 68:04:4a:d2:4f:b3:46:9d:4e:ac:67:5d:16:60:e3:11:a6:79: ac:cf:95:93:1f:c7:3d:b2:bb:53:bb:b6:02:55:db:5e:f9:49: 45:e4:ee:a0:f7:e9:5d:13:af:a5:54:e0:b3:07:00:8d:ca:9a: dd:e2:07:f7:ad:58:e7:dc:4e:da:77:4b:bc:9b:3e:0f:22:95: e3:c0:6c:0c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pssRPN0d6/uXMKV55YrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzEyMmM1NWIyODk0NGMxNzBlZDg4N2RkMjNkOTM1NmViOGRhMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx8lRL/fPE8C+VMNz+MDkCPww6q9 +bgAk2mJ1kD704XFEmS53h+vLBqww93t5k1eeos9DEQfo7+/qx7YlrfOz8tSSZ+p qLR5DGpk7DokM4ZzOJ9ZVvtjBgKAlPQ457lv1BeyuJAE+i0wA81H6SSzxi3mg1my hFmmifCAJiIoEBMUY6uUPl2arX3BED7jcra+SRFu2yMJv7qiVCSqdkMU8u+ZAE/v y6sNIvnDYoofcs9NHkAdaxOXWNqXxVyUSmVBBNK18snY1No3q+LPoakosQA4ldLY 7rbgEsQQJ1YEg02hxlm/u8CanonMfuo33LbYe7C6iooJXyC/Qap4cr0MIwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNwSLFWyiUTBcO2IfdI9k1brjaCnMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvM0JJc1ZiS0pSTUZ3N1loOTBqMlRWdXVOb0tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQICN MA0GCSqGSIb3DQEBCwUAA4IBAQDP36bRObC+DHf1lYreWQQNUJwQrpopR96UbeL1 B/GPZlo83itXN141gGB8MIWj6ERdyTIyeObpRM8RZwnKzJk+wG56vY4AzGnNjtyl YWtQHlxioUm08IVprvZqgE/57a8bhcXtVGauYCNez23qYlahWo9kMpVhisfuEeEi RUpbAM9hF9hxyASafkFtnB27QGhb1SAtM4XnOfrFhYK1YLo0CNJtl3+93V5cDEHD rU1GGjtkqkpoBErST7NGnU6sZ10WYOMRpnmsz5WTH8c9srtTu7YCVdte+UlF5O6g 9+ldE6+lVOCzBwCNyprd4gf3rVjn3E7ad0u8mz4PIpXjwGwM -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:13 2026 by rpki-client