This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3PxK2zlL4WMmN_iSJSPJ1rM3D0I.roa File: 3PxK2zlL4WMmN_iSJSPJ1rM3D0I.roa (raw, json) Hash identifier: uwLSo3F6o3uR+D8dVgeKhLzgYQPKxoDPIbH/oBqvluw= Subject key identifier: DC:FC:4A:DB:39:4B:E1:63:26:37:F8:92:25:23:C9:D6:B3:37:0F:42 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C1715DCF7CEB765C9E1D6CAD4A9B Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3PxK2zlL4WMmN_iSJSPJ1rM3D0I.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a0c:9a40:8470::/48 maxlen: 48 2a0c:9a40:8a80::/44 maxlen: 48 2a0c:9a40:9600::/40 maxlen: 48 2a0c:9a40:9800::/40 maxlen: 48 2a0c:9a44:cf::/48 maxlen: 48 2a0e:7d41:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c1:71:5d:cf:7c:eb:76:5c:9e:1d:6c:ad:4a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcfc4adb394be1632637f8922523c9d6b3370f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:71:f5:cb:91:5e:09:58:76:c7:f4:a7:6a: 36:92:09:0f:91:c6:49:35:84:56:2d:4b:15:03:bd: 9d:16:09:83:e3:58:80:7e:d4:50:30:b9:7f:08:94: b0:0d:06:98:8b:95:f2:a9:b0:7f:bc:42:b9:2a:05: 2f:42:b3:c5:0b:c3:de:5f:58:65:62:fa:ec:f5:75: 6e:07:3d:d4:33:46:ae:b1:9e:7d:73:56:a1:13:68: f0:6d:94:85:85:3f:c9:a1:84:7a:d3:e5:db:ee:a8: fb:1d:82:08:52:97:f5:b2:e5:25:e6:4f:c0:5a:f0: 1d:89:56:e7:ba:61:57:86:73:b9:9d:c1:4c:a1:84: 2b:db:e8:2f:b6:89:cd:6a:d6:9a:a1:24:1e:00:a2: 15:07:5a:46:c6:35:83:c4:51:3d:f0:2a:d9:e2:fc: 99:ad:51:00:4f:22:73:f2:f2:82:2a:a5:f9:7d:a3: 7f:73:a3:4e:64:35:7c:bb:b8:c4:57:d4:4b:0d:ca: 50:c5:d4:b7:2d:00:dc:f0:1b:99:33:cf:69:53:4e: 9f:28:4f:09:bc:f3:3a:b0:56:2d:e4:27:51:50:76: e2:c9:56:ef:60:ed:ed:0b:ff:c8:08:ad:dd:f2:62: 19:fc:13:04:f0:22:ec:d9:0b:5f:6c:01:3e:4a:25: a3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FC:4A:DB:39:4B:E1:63:26:37:F8:92:25:23:C9:D6:B3:37:0F:42 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3PxK2zlL4WMmN_iSJSPJ1rM3D0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8470::/48 2a0c:9a40:8a80::/44 2a0c:9a40:9600::/40 2a0c:9a40:9800::/40 2a0c:9a44:cf::/48 2a0e:7d41:8888::/48 Signature Algorithm: sha256WithRSAEncryption 52:b9:be:0c:db:71:62:dc:21:88:d3:fd:1a:53:7c:36:94:dc: 86:10:18:46:ef:81:a6:2a:a7:61:77:34:66:68:36:5e:0a:78: d9:a6:7b:b2:f9:1c:0e:02:d1:1b:ca:e9:72:03:ab:5d:ff:74: 63:13:b9:4d:b8:71:22:0f:05:d5:f2:1a:2e:ae:64:32:f5:f5: fb:83:41:1d:7e:a3:c2:5a:35:ce:6e:d4:29:8e:f1:49:20:2e: f8:14:0c:87:e9:c5:dd:f8:f4:9a:41:fb:d3:f9:14:5b:2e:09: b0:21:3b:93:21:ab:df:9b:85:65:02:8e:1b:6f:a3:a7:ec:bd: 1f:74:9e:d9:6a:03:03:1d:62:46:96:83:ff:c2:28:14:42:b2: 69:d5:0c:2c:1e:a3:0c:53:96:2a:23:79:a2:f0:95:94:0b:bf: 71:37:8c:d1:18:27:0f:28:9a:23:dc:18:7a:9e:39:0c:a4:8f: c2:2c:f5:b4:1f:ef:67:e1:74:1b:a9:d3:3b:a7:45:09:f9:cd: 5c:cf:f1:9d:a4:d9:87:c6:61:17:9b:18:35:3d:b3:96:53:b5: 41:3f:81:be:b8:23:b1:f2:0a:c3:1f:db:73:78:61:33:1e:6f: b0:1a:75:d5:03:96:15:82:66:9f:e7:2a:fc:23:ef:60:43:57: 76:23:f2:b2 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt+psFxXc9863Zcnh1srUqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2ZjNGFkYjM5NGJlMTYzMjYzN2Y4OTIyNTIzYzlkNmIzMzcwZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJRx9cuRXglYdsf0p2o2kgkPkcZJ NYRWLUsVA72dFgmD41iAftRQMLl/CJSwDQaYi5XyqbB/vEK5KgUvQrPFC8PeX1hl Yvrs9XVuBz3UM0ausZ59c1ahE2jwbZSFhT/JoYR60+Xb7qj7HYIIUpf1suUl5k/A WvAdiVbnumFXhnO5ncFMoYQr2+gvtonNataaoSQeAKIVB1pGxjWDxFE98CrZ4vyZ rVEATyJz8vKCKqX5faN/c6NOZDV8u7jEV9RLDcpQxdS3LQDc8BuZM89pU06fKE8J vPM6sFYt5CdRUHbiyVbvYO3tC//ICK3d8mIZ/BME8CLs2QtfbAE+SiWj+wIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFNz8Sts5S+FjJjf4kiUjydazNw9CMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvM1B4SzJ6bEw0V01tTl9pU0pTUEoxck0zRDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAAjA0AwcAKgyaQIRw AwcEKgyaQIqAAwYAKgyaQJYDBgAqDJpAmAMHACoMmkQAzwMHACoOfUGIiDANBgkq hkiG9w0BAQsFAAOCAQEAUrm+DNtxYtwhiNP9GlN8NpTchhAYRu+BpiqnYXc0Zmg2 Xgp42aZ7svkcDgLRG8rpcgOrXf90YxO5TbhxIg8F1fIaLq5kMvX1+4NBHX6jwlo1 zm7UKY7xSSAu+BQMh+nF3fj0mkH70/kUWy4JsCE7kyGr35uFZQKOG2+jp+y9H3Se 2WoDAx1iRpaD/8IoFEKyadUMLB6jDFOWKiN5ovCVlAu/cTeM0RgnDyiaI9wYep45 DKSPwiz1tB/vZ+F0G6nTO6dFCfnNXM/xnaTZh8ZhF5sYNT2zllO1QT+BvrgjsfIK wx/bc3hhMx5vsBp11QOWFYJmn+cq/CPvYENXdiPysg== -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:36 2026 by rpki-client