This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/3je-aW-N7TvXwWseA0AZU1zFFbU.roa File: 3je-aW-N7TvXwWseA0AZU1zFFbU.roa (raw, json) Hash identifier: IdXSTpJKcEEFlZieOlZ7QaPLx04CvmXi14I+4Wr2hXA= Subject key identifier: DE:37:BE:69:6F:8D:ED:3B:D7:C1:6B:1E:03:40:19:53:5C:C5:15:B5 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019C0F1DB2810779982B277718DBAFDE0B61 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/3je-aW-N7TvXwWseA0AZU1zFFbU.roa Signing time: Fri 30 Jan 2026 13:35:30 +0000 ROA not before: Fri 30 Jan 2026 13:35:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23532 IP address blocks: 2a06:cac0::/29 maxlen: 48 2a11:9600::/29 maxlen: 48 2a12:ec0::/29 maxlen: 48 2a12:1900::/29 maxlen: 48 2a12:28c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:1d:b2:81:07:79:98:2b:27:77:18:db:af:de:0b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 30 13:35:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de37be696f8ded3bd7c16b1e034019535cc515b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:84:c9:c0:42:83:37:97:97:7c:58:2f:17: e2:b7:b4:82:5f:27:f0:d4:7d:1e:98:94:23:50:05: 6b:31:4a:f9:ab:bb:8a:dc:38:bb:d7:18:c5:1a:25: c4:51:e5:b1:a3:94:c9:9c:0d:53:8d:aa:63:0d:e8: 43:ad:d2:50:09:88:c1:83:06:8e:2b:8b:eb:57:57: 19:f8:72:d2:49:d3:b2:fa:3e:07:73:ca:be:73:a2: 67:30:4e:fe:bf:28:ed:7a:a7:24:28:41:5e:73:c7: 65:6c:ce:d6:6f:79:bf:06:cf:ef:0f:54:e3:83:8b: cf:0a:fe:46:67:2e:37:86:40:d9:4e:04:ba:1a:e3: 15:c2:98:03:ce:cf:32:cc:bb:72:98:2b:94:f2:7d: f3:be:4e:57:ee:a3:d8:95:27:92:ae:53:76:59:7c: 22:2b:8a:26:7f:ce:0c:72:f2:5c:a0:dd:d7:8a:e3: 90:99:66:89:36:2f:2a:00:dc:d7:41:79:de:02:13: 33:80:9c:73:d1:5f:71:2c:cc:19:66:65:a2:cd:90: 9b:4f:62:c1:c1:d4:56:b3:11:2f:62:08:22:72:4e: 18:b7:e7:b0:9b:16:e8:85:88:9c:9b:3c:1d:19:3d: db:f1:91:2f:aa:41:6f:0b:75:91:0e:1f:55:c1:19: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:37:BE:69:6F:8D:ED:3B:D7:C1:6B:1E:03:40:19:53:5C:C5:15:B5 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/3je-aW-N7TvXwWseA0AZU1zFFbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:cac0::/29 2a11:9600::/29 2a12:ec0::/29 2a12:1900::/29 2a12:28c0::/29 Signature Algorithm: sha256WithRSAEncryption 36:b2:f6:5f:73:66:b2:22:f9:22:1e:f3:51:34:c5:35:16:fa: a1:1e:a5:5d:6f:98:8c:99:8c:5f:6e:89:b0:03:7c:bb:61:dd: 37:0b:ef:cd:13:07:73:32:2f:75:fc:55:e6:22:46:24:d1:cd: b3:ca:f8:a0:37:28:ab:6a:13:01:78:ff:9d:3c:20:07:aa:1f: 95:5d:7e:ab:64:0c:d2:90:65:ab:0d:94:7d:c1:82:ec:5e:d7: 92:7f:10:c0:9d:0c:e7:10:81:9f:c8:4b:00:71:90:53:b6:8d: d6:09:18:80:13:d5:56:31:ac:b4:02:e1:1a:3a:8b:e5:51:7b: 7d:9d:ac:a8:36:c6:ea:9b:a6:de:bc:b6:9a:23:c6:a6:b2:94: 19:57:42:a4:db:46:98:0a:e0:1e:c2:72:51:f0:7b:9e:72:d0: c6:3e:f6:c7:0d:a0:0d:12:a6:76:7e:ff:9c:73:bd:ad:66:38: e8:15:35:d9:ef:1a:6e:23:46:55:e5:3d:cf:49:29:ed:2b:71: 71:cd:ea:7d:1a:4c:f0:88:71:fd:4c:f8:34:a9:b2:68:b1:8d: 76:b8:4a:5a:16:97:c7:30:37:c8:8d:7d:4e:12:0e:54:d8:f3: 96:25:dc:67:d8:26:f2:7d:59:c3:29:77:5e:d1:14:63:1d:d1: 17:b1:5e:81 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZwPHbKBB3mYKyd3GNuv3gthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTMwMTMzNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTM3YmU2OTZmOGRlZDNiZDdjMTZiMWUwMzQwMTk1MzVjYzUxNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOCEycBCgzeXl3xYLxfit7SCXyfw 1H0emJQjUAVrMUr5q7uK3Di71xjFGiXEUeWxo5TJnA1TjapjDehDrdJQCYjBgwaO K4vrV1cZ+HLSSdOy+j4Hc8q+c6JnME7+vyjteqckKEFec8dlbM7Wb3m/Bs/vD1Tj g4vPCv5GZy43hkDZTgS6GuMVwpgDzs8yzLtymCuU8n3zvk5X7qPYlSeSrlN2WXwi K4omf84McvJcoN3XiuOQmWaJNi8qANzXQXneAhMzgJxz0V9xLMwZZmWizZCbT2LB wdRWsxEvYggick4Yt+ewmxbohYicmzwdGT3b8ZEvqkFvC3WRDh9VwRlVPQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFN43vmlvje0718FrHgNAGVNcxRW1MB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvM2plLWFXLU43VHZYd1dzZUEwQVpVMXpGRmJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKgbKwAMF AyoRlgADBQMqEg7AAwUDKhIZAAMFAyoSKMAwDQYJKoZIhvcNAQELBQADggEBADay 9l9zZrIi+SIe81E0xTUW+qEepV1vmIyZjF9uibADfLth3TcL780TB3MyL3X8VeYi RiTRzbPK+KA3KKtqEwF4/508IAeqH5VdfqtkDNKQZasNlH3Bguxe15J/EMCdDOcQ gZ/ISwBxkFO2jdYJGIAT1VYxrLQC4Ro6i+VRe32drKg2xuqbpt68tpojxqaylBlX QqTbRpgK4B7CclHwe55y0MY+9scNoA0SpnZ+/5xzva1mOOgVNdnvGm4jRlXlPc9J Ke0rcXHN6n0aTPCIcf1M+DSpsmixjXa4SloWl8cwN8iNfU4SDlTY85Yl3GfYJvJ9 WcMpd17RFGMd0RexXoE= -----END CERTIFICATE-----Generated at Mon Feb 2 14:22:45 2026 by rpki-client