This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/3dCExH2cQ3AwBrUhpOwTQZxBr3c.roa File: 3dCExH2cQ3AwBrUhpOwTQZxBr3c.roa (raw, json) Hash identifier: DaT6zSsVgNzssXsoUQLL8dxsy9Ivm2hlBuq9k1+WKeY= Subject key identifier: DD:D0:84:C4:7D:9C:43:70:30:06:B5:21:A4:EC:13:41:9C:41:AF:77 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13E546D1DE77C20DB98774330308BB Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/3dCExH2cQ3AwBrUhpOwTQZxBr3c.roa Signing time: Fri 02 Jan 2026 14:19:28 +0000 ROA not before: Fri 02 Jan 2026 14:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31483 IP address blocks: 2a02:2698:a002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:e5:46:d1:de:77:c2:0d:b9:87:74:33:03:08:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddd084c47d9c43703006b521a4ec13419c41af77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:f1:62:e8:c8:26:d7:a7:b4:53:9c:51:10: 12:80:e8:18:6c:a0:5f:46:c7:7d:2b:59:33:8c:eb: 00:3f:7d:aa:1a:50:01:23:e0:8b:e2:4b:5f:31:55: 29:82:92:ba:e6:a0:36:2f:c8:28:92:72:a8:24:a0: ac:d3:f0:8a:6f:38:a0:92:3e:90:1b:08:22:a6:04: 69:51:de:92:95:b6:6f:98:ca:bb:dd:83:e6:5f:7d: a0:ed:ca:b6:a3:1b:16:76:22:ea:b1:d0:a4:7e:5b: f8:9a:28:44:56:09:19:83:b5:d7:e6:a4:95:40:7d: aa:1e:0b:69:0b:dd:f4:f7:b0:1f:fb:72:66:b5:14: 0b:f2:68:ae:b7:91:29:43:81:ea:30:08:80:33:5f: 7a:78:79:72:77:d7:2e:83:b0:f9:a3:2a:80:8c:06: 01:59:f6:55:d7:6a:20:58:ac:14:62:7d:b7:43:0d: 20:00:07:97:5f:62:fd:18:3a:41:a9:9a:e4:bb:01: a4:8b:aa:cf:78:a0:3e:02:3a:4d:44:36:36:26:48: 07:61:ca:94:b6:60:8b:df:b4:a7:63:0c:46:1e:fd: 8f:83:2f:7f:e4:c3:1a:df:02:4a:47:e4:2b:30:f9: d5:8a:5a:a7:d3:c2:96:68:72:64:1a:3a:03:bb:32: 9c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D0:84:C4:7D:9C:43:70:30:06:B5:21:A4:EC:13:41:9C:41:AF:77 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/3dCExH2cQ3AwBrUhpOwTQZxBr3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:a002::/48 Signature Algorithm: sha256WithRSAEncryption a0:e3:61:c1:d1:53:65:3f:a1:c7:a8:43:0d:8c:8a:07:58:a9: f6:34:8c:6c:41:a8:6e:1b:e2:8d:d8:31:f6:4f:5a:05:c6:48: b2:3b:4b:c3:c6:d6:c2:ba:ee:61:ec:fa:61:16:15:74:ea:a1: 5f:36:f4:7b:06:d0:ab:e9:12:9f:dd:0b:50:e6:5f:d2:6c:63: 5e:bf:81:ab:d0:42:2b:05:4f:d7:15:a2:c7:8d:ce:d8:12:b1: ab:3c:7c:57:10:d1:35:35:2d:42:7a:3b:d0:63:30:52:4b:42: 59:a6:e1:ec:67:a9:fb:e9:56:66:74:f8:4b:66:30:d3:f9:9b: ce:2f:86:c1:22:0e:fe:fb:28:9f:4f:be:82:9f:09:3e:68:39: fc:46:2f:a7:e5:e4:47:af:1c:11:88:89:78:dd:73:94:85:2c: 79:5c:d3:de:d2:17:b6:d8:74:47:50:92:bf:b3:cf:ee:f1:35: 25:f8:b5:6d:56:c2:54:65:f1:f2:99:9b:7f:71:ac:16:c6:b6: 61:e9:20:ce:16:6a:12:89:39:db:7b:7a:ff:69:84:32:7c:3a: 36:52:a4:ae:4d:ac:5c:47:78:14:72:0c:be:cc:64:f8:54:c1: c0:1a:81:2d:8a:c0:d5:64:dd:95:3f:ba:3b:36:6d:24:7c:f4: 51:9a:f1:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/E+VG0d53wg25h3QzAwi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGQwODRjNDdkOWM0MzcwMzAwNmI1MjFhNGVjMTM0MTljNDFhZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr//xYujIJtentFOcURASgOgYbKBf Rsd9K1kzjOsAP32qGlABI+CL4ktfMVUpgpK65qA2L8goknKoJKCs0/CKbzigkj6Q GwgipgRpUd6SlbZvmMq73YPmX32g7cq2oxsWdiLqsdCkflv4mihEVgkZg7XX5qSV QH2qHgtpC93097Af+3JmtRQL8miut5EpQ4HqMAiAM196eHlyd9cug7D5oyqAjAYB WfZV12ogWKwUYn23Qw0gAAeXX2L9GDpBqZrkuwGki6rPeKA+AjpNRDY2JkgHYcqU tmCL37SnYwxGHv2Pgy9/5MMa3wJKR+QrMPnVilqn08KWaHJkGjoDuzKc2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN3QhMR9nENwMAa1IaTsE0GcQa93MB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvM2RDRXhIMmNRM0F3QnJVaHBPd1RRWnhCcjNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgImmKAC MA0GCSqGSIb3DQEBCwUAA4IBAQCg42HB0VNlP6HHqEMNjIoHWKn2NIxsQahuG+KN 2DH2T1oFxkiyO0vDxtbCuu5h7PphFhV06qFfNvR7BtCr6RKf3QtQ5l/SbGNev4Gr 0EIrBU/XFaLHjc7YErGrPHxXENE1NS1CejvQYzBSS0JZpuHsZ6n76VZmdPhLZjDT +ZvOL4bBIg7++yifT76Cnwk+aDn8Ri+n5eRHrxwRiIl43XOUhSx5XNPe0he22HRH UJK/s8/u8TUl+LVtVsJUZfHymZt/cawWxrZh6SDOFmoSiTnbe3r/aYQyfDo2UqSu TaxcR3gUcgy+zGT4VMHAGoEtisDVZN2VP7o7Nm0kfPRRmvGS -----END CERTIFICATE-----Generated at Thu Feb 5 05:54:41 2026 by rpki-client