This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3x8TbvtiuyCCqwuRqRJt63Eo_T0.roa File: 3x8TbvtiuyCCqwuRqRJt63Eo_T0.roa (raw, json) Hash identifier: kqIE8wf8LyGCyMr3ZW0b4tfq3V6yEIG3kLXi4uzXh08= Subject key identifier: DF:1F:13:6E:FB:62:BB:20:82:AB:0B:91:A9:12:6D:EB:71:28:FD:3D Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA76475329A33476D2214FF0F0A79F2 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3x8TbvtiuyCCqwuRqRJt63Eo_T0.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213328 IP address blocks: 2a0d:6f80:2a42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:64:75:32:9a:33:47:6d:22:14:ff:0f:0a:79:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df1f136efb62bb2082ab0b91a9126deb7128fd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:59:d0:c0:f3:06:01:42:11:eb:61:0d:de: 5c:db:16:5c:ba:a4:90:c5:bd:f5:21:2f:86:f6:9b: 19:f0:ad:79:cf:3c:0c:b8:6e:77:93:33:ab:80:e0: 2c:5b:6d:75:bd:95:35:84:56:5f:e6:75:51:b9:b0: 48:0a:fb:4e:76:71:3d:3d:a2:76:6c:34:ae:ab:72: c3:f2:a6:24:56:cc:2a:72:77:7a:d7:46:25:af:ce: 6b:0e:ed:99:4b:f7:96:91:84:43:35:32:9a:59:ca: 84:e1:a7:da:06:d5:cc:92:55:e9:6f:2e:4f:80:71: 8b:f5:58:19:28:17:81:35:a1:f0:0f:eb:42:3d:bc: ad:2b:3f:49:2f:f9:06:a1:09:f5:5e:d9:65:b4:36: 17:07:d9:44:55:66:f5:6d:a8:6d:03:20:a2:2a:01: 1c:17:09:96:7d:b6:0f:71:62:3f:e1:a3:6c:06:44: c7:6a:20:01:7d:50:89:29:14:d1:e2:97:e8:69:98: bc:12:07:6f:2a:be:fe:9d:38:fe:3d:b5:c2:fe:a9: d2:fc:5a:b1:58:09:ff:d8:da:d0:db:40:06:2f:0d: 84:40:fa:9b:00:ad:71:82:64:25:c2:52:46:5e:1a: 83:91:d8:9a:0f:f5:a9:94:a5:b4:de:ff:db:91:f4: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1F:13:6E:FB:62:BB:20:82:AB:0B:91:A9:12:6D:EB:71:28:FD:3D X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3x8TbvtiuyCCqwuRqRJt63Eo_T0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6f80:2a42::/48 Signature Algorithm: sha256WithRSAEncryption 4e:0b:e6:58:36:60:89:87:91:8b:c9:e5:f5:e5:92:69:60:b8: 1b:53:76:b9:80:ff:92:18:84:e5:49:08:35:86:63:0a:53:d2: 28:59:23:61:63:d1:41:32:59:69:74:e1:78:33:d5:e3:53:35: 95:97:a0:97:90:3c:38:9d:d6:cf:5e:b2:51:73:b4:53:38:63: 12:29:fd:e0:ab:9f:13:ac:86:b1:08:e1:0b:c1:62:00:d8:a5: 7c:65:a9:bf:bb:43:1a:0c:6a:56:4a:6d:ae:56:0a:6c:ae:28: 86:42:80:ec:89:44:c4:eb:d5:da:f8:87:b2:4e:aa:d4:3a:92: 41:a5:7d:46:15:3c:6c:92:46:8b:a7:02:86:1f:34:95:49:48: 91:0a:4b:ec:23:27:d0:d3:b0:6f:36:43:e9:74:37:e0:26:73: 3c:9c:8f:77:d1:ba:33:08:28:ee:e7:a9:73:6d:b9:60:b6:9e: 62:59:f1:64:6c:5d:8e:7c:c0:27:d4:2e:4c:2f:de:b9:bd:9b: f3:be:9a:00:db:c6:d3:2a:7a:e1:07:6e:2a:1a:46:30:f7:27: 36:56:15:e9:a7:60:70:61:60:d9:b4:38:e1:de:0a:02:97:86: 0d:13:35:08:96:99:94:94:75:1b:c4:88:dd:ce:8d:38:20:23: 86:76:c9:81 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p2R1MpozR20iFP8PCnnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjFmMTM2ZWZiNjJiYjIwODJhYjBiOTFhOTEyNmRlYjcxMjhmZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw1Z0MDzBgFCEethDd5c2xZcuqSQ xb31IS+G9psZ8K15zzwMuG53kzOrgOAsW211vZU1hFZf5nVRubBICvtOdnE9PaJ2 bDSuq3LD8qYkVswqcnd610Ylr85rDu2ZS/eWkYRDNTKaWcqE4afaBtXMklXpby5P gHGL9VgZKBeBNaHwD+tCPbytKz9JL/kGoQn1XtlltDYXB9lEVWb1bahtAyCiKgEc FwmWfbYPcWI/4aNsBkTHaiABfVCJKRTR4pfoaZi8EgdvKr7+nTj+PbXC/qnS/Fqx WAn/2NrQ20AGLw2EQPqbAK1xgmQlwlJGXhqDkdiaD/WplKW03v/bkfRS8wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN8fE277YrsggqsLkakSbetxKP09MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvM3g4VGJ2dGl1eUNDcXd1UnFSSnQ2M0VvX1QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgCpC MA0GCSqGSIb3DQEBCwUAA4IBAQBOC+ZYNmCJh5GLyeX15ZJpYLgbU3a5gP+SGITl SQg1hmMKU9IoWSNhY9FBMllpdOF4M9XjUzWVl6CXkDw4ndbPXrJRc7RTOGMSKf3g q58TrIaxCOELwWIA2KV8Zam/u0MaDGpWSm2uVgpsriiGQoDsiUTE69Xa+IeyTqrU OpJBpX1GFTxskkaLpwKGHzSVSUiRCkvsIyfQ07BvNkPpdDfgJnM8nI930bozCCju 56lzbblgtp5iWfFkbF2OfMAn1C5ML965vZvzvpoA28bTKnrhB24qGkYw9yc2VhXp p2BwYWDZtDjh3goCl4YNEzUIlpmUlHUbxIjdzo04ICOGdsmB -----END CERTIFICATE-----Generated at Sat Jan 3 19:03:36 2026 by rpki-client