This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/3yI8ryZ8o5TDw6NcBp82vvQ83ys.roa File: 3yI8ryZ8o5TDw6NcBp82vvQ83ys.roa (raw, json) Hash identifier: f38MmouJUXvXxzlrE3IxpTCfkwFPm0RHLmYScyT4G5I= Subject key identifier: DF:22:3C:AF:26:7C:A3:94:C3:C3:A3:5C:06:9F:36:BE:F4:3C:DF:2B Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E392737566CD47F071317E98E5CFA94 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/3yI8ryZ8o5TDw6NcBp82vvQ83ys.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41108 IP address blocks: 2a0c:b642:1a0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:27:37:56:6c:d4:7f:07:13:17:e9:8e:5c:fa:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df223caf267ca394c3c3a35c069f36bef43cdf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:58:b8:96:f1:78:0a:07:6c:9a:e5:9c:fe: 15:51:1e:b4:b6:54:ec:2c:de:00:8d:19:47:e6:68: dd:1a:ed:59:55:10:b8:f5:fa:86:85:9c:2f:7b:12: aa:c3:ff:96:90:9b:7d:1a:94:93:58:ba:52:92:10: be:55:fe:f5:98:42:e6:65:ed:b8:d4:4e:0e:7a:04: 6f:0f:b7:18:17:a7:86:8b:f4:3b:8f:f6:53:6c:2d: 7b:cf:3b:2e:0d:66:a1:37:0c:f2:50:6e:46:b1:24: 2d:5a:f9:33:96:cc:df:09:2e:7c:b9:a9:68:b6:83: 37:a7:e5:d4:e4:de:cf:30:2f:21:6e:91:47:f8:ac: ec:99:33:dd:e8:09:a4:13:66:20:71:d1:b7:c0:69: d2:c5:54:95:e0:ad:23:cd:6f:1e:18:11:3e:cf:fb: 1d:cb:1a:e0:f1:c8:bb:9c:9c:82:7d:00:e0:06:7e: ba:83:6b:85:8c:b9:5c:9d:f0:8c:10:81:15:29:48: 1d:5c:67:c9:36:70:82:78:bd:a2:b9:9d:f4:81:68: 25:e0:76:7e:df:11:f2:f7:92:a3:8d:ca:4e:17:5b: 1a:81:3a:93:6c:67:0e:8c:f5:44:7b:ea:f9:15:c5: 64:22:9d:c9:83:c2:01:59:40:30:a7:41:d3:34:fc: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:22:3C:AF:26:7C:A3:94:C3:C3:A3:5C:06:9F:36:BE:F4:3C:DF:2B X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/3yI8ryZ8o5TDw6NcBp82vvQ83ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:1a0f::/48 Signature Algorithm: sha256WithRSAEncryption 59:23:d3:e2:c3:01:af:19:52:01:68:06:a5:dc:24:65:76:16: ab:7b:06:36:8a:18:08:98:d7:f4:7e:dd:76:cf:e3:58:4e:19: d3:f7:74:78:29:f3:2a:1a:99:e5:c4:1a:7c:a2:a6:ce:4d:d1: ca:e0:c4:b9:4c:12:0e:d2:c7:87:d2:7c:a8:15:3a:77:e6:85: be:6e:c9:14:37:da:a7:f5:70:71:17:08:b1:28:36:dd:48:16: 12:f8:7a:c9:e7:f0:ba:2e:cc:e3:8c:ab:4a:5b:21:e2:e7:22: 95:98:d3:33:42:e4:33:2e:41:97:2e:d8:78:bd:3e:3f:71:ca: 09:d8:2d:62:20:cf:66:82:cd:c7:0f:14:f4:3a:23:0f:b8:d0: bc:b2:35:2b:7b:9d:af:4d:56:d7:cb:3d:ac:68:e0:45:75:5b: 78:8e:d0:b7:fa:50:b2:a0:82:2e:6c:d2:09:7d:e5:c5:e5:0c: e6:54:a8:6f:b3:a6:e7:6d:02:c7:8e:22:09:a7:44:a4:17:59: 46:57:e3:ed:50:7e:f8:b8:24:35:34:f4:ab:dd:d1:e3:24:5a: 52:58:fe:02:0a:a6:80:a3:6d:72:bc:d0:23:a6:d2:a3:5d:fc: 0a:92:52:de:8e:aa:c2:c3:9b:14:cf:a1:23:0e:ea:99:45:f7: 16:08:83:3a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OSc3VmzUfwcTF+mOXPqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjIyM2NhZjI2N2NhMzk0YzNjM2EzNWMwNjlmMzZiZWY0M2NkZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwFYuJbxeAoHbJrlnP4VUR60tlTs LN4AjRlH5mjdGu1ZVRC49fqGhZwvexKqw/+WkJt9GpSTWLpSkhC+Vf71mELmZe24 1E4OegRvD7cYF6eGi/Q7j/ZTbC17zzsuDWahNwzyUG5GsSQtWvkzlszfCS58ualo toM3p+XU5N7PMC8hbpFH+KzsmTPd6AmkE2YgcdG3wGnSxVSV4K0jzW8eGBE+z/sd yxrg8ci7nJyCfQDgBn66g2uFjLlcnfCMEIEVKUgdXGfJNnCCeL2iuZ30gWgl4HZ+ 3xHy95KjjcpOF1sagTqTbGcOjPVEe+r5FcVkIp3Jg8IBWUAwp0HTNPyODwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN8iPK8mfKOUw8OjXAafNr70PN8rMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvM3lJOHJ5WjhvNVREdzZOY0JwODJ2dlE4M3lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoP MA0GCSqGSIb3DQEBCwUAA4IBAQBZI9PiwwGvGVIBaAal3CRldharewY2ihgImNf0 ft12z+NYThnT93R4KfMqGpnlxBp8oqbOTdHK4MS5TBIO0seH0nyoFTp35oW+bskU N9qn9XBxFwixKDbdSBYS+HrJ5/C6LszjjKtKWyHi5yKVmNMzQuQzLkGXLth4vT4/ ccoJ2C1iIM9mgs3HDxT0OiMPuNC8sjUre52vTVbXyz2saOBFdVt4jtC3+lCyoIIu bNIJfeXF5QzmVKhvs6bnbQLHjiIJp0SkF1lGV+PtUH74uCQ1NPSr3dHjJFpSWP4C CqaAo21yvNAjptKjXfwKklLejqrCw5sUz6EjDuqZRfcWCIM6 -----END CERTIFICATE-----Generated at Mon Jan 19 18:02:10 2026 by rpki-client