This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/3tnIJCAJuTxPdCjKH0LFyvk_cWc.roa File: 3tnIJCAJuTxPdCjKH0LFyvk_cWc.roa (raw, json) Hash identifier: VmbvOjv/8VA94bTsBK4HjtZFv7RcluBdGePjIzuzrpE= Subject key identifier: DE:D9:C8:24:20:09:B9:3C:4F:74:28:CA:1F:42:C5:CA:F9:3F:71:67 Certificate issuer: /CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318 Certificate serial: 019B7E38D3ABFD38ECC53A7FE4831782AD3E Authority key identifier: AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/3tnIJCAJuTxPdCjKH0LFyvk_cWc.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47937 IP address blocks: 2001:678:c70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d3:ab:fd:38:ec:c5:3a:7f:e4:83:17:82:ad:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ded9c8242009b93c4f7428ca1f42c5caf93f7167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:79:ff:c9:77:37:40:88:be:82:f2:21:18: 16:55:52:24:07:30:9e:43:01:13:14:2b:84:c0:39: b7:88:42:68:46:b7:b9:6e:70:96:06:63:b8:c1:d3: d8:e1:e3:c4:ad:f9:56:68:8b:90:32:f1:fc:45:6e: cf:36:1e:15:0d:a6:8f:bb:cc:a7:fb:e6:4b:30:60: f5:0d:27:06:db:6a:db:14:2f:96:3b:03:00:da:5c: d0:dd:52:f1:79:5b:d4:53:f7:e4:f0:4f:61:33:01: 14:20:ee:8b:50:08:1a:df:1b:dc:b2:41:d4:1a:d1: f1:1c:7b:dd:e1:a1:32:a7:68:b9:ea:0b:e9:d7:00: 3c:91:63:0e:7f:72:46:c2:ee:d2:99:44:7c:25:1b: 13:cb:18:8a:e8:90:3c:44:65:23:03:6c:2c:0b:44: c0:88:09:6c:28:5a:6d:db:79:3a:99:cf:d4:da:05: 8f:bc:47:4b:74:17:79:b9:28:fa:40:c2:91:96:1c: 71:3e:bf:7e:b2:53:bc:e3:fa:19:9c:9c:e2:6d:89: 19:ed:5d:87:14:45:f4:ba:dc:35:f3:26:35:74:2b: 64:52:8f:33:ed:5b:3f:75:f4:08:18:71:2e:76:e6: 91:5a:d9:cd:84:1a:af:14:b7:1a:33:50:a1:36:12: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D9:C8:24:20:09:B9:3C:4F:74:28:CA:1F:42:C5:CA:F9:3F:71:67 X509v3 Authority Key Identifier: keyid:AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/3tnIJCAJuTxPdCjKH0LFyvk_cWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c70::/48 Signature Algorithm: sha256WithRSAEncryption b2:6f:5a:08:cd:89:02:be:b9:13:8f:c1:d4:36:59:13:57:cc: e9:7c:67:8d:1a:b2:7e:ae:b2:d1:d9:70:9a:ae:6a:02:a0:29: 68:46:42:83:ca:79:99:dd:da:da:91:b6:8c:fa:e6:1b:4d:e6: 40:79:cc:df:21:95:44:31:11:f1:9a:14:ee:e1:1a:0e:a4:8e: a5:c2:a4:9f:1e:49:e7:60:ea:c9:e5:ed:88:98:75:ed:80:75: 38:40:9e:8a:30:91:d7:87:21:70:19:9c:f6:aa:1d:80:09:95: a1:25:a7:7b:9b:de:9f:b8:81:18:71:a4:fd:de:b4:aa:19:9c: 51:fc:02:d8:8a:e9:93:3f:48:bc:ba:e2:2b:0c:bb:ef:51:f3: 8d:57:ca:2b:ac:65:38:e1:6f:50:c3:8b:db:30:51:2c:e3:b4: fd:a3:55:de:6a:ab:cf:ef:fc:22:55:26:5f:b6:7e:9d:d2:07: 3a:9c:ef:c8:33:2e:bd:55:45:29:41:df:f6:fe:85:3e:cb:06: 81:ac:cc:d4:c5:ac:15:0c:49:80:37:63:89:4e:23:42:90:5d: cd:4e:aa:e6:e9:19:87:5c:f7:5e:2d:03:fc:fc:4e:8c:af:23: 4a:86:33:ff:86:42:8e:7b:4c:62:d7:cc:3b:91:a4:d3:76:34: 23:aa:72:19 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ONOr/TjsxTp/5IMXgq0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYzcwOWM3Y2QyNTQ0NWNiMTgzY2ZjZmViZDRiMmJmYzc4 NGMzMTgwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWQ5YzgyNDIwMDliOTNjNGY3NDI4Y2ExZjQyYzVjYWY5M2Y3MTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDh5/8l3N0CIvoLyIRgWVVIkBzCe QwETFCuEwDm3iEJoRre5bnCWBmO4wdPY4ePErflWaIuQMvH8RW7PNh4VDaaPu8yn ++ZLMGD1DScG22rbFC+WOwMA2lzQ3VLxeVvUU/fk8E9hMwEUIO6LUAga3xvcskHU GtHxHHvd4aEyp2i56gvp1wA8kWMOf3JGwu7SmUR8JRsTyxiK6JA8RGUjA2wsC0TA iAlsKFpt23k6mc/U2gWPvEdLdBd5uSj6QMKRlhxxPr9+slO84/oZnJzibYkZ7V2H FEX0utw18yY1dCtkUo8z7Vs/dfQIGHEuduaRWtnNhBqvFLcaM1ChNhLMWwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN7ZyCQgCbk8T3Qoyh9Cxcr5P3FnMB8GA1UdIwQY MBaAFK7HCcfNJURcsYPPz+vUsr/HhMMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85ZmEwOTMtNDNkNi00YWEwLThhOTUt ZjdmYThlMmZmOTVmLzEvM3RuSUpDQUp1VHhQZENqS0gwTEZ5dmtfY1djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85ZmEwOTMtNDNkNi00YWEwLThhOTUtZjdmYThlMmZmOTVm LzEvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAxw MA0GCSqGSIb3DQEBCwUAA4IBAQCyb1oIzYkCvrkTj8HUNlkTV8zpfGeNGrJ+rrLR 2XCarmoCoCloRkKDynmZ3drakbaM+uYbTeZAeczfIZVEMRHxmhTu4RoOpI6lwqSf HknnYOrJ5e2ImHXtgHU4QJ6KMJHXhyFwGZz2qh2ACZWhJad7m96fuIEYcaT93rSq GZxR/ALYiumTP0i8uuIrDLvvUfONV8orrGU44W9Qw4vbMFEs47T9o1XeaqvP7/wi VSZftn6d0gc6nO/IMy69VUUpQd/2/oU+ywaBrMzUxawVDEmAN2OJTiNCkF3NTqrm 6RmHXPdeLQP8/E6MryNKhjP/hkKOe0xi18w7kaTTdjQjqnIZ -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:21 2026 by rpki-client