This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3icWZ0l13CoXwoj1OeRHgYert90.roa File: 3icWZ0l13CoXwoj1OeRHgYert90.roa (raw, json) Hash identifier: wsyKBXi0gaGQCqdHDVQuBk8nFgShwbyQoPjf+Y1r3Qk= Subject key identifier: DE:27:16:67:49:75:DC:2A:17:C2:88:F5:39:E4:47:81:87:AB:B7:DD Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA28CBA4919F7FE4AECADF20EF505E Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3icWZ0l13CoXwoj1OeRHgYert90.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53667 IP address blocks: 2a0d:87c0::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:28:cb:a4:91:9f:7f:e4:ae:ca:df:20:ef:50:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de2716674975dc2a17c288f539e4478187abb7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:bd:96:da:68:b3:e3:b3:a3:01:fb:49:3e: 0d:aa:f5:db:14:95:5c:14:69:2e:55:5b:cb:75:8f: 66:11:9a:72:31:6c:23:ee:7e:4e:fc:9c:a0:94:f3: 11:f4:5d:a5:2a:9f:97:8b:e4:5f:63:6d:aa:5e:1b: 3b:ba:c1:ba:ea:05:a3:e4:92:fb:f2:7c:0a:7e:57: ed:b9:e7:e8:fd:2f:98:0d:26:a9:4f:3b:07:82:1f: f4:db:1c:11:ed:a2:ff:0a:14:36:fb:cb:11:75:ad: 02:2c:a7:2c:80:f2:d6:53:dd:e6:fe:0c:a0:03:96: b1:28:5e:02:53:dd:36:78:64:9e:a2:73:e8:88:2f: be:61:b3:ff:75:5b:d4:a6:ce:e6:ce:6e:2f:01:51: 53:d9:95:f3:02:03:91:c8:69:41:dc:a4:04:4a:91: a6:9a:e1:1a:a7:fa:2a:10:78:1c:8d:48:43:12:56: 69:ce:7e:4b:40:b4:bf:0d:a0:dc:d7:d6:0c:bb:4e: b7:7e:d7:d4:06:ac:b8:6a:83:aa:16:9d:09:2f:e0: fe:f9:78:33:17:fe:53:cc:5f:7e:f1:93:3b:11:51: 91:be:a4:2b:d5:3d:33:6c:9e:09:d2:c7:4b:fd:f6: 7f:0e:ae:c7:12:8b:3d:ab:ef:ed:1f:5f:67:c8:32: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:27:16:67:49:75:DC:2A:17:C2:88:F5:39:E4:47:81:87:AB:B7:DD X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3icWZ0l13CoXwoj1OeRHgYert90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:87c0::/29 Signature Algorithm: sha256WithRSAEncryption 8d:76:a8:39:79:07:74:80:36:bd:ce:53:9e:b9:05:8e:f3:ef: 90:4e:da:d1:f2:5f:f2:43:ef:c3:55:4c:c5:8f:4f:96:41:db: 01:4c:d2:83:78:97:73:fa:b9:3e:0e:ba:50:95:4d:f3:85:db: 5c:92:bc:43:3a:a0:83:8f:84:82:4a:d6:b0:fe:9b:3b:3e:7d: f8:2d:f7:07:fa:f7:56:f0:10:ec:7c:5c:40:6e:62:d0:ae:86: e3:22:35:e8:89:c6:96:4e:ff:fb:bc:f1:f1:01:28:ce:c3:bc: 5e:44:28:ae:00:38:a5:9b:9e:56:af:96:1f:d7:7d:95:c7:29: 3a:9d:3d:0a:23:c2:6c:1e:68:3e:bd:81:6c:8c:23:18:eb:67: 83:d2:e9:6d:d5:1c:45:0e:7b:08:42:48:33:a4:d9:b1:39:aa: 13:c3:0a:91:73:1b:69:4e:15:7c:89:5b:b1:89:dd:3c:0f:9c: 06:f8:b0:86:e5:7c:04:cf:81:d4:6f:4b:0a:7a:4c:f3:21:dd: 5f:fb:5e:13:67:6a:66:6d:10:79:9f:8c:7e:c9:37:74:c7:b9: fd:27:5d:d8:28:2e:c5:6b:65:2f:05:63:c0:d1:e8:80:92:04: 35:14:cf:23:29:9c:8e:54:d1:10:53:64:0c:b9:ab:df:53:12: 01:8e:d8:3d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yijLpJGff+Suyt8g71BeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTI3MTY2NzQ5NzVkYzJhMTdjMjg4ZjUzOWU0NDc4MTg3YWJiN2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLS9ltpos+OzowH7ST4NqvXbFJVc FGkuVVvLdY9mEZpyMWwj7n5O/JyglPMR9F2lKp+Xi+RfY22qXhs7usG66gWj5JL7 8nwKflftuefo/S+YDSapTzsHgh/02xwR7aL/ChQ2+8sRda0CLKcsgPLWU93m/gyg A5axKF4CU902eGSeonPoiC++YbP/dVvUps7mzm4vAVFT2ZXzAgORyGlB3KQESpGm muEap/oqEHgcjUhDElZpzn5LQLS/DaDc19YMu063ftfUBqy4aoOqFp0JL+D++Xgz F/5TzF9+8ZM7EVGRvqQr1T0zbJ4J0sdL/fZ/Dq7HEos9q+/tH19nyDK89QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFN4nFmdJddwqF8KI9TnkR4GHq7fdMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvM2ljV1owbDEzQ29Yd29qMU9lUkhnWWVydDkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg2HwDAN BgkqhkiG9w0BAQsFAAOCAQEAjXaoOXkHdIA2vc5TnrkFjvPvkE7a0fJf8kPvw1VM xY9PlkHbAUzSg3iXc/q5Pg66UJVN84XbXJK8Qzqgg4+EgkrWsP6bOz59+C33B/r3 VvAQ7HxcQG5i0K6G4yI16InGlk7/+7zx8QEozsO8XkQorgA4pZueVq+WH9d9lccp Op09CiPCbB5oPr2BbIwjGOtng9LpbdUcRQ57CEJIM6TZsTmqE8MKkXMbaU4VfIlb sYndPA+cBviwhuV8BM+B1G9LCnpM8yHdX/teE2dqZm0QeZ+Mfsk3dMe5/Sdd2Cgu xWtlLwVjwNHogJIENRTPIymcjlTREFNkDLmr31MSAY7YPQ== -----END CERTIFICATE-----Generated at Mon Jan 19 21:26:56 2026 by rpki-client