This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa File: 8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa (raw, json) Hash identifier: ggJLncnSKUJfbzTsD0cgxExXtCcR+Y6TnGQ+ZK/8VVg= Subject key identifier: F1:AE:92:F9:40:BE:3F:35:4D:7E:E2:87:E1:51:1C:48:48:BF:DF:1B Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40 Certificate serial: 019C23334C99A409E3CDC218FC938F46E01B Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa Signing time: Tue 03 Feb 2026 11:11:30 +0000 ROA not before: Tue 03 Feb 2026 11:11:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210475 IP address blocks: 2001:67c:2ff8::/48 maxlen: 48 2a0a:3e42::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:33:4c:99:a4:09:e3:cd:c2:18:fc:93:8f:46:e0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40 Validity Not Before: Feb 3 11:11:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1ae92f940be3f354d7ee287e1511c4848bfdf1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:22:b5:83:7a:e6:86:dd:d4:25:04:4b:e9: 50:a7:41:c0:a6:1d:97:26:e2:59:34:16:31:e6:31: cd:73:39:a9:86:df:5f:2d:91:3b:ad:3c:18:f8:c8: 0c:c0:5d:fc:16:a3:73:fc:24:ce:0f:49:97:6d:94: c5:94:8e:22:d7:52:b7:f9:ec:45:2e:e1:b8:82:1f: 2d:3d:a2:39:a2:9d:fa:da:13:af:fa:a8:d0:38:49: 15:92:72:6b:e9:56:5c:5d:97:6e:b2:f2:37:d5:dc: da:2c:47:ba:9a:ba:8a:ca:e1:9c:44:9a:3d:74:07: 89:60:18:06:8e:74:57:c5:df:df:f7:26:03:c5:b9: 0d:a3:4b:52:8b:08:ca:f3:5f:38:3c:54:4c:79:bb: e7:d0:9d:0e:50:5a:56:57:aa:e2:bb:90:0c:3f:85: 71:c7:f1:82:ec:58:04:48:6f:e4:9f:6f:17:bc:b6: 2c:55:b9:46:db:18:e7:e7:ba:55:d8:e9:eb:98:ef: 9e:1a:b9:f2:56:b7:d2:49:93:aa:07:61:e5:56:1a: 02:e9:cf:ad:a9:2a:f7:49:b5:60:a1:1c:24:1c:ff: 9c:52:64:72:fb:7c:5b:a4:9f:9e:c5:2b:b9:8a:02: 4a:46:ba:0a:e5:e5:18:91:e3:91:6e:2e:53:9a:d1: bf:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AE:92:F9:40:BE:3F:35:4D:7E:E2:87:E1:51:1C:48:48:BF:DF:1B X509v3 Authority Key Identifier: keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2ff8::/48 2a0a:3e42::/32 Signature Algorithm: sha256WithRSAEncryption 64:45:ad:35:5c:e4:9b:57:64:fe:9e:7b:ef:8b:8a:8f:9f:1b: 79:40:fc:89:90:5a:20:d3:6e:91:c0:1e:4b:46:c4:5a:98:7d: c6:33:bb:fb:ad:08:03:13:7c:c3:e5:11:dc:a0:98:d0:bc:b0: 56:f0:a7:23:53:71:8a:2b:1d:84:57:e7:39:80:15:55:d1:d8: f6:75:e1:3a:20:cc:3a:3f:2c:55:3e:af:44:d1:57:85:c8:d5: 6f:7c:25:f7:29:b9:f5:7d:69:60:4a:72:77:45:15:68:79:fc: 22:ba:b5:98:0d:38:0c:45:8a:b8:5f:c3:83:3c:13:30:18:84: 79:b3:6e:f0:fa:37:b2:ba:79:6d:ca:b6:ef:65:cc:d7:a1:64: 9e:d5:4f:96:4c:0d:34:0f:ae:13:f2:5d:27:f0:ab:7d:b9:4d: 6d:b5:1a:d0:92:81:f4:ae:f2:79:61:3d:c4:34:90:33:77:39: 1f:5a:90:32:c3:a9:bf:b1:5c:fb:ce:aa:c8:09:33:aa:76:67: 5b:20:37:d9:45:ac:4a:74:b6:f2:bc:64:0e:c5:50:2f:b7:21: f3:0f:0d:d8:47:0c:10:5d:a4:1c:1a:0a:df:1a:a0:d3:1f:94: c0:53:3e:5f:e1:9c:ad:68:a8:4a:ae:05:88:43:da:04:e8:fa: f5:9c:fe:10 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZwjM0yZpAnjzcIY/JOPRuAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTM4NjcyODQxMzJlZWNjZDU2ZTZiMTU1Y2Y3ZjYyN2Qy NjRmNDAwHhcNMjYwMjAzMTExMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWFlOTJmOTQwYmUzZjM1NGQ3ZWUyODdlMTUxMWM0ODQ4YmZkZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp0itYN65obd1CUES+lQp0HAph2X JuJZNBYx5jHNczmpht9fLZE7rTwY+MgMwF38FqNz/CTOD0mXbZTFlI4i11K3+exF LuG4gh8tPaI5op362hOv+qjQOEkVknJr6VZcXZdusvI31dzaLEe6mrqKyuGcRJo9 dAeJYBgGjnRXxd/f9yYDxbkNo0tSiwjK8184PFRMebvn0J0OUFpWV6riu5AMP4Vx x/GC7FgESG/kn28XvLYsVblG2xjn57pV2OnrmO+eGrnyVrfSSZOqB2HlVhoC6c+t qSr3SbVgoRwkHP+cUmRy+3xbpJ+exSu5igJKRroK5eUYkeORbi5TmtG/CwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFPGukvlAvj81TX7ih+FRHEhIv98bMB8GA1UdIwQY MBaAFDtThnKEEy7szVbmsVXPf2J9Jk9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zYWQ1NTgtNTFhMC00ODAwLWJiZjgt YjIwODU4ZTI5OTNiLzEvOGE2Uy1VQy1QelZOZnVLSDRWRWNTRWlfM3hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zYWQ1NTgtNTFhMC00ODAwLWJiZjgtYjIwODU4ZTI5OTNi LzEvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwcAIAEGfC/4 AwUAKgo+QjANBgkqhkiG9w0BAQsFAAOCAQEAZEWtNVzkm1dk/p5774uKj58beUD8 iZBaINNukcAeS0bEWph9xjO7+60IAxN8w+UR3KCY0LywVvCnI1NxiisdhFfnOYAV VdHY9nXhOiDMOj8sVT6vRNFXhcjVb3wl9ym59X1pYEpyd0UVaHn8Irq1mA04DEWK uF/DgzwTMBiEebNu8Po3srp5bcq272XM16FkntVPlkwNNA+uE/JdJ/CrfblNbbUa 0JKB9K7yeWE9xDSQM3c5H1qQMsOpv7Fc+86qyAkzqnZnWyA32UWsSnS28rxkDsVQ L7ch8w8N2EcMEF2kHBoK3xqg0x+UwFM+X+GcrWioSq4FiEPaBOj69Zz+EA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:02 2026 by rpki-client