This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3PPo2FD3ufZxgWkyxtJ8xvKmlys.roa File: 3PPo2FD3ufZxgWkyxtJ8xvKmlys.roa (raw, json) Hash identifier: f0uX/QFNATArJz32ojjiXPbnQkKG9rjRXd7yHDweNGY= Subject key identifier: DC:F3:E8:D8:50:F7:B9:F6:71:81:69:32:C6:D2:7C:C6:F2:A6:97:2B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA4D53C0B406EEC02CF83A1F91AB3 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3PPo2FD3ufZxgWkyxtJ8xvKmlys.roa Signing time: Fri 02 Jan 2026 06:19:42 +0000 ROA not before: Fri 02 Jan 2026 06:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24381 IP address blocks: 2a0e:b107:2220::/45 maxlen: 48 2a0e:b107:2228::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a4:d5:3c:0b:40:6e:ec:02:cf:83:a1:f9:1a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcf3e8d850f7b9f671816932c6d27cc6f2a6972b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:92:72:fe:2b:9f:d3:63:38:a3:3c:e3:6f: aa:8e:74:d6:dc:9c:f8:9c:66:36:4c:d4:47:c4:a5: 5f:45:88:68:40:14:c7:a4:22:8b:4c:87:b6:ae:7d: 52:f5:b6:83:c8:c6:f3:6b:a9:1f:14:cb:a2:e5:61: 1f:9c:e1:5d:11:fb:2b:c9:5c:e9:63:fc:0e:79:7c: 4b:07:10:b5:ce:58:64:f1:fa:51:38:6d:8c:39:99: 86:ab:ed:11:29:d0:16:09:79:10:49:85:6c:bc:cf: 18:38:11:46:60:ec:96:46:27:f6:72:44:f6:9c:81: f5:49:3d:a7:29:fa:d6:d8:55:82:0f:3c:ae:d0:90: e0:b5:9e:2d:f8:fd:25:22:d4:fc:fb:08:65:e2:d2: 80:92:84:90:97:8d:82:80:b7:ee:6a:80:c8:8d:45: 57:bd:d4:51:d7:32:80:24:cc:f8:72:9f:f5:14:cb: 92:3c:47:46:bd:1d:d2:6f:95:0d:e1:e0:01:55:9c: 8c:31:50:a5:01:39:7a:04:63:1b:a5:01:db:75:1a: 17:4b:f3:1d:1b:c1:76:f5:a8:3d:aa:68:f9:97:1d: 3d:75:6a:eb:13:2e:5a:0b:db:e4:78:97:bd:89:71: b5:5a:04:bf:6f:f7:92:3e:94:c3:64:26:c6:83:e6: ac:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F3:E8:D8:50:F7:B9:F6:71:81:69:32:C6:D2:7C:C6:F2:A6:97:2B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3PPo2FD3ufZxgWkyxtJ8xvKmlys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2220::/44 Signature Algorithm: sha256WithRSAEncryption 4c:9c:fe:0b:4e:77:b3:57:e0:fd:4e:d0:f8:22:00:76:ca:cc: ef:2f:8a:d4:a7:60:0e:9b:62:0f:f0:a7:c0:35:76:e3:54:fa: f0:2d:17:ae:8d:87:86:f9:17:f7:51:06:ac:ed:83:75:03:20: 32:e4:d2:e1:be:29:51:d3:9b:72:c7:35:49:f6:71:06:bb:c7: 5f:fc:70:09:5d:7a:bd:20:a6:f5:c9:de:44:5e:d0:5e:69:d4: f3:94:d4:fb:33:48:6d:6e:a7:23:91:36:13:9d:f3:50:70:e1: d2:8f:83:6e:01:27:cf:18:d1:bc:be:5f:c2:e9:7a:94:42:24: 9b:47:ad:1e:65:a2:18:94:96:6f:a6:52:01:cb:2b:ae:b2:f3: e2:43:54:bb:73:00:7f:98:74:29:ac:ce:3e:f6:b2:e5:d2:39: 59:bc:80:55:19:ba:06:ee:7a:ea:52:b1:15:1c:6b:94:22:d7: 9a:72:91:0e:ec:fe:30:04:8c:73:ce:06:4f:8d:df:d3:be:31: be:e7:ec:44:6b:6a:29:97:94:ef:f0:88:7f:15:b0:1c:7a:8c: 94:fa:b0:14:4d:f1:c4:8b:e7:42:f7:17:06:63:4f:3d:b6:d8: 2c:6c:92:c5:ec:a6:f7:87:5f:5d:a2:70:b7:65:55:08:2d:99: e1:90:24:a6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XKTVPAtAbuwCz4Oh+RqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2YzZThkODUwZjdiOWY2NzE4MTY5MzJjNmQyN2NjNmYyYTY5NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VqScv4rn9NjOKM842+qjnTW3Jz4 nGY2TNRHxKVfRYhoQBTHpCKLTIe2rn1S9baDyMbza6kfFMui5WEfnOFdEfsryVzp Y/wOeXxLBxC1zlhk8fpROG2MOZmGq+0RKdAWCXkQSYVsvM8YOBFGYOyWRif2ckT2 nIH1ST2nKfrW2FWCDzyu0JDgtZ4t+P0lItT8+whl4tKAkoSQl42CgLfuaoDIjUVX vdRR1zKAJMz4cp/1FMuSPEdGvR3Sb5UN4eABVZyMMVClATl6BGMbpQHbdRoXS/Md G8F29ag9qmj5lx09dWrrEy5aC9vkeJe9iXG1WgS/b/eSPpTDZCbGg+asrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNzz6NhQ97n2cYFpMsbSfMbyppcrMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvM1BQbzJGRDN1Zlp4Z1dreXh0Sjh4dkttbHlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xByIg MA0GCSqGSIb3DQEBCwUAA4IBAQBMnP4LTnezV+D9TtD4IgB2yszvL4rUp2AOm2IP 8KfANXbjVPrwLReujYeG+Rf3UQas7YN1AyAy5NLhvilR05tyxzVJ9nEGu8df/HAJ XXq9IKb1yd5EXtBeadTzlNT7M0htbqcjkTYTnfNQcOHSj4NuASfPGNG8vl/C6XqU QiSbR60eZaIYlJZvplIByyuusvPiQ1S7cwB/mHQprM4+9rLl0jlZvIBVGboG7nrq UrEVHGuUIteacpEO7P4wBIxzzgZPjd/TvjG+5+xEa2opl5Tv8Ih/FbAceoyU+rAU TfHEi+dC9xcGY089ttgsbJLF7Kb3h19donC3ZVUILZnhkCSm -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:23 2026 by rpki-client