This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3VzyRzT5Q69pd2gkVeEltvKWRIM.roa File: 3VzyRzT5Q69pd2gkVeEltvKWRIM.roa (raw, json) Hash identifier: T6YFoGqqqa6p18AJ9fYKnqWjMbhe98bynr/ipasz15E= Subject key identifier: DD:5C:F2:47:34:F9:43:AF:69:77:68:24:55:E1:25:B6:F2:96:44:83 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D6A9395AE37BF2E3918B64B51910B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3VzyRzT5Q69pd2gkVeEltvKWRIM.roa Signing time: Fri 02 Jan 2026 06:20:32 +0000 ROA not before: Fri 02 Jan 2026 06:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214288 IP address blocks: 2a0e:97c0:460::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:6a:93:95:ae:37:bf:2e:39:18:b6:4b:51:91:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd5cf24734f943af6977682455e125b6f2964483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:4a:7c:24:48:8b:3b:de:6e:74:c0:0b:b5: 96:0b:6a:da:09:08:b9:6f:64:82:73:25:5d:36:23: a7:43:58:10:78:12:42:09:22:8b:32:90:8f:b4:63: 19:da:e9:09:81:93:a8:8d:33:ec:f5:e1:75:50:7b: b2:d5:5b:b1:68:27:07:ba:4f:9c:50:93:7e:40:ed: a5:a0:e7:5b:c1:80:de:4a:c0:a8:5b:7a:c7:43:5d: 96:25:96:8b:1d:a1:f5:34:ed:ab:4a:34:10:a4:01: 43:96:5d:c4:c2:49:3c:b1:38:5d:56:ed:2e:9e:1e: b3:84:a6:62:f9:99:8e:f6:e9:c8:4c:ff:f3:a0:6f: ad:92:e2:11:0e:4d:57:83:02:bb:7a:94:46:db:29: 7d:c1:b2:c6:bf:1b:ad:23:1e:ab:39:60:52:13:54: f7:26:6c:f6:2f:9e:ce:48:04:6f:ef:13:68:34:c3: 57:bf:14:ed:db:a1:4a:e4:d4:80:c5:3e:5e:38:47: 38:17:fb:4e:21:76:29:9e:5f:1f:b1:53:17:74:42: 68:02:dd:ac:59:d7:a0:6d:8a:f0:8c:a8:54:11:ea: 2e:41:40:69:d6:e0:f0:24:b4:b5:87:d1:bb:2d:b6: 45:6b:00:fc:de:39:c0:bc:34:89:97:ee:64:f5:a8: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5C:F2:47:34:F9:43:AF:69:77:68:24:55:E1:25:B6:F2:96:44:83 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3VzyRzT5Q69pd2gkVeEltvKWRIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:460::/44 Signature Algorithm: sha256WithRSAEncryption c8:24:08:5c:93:d3:46:06:4f:3d:20:4f:be:81:2e:46:50:21: 62:93:6f:0b:33:ac:2e:7a:31:52:79:81:cc:3e:b4:1e:37:47: 76:58:3f:5d:dc:09:11:b9:09:6c:39:25:af:30:22:9e:32:a7: 8b:af:9b:b3:1f:de:be:20:3b:84:8d:17:8f:b8:e4:ee:38:1d: 73:e6:5d:8d:7a:ab:3c:f3:98:5b:3e:ae:cc:bf:a8:9f:06:7c: 05:48:24:da:24:d4:a7:79:0a:a2:66:f3:7a:ec:04:f1:7b:a6: 9f:ef:99:20:1e:37:7f:bd:74:d8:7f:98:12:b5:8c:6b:f0:cb: 83:73:e5:23:8f:cd:66:6c:68:98:28:84:cd:30:9a:e0:22:33: 6a:ce:66:a3:6c:6d:bf:04:98:6c:02:78:1a:81:7e:0e:75:ff: 69:0d:c8:e6:b1:3c:5d:68:28:15:b0:d1:f5:4d:c1:1c:aa:bd: 3a:10:69:aa:46:63:1b:c8:1f:c9:24:17:50:c9:d8:30:f9:56: 88:21:92:e5:d1:81:90:11:bb:65:ea:8f:b9:ec:29:98:f1:04: d3:31:10:14:7a:db:ff:95:51:22:0a:94:04:20:e6:9a:b8:ab: 00:86:07:ea:ae:2e:de:b9:09:af:38:81:d7:3d:9d:95:51:77: df:fe:b9:cf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XWqTla43vy45GLZLUZELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDVjZjI0NzM0Zjk0M2FmNjk3NzY4MjQ1NWUxMjViNmYyOTY0NDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCFKfCRIizvebnTAC7WWC2raCQi5 b2SCcyVdNiOnQ1gQeBJCCSKLMpCPtGMZ2ukJgZOojTPs9eF1UHuy1VuxaCcHuk+c UJN+QO2loOdbwYDeSsCoW3rHQ12WJZaLHaH1NO2rSjQQpAFDll3Ewkk8sThdVu0u nh6zhKZi+ZmO9unITP/zoG+tkuIRDk1XgwK7epRG2yl9wbLGvxutIx6rOWBSE1T3 Jmz2L57OSARv7xNoNMNXvxTt26FK5NSAxT5eOEc4F/tOIXYpnl8fsVMXdEJoAt2s WdegbYrwjKhUEeouQUBp1uDwJLS1h9G7LbZFawD83jnAvDSJl+5k9aiHEwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN1c8kc0+UOvaXdoJFXhJbbylkSDMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvM1Z6eVJ6VDVRNjlwZDJna1ZlRWx0dktXUklNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwARg MA0GCSqGSIb3DQEBCwUAA4IBAQDIJAhck9NGBk89IE++gS5GUCFik28LM6wuejFS eYHMPrQeN0d2WD9d3AkRuQlsOSWvMCKeMqeLr5uzH96+IDuEjRePuOTuOB1z5l2N eqs885hbPq7Mv6ifBnwFSCTaJNSneQqiZvN67ATxe6af75kgHjd/vXTYf5gStYxr 8MuDc+Ujj81mbGiYKITNMJrgIjNqzmajbG2/BJhsAngagX4Odf9pDcjmsTxdaCgV sNH1TcEcqr06EGmqRmMbyB/JJBdQydgw+VaIIZLl0YGQEbtl6o+57CmY8QTTMRAU etv/lVEiCpQEIOaauKsAhgfqri7euQmvOIHXPZ2VUXff/rnP -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:12 2026 by rpki-client