This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A3PNTjQ3dYy1fkh0Hs52JaHjrVw.roa File: A3PNTjQ3dYy1fkh0Hs52JaHjrVw.roa (raw, json) Hash identifier: YbaCZi08bbelgr3b6461WkYCY/Y91IRmRPSl1LktpdM= Subject key identifier: 03:73:CD:4E:34:37:75:8C:B5:7E:48:74:1E:CE:76:25:A1:E3:AD:5C Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D46D23704A693B585EC648B199285 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A3PNTjQ3dYy1fkh0Hs52JaHjrVw.roa Signing time: Fri 02 Jan 2026 06:20:23 +0000 ROA not before: Fri 02 Jan 2026 06:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211940 IP address blocks: 2a0e:b107:9fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:46:d2:37:04:a6:93:b5:85:ec:64:8b:19:92:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0373cd4e3437758cb57e48741ece7625a1e3ad5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:76:96:ae:8e:4e:5c:b4:e4:62:e3:53:73: 7e:0e:79:14:0b:fd:d9:ce:b9:9e:8c:25:d7:3d:f7: f2:7a:23:64:22:2d:8e:d0:fe:1f:bc:c0:1a:e1:66: 2b:04:94:d9:52:82:47:bf:8b:ac:a4:17:10:e7:d5: 4e:3d:be:96:d1:42:58:8f:42:9e:a1:ce:79:dd:7d: 15:dc:e1:50:2c:95:9f:4d:ad:77:02:38:c5:88:f6: ab:1c:08:1c:41:04:ea:47:38:e3:f2:8e:aa:7e:52: 93:8a:af:ba:10:13:8d:d7:27:7a:b2:a9:5d:21:9b: 74:56:b2:14:58:de:6a:e2:86:05:63:3a:1e:5d:93: 6b:9c:cb:aa:88:39:77:82:58:0b:69:82:98:e9:ff: d4:06:09:ea:ec:b8:8a:bf:e7:f9:9a:fe:93:c5:b2: 51:a1:79:a3:8c:a5:a0:fa:97:09:8c:d4:89:40:3b: 63:42:8f:27:07:78:f8:a0:5c:9d:9a:e3:25:8e:2f: b6:bc:96:24:1b:1a:d0:8d:74:7a:2e:91:10:ba:b1: df:f3:00:2d:6c:fb:14:e9:f9:45:fa:09:e3:bc:ab: a3:e8:f3:d2:f9:c5:52:49:36:96:54:95:7b:d1:92: a3:20:8b:e4:65:e5:8e:8f:59:82:7b:8e:90:74:93: 03:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:73:CD:4E:34:37:75:8C:B5:7E:48:74:1E:CE:76:25:A1:E3:AD:5C X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A3PNTjQ3dYy1fkh0Hs52JaHjrVw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:9fa::/48 Signature Algorithm: sha256WithRSAEncryption 18:db:19:97:84:e4:00:8c:7e:b7:94:f4:1b:e7:9b:99:fd:1a: 45:8d:ef:fe:68:78:81:5f:a5:03:dc:45:2c:69:55:7d:30:90: 01:b0:c3:af:e8:92:86:61:1c:b7:99:93:2b:cd:28:b5:d5:2b: b4:ed:45:36:1b:86:ed:14:56:66:fb:97:b8:59:41:86:b6:07: 70:07:60:b3:1b:fa:e8:cc:09:ee:0c:fb:f8:22:d9:8c:83:26: 7d:b0:be:58:8d:21:91:73:91:a2:10:43:76:0f:87:3e:16:b3: 2d:4e:0f:51:1b:e7:e5:43:34:0c:db:13:4f:c6:26:88:03:72: b8:03:2a:b6:ca:4d:6e:46:24:e1:ae:46:90:b2:e0:cd:42:23: 06:f9:04:ea:61:c1:59:fe:d2:a6:d4:75:5d:5b:39:0b:6f:e8: d9:c1:b7:ee:94:69:ff:75:59:bb:b6:b9:da:65:97:9f:24:24: 57:76:e4:3d:a9:88:9c:73:15:58:f9:aa:8f:e9:0f:0a:92:24: 86:6b:2b:f7:38:02:98:cc:89:4a:1c:e3:a2:48:90:ed:dc:95: d4:1d:dc:02:fd:9f:ed:5b:ba:23:77:09:76:5b:b9:89:32:16: 32:36:7a:f7:7e:ff:45:ee:ea:48:b3:83:8a:40:53:db:d5:96: 33:8b:07:e3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XUbSNwSmk7WF7GSLGZKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzczY2Q0ZTM0Mzc3NThjYjU3ZTQ4NzQxZWNlNzYyNWExZTNhZDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQl2lq6OTly05GLjU3N+DnkUC/3Z zrmejCXXPffyeiNkIi2O0P4fvMAa4WYrBJTZUoJHv4uspBcQ59VOPb6W0UJYj0Ke oc553X0V3OFQLJWfTa13AjjFiParHAgcQQTqRzjj8o6qflKTiq+6EBON1yd6sqld IZt0VrIUWN5q4oYFYzoeXZNrnMuqiDl3glgLaYKY6f/UBgnq7LiKv+f5mv6TxbJR oXmjjKWg+pcJjNSJQDtjQo8nB3j4oFydmuMlji+2vJYkGxrQjXR6LpEQurHf8wAt bPsU6flF+gnjvKuj6PPS+cVSSTaWVJV70ZKjIIvkZeWOj1mCe46QdJMDYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFANzzU40N3WMtX5IdB7OdiWh461cMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQTNQTlRqUTNkWXkxZmtoMEhzNTJKYUhqclZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwn6 MA0GCSqGSIb3DQEBCwUAA4IBAQAY2xmXhOQAjH63lPQb55uZ/RpFje/+aHiBX6UD 3EUsaVV9MJABsMOv6JKGYRy3mZMrzSi11Su07UU2G4btFFZm+5e4WUGGtgdwB2Cz G/rozAnuDPv4ItmMgyZ9sL5YjSGRc5GiEEN2D4c+FrMtTg9RG+flQzQM2xNPxiaI A3K4Ayq2yk1uRiThrkaQsuDNQiMG+QTqYcFZ/tKm1HVdWzkLb+jZwbfulGn/dVm7 trnaZZefJCRXduQ9qYiccxVY+aqP6Q8KkiSGayv3OAKYzIlKHOOiSJDt3JXUHdwC /Z/tW7ojdwl2W7mJMhYyNnr3fv9F7upIs4OKQFPb1ZYziwfj -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:47 2026 by rpki-client