This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa File: P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa (raw, json) Hash identifier: mHchc2zREYZlnOuz8p+co3qUvhS0H4UpE0PWUACDroc= Subject key identifier: 3F:78:71:7A:86:CE:05:AF:C0:D3:12:74:C6:51:9F:2A:74:9D:35:55 Certificate issuer: /CN=807709e7b0efba127025c83e5d3194c71ba428c3 Certificate serial: 019B76EABE45FFD5A291BDC4F2772DA0F06F Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a0f:6040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:be:45:ff:d5:a2:91:bd:c4:f2:77:2d:a0:f0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f78717a86ce05afc0d31274c6519f2a749d3555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f3:39:65:7d:15:09:d1:dd:9d:4a:f9:5d:88: 48:b5:59:07:3b:67:6b:67:1f:e1:58:ab:af:5c:9e: 87:89:de:9a:89:fc:ae:5f:1c:47:4a:3f:ab:f0:ff: 87:da:f9:af:fe:62:02:85:ff:a7:18:cb:b6:f4:8c: 47:21:bc:71:4b:d2:69:f0:f5:7d:c4:d2:e2:d5:02: cf:dd:96:d2:c8:e1:9c:ea:de:28:82:3b:a8:f6:08: c4:62:38:c2:e8:5d:66:94:f7:d7:79:3c:1d:ea:72: 13:49:36:4d:e9:bc:72:82:09:7d:3a:f3:be:32:62: 93:84:d7:04:11:04:fe:c4:db:68:27:03:96:9c:7e: 81:8f:e6:7c:4b:66:e1:ba:0d:fe:b2:93:e4:18:f5: ef:1c:35:d6:7e:bd:2a:7b:0c:80:3c:9c:f1:af:37: ca:41:a5:df:a4:cf:db:e4:58:1b:f1:64:27:b8:40: 40:7e:57:4c:6c:2d:7f:bc:8d:15:e3:9f:6c:70:bc: 28:c8:70:68:b4:d1:58:70:69:92:3b:84:01:d0:4a: 8c:74:75:9a:6b:08:4f:d8:3e:3e:ff:d0:d7:4c:e0: 9d:0d:3b:fa:fb:ba:7d:56:66:57:87:f8:b7:1d:d2: 9a:ba:73:73:4f:98:1b:cd:11:1d:58:4b:7a:5f:2b: 64:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:78:71:7A:86:CE:05:AF:C0:D3:12:74:C6:51:9F:2A:74:9D:35:55 X509v3 Authority Key Identifier: keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6040::/29 Signature Algorithm: sha256WithRSAEncryption a4:32:00:35:07:d6:bf:88:f1:b8:ef:dc:da:19:36:52:40:20: a2:0c:1b:16:a4:9a:ef:af:52:2d:99:17:11:9c:91:ce:bd:6f: fb:08:0c:98:9b:02:08:88:71:e1:35:27:6e:c3:0a:96:bd:5b: 7c:cb:82:c5:c1:f6:19:8a:9a:e0:2e:16:62:a5:45:40:38:98: 69:64:93:dd:73:f3:70:fd:81:cf:6a:d5:ce:fb:3e:6a:df:e9: d6:e2:9d:1f:cf:c2:e3:c6:6b:c1:10:60:b0:1c:ed:76:9f:56: d7:e9:8c:65:60:c5:43:75:03:89:72:3f:37:7c:31:d6:95:64: b6:3d:11:d6:20:9b:77:19:b8:d0:04:4b:35:2f:2b:a0:1c:11: dc:b5:bf:8d:48:a6:8a:f4:2d:88:2d:3e:a2:94:d7:07:19:25: c9:e2:7c:3c:02:a0:f4:20:d1:56:b9:42:06:c4:7a:b8:cc:78: 9b:f7:b2:70:fe:1b:2f:ba:17:5c:c0:0f:7f:c5:56:67:e9:da: b9:a4:32:8f:bb:e5:7e:47:4c:b7:f5:40:2c:37:76:74:1e:e0: a5:7f:dd:b5:5b:1a:6a:3f:6c:69:39:a6:7d:02:35:2c:c5:26: f7:39:77:73:7d:03:b3:d6:4d:64:65:8d:45:1c:e1:86:f9:c0: b8:a8:d4:60 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt26r5F/9Wikb3E8nctoPBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNzcwOWU3YjBlZmJhMTI3MDI1YzgzZTVkMzE5NGM3MWJh NDI4YzMwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjc4NzE3YTg2Y2UwNWFmYzBkMzEyNzRjNjUxOWYyYTc0OWQzNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfM5ZX0VCdHdnUr5XYhItVkHO2dr Zx/hWKuvXJ6Hid6aifyuXxxHSj+r8P+H2vmv/mIChf+nGMu29IxHIbxxS9Jp8PV9 xNLi1QLP3ZbSyOGc6t4ogjuo9gjEYjjC6F1mlPfXeTwd6nITSTZN6bxyggl9OvO+ MmKThNcEEQT+xNtoJwOWnH6Bj+Z8S2bhug3+spPkGPXvHDXWfr0qewyAPJzxrzfK QaXfpM/b5Fgb8WQnuEBAfldMbC1/vI0V459scLwoyHBotNFYcGmSO4QB0EqMdHWa awhP2D4+/9DXTOCdDTv6+7p9VmZXh/i3HdKaunNzT5gbzREdWEt6XytkIQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFD94cXqGzgWvwNMSdMZRnyp0nTVVMB8GA1UdIwQY MBaAFIB3Ceew77oScCXIPl0xlMcbpCjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgt YmU5YWQyYmY3MjVmLzEvUDNoeGVvYk9CYV9BMHhKMHhsR2ZLblNkTlZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgtYmU5YWQyYmY3MjVm LzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg9gQDAN BgkqhkiG9w0BAQsFAAOCAQEApDIANQfWv4jxuO/c2hk2UkAgogwbFqSa769SLZkX EZyRzr1v+wgMmJsCCIhx4TUnbsMKlr1bfMuCxcH2GYqa4C4WYqVFQDiYaWST3XPz cP2Bz2rVzvs+at/p1uKdH8/C48ZrwRBgsBztdp9W1+mMZWDFQ3UDiXI/N3wx1pVk tj0R1iCbdxm40ARLNS8roBwR3LW/jUimivQtiC0+opTXBxklyeJ8PAKg9CDRVrlC BsR6uMx4m/eycP4bL7oXXMAPf8VWZ+nauaQyj7vlfkdMt/VALDd2dB7gpX/dtVsa aj9saTmmfQI1LMUm9zl3c30Ds9ZNZGWNRRzhhvnAuKjUYA== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:03 2026 by rpki-client