This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/IQ3VIn1iC9RO_pLlQOak5neUqZY.roa File: IQ3VIn1iC9RO_pLlQOak5neUqZY.roa (raw, json) Hash identifier: IKGnOs4cAOZb712YaFJ/S+RpUStTEJE1H/K5bUrnGZo= Subject key identifier: 21:0D:D5:22:7D:62:0B:D4:4E:FE:92:E5:40:E6:A4:E6:77:94:A9:96 Certificate issuer: /CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd Certificate serial: 019B7F156B74DAC802D2123923D7A2F23CE1 Authority key identifier: 3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/IQ3VIn1iC9RO_pLlQOak5neUqZY.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212900 IP address blocks: 2001:67c:abc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6b:74:da:c8:02:d2:12:39:23:d7:a2:f2:3c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=210dd5227d620bd44efe92e540e6a4e67794a996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:39:c8:d6:4b:67:34:34:1e:ea:f1:1c:fb:fe: 96:6c:50:0c:90:f4:15:4e:14:10:5c:28:70:9a:15: 1f:cd:0f:1c:cd:ac:3f:ca:de:1d:35:69:b0:d4:37: 06:ef:00:6f:43:93:e4:74:f1:b7:ac:26:22:99:f3: a4:58:54:2f:ae:82:25:e2:ff:de:6e:68:47:f1:bc: 5c:bb:2f:95:8e:48:8a:b2:65:0c:44:8c:bc:3f:92: d3:3f:66:9b:03:b4:23:0a:8a:25:e5:76:ae:ad:f1: 26:ba:f2:1a:7d:41:9f:d4:e6:f1:94:af:54:5b:3b: d7:fb:9d:31:cf:49:cd:fa:81:c4:eb:f8:d3:8a:3d: 64:cb:fb:9c:d2:ed:6e:72:04:6e:ef:20:b8:d3:9c: 53:19:4f:37:bd:4e:dc:b8:9d:b0:d7:ae:3a:20:4b: e4:95:5c:99:5e:51:0f:ec:63:00:40:1e:47:9c:a1: 1a:81:d6:da:3e:d9:1f:da:56:34:5a:01:54:71:d0: 67:82:c4:14:73:20:ec:a1:01:54:94:fb:e2:c6:eb: de:3b:db:c0:2a:5b:d2:a6:d9:33:a8:db:48:e4:ae: d2:7a:2e:8e:1d:9e:29:91:1b:db:11:b7:bc:cf:49: ce:cc:ba:d7:43:bd:f8:37:d1:58:4b:8a:d6:2f:5a: d7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0D:D5:22:7D:62:0B:D4:4E:FE:92:E5:40:E6:A4:E6:77:94:A9:96 X509v3 Authority Key Identifier: keyid:3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/IQ3VIn1iC9RO_pLlQOak5neUqZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:abc::/48 Signature Algorithm: sha256WithRSAEncryption 2c:d7:c8:23:7f:29:df:3c:27:18:ed:ad:10:be:2d:70:0f:44: fa:19:dd:ec:cf:ae:89:ac:f8:58:3c:a1:4c:80:cb:4c:63:4e: c3:5a:37:06:1d:e7:e1:ab:71:79:7d:79:9f:71:57:76:db:bf: 4e:f1:9d:ec:0a:9f:6a:36:cb:e2:be:cd:f4:56:88:9b:b4:bb: 51:fb:bf:f7:29:62:f1:9d:fc:fc:9f:ad:76:37:6f:4d:fc:81: 60:2b:8e:15:4e:83:89:ef:e3:c3:d8:b1:25:98:be:52:ec:bd: e6:b9:1e:b9:b3:92:b3:33:e3:38:74:23:95:fc:38:d5:de:92: 98:d9:0b:20:fe:8f:a2:49:37:97:8d:59:31:d2:9a:dd:5b:52: c3:9d:19:a2:53:57:77:31:91:5b:ff:73:b7:ab:21:52:b9:2f: d4:c5:28:be:b0:e3:62:d5:0b:e3:b9:af:76:60:9e:8b:16:ba: fb:70:9b:de:50:e6:13:bc:46:15:9b:0c:19:5e:0c:18:45:5c: 4c:be:7a:7d:9b:58:14:02:35:5d:6d:d0:e4:29:b9:19:52:a8: 9a:c9:fd:11:ac:4c:d2:d7:21:25:81:49:90:d5:26:f0:7b:27: b8:43:4b:75:68:83:5a:16:2a:c2:93:9a:41:49:c8:b6:3c:2e: 2a:e6:b0:c0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FWt02sgC0hI5I9ei8jzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjA0ZWMwY2ZlZTk2NmM0MTliM2E2ZDVmMDgyYjU2M2Mx ODY4YmQwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTBkZDUyMjdkNjIwYmQ0NGVmZTkyZTU0MGU2YTRlNjc3OTRhOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTnI1ktnNDQe6vEc+/6WbFAMkPQV ThQQXChwmhUfzQ8czaw/yt4dNWmw1DcG7wBvQ5PkdPG3rCYimfOkWFQvroIl4v/e bmhH8bxcuy+VjkiKsmUMRIy8P5LTP2abA7QjCool5XaurfEmuvIafUGf1ObxlK9U WzvX+50xz0nN+oHE6/jTij1ky/uc0u1ucgRu7yC405xTGU83vU7cuJ2w1646IEvk lVyZXlEP7GMAQB5HnKEagdbaPtkf2lY0WgFUcdBngsQUcyDsoQFUlPvixuveO9vA KlvSptkzqNtI5K7Sei6OHZ4pkRvbEbe8z0nOzLrXQ734N9FYS4rWL1rXowIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCEN1SJ9YgvUTv6S5UDmpOZ3lKmWMB8GA1UdIwQY MBaAFDtgTsDP7pZsQZs6bV8IK1Y8GGi9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJCT3dNX3VsbXhCbXpwdFh3Z3JWandZYUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zZjVlYTQtMTg2OC00YTBiLTkyMTgt ODdlOWYyMWI0MThiLzEvSVEzVkluMWlDOVJPX3BMbFFPYWs1bmVVcVpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zZjVlYTQtMTg2OC00YTBiLTkyMTgtODdlOWYyMWI0MThi LzEvTzJCT3dNX3VsbXhCbXpwdFh3Z3JWandZYUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAq8 MA0GCSqGSIb3DQEBCwUAA4IBAQAs18gjfynfPCcY7a0Qvi1wD0T6Gd3sz66JrPhY PKFMgMtMY07DWjcGHefhq3F5fXmfcVd2279O8Z3sCp9qNsvivs30VoibtLtR+7/3 KWLxnfz8n612N29N/IFgK44VToOJ7+PD2LElmL5S7L3muR65s5KzM+M4dCOV/DjV 3pKY2Qsg/o+iSTeXjVkx0prdW1LDnRmiU1d3MZFb/3O3qyFSuS/UxSi+sONi1Qvj ua92YJ6LFrr7cJveUOYTvEYVmwwZXgwYRVxMvnp9m1gUAjVdbdDkKbkZUqiayf0R rEzS1yElgUmQ1Sbweye4Q0t1aINaFirCk5pBSci2PC4q5rDA -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:29 2026 by rpki-client