This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3WnIK5pGF-1--NMSUgNLB0NnZ1o.roa File: 3WnIK5pGF-1--NMSUgNLB0NnZ1o.roa (raw, json) Hash identifier: +wFNRw8hcoZ6lDMDvj2KA/bLV+BywMnIzYTLMw+xb4I= Subject key identifier: DD:69:C8:2B:9A:46:17:ED:7E:F8:D3:12:52:03:4B:07:43:67:67:5A Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e Certificate serial: 019B7D5B775F84CB7DF453692BEB5E6E1874 Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3WnIK5pGF-1--NMSUgNLB0NnZ1o.roa Signing time: Fri 02 Jan 2026 06:18:24 +0000 ROA not before: Fri 02 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24603 IP address blocks: 195.42.100.0/23 maxlen: 24 2001:67c:12e8::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:77:5f:84:cb:7d:f4:53:69:2b:eb:5e:6e:18:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e Validity Not Before: Jan 2 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd69c82b9a4617ed7ef8d31252034b074367675a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:1f:e6:59:19:5a:39:ee:fd:76:fc:95:f8: cd:70:d1:30:d4:db:f2:3a:45:f8:50:cc:f2:7b:34: bc:7c:10:26:36:5f:75:ff:a1:93:d6:45:17:f1:cc: 90:1c:f5:07:5f:0d:c9:7c:0a:03:88:43:4f:86:8c: d1:93:5d:71:b9:16:b9:64:23:d8:51:06:2e:16:7a: 6f:01:99:5d:89:d6:c3:3d:0b:b0:08:95:53:a9:68: 51:37:22:8e:87:bc:03:d9:ea:a3:2e:94:cc:ac:a4: 96:9e:96:09:63:2f:44:9c:bb:26:0a:aa:f5:0c:7f: c4:9e:46:34:97:c9:69:6b:27:a8:c3:72:5f:88:c3: 14:24:3a:bc:81:d6:7b:da:20:a2:8d:91:65:35:40: ea:2e:f3:55:8c:b0:43:3d:7c:de:d9:84:0f:59:74: c5:9a:1b:16:9c:4b:b3:e1:72:e7:23:7a:c1:5f:f4: d9:fe:41:83:bf:b2:b4:0b:79:93:95:06:60:71:bb: af:e8:b1:d9:28:b9:d8:92:2b:ff:88:4d:6c:ca:3b: 13:75:73:3b:07:be:e6:a9:ae:34:03:d4:92:21:8f: 8a:13:06:83:c4:d0:a8:0c:0e:4b:35:2d:2d:a8:68: 27:75:a6:a6:b2:12:61:f2:04:8d:f0:1e:58:43:2a: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:69:C8:2B:9A:46:17:ED:7E:F8:D3:12:52:03:4B:07:43:67:67:5A X509v3 Authority Key Identifier: keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3WnIK5pGF-1--NMSUgNLB0NnZ1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.42.100.0/23 IPv6: 2001:67c:12e8::/47 Signature Algorithm: sha256WithRSAEncryption 55:62:0f:e8:3e:4c:46:f2:a2:24:90:a6:40:68:d6:d0:47:b9: 61:2e:b9:ad:48:e3:0d:af:70:6a:b4:0c:a9:65:7d:44:7a:8c: 6a:cf:7a:2c:bd:6c:92:97:99:8c:51:11:e2:58:b9:7e:33:37: 08:0a:19:ae:dd:76:b7:26:7a:ec:52:71:96:73:3d:6b:cf:17: d2:66:f5:7b:36:89:b6:d5:a1:5d:2c:8d:88:aa:5c:b6:69:c7: 7e:91:21:0e:d8:3a:57:b6:ed:a6:a3:80:0b:b9:1d:df:06:dc: 54:d4:dd:a7:ca:4a:b8:c6:fe:6c:14:9a:09:cd:ae:d1:6b:89: 64:f1:6a:f7:98:ad:84:09:37:1a:89:84:4a:99:d0:ff:7e:1d: 49:75:ba:fa:88:00:00:9c:fd:e3:be:e3:86:60:68:03:27:5c: 0f:59:6f:6b:b6:97:df:6b:07:18:e3:f8:8e:00:3d:c8:be:00: fe:b2:20:02:a8:d8:85:7b:fa:b9:8a:8c:3e:05:1a:44:39:3f: 10:d1:dd:52:61:bd:b0:4e:97:63:a5:bc:98:c9:9a:75:a2:b3: 6b:53:16:28:9d:68:27:68:42:9f:52:e1:d7:3f:48:49:f4:db: 32:a0:ff:84:35:1e:53:24:7e:6f:c4:48:22:95:9d:e8:71:99: c1:41:6f:dc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9W3dfhMt99FNpK+tebhh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2I3OTZjM2ZjNTU5YmZhZjRiNzY1NTA4OTRjZmY0ZDMw YjliN2UwHhcNMjYwMTAyMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDY5YzgyYjlhNDYxN2VkN2VmOGQzMTI1MjAzNGIwNzQzNjc2NzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5sf5lkZWjnu/Xb8lfjNcNEw1Nvy OkX4UMzyezS8fBAmNl91/6GT1kUX8cyQHPUHXw3JfAoDiENPhozRk11xuRa5ZCPY UQYuFnpvAZldidbDPQuwCJVTqWhRNyKOh7wD2eqjLpTMrKSWnpYJYy9EnLsmCqr1 DH/EnkY0l8lpayeow3JfiMMUJDq8gdZ72iCijZFlNUDqLvNVjLBDPXze2YQPWXTF mhsWnEuz4XLnI3rBX/TZ/kGDv7K0C3mTlQZgcbuv6LHZKLnYkiv/iE1syjsTdXM7 B77mqa40A9SSIY+KEwaDxNCoDA5LNS0tqGgndaamshJh8gSN8B5YQyoBvQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFN1pyCuaRhftfvjTElIDSwdDZ2daMB8GA1UdIwQY MBaAFN87eWw/xVm/r0t2VQiUz/TTC5t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUt MjhlNDRmMmVlOTBhLzEvM1duSUs1cEdGLTEtLU5NU1VnTkxCME5uWjFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUtMjhlNDRmMmVlOTBh LzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwypkMA8E AgACMAkDBwEgAQZ8EugwDQYJKoZIhvcNAQELBQADggEBAFViD+g+TEbyoiSQpkBo 1tBHuWEuua1I4w2vcGq0DKllfUR6jGrPeiy9bJKXmYxREeJYuX4zNwgKGa7ddrcm euxScZZzPWvPF9Jm9Xs2ibbVoV0sjYiqXLZpx36RIQ7YOle27aajgAu5Hd8G3FTU 3afKSrjG/mwUmgnNrtFriWTxaveYrYQJNxqJhEqZ0P9+HUl1uvqIAACc/eO+44Zg aAMnXA9Zb2u2l99rBxjj+I4APci+AP6yIAKo2IV7+rmKjD4FGkQ5PxDR3VJhvbBO l2OlvJjJmnWis2tTFiidaCdoQp9S4dc/SEn02zKg/4Q1HlMkfm/ESCKVnehxmcFB b9w= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:25 2026 by rpki-client