This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/3vf-Yp-2fomUCGxxsuFuZBkPGGQ.roa File: 3vf-Yp-2fomUCGxxsuFuZBkPGGQ.roa (raw, json) Hash identifier: LZ4veM7bkOEXkp7bq57kS6QDZIvIWlhUv4Gp6OCzQzs= Subject key identifier: DE:F7:FE:62:9F:B6:7E:89:94:08:6C:71:B2:E1:6E:64:19:0F:18:64 Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39 Certificate serial: 019B7BA4C8C88BE5069002D25B6E54D6D103 Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/3vf-Yp-2fomUCGxxsuFuZBkPGGQ.roa Signing time: Thu 01 Jan 2026 22:19:15 +0000 ROA not before: Thu 01 Jan 2026 22:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12513 IP address blocks: 2a02:c2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c8:c8:8b:e5:06:90:02:d2:5b:6e:54:d6:d1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39 Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=def7fe629fb67e8994086c71b2e16e64190f1864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:13:a7:30:10:01:b5:87:3b:fd:f6:80:a4: 8d:3c:c7:77:eb:35:30:15:69:ef:72:1e:5d:b8:5a: 02:b9:20:e5:16:b3:ef:63:76:83:67:5d:67:7a:fb: 33:a3:3b:ef:c7:b1:62:fc:46:c4:66:b1:e1:37:58: 28:2c:14:ff:36:d7:6e:4e:f2:b3:0b:4c:cd:b2:ae: a4:ca:10:26:dd:6f:cd:63:eb:83:66:d0:fd:e7:20: b9:5b:65:e3:b6:a3:bf:6d:65:a1:47:8e:09:2b:c9: 4e:ab:cf:fc:f8:3a:fe:de:60:4b:1d:39:80:c2:28: 3e:db:cb:49:e5:c1:84:51:09:99:b5:64:77:46:cf: 7c:e2:d6:33:e8:39:f6:e2:c1:eb:b3:e2:c6:fe:10: bc:d0:6f:f4:8d:aa:6d:83:93:2b:2a:81:b5:b1:0c: b7:a1:fc:6f:5d:64:6e:5e:eb:6e:19:27:80:c9:72: 0e:e4:b2:2a:55:df:70:e2:ca:6a:33:db:0e:b4:b1: 49:13:a0:fc:e8:22:51:b4:68:13:8f:b1:af:c1:90: 88:2e:fb:c4:79:88:f0:fc:50:68:c7:3c:13:8b:d0: 45:62:89:8a:5f:f1:58:96:20:3f:a8:18:f2:43:5f: ea:aa:ea:0d:95:da:ba:0a:14:00:5b:cd:ea:19:27: 42:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F7:FE:62:9F:B6:7E:89:94:08:6C:71:B2:E1:6E:64:19:0F:18:64 X509v3 Authority Key Identifier: keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/3vf-Yp-2fomUCGxxsuFuZBkPGGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:c2c0::/29 Signature Algorithm: sha256WithRSAEncryption 2f:c6:f2:d8:d3:4a:a2:3b:2e:7e:48:10:59:a1:5f:56:2b:93: c2:52:8d:11:3f:8d:f7:14:36:bc:72:fb:9f:7a:75:c5:6e:76: 74:68:d3:43:43:12:96:18:85:4d:01:58:11:9b:c1:55:0e:13: 0d:30:07:66:61:da:fd:b5:5d:fe:73:36:be:9f:15:2e:a0:7d: 74:04:87:6c:b4:30:6c:10:4f:64:5b:49:66:bc:41:fb:32:46: 1a:3d:33:fc:2a:44:20:8d:f7:0f:77:b1:9d:fd:f4:7e:70:a5: 09:6b:e7:2b:6f:6e:6d:57:54:d7:8c:c2:28:c4:d0:9e:c6:3d: 62:84:04:b4:4b:e8:4e:31:29:05:47:0f:a9:42:c1:39:47:46: 49:be:05:31:0a:a4:74:6d:7a:d1:6a:a9:6e:13:b8:c9:dc:09: db:ff:17:08:c4:fb:72:de:a0:3e:fc:a8:92:33:b9:30:fb:d5: 71:0d:81:af:04:b0:b3:fe:a7:0c:94:d2:88:ea:36:b4:85:47: 0e:cc:78:ed:f2:7a:c4:58:41:ba:41:9b:59:c5:c4:94:c2:78: 94:ed:01:28:17:f1:e0:96:4a:89:61:ac:e2:4b:ca:e1:92:9b: 9d:80:3b:1d:54:a2:d0:37:c2:3d:f1:c2:bd:54:f6:dc:71:09: 53:91:d6:ba -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pMjIi+UGkALSW25U1tEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZDM1MzkzMzY3NGE1NjA4ZjZkMWVlMmRhYjRmNjRjOGJm ZjhmMzkwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWY3ZmU2MjlmYjY3ZTg5OTQwODZjNzFiMmUxNmU2NDE5MGYxODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOYTpzAQAbWHO/32gKSNPMd36zUw FWnvch5duFoCuSDlFrPvY3aDZ11nevszozvvx7Fi/EbEZrHhN1goLBT/NtduTvKz C0zNsq6kyhAm3W/NY+uDZtD95yC5W2XjtqO/bWWhR44JK8lOq8/8+Dr+3mBLHTmA wig+28tJ5cGEUQmZtWR3Rs984tYz6Dn24sHrs+LG/hC80G/0japtg5MrKoG1sQy3 ofxvXWRuXutuGSeAyXIO5LIqVd9w4spqM9sOtLFJE6D86CJRtGgTj7GvwZCILvvE eYjw/FBoxzwTi9BFYomKX/FYliA/qBjyQ1/qquoNldq6ChQAW83qGSdC6QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFN73/mKftn6JlAhscbLhbmQZDxhkMB8GA1UdIwQY MBaAFK3TU5M2dKVgj20e4tq09kyL/485MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgt NzJjODMxMjg3NjFiLzEvM3ZmLVlwLTJmb21VQ0d4eHN1RnVaQmtQR0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgtNzJjODMxMjg3NjFi LzEvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgLCwDAN BgkqhkiG9w0BAQsFAAOCAQEAL8by2NNKojsufkgQWaFfViuTwlKNET+N9xQ2vHL7 n3p1xW52dGjTQ0MSlhiFTQFYEZvBVQ4TDTAHZmHa/bVd/nM2vp8VLqB9dASHbLQw bBBPZFtJZrxB+zJGGj0z/CpEII33D3exnf30fnClCWvnK29ubVdU14zCKMTQnsY9 YoQEtEvoTjEpBUcPqULBOUdGSb4FMQqkdG160WqpbhO4ydwJ2/8XCMT7ct6gPvyo kjO5MPvVcQ2BrwSws/6nDJTSiOo2tIVHDsx47fJ6xFhBukGbWcXElMJ4lO0BKBfx 4JZKiWGs4kvK4ZKbnYA7HVSi0DfCPfHCvVT23HEJU5HWug== -----END CERTIFICATE-----Generated at Fri Jan 9 18:43:04 2026 by rpki-client