This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3OrwAucIFi2Bmo0fPhSZxs6gusg.roa File: 3OrwAucIFi2Bmo0fPhSZxs6gusg.roa (raw, json) Hash identifier: /EZ7ZdfV8/Vf7qVRHbEp3HkTGWp51sfWauxXwKHrwMA= Subject key identifier: DC:EA:F0:02:E7:08:16:2D:81:9A:8D:1F:3E:14:99:C6:CE:A0:BA:C8 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EBE216BDC7B9ED168F41ED8F620EC Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3OrwAucIFi2Bmo0fPhSZxs6gusg.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214699 IP address blocks: 2a0e:aa07:e1c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:be:21:6b:dc:7b:9e:d1:68:f4:1e:d8:f6:20:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dceaf002e708162d819a8d1f3e1499c6cea0bac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:00:ab:98:3f:72:00:a7:5c:d6:38:08:2f: dc:f1:89:7e:85:29:18:9d:5d:bf:1e:5b:c3:be:65: 66:ec:47:f8:87:1e:92:09:fe:e2:a9:a7:39:18:76: 04:7f:0e:3b:a6:85:46:d8:ab:9b:ca:99:6c:8a:28: e9:57:dd:eb:3c:1e:e2:ea:92:c9:0f:5b:26:b4:e7: b6:74:35:55:e8:0f:ad:68:0e:79:d0:64:2d:04:6d: cc:87:bf:a3:fa:6e:36:19:f0:d5:46:37:4d:04:c4: 07:1b:16:fd:b2:06:65:ba:37:d6:dc:c6:5c:20:33: 97:07:bb:bb:28:d9:e7:45:71:87:45:5a:d6:4c:33: 2c:ad:5a:75:73:44:b6:58:31:82:99:2e:30:14:b3: 69:ee:c4:8b:a7:11:bd:92:08:52:5e:51:61:61:b6: ea:1f:38:c5:b0:58:2c:b1:e6:29:b1:32:65:d9:df: a8:00:2f:d2:72:a5:38:fa:66:67:49:43:3c:51:95: e2:52:ae:1a:55:0d:ee:e1:d1:5b:50:4a:21:04:0d: 17:32:3e:81:5a:d6:87:85:8d:8f:cf:c4:95:22:8e: 2d:8b:7f:57:87:69:83:e4:42:da:4a:36:db:58:d8: 79:31:4d:6d:6a:9e:e6:a9:3f:24:98:93:61:ba:85: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EA:F0:02:E7:08:16:2D:81:9A:8D:1F:3E:14:99:C6:CE:A0:BA:C8 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3OrwAucIFi2Bmo0fPhSZxs6gusg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e1c0::/44 Signature Algorithm: sha256WithRSAEncryption a3:ef:ef:2c:0b:cb:98:f4:d1:6c:46:2f:b3:ed:c4:df:ea:b7: db:74:03:09:87:53:b6:6d:cd:01:38:11:2c:ba:fc:6d:55:85: dc:99:be:41:83:fc:f1:8a:f0:36:cc:8e:52:0a:cc:fa:53:4c: 87:c8:11:e5:ad:35:f4:fb:e8:3c:5f:48:86:da:ba:07:34:fd: de:fb:27:dc:78:4f:20:c9:e4:a0:e8:08:c3:09:0d:a8:8e:9c: 33:cb:e8:60:cd:20:5e:48:79:79:d9:ea:b4:3d:4a:ac:25:d1: ec:24:b1:61:a0:2b:6c:12:eb:98:0b:32:62:22:4c:14:04:11: a4:e7:da:90:96:56:4a:34:43:a3:39:39:42:58:ca:95:e7:4e: b9:ae:2d:17:d5:82:79:64:28:2a:6f:1b:8d:73:3d:95:9e:9f: eb:4d:b9:86:e7:68:99:c9:60:e8:bc:26:6f:4a:6b:61:b2:a6: ae:24:22:2d:b9:a5:18:21:a7:e1:6d:f5:a1:70:41:45:ab:4a: 60:8f:3f:83:c7:cc:31:cd:53:4c:cd:ee:10:48:a7:9f:08:f6: 20:c0:30:ff:75:a8:1e:b6:d6:90:cc:ef:11:c4:52:cb:7b:94: 01:a0:3b:6d:e9:85:3d:4f:3c:ec:a7:de:29:6f:35:86:74:24: 53:96:02:b0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fr4ha9x7ntFo9B7Y9iDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2VhZjAwMmU3MDgxNjJkODE5YThkMWYzZTE0OTljNmNlYTBiYWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MYAq5g/cgCnXNY4CC/c8Yl+hSkY nV2/HlvDvmVm7Ef4hx6SCf7iqac5GHYEfw47poVG2KubyplsiijpV93rPB7i6pLJ D1smtOe2dDVV6A+taA550GQtBG3Mh7+j+m42GfDVRjdNBMQHGxb9sgZlujfW3MZc IDOXB7u7KNnnRXGHRVrWTDMsrVp1c0S2WDGCmS4wFLNp7sSLpxG9kghSXlFhYbbq HzjFsFgsseYpsTJl2d+oAC/ScqU4+mZnSUM8UZXiUq4aVQ3u4dFbUEohBA0XMj6B WtaHhY2Pz8SVIo4ti39Xh2mD5ELaSjbbWNh5MU1tap7mqT8kmJNhuoUmxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNzq8ALnCBYtgZqNHz4UmcbOoLrIMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvM09yd0F1Y0lGaTJCbW8wZlBoU1p4czZndXNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+HA MA0GCSqGSIb3DQEBCwUAA4IBAQCj7+8sC8uY9NFsRi+z7cTf6rfbdAMJh1O2bc0B OBEsuvxtVYXcmb5Bg/zxivA2zI5SCsz6U0yHyBHlrTX0++g8X0iG2roHNP3e+yfc eE8gyeSg6AjDCQ2ojpwzy+hgzSBeSHl52eq0PUqsJdHsJLFhoCtsEuuYCzJiIkwU BBGk59qQllZKNEOjOTlCWMqV5065ri0X1YJ5ZCgqbxuNcz2Vnp/rTbmG52iZyWDo vCZvSmthsqauJCItuaUYIafhbfWhcEFFq0pgjz+Dx8wxzVNMze4QSKefCPYgwDD/ dagettaQzO8RxFLLe5QBoDtt6YU9Tzzsp94pbzWGdCRTlgKw -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:19 2026 by rpki-client