This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3WKE9IwiCHE2G1s6LK2_fSW80Jw.roa File: 3WKE9IwiCHE2G1s6LK2_fSW80Jw.roa (raw, json) Hash identifier: R5XW9B+N6L5QttzbSBqaP/ce8fnA2ziQ2WJ1O0VjayE= Subject key identifier: DD:62:84:F4:8C:22:08:71:36:1B:5B:3A:2C:AD:BF:7D:25:BC:D0:9C Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB40A084C6A8D3810B18474EF0CD0 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3WKE9IwiCHE2G1s6LK2_fSW80Jw.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210370 IP address blocks: 2a0e:aa07:e02c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b4:0a:08:4c:6a:8d:38:10:b1:84:74:ef:0c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd6284f48c220871361b5b3a2cadbf7d25bcd09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:6c:30:5c:0d:52:4f:21:65:14:62:f9:63: 46:38:26:94:e5:e3:80:ef:81:9c:c0:af:ee:30:50: a3:76:1b:02:1a:4b:db:9a:28:ba:3c:b3:dd:31:f9: 99:ed:6b:32:f7:64:e5:17:d4:98:c9:59:b2:b8:b4: fa:e6:ce:64:7a:40:c7:06:50:8d:8f:28:ea:3a:51: 14:9c:27:6a:62:fe:2f:87:b6:c2:d9:4b:6d:77:05: a1:a7:bf:c2:6c:c2:e9:93:57:9e:71:16:12:6d:dd: 65:66:f0:f1:bf:ac:eb:70:89:81:f0:0c:81:e2:85: 20:86:f4:01:43:c3:67:ca:69:55:e6:04:b8:23:dd: 01:b6:ae:2c:8e:82:34:a7:e2:8d:fa:7a:7c:11:c0: da:76:c6:58:58:a5:33:44:d6:cc:da:fe:99:c0:09: 92:2f:a7:0b:fe:df:9f:8a:51:04:6e:f2:95:bf:1d: 7f:a2:57:72:26:c4:4b:81:86:36:06:a6:e8:b0:32: be:ce:d7:d1:11:ac:cf:b8:c9:ab:9c:ef:42:f3:cc: 15:01:0e:5c:49:97:b5:98:dd:cb:93:5f:0c:1a:99: ce:48:00:fe:43:66:d1:8b:78:0e:68:95:e1:23:f6: 7f:88:e9:45:fe:63:50:65:98:66:1e:1e:1f:cc:ad: 06:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:62:84:F4:8C:22:08:71:36:1B:5B:3A:2C:AD:BF:7D:25:BC:D0:9C X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3WKE9IwiCHE2G1s6LK2_fSW80Jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e02c::/48 Signature Algorithm: sha256WithRSAEncryption 7c:b2:0d:c3:5f:3f:d0:b9:12:c1:63:a2:1f:8c:5d:bd:28:b2: d2:e6:fb:04:92:57:e3:cc:7b:51:63:85:75:dc:1b:80:ad:bc: 8b:4c:08:df:73:65:8f:ea:de:6e:53:5d:e4:84:5f:18:f1:2f: d2:93:59:0f:4a:99:4f:24:b6:98:30:e4:f1:62:85:b1:34:95: f5:39:6b:75:e8:01:c2:ea:c6:ee:ed:77:d6:a7:e4:c4:32:a0: 00:9d:ac:21:c0:f9:ee:f4:df:79:8b:db:85:67:5d:e5:6b:02: 93:39:c2:35:0d:02:78:63:9d:7e:4a:3c:e8:a9:37:69:b9:a0: d6:d9:1d:f7:d6:8e:5a:cb:a6:9b:bf:9a:fe:27:ec:46:c3:be: 4e:da:fe:f1:d5:61:40:23:87:6c:cc:84:32:18:35:80:5f:3b: 06:72:0b:4e:67:88:a0:f5:1b:42:e4:9f:55:c8:88:64:06:11: ce:8d:66:26:10:ac:89:df:e9:fa:e8:c1:ef:77:73:bb:f4:1e: ca:7e:c3:da:af:82:f6:c5:62:83:bc:10:76:a1:1f:2d:5d:c5: 03:ea:02:f4:6b:43:42:11:26:a9:17:9d:f5:ea:00:10:8a:78: 12:f1:3c:0c:8e:ab:69:51:ba:6c:b3:64:2b:ab:72:36:b8:4f: a1:fc:4e:96 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frQKCExqjTgQsYR07wzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDYyODRmNDhjMjIwODcxMzYxYjViM2EyY2FkYmY3ZDI1YmNkMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1ZsMFwNUk8hZRRi+WNGOCaU5eOA 74GcwK/uMFCjdhsCGkvbmii6PLPdMfmZ7Wsy92TlF9SYyVmyuLT65s5kekDHBlCN jyjqOlEUnCdqYv4vh7bC2UttdwWhp7/CbMLpk1eecRYSbd1lZvDxv6zrcImB8AyB 4oUghvQBQ8NnymlV5gS4I90Btq4sjoI0p+KN+np8EcDadsZYWKUzRNbM2v6ZwAmS L6cL/t+filEEbvKVvx1/oldyJsRLgYY2BqbosDK+ztfREazPuMmrnO9C88wVAQ5c SZe1mN3Lk18MGpnOSAD+Q2bRi3gOaJXhI/Z/iOlF/mNQZZhmHh4fzK0GWQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN1ihPSMIghxNhtbOiytv30lvNCcMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvM1dLRTlJd2lDSEUyRzFzNkxLMl9mU1c4MEp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+As MA0GCSqGSIb3DQEBCwUAA4IBAQB8sg3DXz/QuRLBY6IfjF29KLLS5vsEklfjzHtR Y4V13BuArbyLTAjfc2WP6t5uU13khF8Y8S/Sk1kPSplPJLaYMOTxYoWxNJX1OWt1 6AHC6sbu7XfWp+TEMqAAnawhwPnu9N95i9uFZ13lawKTOcI1DQJ4Y51+SjzoqTdp uaDW2R331o5ay6abv5r+J+xGw75O2v7x1WFAI4dszIQyGDWAXzsGcgtOZ4ig9RtC 5J9VyIhkBhHOjWYmEKyJ3+n66MHvd3O79B7KfsPar4L2xWKDvBB2oR8tXcUD6gL0 a0NCESapF5316gAQingS8TwMjqtpUbpss2Qrq3I2uE+h/E6W -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:59 2026 by rpki-client