This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/m3HyfGM8-G0b4YejKEtR5QW7nsQ.roa File: m3HyfGM8-G0b4YejKEtR5QW7nsQ.roa (raw, json) Hash identifier: 3Kz4HzNze8QoMgMGEfCvv04U2e2BAYg45UGLNYCXp70= Subject key identifier: 9B:71:F2:7C:63:3C:F8:6D:1B:E1:87:A3:28:4B:51:E5:05:BB:9E:C4 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB3AF9C07534C388DBC07D1A17F7A Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/m3HyfGM8-G0b4YejKEtR5QW7nsQ.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210311 IP address blocks: 2a0e:aa01:aa00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b3:af:9c:07:53:4c:38:8d:bc:07:d1:a1:7f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b71f27c633cf86d1be187a3284b51e505bb9ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:63:3e:f3:53:ba:ac:77:f1:3a:a9:93:90:44: 65:38:9f:0a:ef:ab:a6:6b:97:22:0f:61:05:80:a1: fe:8e:89:b4:d0:c5:92:e1:9c:77:a9:1a:75:ba:74: 75:ac:f4:5d:7e:65:d2:66:d6:3b:69:21:40:6a:2e: 5a:3c:f4:6d:06:17:ff:78:b1:01:8c:52:cb:54:80: 99:f2:55:30:5e:0e:09:92:2d:10:3f:6e:8c:6a:6c: 29:7c:2f:c7:e9:c2:90:5e:26:a5:ee:56:e4:c3:a6: 20:32:6f:0e:8e:03:f8:59:a5:fd:8e:17:c6:05:f8: 6b:98:2f:b9:58:d4:85:b2:02:81:70:df:a5:32:66: fa:74:d6:15:84:7c:ee:1f:9d:19:50:d4:2f:d9:05: 9c:cd:94:ca:e6:de:2c:06:14:ef:ff:7f:d2:99:80: 67:98:2a:aa:91:43:1d:9d:fe:af:8f:68:94:1c:36: c5:a1:ec:a5:cc:01:01:ca:f0:6e:b1:7e:a4:fd:94: 8b:5d:67:de:19:f7:f3:a2:dd:e1:0c:3e:de:24:21: 0e:76:3e:cf:52:08:37:09:b6:96:e2:8f:d6:d6:1e: 98:95:fd:66:e7:23:ef:be:6c:8b:40:68:d9:f1:2e: ac:15:4f:dc:63:55:70:b7:fc:02:27:2a:cd:21:35: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:71:F2:7C:63:3C:F8:6D:1B:E1:87:A3:28:4B:51:E5:05:BB:9E:C4 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/m3HyfGM8-G0b4YejKEtR5QW7nsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa01:aa00::/40 Signature Algorithm: sha256WithRSAEncryption a5:a1:57:90:68:43:f4:21:ea:1f:29:f3:d1:33:23:e2:62:4a: 82:a0:40:01:b6:c9:5a:3c:e4:b6:a1:6b:f1:35:0e:a9:b0:37: 08:d7:8d:cb:46:43:6e:0d:e7:b9:95:75:c2:5a:14:b9:33:40: f9:51:c0:15:85:0f:92:62:71:d4:64:b0:54:92:11:43:06:15: 5a:ab:b2:9d:78:76:36:9a:77:33:5c:b9:6d:85:23:85:03:fa: 36:5b:a9:ec:12:92:19:2f:6d:5e:69:89:86:26:27:f3:11:ed: 63:80:1e:76:a2:a8:be:fe:87:b7:50:b8:05:e2:10:65:c4:ea: e7:dc:e1:91:d7:2c:a8:39:f0:a3:ad:e9:cb:25:71:c4:fe:cc: 07:9a:37:03:64:00:dc:f1:3a:39:ae:f4:f5:07:49:01:f3:78: 14:ca:46:a2:a3:8a:37:d1:a9:ca:44:ad:bc:e4:bd:6d:7c:f7: 6f:a7:1b:09:73:21:d0:b5:17:f6:14:1c:3e:b6:eb:b0:08:4f: b1:2d:aa:46:52:4e:34:bf:b8:b3:5c:c1:85:31:7d:25:16:67: c7:e6:d1:91:2b:74:e8:2d:a6:45:57:08:7a:d4:85:98:75:e9: 32:27:f5:cb:ba:a8:89:0f:07:4a:63:4c:67:56:c8:81:70:7a: 1e:d9:57:85 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5frOvnAdTTDiNvAfRoX96MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjcxZjI3YzYzM2NmODZkMWJlMTg3YTMyODRiNTFlNTA1YmI5ZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mM+81O6rHfxOqmTkERlOJ8K76um a5ciD2EFgKH+jom00MWS4Zx3qRp1unR1rPRdfmXSZtY7aSFAai5aPPRtBhf/eLEB jFLLVICZ8lUwXg4Jki0QP26MamwpfC/H6cKQXial7lbkw6YgMm8OjgP4WaX9jhfG BfhrmC+5WNSFsgKBcN+lMmb6dNYVhHzuH50ZUNQv2QWczZTK5t4sBhTv/3/SmYBn mCqqkUMdnf6vj2iUHDbFoeylzAEByvBusX6k/ZSLXWfeGffzot3hDD7eJCEOdj7P Ugg3CbaW4o/W1h6Ylf1m5yPvvmyLQGjZ8S6sFU/cY1Vwt/wCJyrNITXTOwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJtx8nxjPPhtG+GHoyhLUeUFu57EMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvbTNIeWZHTTgtRzBiNFllaktFdFI1UVc3bnNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg6qAaow DQYJKoZIhvcNAQELBQADggEBAKWhV5BoQ/Qh6h8p89EzI+JiSoKgQAG2yVo85Lah a/E1DqmwNwjXjctGQ24N57mVdcJaFLkzQPlRwBWFD5JicdRksFSSEUMGFVqrsp14 djaadzNcuW2FI4UD+jZbqewSkhkvbV5piYYmJ/MR7WOAHnaiqL7+h7dQuAXiEGXE 6ufc4ZHXLKg58KOt6cslccT+zAeaNwNkANzxOjmu9PUHSQHzeBTKRqKjijfRqcpE rbzkvW1892+nGwlzIdC1F/YUHD6267AIT7EtqkZSTjS/uLNcwYUxfSUWZ8fm0ZEr dOgtpkVXCHrUhZh16TIn9cu6qIkPB0pjTGdWyIFweh7ZV4U= -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:10 2026 by rpki-client