This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/3pU54Eicwv9WmW32GJLfRhQI-yo.roa File: 3pU54Eicwv9WmW32GJLfRhQI-yo.roa (raw, json) Hash identifier: mhNdNX5mJhVPgjFFLhqe1VbDAC8DnyygpOKlVF+Lnvs= Subject key identifier: DE:95:39:E0:48:9C:C2:FF:56:99:6D:F6:18:92:DF:46:14:08:FB:2A Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910BFD258160F173B1A51D569459314 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/3pU54Eicwv9WmW32GJLfRhQI-yo.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215745 IP address blocks: 2a12:bec0:638::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bf:d2:58:16:0f:17:3b:1a:51:d5:69:45:93:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de9539e0489cc2ff56996df61892df461408fb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f6:da:ad:f8:a0:e5:cf:29:60:b0:9f:d0:ed: 20:5f:6c:2b:f6:f0:76:ac:69:e1:97:ca:e0:cd:ff: 5f:35:e8:56:63:56:b3:b2:cc:c2:37:69:0e:be:96: b6:41:62:21:73:f8:fe:62:51:ac:b4:10:12:65:ea: 6d:ad:53:db:eb:3b:db:9b:a7:64:c9:45:f3:0c:5a: 6b:7b:50:eb:59:33:bd:48:ec:fe:07:0f:54:1b:94: b3:5e:6a:a4:53:fb:d6:76:d0:30:f8:6c:b9:6c:47: f1:b8:1d:45:ba:7f:95:e0:18:c3:c0:47:5d:5d:b5: a3:f6:3a:00:ea:c3:b8:eb:8d:fc:bc:e4:61:49:63: 17:25:6b:48:7f:2d:02:07:33:9e:f2:c5:4a:c8:8d: 6b:8b:82:b5:c1:14:ca:8e:82:0f:bb:c9:4f:35:12: ce:3a:b3:db:c0:6b:3a:04:2e:00:29:8d:16:48:7c: de:4d:09:20:69:8a:98:d7:98:da:93:ac:56:2e:a8: 5a:61:8d:e2:50:8f:6f:d9:02:1e:34:46:d2:8f:7b: 40:01:c0:08:81:63:8d:f0:21:ea:25:1a:a2:2f:39: c5:5e:ea:e7:30:9e:f0:08:50:4a:75:b7:41:bd:79: f8:6a:ae:90:b4:fe:44:d3:96:c2:8e:fb:c9:7f:6b: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:95:39:E0:48:9C:C2:FF:56:99:6D:F6:18:92:DF:46:14:08:FB:2A X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/3pU54Eicwv9WmW32GJLfRhQI-yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:638::/46 Signature Algorithm: sha256WithRSAEncryption 6d:1f:d6:f3:26:e7:99:b8:51:ae:4d:6d:b2:c9:bf:7e:2e:8e: 91:65:08:4f:6d:31:8f:2f:5e:0b:d9:ad:a5:46:5c:57:23:1f: 76:c7:f2:13:b4:ca:55:36:24:0f:91:db:21:d3:5a:10:74:19: 58:ec:85:77:a4:ec:18:9f:1c:ef:aa:85:7f:dc:b5:91:a4:1a: 9e:e0:7e:52:d5:5d:b8:62:30:b3:d3:64:ce:7e:ef:40:ff:bc: e5:73:7e:10:c8:e9:84:e5:ed:88:2c:67:30:07:e4:60:e2:8a: aa:44:b3:2c:19:a6:a2:00:9d:92:40:8c:b1:4a:c2:d0:4f:91: 46:04:21:be:11:85:df:c0:e8:fb:ab:48:8a:d5:9f:54:a9:93: 39:12:23:4d:a4:6c:2f:ea:47:61:21:25:18:10:07:6b:f2:0f: c7:cd:7a:27:04:65:2c:aa:9f:6b:33:2a:3f:ad:10:24:54:10: 26:68:78:56:3a:30:20:1b:ff:3d:bf:27:bf:69:8f:e5:99:58: 34:fb:27:53:36:30:f7:74:ac:25:1f:9f:7d:4e:c5:36:44:87: bb:ea:26:f3:3c:27:0d:30:a9:d9:45:ac:22:ff:17:71:14:94: 4e:c8:bc:b5:ff:f4:e2:b1:ae:f3:72:98:aa:5d:a5:20:d2:57: 47:c7:61:8e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EL/SWBYPFzsaUdVpRZMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTk1MzllMDQ4OWNjMmZmNTY5OTZkZjYxODkyZGY0NjE0MDhmYjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/barfig5c8pYLCf0O0gX2wr9vB2 rGnhl8rgzf9fNehWY1azsszCN2kOvpa2QWIhc/j+YlGstBASZeptrVPb6zvbm6dk yUXzDFpre1DrWTO9SOz+Bw9UG5SzXmqkU/vWdtAw+Gy5bEfxuB1Fun+V4BjDwEdd XbWj9joA6sO46438vORhSWMXJWtIfy0CBzOe8sVKyI1ri4K1wRTKjoIPu8lPNRLO OrPbwGs6BC4AKY0WSHzeTQkgaYqY15jak6xWLqhaYY3iUI9v2QIeNEbSj3tAAcAI gWON8CHqJRqiLznFXurnMJ7wCFBKdbdBvXn4aq6QtP5E05bCjvvJf2vpCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN6VOeBInML/Vplt9hiS30YUCPsqMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvM3BVNTRFaWN3djlXbVczMkdKTGZSaFFJLXlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKhK+wAY4 MA0GCSqGSIb3DQEBCwUAA4IBAQBtH9bzJueZuFGuTW2yyb9+Lo6RZQhPbTGPL14L 2a2lRlxXIx92x/ITtMpVNiQPkdsh01oQdBlY7IV3pOwYnxzvqoV/3LWRpBqe4H5S 1V24YjCz02TOfu9A/7zlc34QyOmE5e2ILGcwB+Rg4oqqRLMsGaaiAJ2SQIyxSsLQ T5FGBCG+EYXfwOj7q0iK1Z9UqZM5EiNNpGwv6kdhISUYEAdr8g/HzXonBGUsqp9r Myo/rRAkVBAmaHhWOjAgG/89vye/aY/lmVg0+ydTNjD3dKwlH599TsU2RIe76ibz PCcNMKnZRawi/xdxFJROyLy1//Tisa7zcpiqXaUg0ldHx2GO -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:56 2026 by rpki-client