This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/S3_3KVAgp6YkFCWpI81L12B1tpo.roa File: S3_3KVAgp6YkFCWpI81L12B1tpo.roa (raw, json) Hash identifier: wonEbSs5KIz67ymZjaYe88a1Z1LvjGATE4F1phDrzy0= Subject key identifier: 4B:7F:F7:29:50:20:A7:A6:24:14:25:A9:23:CD:4B:D7:60:75:B6:9A Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51 Certificate serial: 019B7DCB3BA82CE6903F078292A99839AA62 Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/S3_3KVAgp6YkFCWpI81L12B1tpo.roa Signing time: Fri 02 Jan 2026 08:20:29 +0000 ROA not before: Fri 02 Jan 2026 08:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29670 IP address blocks: 2001:678:fd8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3b:a8:2c:e6:90:3f:07:82:92:a9:98:39:aa:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51 Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b7ff7295020a7a6241425a923cd4bd76075b69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ec:ea:52:da:cf:4d:de:d8:65:22:8b:7d:aa: 9a:94:f8:a1:7b:7b:11:79:83:ce:f7:73:d1:5d:8c: 4d:fb:35:b1:36:82:9b:f1:c7:73:83:fe:09:b7:d1: fd:48:83:46:cf:90:2d:96:ee:c5:e4:b3:f3:e4:bf: 57:d5:33:cc:ae:64:f8:ee:55:01:2b:be:5e:47:f3: 1b:6e:50:de:63:e7:7d:68:31:bc:54:30:c2:54:d8: f8:05:53:6b:a5:9c:f7:81:92:37:06:65:fe:6c:a4: 21:28:21:3b:cb:96:5c:53:03:47:42:28:c6:e4:f5: 11:4a:2c:30:82:f1:c7:46:69:5a:c9:f1:33:94:65: bb:55:77:96:6e:81:85:dd:0b:7f:4a:85:32:07:fa: 45:8d:b7:bc:2e:7b:db:14:59:99:c2:72:86:31:05: ad:88:c9:5f:ec:f1:da:53:dd:c9:00:1c:1d:d1:33: 3d:dc:ab:7c:77:14:ff:cf:c2:7c:c8:81:aa:43:72: 29:73:d6:85:b1:54:52:c2:9e:52:35:83:d1:7c:12: 69:b4:93:d0:95:63:a8:cc:5e:60:40:2e:b5:df:73: e9:58:34:7a:97:3b:40:45:dc:1a:33:b6:8e:48:1f: a5:d5:bf:b5:ec:c4:51:c3:f8:95:36:8e:60:4b:d3: 7b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7F:F7:29:50:20:A7:A6:24:14:25:A9:23:CD:4B:D7:60:75:B6:9A X509v3 Authority Key Identifier: keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/S3_3KVAgp6YkFCWpI81L12B1tpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:fd8::/48 Signature Algorithm: sha256WithRSAEncryption 77:a5:f4:9f:3d:3b:20:4b:5c:cc:de:45:e0:53:e4:70:86:e6: d3:9b:11:b7:98:2b:6d:6e:86:39:2a:8b:4e:91:66:96:82:13: 3b:87:58:e0:4d:fd:dd:e1:44:48:f6:f5:96:c6:a1:47:a4:47: 60:13:20:44:99:79:3e:08:4a:f9:a0:8f:bb:e5:1d:61:08:b5: 03:79:18:86:fb:97:d8:ba:5b:c7:c6:52:be:0d:4b:ba:9e:24: 00:35:62:08:68:99:5c:66:ce:0a:e1:9a:1b:6f:7a:bc:fc:a1: 5b:4a:6f:42:df:31:1c:a8:66:1f:4d:2b:15:43:7d:d5:ce:9d: 7b:23:3e:ab:b0:81:12:78:ff:f7:6d:61:2f:b8:df:c9:03:9d: 18:d8:7e:3f:fa:0d:cd:f8:d7:9f:ac:c6:62:93:30:22:b3:bb: 51:ab:f6:64:40:44:74:7e:e1:d3:b8:8c:31:6e:2a:0a:57:10: 2e:bc:3b:f5:10:d5:e4:59:ff:63:12:35:f2:f6:b5:59:3e:fd: 13:e4:81:e8:e9:a8:c5:88:a2:c3:83:1c:4b:47:bd:33:e2:b2: 31:69:3e:47:e5:22:c2:85:60:4f:be:14:7f:7e:99:0d:d1:71: b2:4f:ab:0e:6f:ca:3a:76:f1:32:0a:70:39:90:cd:4c:8c:f1: 3c:a3:c3:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yzuoLOaQPweCkqmYOapiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDM1NGJiYTBlMDRkN2U1YWFkMjc3OTI3ODlmYzI2ZGRk NmRmNTEwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjdmZjcyOTUwMjBhN2E2MjQxNDI1YTkyM2NkNGJkNzYwNzViNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ezqUtrPTd7YZSKLfaqalPihe3sR eYPO93PRXYxN+zWxNoKb8cdzg/4Jt9H9SINGz5Atlu7F5LPz5L9X1TPMrmT47lUB K75eR/MbblDeY+d9aDG8VDDCVNj4BVNrpZz3gZI3BmX+bKQhKCE7y5ZcUwNHQijG 5PURSiwwgvHHRmlayfEzlGW7VXeWboGF3Qt/SoUyB/pFjbe8LnvbFFmZwnKGMQWt iMlf7PHaU93JABwd0TM93Kt8dxT/z8J8yIGqQ3Ipc9aFsVRSwp5SNYPRfBJptJPQ lWOozF5gQC6133PpWDR6lztARdwaM7aOSB+l1b+17MRRw/iVNo5gS9N7sQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEt/9ylQIKemJBQlqSPNS9dgdbaaMB8GA1UdIwQY MBaAFCrTVLug4E1+Wq0neSeJ/Cbd1t9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAt M2E3MDM3ODliMDNiLzEvUzNfM0tWQWdwNllrRkNXcEk4MUwxMkIxdHBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAtM2E3MDM3ODliMDNi LzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA/Y MA0GCSqGSIb3DQEBCwUAA4IBAQB3pfSfPTsgS1zM3kXgU+RwhubTmxG3mCttboY5 KotOkWaWghM7h1jgTf3d4URI9vWWxqFHpEdgEyBEmXk+CEr5oI+75R1hCLUDeRiG +5fYulvHxlK+DUu6niQANWIIaJlcZs4K4Zobb3q8/KFbSm9C3zEcqGYfTSsVQ33V zp17Iz6rsIESeP/3bWEvuN/JA50Y2H4/+g3N+NefrMZikzAis7tRq/ZkQER0fuHT uIwxbioKVxAuvDv1ENXkWf9jEjXy9rVZPv0T5IHo6ajFiKLDgxxLR70z4rIxaT5H 5SLChWBPvhR/fpkN0XGyT6sOb8o6dvEyCnA5kM1MjPE8o8Mp -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:48 2026 by rpki-client