This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/s3fAR5kxm2v5lS3_bAMt2FbYzPc.roa File: s3fAR5kxm2v5lS3_bAMt2FbYzPc.roa (raw, json) Hash identifier: Mq0QOl+97ra0mCe8jV51hiUUUsdns6qLTaWRr9y+gi0= Subject key identifier: B3:77:C0:47:99:31:9B:6B:F9:95:2D:FF:6C:03:2D:D8:56:D8:CC:F7 Certificate issuer: /CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3 Certificate serial: 019B7FF2675A5857B1EA1A7DFB632CA673AC Authority key identifier: 5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/s3fAR5kxm2v5lS3_bAMt2FbYzPc.roa Signing time: Fri 02 Jan 2026 18:22:31 +0000 ROA not before: Fri 02 Jan 2026 18:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 2a0a:7740:1::/48 maxlen: 48 2a0a:7740:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:67:5a:58:57:b1:ea:1a:7d:fb:63:2c:a6:73:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3 Validity Not Before: Jan 2 18:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b377c04799319b6bf9952dff6c032dd856d8ccf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:21:c7:4b:95:5d:cb:b2:e6:f3:e9:91:fc: 4b:1a:79:21:0c:12:b2:79:b1:10:bf:e0:bb:4b:0f: e0:c5:d2:c8:42:59:5b:51:da:8d:29:b8:81:ee:32: 40:e9:41:03:4b:da:68:21:0a:a8:d7:50:46:68:59: 2a:73:32:97:cf:b0:e8:c1:ac:a9:54:34:25:5e:a8: 0f:f8:1b:61:3d:76:d6:5f:bc:49:5b:a8:8e:a7:f6: c7:32:49:9e:58:03:83:27:6d:92:55:dc:22:4c:3e: 08:79:43:0f:46:02:87:8d:ca:c9:ab:f4:b8:14:7c: 74:c8:8f:f8:f8:ea:b7:2e:31:1e:52:76:eb:c4:a4: 85:0e:6b:bb:c7:0b:73:fe:87:b5:f7:e2:c0:f1:10: 83:5d:d0:8a:5b:cc:ca:17:8d:1f:0e:9d:4b:40:73: bd:1f:f6:d0:65:a2:f2:16:fa:e8:79:71:6e:f8:70: 24:fa:de:bc:72:23:de:41:d6:03:e1:8f:c4:97:40: 9e:af:2a:e6:3f:99:b9:1a:4b:bc:17:64:0a:b7:57: bd:e9:40:36:86:cb:26:c8:9a:47:db:0c:50:ba:df: 21:9e:6f:26:db:b2:b2:f0:a2:be:52:99:6b:19:b8: 45:53:e2:b9:b8:e4:21:28:ac:5f:f4:3f:7c:8d:35: 77:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:77:C0:47:99:31:9B:6B:F9:95:2D:FF:6C:03:2D:D8:56:D8:CC:F7 X509v3 Authority Key Identifier: keyid:5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/s3fAR5kxm2v5lS3_bAMt2FbYzPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:7740:1::-2a0a:7740:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 23:a7:44:83:39:eb:11:82:ed:d6:0a:0c:74:97:b4:63:bb:b0: 12:b2:45:31:d7:b4:b2:4e:e7:40:63:a9:05:24:28:8e:0b:99: ce:22:f5:d3:99:72:15:a0:37:27:fd:25:7c:69:e0:18:98:ed: b5:d6:30:b9:d3:72:02:79:7f:fa:6a:a9:51:49:80:6e:c8:0e: fe:3e:9e:f0:08:a2:c2:62:f9:d0:28:8f:75:dd:97:43:be:22: 9f:bc:00:d0:4b:01:b8:2c:5d:75:0a:93:b9:89:5c:06:38:64: 95:41:2e:ba:26:ed:c6:73:38:71:33:00:b7:62:43:e1:94:a8: 6a:ef:09:6f:c6:23:51:98:53:1e:57:cd:c2:e5:68:df:04:35: d7:7d:7d:d1:85:08:0d:a6:33:81:e8:35:ec:7a:95:1b:90:ff: c8:93:8a:cd:34:0d:2c:f5:c8:3d:c5:fe:73:c7:a0:f2:ba:d7: 91:3d:6f:65:88:fe:b3:88:4e:04:f7:38:f8:6c:93:76:9d:23: 81:ed:ea:fe:f5:57:3f:fa:4a:5c:f9:c9:b6:4c:7a:6f:dc:3f: a0:08:1d:9e:52:69:e9:94:cd:c6:5f:e5:e9:94:25:2d:dc:79: 47:95:9a:f6:85:62:4f:ff:53:84:41:b3:fa:d8:9c:75:06:63: 0d:d0:53:3f -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/8mdaWFex6hp9+2MspnOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDMyOTA2NjEzOGJiNTU2NDU3MWZjM2MyOWVlOTUzZTVj MWM3YTMwHhcNMjYwMTAyMTgyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzc3YzA0Nzk5MzE5YjZiZjk5NTJkZmY2YzAzMmRkODU2ZDhjY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA4hx0uVXcuy5vPpkfxLGnkhDBKy ebEQv+C7Sw/gxdLIQllbUdqNKbiB7jJA6UEDS9poIQqo11BGaFkqczKXz7Dowayp VDQlXqgP+BthPXbWX7xJW6iOp/bHMkmeWAODJ22SVdwiTD4IeUMPRgKHjcrJq/S4 FHx0yI/4+Oq3LjEeUnbrxKSFDmu7xwtz/oe19+LA8RCDXdCKW8zKF40fDp1LQHO9 H/bQZaLyFvroeXFu+HAk+t68ciPeQdYD4Y/El0CeryrmP5m5Gku8F2QKt1e96UA2 hssmyJpH2wxQut8hnm8m27Ky8KK+UplrGbhFU+K5uOQhKKxf9D98jTV3TwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLN3wEeZMZtr+ZUt/2wDLdhW2Mz3MB8GA1UdIwQY MBaAFFsDKQZhOLtVZFcfw8Ke6VPlwcejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3dNcEJtRTR1MVZrVnhfRHdwN3BVLVhCeDZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzA5NmYtYmI4OS00MTFlLTkwZTAt MzBjN2YzOWQ4ZTFjLzEvczNmQVI1a3htMnY1bFMzX2JBTXQyRmJZelBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC83NzA5NmYtYmI4OS00MTFlLTkwZTAtMzBjN2YzOWQ4ZTFj LzEvV3dNcEJtRTR1MVZrVnhfRHdwN3BVLVhCeDZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqCndA AAEDBwAqCndAAAIwDQYJKoZIhvcNAQELBQADggEBACOnRIM56xGC7dYKDHSXtGO7 sBKyRTHXtLJO50BjqQUkKI4Lmc4i9dOZchWgNyf9JXxp4BiY7bXWMLnTcgJ5f/pq qVFJgG7IDv4+nvAIosJi+dAoj3Xdl0O+Ip+8ANBLAbgsXXUKk7mJXAY4ZJVBLrom 7cZzOHEzALdiQ+GUqGrvCW/GI1GYUx5XzcLlaN8ENdd9fdGFCA2mM4HoNex6lRuQ /8iTis00DSz1yD3F/nPHoPK615E9b2WI/rOITgT3OPhsk3adI4Ht6v71Vz/6Slz5 ybZMem/cP6AIHZ5SaemUzcZf5emUJS3ceUeVmvaFYk//U4RBs/rYnHUGYw3QUz8= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:36 2026 by rpki-client