This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/3DCZ-Mv186YLYlz12p43qxYrdsQ.roa File: 3DCZ-Mv186YLYlz12p43qxYrdsQ.roa (raw, json) Hash identifier: MAo0fMa4FAhaSrzzVpFcgzHGhsEEGECkBY0BEzNu0vE= Subject key identifier: DC:30:99:F8:CB:F5:F3:A6:0B:62:5C:F5:DA:9E:37:AB:16:2B:76:C4 Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Certificate serial: 019B77593E4EA46B07B9C3FCF4994F3C93C7 Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/3DCZ-Mv186YLYlz12p43qxYrdsQ.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210701 IP address blocks: 2a11:4e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3e:4e:a4:6b:07:b9:c3:fc:f4:99:4f:3c:93:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc3099f8cbf5f3a60b625cf5da9e37ab162b76c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:ef:0f:ea:14:f7:21:ee:db:b2:4e:18:2a: 90:c4:cb:7f:03:10:c9:32:55:77:65:63:ae:9f:b0: e3:03:48:ba:b3:b3:ff:59:eb:2d:aa:5e:c3:ca:65: f5:53:e3:bb:9a:7c:41:d7:a1:53:96:ed:d9:03:30: 80:17:10:3a:8c:69:cb:ea:c9:4f:f7:80:f7:66:a6: f5:97:88:72:e7:f1:9d:5b:d5:29:74:c5:b5:08:f7: 06:96:0e:ac:de:28:78:0e:27:42:b3:5d:dd:e9:8f: 9d:06:74:de:78:d8:fd:f2:15:d1:02:d6:19:03:2a: 51:48:79:57:8c:62:13:e4:9d:a3:f8:8b:2a:c1:87: f7:8f:01:b5:9e:30:5f:d0:33:fd:0a:47:6f:28:5d: 05:b9:75:65:20:51:a8:4a:54:82:74:02:f1:74:81: f8:7d:b1:a8:e1:bf:21:7a:eb:65:1a:ee:f0:ac:2d: 30:8c:c7:35:58:6f:76:d7:b0:50:59:53:dd:e7:10: 0c:82:8d:2e:35:ab:32:93:af:5d:9d:93:c7:27:a8: 8b:08:b5:cc:9b:78:1d:53:c4:ea:d6:f3:6f:d0:e3: 81:e4:66:02:bd:cc:3b:41:27:39:c0:1a:7b:21:51: 98:df:ca:6b:29:73:a3:1c:6a:f1:f9:59:50:51:8b: e8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:30:99:F8:CB:F5:F3:A6:0B:62:5C:F5:DA:9E:37:AB:16:2B:76:C4 X509v3 Authority Key Identifier: keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/3DCZ-Mv186YLYlz12p43qxYrdsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:4e40::/29 Signature Algorithm: sha256WithRSAEncryption 3a:9f:72:43:6d:ec:43:c3:ce:1b:74:5f:4d:51:6c:e7:d6:0b: 5b:78:23:0a:f7:16:cd:cd:d9:98:69:b9:34:8e:26:1d:94:fe: 15:f3:e2:ef:6b:0d:d8:72:98:d6:0d:cc:54:94:ee:b7:27:8d: 04:9e:e2:9c:bc:e7:e6:df:fa:66:3e:7b:30:27:8a:49:13:81: e2:b5:f1:d3:b0:2d:ad:35:14:70:ca:c4:b0:bd:ec:72:2e:7c: b2:fd:c5:da:18:d9:e5:89:bb:ef:4c:f7:70:86:7e:25:74:db: 6b:41:40:6c:3d:6e:73:63:5b:7d:0d:a6:f6:78:ac:86:85:e3: d5:83:68:1e:e7:4e:94:27:fd:b5:7f:8c:14:87:2f:b3:76:2a: df:70:96:3e:ff:b3:20:d5:d2:bf:56:78:6d:00:19:3c:59:30: 42:5f:99:95:fa:ab:0b:e7:fa:ad:a7:4b:ca:7b:29:6c:58:ed: 1c:cb:c6:7c:37:a3:90:d4:1a:17:5c:5b:b1:16:e6:1c:41:8f: 31:d4:f4:06:e1:7f:22:82:b1:5c:ef:ba:9d:6b:53:72:ab:94: 90:14:84:2f:e2:a4:fd:b8:e0:0f:0d:78:8d:da:fc:cf:65:d5: 33:bd:c2:b2:07:85:f8:9d:45:b8:54:a0:68:87:03:80:64:a5: 30:40:1d:4c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WT5OpGsHucP89JlPPJPHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTg2ZDFjMTY3NmE1OWE0NmFjZjM3MzM2MTkyZTk4NWNm ZjBlNWIwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzMwOTlmOGNiZjVmM2E2MGI2MjVjZjVkYTllMzdhYjE2MmI3NmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8zvD+oU9yHu27JOGCqQxMt/AxDJ MlV3ZWOun7DjA0i6s7P/Westql7DymX1U+O7mnxB16FTlu3ZAzCAFxA6jGnL6slP 94D3Zqb1l4hy5/GdW9UpdMW1CPcGlg6s3ih4DidCs13d6Y+dBnTeeNj98hXRAtYZ AypRSHlXjGIT5J2j+IsqwYf3jwG1njBf0DP9CkdvKF0FuXVlIFGoSlSCdALxdIH4 fbGo4b8heutlGu7wrC0wjMc1WG9217BQWVPd5xAMgo0uNasyk69dnZPHJ6iLCLXM m3gdU8Tq1vNv0OOB5GYCvcw7QSc5wBp7IVGY38prKXOjHGrx+VlQUYvowwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNwwmfjL9fOmC2Jc9dqeN6sWK3bEMB8GA1UdIwQY MBaAFG+obRwWdqWaRqzzczYZLphc/w5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYt NmFhYjJiMWI5MjJjLzEvM0RDWi1NdjE4NllMWWx6MTJwNDNxeFlyZHNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYtNmFhYjJiMWI5MjJj LzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhFOQDAN BgkqhkiG9w0BAQsFAAOCAQEAOp9yQ23sQ8POG3RfTVFs59YLW3gjCvcWzc3ZmGm5 NI4mHZT+FfPi72sN2HKY1g3MVJTutyeNBJ7inLzn5t/6Zj57MCeKSROB4rXx07At rTUUcMrEsL3sci58sv3F2hjZ5Ym770z3cIZ+JXTba0FAbD1uc2NbfQ2m9nishoXj 1YNoHudOlCf9tX+MFIcvs3Yq33CWPv+zINXSv1Z4bQAZPFkwQl+ZlfqrC+f6radL ynspbFjtHMvGfDejkNQaF1xbsRbmHEGPMdT0BuF/IoKxXO+6nWtTcquUkBSEL+Kk /bjgDw14jdr8z2XVM73CsgeF+J1FuFSgaIcDgGSlMEAdTA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:42 2026 by rpki-client