This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/3fmRvkperMmvyU4KqpsUtOxTyt4.roa File: 3fmRvkperMmvyU4KqpsUtOxTyt4.roa (raw, json) Hash identifier: 7eZzl4W/3A8ZztuV2lmxwvx6VP7+Qvs+/fsXhTjc0rc= Subject key identifier: DD:F9:91:BE:4A:5E:AC:C9:AF:C9:4E:0A:AA:9B:14:B4:EC:53:CA:DE Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019B7D5C8570F87CA0D0DB10A4A07345F50B Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/3fmRvkperMmvyU4KqpsUtOxTyt4.roa Signing time: Fri 02 Jan 2026 06:19:34 +0000 ROA not before: Fri 02 Jan 2026 06:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48047 IP address blocks: 2a02:2978:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:85:70:f8:7c:a0:d0:db:10:a4:a0:73:45:f5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Jan 2 06:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddf991be4a5eacc9afc94e0aaa9b14b4ec53cade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:39:97:b7:df:cd:c2:fa:a1:19:7f:a9:de: 49:0f:9f:53:2d:62:bd:8a:ad:48:5f:55:64:b6:8f: f5:b5:2a:32:db:da:ea:25:5c:80:4c:5b:f6:b6:55: 94:49:6b:1a:92:a4:4f:50:2c:6e:54:51:01:f1:4f: c6:5e:13:57:1c:8f:6d:0e:5f:33:99:2f:2c:1f:5d: ba:5e:69:fb:b1:73:bf:8d:20:17:2d:19:ee:81:ac: a7:36:38:66:55:0f:c3:f9:75:21:cb:fb:bb:c3:7e: dc:f1:9b:b6:7d:fa:d4:f8:09:43:f9:f1:97:8b:35: 48:6e:21:5d:2a:50:7a:5e:bf:e5:5a:b0:ae:f2:0f: bd:d1:9e:0f:a0:10:f1:45:fc:a8:6e:cd:34:34:55: 5b:e4:e0:1d:af:97:bd:4d:41:a4:8d:49:10:36:39: cd:cb:d6:aa:2a:26:ec:ca:75:4b:62:2f:f8:13:9e: 1a:dc:a5:3d:da:3b:7e:5a:c4:ab:bb:0d:35:78:c5: c0:05:b2:3e:37:55:1f:48:dd:f3:3f:d1:38:f4:8d: 4d:ff:b8:88:5c:a7:07:ed:d9:36:79:fe:fe:04:92: c9:cf:3c:e0:3f:a2:57:d2:fb:24:89:2f:0d:35:ee: 51:2e:3b:9e:08:bb:21:96:0f:30:33:a8:06:f4:4a: de:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F9:91:BE:4A:5E:AC:C9:AF:C9:4E:0A:AA:9B:14:B4:EC:53:CA:DE X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/3fmRvkperMmvyU4KqpsUtOxTyt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2978:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 0d:d0:f9:e9:06:96:6e:06:c1:dc:7e:14:62:d8:ff:cc:42:1d: 18:30:0f:ec:bd:bc:73:0d:d1:fe:9f:31:4a:2e:4f:d2:e1:2d: 9f:d9:9e:38:eb:31:63:95:49:ba:d4:c7:f9:59:92:26:0c:9d: 1a:be:5d:a2:9a:48:6b:e8:59:4a:57:9c:22:bb:a2:9b:02:fa: cc:8c:0b:27:b1:09:a6:25:63:34:e3:43:85:0f:c4:06:b2:41: 7e:80:c7:57:86:49:3a:22:af:e0:03:1c:85:6e:ba:63:a7:35: 28:2e:a5:5f:6e:ad:32:c5:57:81:98:e6:6d:c9:3e:37:9a:9b: 32:9f:44:7f:63:e7:29:9a:b4:cf:a9:9d:68:3b:70:ee:3f:46: a3:3a:8b:82:3a:0e:dc:e9:27:b4:b5:74:fa:4a:07:f7:93:93: ba:1a:06:69:05:6a:9e:07:e3:48:51:47:35:15:7a:89:74:9d: bc:3d:a1:d4:98:a4:e7:7c:03:be:12:b2:30:c7:7e:b7:72:79: ac:09:0f:9d:09:95:74:93:e5:86:41:fd:b8:b9:32:64:d9:19: e4:72:31:44:c7:44:44:a7:66:ab:f9:d1:96:3f:c3:97:6c:c8: 08:1e:53:11:49:60:66:0a:c3:d7:65:14:a6:0f:b8:ba:b5:e6: 41:9f:c8:d6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XIVw+Hyg0NsQpKBzRfULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjYwMTAyMDYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGY5OTFiZTRhNWVhY2M5YWZjOTRlMGFhYTliMTRiNGVjNTNjYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAU5l7ffzcL6oRl/qd5JD59TLWK9 iq1IX1Vkto/1tSoy29rqJVyATFv2tlWUSWsakqRPUCxuVFEB8U/GXhNXHI9tDl8z mS8sH126Xmn7sXO/jSAXLRnugaynNjhmVQ/D+XUhy/u7w37c8Zu2ffrU+AlD+fGX izVIbiFdKlB6Xr/lWrCu8g+90Z4PoBDxRfyobs00NFVb5OAdr5e9TUGkjUkQNjnN y9aqKibsynVLYi/4E54a3KU92jt+WsSruw01eMXABbI+N1UfSN3zP9E49I1N/7iI XKcH7dk2ef7+BJLJzzzgP6JX0vskiS8NNe5RLjueCLshlg8wM6gG9EreAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN35kb5KXqzJr8lOCqqbFLTsU8reMB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvM2ZtUnZrcGVyTW12eVU0S3Fwc1V0T3hUeXQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIpeP// MA0GCSqGSIb3DQEBCwUAA4IBAQAN0PnpBpZuBsHcfhRi2P/MQh0YMA/svbxzDdH+ nzFKLk/S4S2f2Z446zFjlUm61Mf5WZImDJ0avl2imkhr6FlKV5wiu6KbAvrMjAsn sQmmJWM040OFD8QGskF+gMdXhkk6Iq/gAxyFbrpjpzUoLqVfbq0yxVeBmOZtyT43 mpsyn0R/Y+cpmrTPqZ1oO3DuP0ajOouCOg7c6Se0tXT6Sgf3k5O6GgZpBWqeB+NI UUc1FXqJdJ28PaHUmKTnfAO+ErIwx363cnmsCQ+dCZV0k+WGQf24uTJk2RnkcjFE x0REp2ar+dGWP8OXbMgIHlMRSWBmCsPXZRSmD7i6teZBn8jW -----END CERTIFICATE-----Generated at Sat Jan 3 18:31:41 2026 by rpki-client