This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/3IOPoCzRW7mgjr0cPtKmozccURI.roa File: 3IOPoCzRW7mgjr0cPtKmozccURI.roa (raw, json) Hash identifier: jj0LwtzFL+24CJa5ohVeW3KYku0pTcKPNnHC2bbdTMw= Subject key identifier: DC:83:8F:A0:2C:D1:5B:B9:A0:8E:BD:1C:3E:D2:A6:A3:37:1C:51:12 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758E51F61463AC58A9384EED1D4B4A4 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/3IOPoCzRW7mgjr0cPtKmozccURI.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206499 IP address blocks: 2a0f:5700::/32 maxlen: 48 2a0f:5701::/32 maxlen: 48 2a0f:5701::/33 maxlen: 33 2a0f:5701::/34 maxlen: 34 2a0f:5701:fe10::/48 maxlen: 48 2a0f:5707:af00::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e5:1f:61:46:3a:c5:8a:93:84:ee:d1:d4:b4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc838fa02cd15bb9a08ebd1c3ed2a6a3371c5112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:46:3d:3a:09:26:10:10:1b:35:ac:6a:4b:34: 6f:21:c6:c9:5b:ce:a3:fb:a7:26:1e:9a:94:da:df: 3b:91:71:ed:a0:d6:c9:80:86:5d:d4:8e:74:d1:0f: a4:68:4d:ac:7a:2b:a7:c6:3c:f8:fb:e5:bf:88:4f: 8e:be:5d:7d:2f:07:e3:a8:02:e1:5d:75:cc:ee:2d: 12:a5:74:13:7b:8d:bb:fa:3d:c8:65:9e:78:c9:3f: d8:cb:e8:d4:ae:de:5e:9d:02:21:39:e7:15:fb:0f: f9:4f:61:a4:44:b5:e8:ce:74:b3:df:1f:9c:7d:2d: eb:8a:1e:5a:92:74:74:4c:67:d1:64:89:4f:b4:5a: 1a:58:f7:96:14:08:43:23:f9:d6:6a:b8:ee:a2:e7: 41:ee:b9:28:2c:ec:b7:ce:74:59:68:e2:d8:e6:3c: 28:8e:85:87:54:a3:60:50:09:9a:27:4c:f2:5d:55: 79:85:d3:5e:8a:d4:63:b0:16:7b:19:8b:a2:fa:c1: 46:69:77:fc:11:6b:d8:e2:91:c6:69:ef:3a:4d:58: 69:db:1c:08:cf:ec:14:e8:23:39:86:86:d2:9d:47: 18:7a:b4:82:b0:d4:3a:0c:52:56:b3:ea:f8:16:34: 84:c9:b3:29:6b:41:d9:d0:3c:da:6c:fd:d8:3e:fd: 04:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:83:8F:A0:2C:D1:5B:B9:A0:8E:BD:1C:3E:D2:A6:A3:37:1C:51:12 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/3IOPoCzRW7mgjr0cPtKmozccURI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5700::/31 2a0f:5707:af00::/44 Signature Algorithm: sha256WithRSAEncryption b1:4f:00:0c:e9:0e:c0:e0:2b:b8:aa:47:f1:9d:eb:33:99:d1: 36:9e:fb:02:eb:f3:9e:0c:2a:de:22:5f:8a:a4:ac:c6:d6:7b: c9:98:e4:54:9e:87:2f:70:d1:4a:a5:a8:1b:fa:cd:85:fe:40: ba:e5:6b:fc:e2:18:02:ca:87:0b:9d:99:4d:23:ca:22:44:dd: 0b:cd:9f:58:a1:20:67:17:d1:d0:c1:12:87:07:6b:cd:ad:8f: d2:cb:cf:93:0d:56:17:87:26:c7:06:b5:96:6e:f0:e4:73:83: 44:a9:84:b7:de:7f:66:47:33:2a:62:27:55:b1:9e:48:60:1d: 85:16:dc:9e:61:ab:06:39:c5:b7:58:e5:75:b0:b4:d8:d1:f1: ea:f6:8c:30:90:78:af:5e:0c:2b:de:ab:3e:65:28:05:9a:8e: 1d:f8:d0:71:d5:90:82:a7:56:6d:d8:4f:2e:64:bf:2c:72:74: 1d:0d:58:24:99:45:30:ee:54:89:da:34:94:85:ef:58:91:76: 1b:4e:88:a4:f8:ca:c9:4d:24:cb:f0:f0:ee:df:69:17:d4:5b: 98:d1:2a:df:0e:26:f1:c6:95:0d:91:41:2c:54:e2:af:69:2e: 7c:8c:34:a2:26:a9:2b:ab:f1:68:0e:9e:e6:a3:84:d3:c8:40: d3:42:fc:81 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt3WOUfYUY6xYqThO7R1LSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzgzOGZhMDJjZDE1YmI5YTA4ZWJkMWMzZWQyYTZhMzM3MWM1MTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EY9OgkmEBAbNaxqSzRvIcbJW86j +6cmHpqU2t87kXHtoNbJgIZd1I500Q+kaE2seiunxjz4++W/iE+Ovl19LwfjqALh XXXM7i0SpXQTe427+j3IZZ54yT/Yy+jUrt5enQIhOecV+w/5T2GkRLXoznSz3x+c fS3rih5aknR0TGfRZIlPtFoaWPeWFAhDI/nWarjuoudB7rkoLOy3znRZaOLY5jwo joWHVKNgUAmaJ0zyXVV5hdNeitRjsBZ7GYui+sFGaXf8EWvY4pHGae86TVhp2xwI z+wU6CM5hobSnUcYerSCsNQ6DFJWs+r4FjSEybMpa0HZ0DzabP3YPv0EFQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFNyDj6As0Vu5oI69HD7SpqM3HFESMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvM0lPUG9DelJXN21nanIwY1B0S21vemNjVVJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwUBKg9XAAMH BCoPVwevADANBgkqhkiG9w0BAQsFAAOCAQEAsU8ADOkOwOAruKpH8Z3rM5nRNp77 Auvzngwq3iJfiqSsxtZ7yZjkVJ6HL3DRSqWoG/rNhf5AuuVr/OIYAsqHC52ZTSPK IkTdC82fWKEgZxfR0MEShwdrza2P0svPkw1WF4cmxwa1lm7w5HODRKmEt95/Zkcz KmInVbGeSGAdhRbcnmGrBjnFt1jldbC02NHx6vaMMJB4r14MK96rPmUoBZqOHfjQ cdWQgqdWbdhPLmS/LHJ0HQ1YJJlFMO5Uido0lIXvWJF2G06IpPjKyU0ky/Dw7t9p F9RbmNEq3w4m8caVDZFBLFTir2kufIw0oiapK6vxaA6e5qOE08hA00L8gQ== -----END CERTIFICATE-----Generated at Fri Jan 2 21:08:45 2026 by rpki-client