This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NKEp3h0kLvUlKUBge8tH1e64kVg.roa File: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (raw, json) Hash identifier: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk= Subject key identifier: 34:A1:29:DE:1D:24:2E:F5:25:29:40:60:7B:CB:47:D5:EE:B8:91:58 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 019B7DCB0C0B0205FC4E39C44D9F17D76722 Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NKEp3h0kLvUlKUBge8tH1e64kVg.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 2a05:91c3:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0c:0b:02:05:fc:4e:39:c4:4d:9f:17:d7:67:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34a129de1d242ef5252940607bcb47d5eeb89158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2a:6b:c9:72:08:e0:08:24:d2:e7:83:4f:c5: 3d:9d:dc:ea:9e:16:8a:23:34:e1:9e:46:92:51:cc: 5a:be:8b:f9:8a:38:42:80:d9:b3:fb:dd:c2:7c:17: 9c:7c:a0:bc:1a:08:84:c8:df:f9:e3:25:17:b1:99: 68:90:b0:81:87:6b:1c:be:70:42:8b:9f:c8:0e:d8: a8:8d:13:0e:34:5d:fb:bc:ca:1b:13:81:11:24:15: 42:6c:52:b7:7d:05:20:5f:ed:e7:ac:cc:a6:f1:53: cf:06:85:3e:e4:87:25:59:db:f0:28:f8:d3:d4:91: ed:2b:0e:f8:97:5e:ff:ca:1b:66:c4:47:2c:b0:8d: bd:16:ec:75:45:25:3c:d8:27:7a:e0:74:53:a8:28: 91:53:6f:eb:a3:75:18:fb:ba:3d:6f:b5:58:4a:07: 57:e1:ce:10:af:10:b0:3f:8f:da:d5:ec:11:27:c9: 85:18:1f:08:06:82:57:3c:41:40:13:aa:cb:7f:84: a1:82:37:9c:3f:4d:1a:3a:bc:f0:29:3b:74:7c:84: 84:30:62:46:6e:76:d9:70:e9:78:e9:2e:f4:3f:f3: 28:76:65:b0:2a:d2:de:a6:31:3a:a7:f1:de:bf:dc: 42:d3:62:8b:c3:55:93:bf:46:7d:ed:12:db:22:d7: 00:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A1:29:DE:1D:24:2E:F5:25:29:40:60:7B:CB:47:D5:EE:B8:91:58 X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NKEp3h0kLvUlKUBge8tH1e64kVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:91c3:2::/48 Signature Algorithm: sha256WithRSAEncryption b7:84:bf:e0:c8:40:70:b7:28:58:de:b7:07:c0:e0:2f:b1:93: 87:54:c3:82:d7:53:51:09:6d:04:cc:94:33:87:9e:40:64:22: 17:34:c4:03:99:0f:ff:42:9f:41:cb:3c:10:a8:1f:d6:59:19: 16:37:06:20:a3:be:4b:1b:ba:cd:c6:70:1c:d7:b8:94:55:f9: 37:ca:02:50:12:16:57:95:47:ae:95:34:a2:96:34:bb:8c:72: f2:64:a6:1f:f1:4b:64:c9:fd:4c:f0:f1:97:4d:9d:7d:6b:93: 7e:7a:92:a0:4f:d3:91:03:54:4f:3d:85:4e:4d:70:5a:de:67: 33:9a:61:b1:52:30:1d:fe:1a:73:8d:03:b7:c3:ff:ca:b5:de: 05:db:0b:39:61:f6:f9:f4:66:a9:40:69:65:10:c5:c2:14:aa: 27:40:e3:4c:67:e7:c0:1a:5f:4d:b7:d0:c4:3d:a0:6d:2a:51: ea:d0:fc:d3:32:b8:cc:48:37:89:34:af:65:88:ed:8d:ac:fa: 53:2b:ff:6b:6b:fc:8b:a6:02:47:b4:e9:db:86:33:10:67:d6: d8:34:a3:ea:d3:cb:97:15:28:6c:ad:70:fa:29:4e:e6:a5:bc: ad:a2:43:f5:c1:f7:c8:8e:53:c5:97:45:78:bf:87:d4:ae:70: fd:54:2d:34 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ywwLAgX8TjnETZ8X12ciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGExMjlkZTFkMjQyZWY1MjUyOTQwNjA3YmNiNDdkNWVlYjg5MTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SpryXII4Agk0ueDT8U9ndzqnhaK IzThnkaSUcxavov5ijhCgNmz+93CfBecfKC8GgiEyN/54yUXsZlokLCBh2scvnBC i5/IDtiojRMONF37vMobE4ERJBVCbFK3fQUgX+3nrMym8VPPBoU+5IclWdvwKPjT 1JHtKw74l17/yhtmxEcssI29Fux1RSU82Cd64HRTqCiRU2/ro3UY+7o9b7VYSgdX 4c4QrxCwP4/a1ewRJ8mFGB8IBoJXPEFAE6rLf4ShgjecP00aOrzwKTt0fISEMGJG bnbZcOl46S70P/ModmWwKtLepjE6p/Hev9xC02KLw1WTv0Z97RLbItcAnQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDShKd4dJC71JSlAYHvLR9XuuJFYMB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEvTktFcDNoMGtMdlVsS1VCZ2U4dEgxZTY0a1ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWRwwAC MA0GCSqGSIb3DQEBCwUAA4IBAQC3hL/gyEBwtyhY3rcHwOAvsZOHVMOC11NRCW0E zJQzh55AZCIXNMQDmQ//Qp9ByzwQqB/WWRkWNwYgo75LG7rNxnAc17iUVfk3ygJQ EhZXlUeulTSiljS7jHLyZKYf8Utkyf1M8PGXTZ19a5N+epKgT9ORA1RPPYVOTXBa 3mczmmGxUjAd/hpzjQO3w//Ktd4F2ws5Yfb59GapQGllEMXCFKonQONMZ+fAGl9N t9DEPaBtKlHq0PzTMrjMSDeJNK9liO2NrPpTK/9ra/yLpgJHtOnbhjMQZ9bYNKPq 08uXFShsrXD6KU7mpbytokP1wffIjlPFl0V4v4fUrnD9VC00 -----END CERTIFICATE-----Generated at Mon Jan 26 14:14:38 2026 by rpki-client