This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/m3RaVncm_gBlS4tVezr7XBZHrR4.roa File: m3RaVncm_gBlS4tVezr7XBZHrR4.roa (raw, json) Hash identifier: NCcn02MU0AdzNYn2EHJlZXzwGScb4dWUGw8AznxeOaE= Subject key identifier: 9B:74:5A:56:77:26:FE:00:65:4B:8B:55:7B:3A:FB:5C:16:47:AD:1E Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a Certificate serial: 019B77C736042B87EB16F3111FD3ACCB5494 Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/m3RaVncm_gBlS4tVezr7XBZHrR4.roa Signing time: Thu 01 Jan 2026 04:18:22 +0000 ROA not before: Thu 01 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59550 IP address blocks: 2a00:1ca8:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:36:04:2b:87:eb:16:f3:11:1f:d3:ac:cb:54:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b745a567726fe00654b8b557b3afb5c1647ad1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:1c:c7:87:11:f3:9c:f8:d2:76:1a:49:81: a5:e5:f2:21:16:c8:8e:ff:90:47:5b:b9:12:1f:34: 08:9f:bc:5e:6c:d4:ae:74:68:c0:c3:6c:ad:42:4d: 15:32:1d:fe:55:4d:17:bc:f2:7d:a4:f0:b8:aa:04: 9f:08:dc:47:17:c6:10:7c:2d:44:13:6f:4a:72:47: 00:96:91:5d:2a:87:9d:b6:ba:51:70:7f:96:dd:06: 02:35:14:18:a8:33:e2:ab:37:2d:0c:ee:6c:3e:17: 53:d0:03:48:f6:91:a4:2b:ed:4c:70:14:86:ce:a5: 33:49:a2:ab:82:c1:75:6f:25:56:51:55:de:76:69: c7:90:a4:ef:93:13:95:d2:fb:75:5f:5f:83:9e:b7: 7d:24:2c:b1:f0:53:19:a4:e1:d7:5b:08:c0:07:ec: 7a:bb:c6:ce:df:8c:0e:f6:aa:22:a7:59:99:8c:d3: f6:c9:5b:e4:c2:39:7e:9c:9e:46:23:7a:7d:ba:bd: d6:f2:f3:fa:ae:c1:8c:46:e8:2f:c2:68:99:c5:bf: 01:41:00:08:67:fe:66:ba:dd:1d:f2:32:ec:7d:2a: 8a:07:3a:67:47:49:8b:86:e3:13:a6:f5:dc:39:d7: ae:76:aa:d4:09:b8:e2:5d:64:ff:a1:d7:c8:37:6c: 4a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:5A:56:77:26:FE:00:65:4B:8B:55:7B:3A:FB:5C:16:47:AD:1E X509v3 Authority Key Identifier: keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/m3RaVncm_gBlS4tVezr7XBZHrR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1ca8:3f::/48 Signature Algorithm: sha256WithRSAEncryption 20:90:11:00:5f:9a:c4:f2:20:82:d5:61:71:ea:6a:72:2c:06: e2:36:07:82:87:b5:ff:0c:3a:a7:0e:83:96:99:c5:1c:2c:31: 1e:8c:98:6e:ee:17:3a:e3:a2:f0:00:fe:fa:5c:a6:c3:47:e4: 64:98:b1:f2:75:f3:16:38:a2:43:5b:1d:6a:67:0b:f0:b1:48: 73:7c:b0:a8:51:8b:be:e1:23:d4:38:54:1b:b7:22:cb:96:21: f5:9f:ed:cf:a2:5b:c0:68:9b:b3:4b:d3:36:60:c9:b5:2a:b4: be:ff:b1:44:51:6e:2e:ce:7d:f9:38:57:1e:16:b1:01:8a:c7: 8d:73:03:ca:94:18:11:04:9b:6c:db:49:a9:8b:de:b4:22:d3: 2e:7e:36:65:ed:61:53:d2:d8:27:90:0a:b0:0a:51:96:1c:32: e9:6b:dc:4b:0e:59:1c:43:66:79:1c:23:25:bc:b2:59:a7:7f: 9b:be:99:f0:c3:44:e0:7d:31:d8:b5:0f:aa:67:df:0e:38:e5: c7:e9:04:ff:19:ed:bc:10:a6:4e:32:1e:c2:cd:1b:8d:d0:1c: 16:2e:7e:9f:3f:28:0d:e3:87:3a:02:6a:18:90:ca:52:26:d5: 53:6f:1b:29:2c:99:f4:0b:d4:c4:b5:6a:4b:e6:1a:14:04:28: c1:14:f7:9b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xzYEK4frFvMRH9Osy1SUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MzExNjZkZTc4NWEzNTMxYmRjODM2MWYxMTkwYTgzNjlh N2VkNmEwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjc0NWE1Njc3MjZmZTAwNjU0YjhiNTU3YjNhZmI1YzE2NDdhZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL0cx4cR85z40nYaSYGl5fIhFsiO /5BHW7kSHzQIn7xebNSudGjAw2ytQk0VMh3+VU0XvPJ9pPC4qgSfCNxHF8YQfC1E E29KckcAlpFdKoedtrpRcH+W3QYCNRQYqDPiqzctDO5sPhdT0ANI9pGkK+1McBSG zqUzSaKrgsF1byVWUVXedmnHkKTvkxOV0vt1X1+Dnrd9JCyx8FMZpOHXWwjAB+x6 u8bO34wO9qoip1mZjNP2yVvkwjl+nJ5GI3p9ur3W8vP6rsGMRugvwmiZxb8BQQAI Z/5mut0d8jLsfSqKBzpnR0mLhuMTpvXcOdeudqrUCbjiXWT/odfIN2xKYwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJt0WlZ3Jv4AZUuLVXs6+1wWR60eMB8GA1UdIwQY MBaAFCYxFm3nhaNTG9yDYfEZCoNpp+1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUt Yjg5YTI2MTk5OTc2LzEvbTNSYVZuY21fZ0JsUzR0VmV6cjdYQlpIclI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUtYjg5YTI2MTk5OTc2 LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAcqAA/ MA0GCSqGSIb3DQEBCwUAA4IBAQAgkBEAX5rE8iCC1WFx6mpyLAbiNgeCh7X/DDqn DoOWmcUcLDEejJhu7hc646LwAP76XKbDR+RkmLHydfMWOKJDWx1qZwvwsUhzfLCo UYu+4SPUOFQbtyLLliH1n+3PolvAaJuzS9M2YMm1KrS+/7FEUW4uzn35OFceFrEB iseNcwPKlBgRBJts20mpi960ItMufjZl7WFT0tgnkAqwClGWHDLpa9xLDlkcQ2Z5 HCMlvLJZp3+bvpnww0TgfTHYtQ+qZ98OOOXH6QT/Ge28EKZOMh7CzRuN0BwWLn6f PygN44c6AmoYkMpSJtVTbxspLJn0C9TEtWpL5hoUBCjBFPeb -----END CERTIFICATE-----Generated at Wed Jan 21 15:37:29 2026 by rpki-client