This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/sn3WdCt5cOff3eRSoyZ6m4C8YHk.roa File: sn3WdCt5cOff3eRSoyZ6m4C8YHk.roa (raw, json) Hash identifier: cE5dlzPj8uIWRQ0h42WBrGLO+X2WE9nV3RUnSZAY1yI= Subject key identifier: B2:7D:D6:74:2B:79:70:E7:DF:DD:E4:52:A3:26:7A:9B:80:BC:60:79 Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691 Certificate serial: 019B7BA340398F17BA43626AE75945B17CD2 Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/sn3WdCt5cOff3eRSoyZ6m4C8YHk.roa Signing time: Thu 01 Jan 2026 22:17:34 +0000 ROA not before: Thu 01 Jan 2026 22:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201257 IP address blocks: 2001:67c:b14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 16:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:40:39:8f:17:ba:43:62:6a:e7:59:45:b1:7c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691 Validity Not Before: Jan 1 22:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b27dd6742b7970e7dfdde452a3267a9b80bc6079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:51:a5:14:c6:4c:10:aa:ba:93:36:a7:27:84: 80:8d:15:e2:d4:94:ef:4d:4a:b5:94:fc:ec:07:a0: f3:8e:1c:cf:31:ef:55:84:a9:5b:f5:8d:f7:0b:4a: 22:2f:5e:f0:c8:ee:6a:46:3c:62:1a:2c:46:10:e7: b7:71:0d:6e:ff:a0:4f:15:92:c5:6c:20:9a:9c:17: ad:fe:d8:56:d0:34:52:fc:69:8c:1a:ba:d7:c6:4f: 99:3f:f8:e6:61:a0:59:51:75:bf:21:39:c5:12:24: c1:76:4f:bc:77:cf:1d:aa:2f:99:d3:18:31:0d:8c: c8:98:d2:5e:87:08:f7:18:a0:9d:bd:72:88:b7:00: 39:47:d8:20:65:de:c1:e3:a4:82:36:a9:79:15:28: 51:91:48:3e:6c:56:96:7f:74:e3:98:7d:d3:22:e5: f7:d9:51:d7:57:ae:a3:a8:d0:4e:16:63:e9:56:84: 8f:57:23:6a:ac:78:4a:f1:43:c4:db:89:16:c4:fd: 61:8f:27:97:ef:8d:f9:01:ce:5e:f7:53:ff:95:7c: bc:bc:8c:43:0b:8f:32:74:03:03:f1:f5:71:7f:6f: 3a:9d:a1:af:ec:bc:e4:95:a0:88:25:f4:d6:95:a0: 1f:80:3d:a3:29:bc:ac:1a:4b:ae:3a:43:41:30:85: 8a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7D:D6:74:2B:79:70:E7:DF:DD:E4:52:A3:26:7A:9B:80:BC:60:79 X509v3 Authority Key Identifier: keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/sn3WdCt5cOff3eRSoyZ6m4C8YHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b14::/48 Signature Algorithm: sha256WithRSAEncryption 5c:c2:e7:fd:d8:0d:39:1c:9b:ce:2f:95:a5:87:e1:0b:43:d5: b9:3d:e3:46:03:c0:72:da:7c:35:f5:27:d3:86:b5:1a:b9:fb: 12:1a:2b:3a:b6:a5:bc:e2:fb:35:77:fc:ed:65:92:cf:17:b6: 1f:4b:c1:b6:f9:37:7f:7a:99:cd:a9:4e:3a:d7:a5:9a:80:0b: e4:ad:b0:55:24:a2:89:86:93:3d:9d:f9:cb:47:28:45:be:84: 2b:4a:9c:f1:b9:6d:5b:2c:87:4c:88:75:42:d7:37:7b:90:a9: 97:67:b3:bd:94:fd:ca:14:6c:ce:45:bb:ae:6c:d2:d0:c9:e2: 0a:18:0b:27:67:cd:94:0b:81:ac:e8:8b:c4:a5:8a:b6:f9:b6: 68:4c:59:18:4f:53:2c:da:5d:a5:6f:7a:22:ad:39:5c:b3:a5: 2f:f5:b7:f1:b6:11:81:98:ee:32:67:1b:75:a9:e1:21:21:4d: 31:b0:3e:94:64:66:62:9e:5e:bf:22:8d:58:8d:4e:f9:34:54: 33:a7:8f:09:b8:92:8e:3f:94:b8:7f:b0:b1:f9:19:83:50:4c: 08:51:e3:7e:f2:75:75:a6:7d:c4:37:3a:18:f5:0f:1c:97:47: c6:ef:63:66:db:78:d7:17:c0:1a:af:45:76:21:80:46:4a:be: 5a:a3:00:cb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o0A5jxe6Q2Jq51lFsXzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTdkZTE3NTEyY2ZhOGJlYmMzZGY4MGIyN2I0NzYyNGVm NDE2OTEwHhcNMjYwMTAxMjIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjdkZDY3NDJiNzk3MGU3ZGZkZGU0NTJhMzI2N2E5YjgwYmM2MDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVGlFMZMEKq6kzanJ4SAjRXi1JTv TUq1lPzsB6DzjhzPMe9VhKlb9Y33C0oiL17wyO5qRjxiGixGEOe3cQ1u/6BPFZLF bCCanBet/thW0DRS/GmMGrrXxk+ZP/jmYaBZUXW/ITnFEiTBdk+8d88dqi+Z0xgx DYzImNJehwj3GKCdvXKItwA5R9ggZd7B46SCNql5FShRkUg+bFaWf3TjmH3TIuX3 2VHXV66jqNBOFmPpVoSPVyNqrHhK8UPE24kWxP1hjyeX7435Ac5e91P/lXy8vIxD C48ydAMD8fVxf286naGv7LzklaCIJfTWlaAfgD2jKbysGkuuOkNBMIWKfQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLJ91nQreXDn393kUqMmepuAvGB5MB8GA1UdIwQY MBaAFDuX3hdRLPqL68PfgLJ7R2JO9BaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84YTdkYTQtYmExOS00YjI5LTg3ZTAt OTE1NTEzMmExNzlhLzEvc24zV2RDdDVjT2ZmM2VSU295WjZtNEM4WUhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84YTdkYTQtYmExOS00YjI5LTg3ZTAtOTE1NTEzMmExNzlh LzEvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAsU MA0GCSqGSIb3DQEBCwUAA4IBAQBcwuf92A05HJvOL5Wlh+ELQ9W5PeNGA8By2nw1 9SfThrUaufsSGis6tqW84vs1d/ztZZLPF7YfS8G2+Td/epnNqU4616WagAvkrbBV JKKJhpM9nfnLRyhFvoQrSpzxuW1bLIdMiHVC1zd7kKmXZ7O9lP3KFGzORbuubNLQ yeIKGAsnZ82UC4Gs6IvEpYq2+bZoTFkYT1Ms2l2lb3oirTlcs6Uv9bfxthGBmO4y Zxt1qeEhIU0xsD6UZGZinl6/Io1YjU75NFQzp48JuJKOP5S4f7Cx+RmDUEwIUeN+ 8nV1pn3ENzoY9Q8cl0fG72Nm23jXF8Aar0V2IYBGSr5aowDL -----END CERTIFICATE-----Generated at Thu Feb 5 01:24:52 2026 by rpki-client