This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/S3iUaJCc_acwdYntYs5xpD57Hbs.roa File: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (raw, json) Hash identifier: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo= Subject key identifier: 4B:78:94:68:90:9C:FD:A7:30:75:89:ED:62:CE:71:A4:3E:7B:1D:BB Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019B79ECF714E54F93192DAA807C7C27A10A Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/S3iUaJCc_acwdYntYs5xpD57Hbs.roa Signing time: Thu 01 Jan 2026 14:18:51 +0000 ROA not before: Thu 01 Jan 2026 14:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3624 IP address blocks: 2001:bf7:540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f7:14:e5:4f:93:19:2d:aa:80:7c:7c:27:a1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Jan 1 14:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b789468909cfda7307589ed62ce71a43e7b1dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:55:e9:3f:2c:30:1a:c2:3a:90:8c:0b:1a:68: e5:9e:26:01:c4:87:59:25:e4:25:40:63:ff:38:bb: 2f:3c:26:66:2e:bb:4a:f7:0e:64:ce:26:18:b9:0b: 7c:4a:2a:eb:42:41:93:2c:4e:35:b3:e2:87:e0:87: a3:8a:3e:6f:b9:82:12:95:bf:c5:a0:3d:7a:0c:5c: af:f3:ba:03:de:00:82:c0:1d:5b:4a:b5:f0:6c:97: b5:c0:f6:bd:6c:80:e8:8f:1f:fb:c8:77:81:23:f9: d8:01:ad:a6:69:70:34:48:7c:02:75:a2:9c:83:31: 37:26:99:b4:38:24:b4:a5:79:2a:4b:3a:f5:18:34: aa:5d:0a:f9:b3:ba:5f:98:19:fd:c5:9c:29:59:7a: 9c:31:c4:bd:3a:21:74:2d:3b:7d:a0:31:c0:0f:16: 4a:d1:50:1f:ce:23:8b:d1:97:c0:76:10:34:5d:70: a5:57:c9:dc:3d:ad:0c:6e:51:0d:c8:43:31:c9:41: 16:04:89:75:3f:a0:8a:77:cb:9d:55:04:03:be:b4: d1:ec:70:d3:b3:7f:e0:be:60:a6:58:9f:1d:13:24: f6:22:6d:53:fb:5c:16:5a:bc:c6:89:39:84:5c:05: d1:99:92:ab:b8:b8:34:95:fe:b0:9d:18:08:d5:40: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:78:94:68:90:9C:FD:A7:30:75:89:ED:62:CE:71:A4:3E:7B:1D:BB X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/S3iUaJCc_acwdYntYs5xpD57Hbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:bf7:540::/48 Signature Algorithm: sha256WithRSAEncryption 24:36:04:64:8e:03:9d:8d:19:12:d1:03:97:d6:e4:1c:b9:90: a5:15:2f:41:44:58:2d:b8:20:79:e7:d2:bf:28:50:e9:d0:72: a4:11:c8:16:ae:41:91:97:82:67:2b:15:f8:cc:47:8d:62:4f: 70:77:b0:b6:83:25:d8:42:52:95:fe:5d:22:70:49:c1:c8:00: b2:81:e5:0a:73:07:44:c3:b1:cd:da:8e:3b:fb:b4:e0:36:95: 57:3c:4d:92:13:15:54:37:a5:87:17:1a:08:cb:49:49:2a:4f: d6:ba:d9:2b:7f:5e:83:93:da:c3:ea:c7:f1:f5:fc:fd:a8:aa: e0:19:98:93:e7:c7:4f:e3:4d:47:11:e0:ac:8b:59:6c:86:10: a9:16:36:b6:73:0e:85:a2:94:88:5f:a9:16:18:39:d9:48:bd: 53:42:f2:7e:a6:81:1d:09:bf:41:dd:f2:2b:af:d3:f3:84:12: ce:c6:15:95:86:4b:6a:73:0d:59:ca:99:41:51:b9:e3:f0:6d: 91:ae:7f:f2:75:03:98:92:4e:73:1e:2d:92:ac:de:0f:e2:9f: 2b:aa:75:81:8b:33:5e:ee:a3:9a:c9:b4:9c:0b:39:f6:de:38: bf:a8:f5:c2:ea:eb:04:b1:5b:00:20:36:21:48:79:62:d8:6e: 6f:b9:98:8f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57PcU5U+TGS2qgHx8J6EKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwMTAxMTQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjc4OTQ2ODkwOWNmZGE3MzA3NTg5ZWQ2MmNlNzFhNDNlN2IxZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31XpPywwGsI6kIwLGmjlniYBxIdZ JeQlQGP/OLsvPCZmLrtK9w5kziYYuQt8SirrQkGTLE41s+KH4Iejij5vuYISlb/F oD16DFyv87oD3gCCwB1bSrXwbJe1wPa9bIDojx/7yHeBI/nYAa2maXA0SHwCdaKc gzE3Jpm0OCS0pXkqSzr1GDSqXQr5s7pfmBn9xZwpWXqcMcS9OiF0LTt9oDHADxZK 0VAfziOL0ZfAdhA0XXClV8ncPa0MblENyEMxyUEWBIl1P6CKd8udVQQDvrTR7HDT s3/gvmCmWJ8dEyT2Im1T+1wWWrzGiTmEXAXRmZKruLg0lf6wnRgI1UBcBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEt4lGiQnP2nMHWJ7WLOcaQ+ex27MB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvUzNpVWFKQ2NfYWN3ZFludFlzNXhwRDU3SGJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEL9wVA MA0GCSqGSIb3DQEBCwUAA4IBAQAkNgRkjgOdjRkS0QOX1uQcuZClFS9BRFgtuCB5 59K/KFDp0HKkEcgWrkGRl4JnKxX4zEeNYk9wd7C2gyXYQlKV/l0icEnByACygeUK cwdEw7HN2o47+7TgNpVXPE2SExVUN6WHFxoIy0lJKk/Wutkrf16Dk9rD6sfx9fz9 qKrgGZiT58dP401HEeCsi1lshhCpFja2cw6FopSIX6kWGDnZSL1TQvJ+poEdCb9B 3fIrr9PzhBLOxhWVhktqcw1ZyplBUbnj8G2Rrn/ydQOYkk5zHi2SrN4P4p8rqnWB izNe7qOaybScCzn23ji/qPXC6usEsVsAIDYhSHli2G5vuZiP -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:57 2026 by rpki-client