This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/3vWXTbTpDM0ymRMTdG3MOaM9Vbk.roa File: 3vWXTbTpDM0ymRMTdG3MOaM9Vbk.roa (raw, json) Hash identifier: vKhrAJbWhh00/xBbyVciFsXn8wyB3UjGH2N5E0ovZYw= Subject key identifier: DE:F5:97:4D:B4:E9:0C:CD:32:99:13:13:74:6D:CC:39:A3:3D:55:B9 Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346 Certificate serial: 019B79ECFE5C2103DC126CA6589F0CE040D2 Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/3vWXTbTpDM0ymRMTdG3MOaM9Vbk.roa Signing time: Thu 01 Jan 2026 14:18:53 +0000 ROA not before: Thu 01 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56652 IP address blocks: 31.41.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fe:5c:21:03:dc:12:6c:a6:58:9f:0c:e0:40:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346 Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=def5974db4e90ccd32991313746dcc39a33d55b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:d0:4a:50:ec:68:a6:9a:63:f8:21:2a:91: cd:be:b5:eb:76:96:e5:ed:c2:86:58:e3:ae:f6:48: 33:e2:f8:91:4f:d8:c0:0c:6b:76:74:23:88:b9:4a: cb:e3:4a:96:52:28:c5:7a:43:ce:a5:97:5f:23:13: 30:1b:1f:97:b2:c0:9f:55:d6:7c:85:e6:8c:16:93: 08:3d:81:91:23:05:aa:18:5d:78:96:16:41:19:4f: 11:a7:42:0c:3d:c5:6f:55:97:70:27:39:17:1e:1a: 43:fb:19:c6:21:21:91:bb:49:5f:ef:dc:27:1d:63: 88:e7:37:e3:c4:b8:86:89:7f:85:b8:49:f8:0a:c9: b0:c3:a9:37:1d:fc:b6:be:5b:c9:a7:ae:f8:7b:1f: c3:92:5f:29:f4:2b:8b:be:bd:6e:aa:f2:24:0f:00: 85:5f:16:a0:20:9a:58:38:88:ab:32:6d:c5:a5:a9: d7:8e:ac:42:34:46:96:92:48:20:c1:b4:35:41:26: c6:97:40:f1:05:bb:f4:9d:37:64:3a:49:d6:ad:c4: 68:47:28:47:14:13:2c:74:9e:d4:b8:bd:91:b1:a1: 2d:d5:74:3f:04:69:63:80:7d:66:78:86:7f:bc:00: db:52:22:2f:8f:ff:be:f1:97:f6:9f:48:c6:6e:23: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F5:97:4D:B4:E9:0C:CD:32:99:13:13:74:6D:CC:39:A3:3D:55:B9 X509v3 Authority Key Identifier: keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/3vWXTbTpDM0ymRMTdG3MOaM9Vbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.48.0/21 Signature Algorithm: sha256WithRSAEncryption 42:b6:41:2f:82:c9:aa:3c:97:d9:9d:30:5f:e3:11:67:aa:24: cf:a7:82:95:e0:64:fd:34:85:9f:f4:bb:70:de:e7:ca:9f:0b: 14:e6:33:d0:f6:3e:c7:3d:e9:30:7d:5e:8d:9d:55:af:f1:5e: 24:59:6a:6c:b0:9b:55:61:f0:79:bc:0e:f0:f9:88:8e:fa:d2: c7:f9:fe:ed:3c:61:f5:40:fb:57:bd:cf:7d:c3:df:51:4d:5d: 18:ad:e1:0f:48:09:64:49:c7:28:f5:78:82:5f:cd:f8:4a:37: ed:93:8a:80:e4:56:17:0c:ea:44:7e:d9:e9:52:4e:fd:64:c4: 73:80:9c:3d:9f:24:04:47:6b:86:0b:ad:e9:03:3d:99:a7:ec: c0:cd:ac:b3:ce:89:81:98:32:79:c6:d7:09:d2:e4:25:49:ed: d3:6b:5f:24:d9:2f:d6:db:c9:40:fc:99:df:9c:b1:b5:e1:07: 6a:ac:4a:a6:89:58:17:fa:75:aa:d5:85:89:d8:b4:ea:20:bf: de:22:77:a6:c1:3b:9c:d2:85:62:c5:0e:a3:f4:fa:60:93:40: 8a:09:00:fe:56:95:4d:c4:1b:86:50:fc:e4:49:5f:45:a0:36: 6d:c5:ba:26:20:7b:30:27:79:cb:82:f7:5b:37:bc:ab:9a:8c: 53:5c:59:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57P5cIQPcEmymWJ8M4EDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MWE3MmJmYTRjYWFiY2JhNGVjMDQ4NDEzN2E1MTZmOWYz NDQzNDYwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWY1OTc0ZGI0ZTkwY2NkMzI5OTEzMTM3NDZkY2MzOWEzM2Q1NWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1DQSlDsaKaaY/ghKpHNvrXrdpbl 7cKGWOOu9kgz4viRT9jADGt2dCOIuUrL40qWUijFekPOpZdfIxMwGx+XssCfVdZ8 heaMFpMIPYGRIwWqGF14lhZBGU8Rp0IMPcVvVZdwJzkXHhpD+xnGISGRu0lf79wn HWOI5zfjxLiGiX+FuEn4Csmww6k3Hfy2vlvJp674ex/Dkl8p9CuLvr1uqvIkDwCF XxagIJpYOIirMm3FpanXjqxCNEaWkkggwbQ1QSbGl0DxBbv0nTdkOknWrcRoRyhH FBMsdJ7UuL2RsaEt1XQ/BGljgH1meIZ/vADbUiIvj/++8Zf2n0jGbiNeDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN71l0206QzNMpkTE3RtzDmjPVW5MB8GA1UdIwQY MBaAFLYacr+kyqvLpOwEhBN6UW+fNENGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEt OGMyNTNjNDU5MjcxLzEvM3ZXWFRiVHBETTB5bVJNVGRHM01PYU05VmJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEtOGMyNTNjNDU5Mjcx LzEvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDHykwMA0G CSqGSIb3DQEBCwUAA4IBAQBCtkEvgsmqPJfZnTBf4xFnqiTPp4KV4GT9NIWf9Ltw 3ufKnwsU5jPQ9j7HPekwfV6NnVWv8V4kWWpssJtVYfB5vA7w+YiO+tLH+f7tPGH1 QPtXvc99w99RTV0YreEPSAlkScco9XiCX834Sjftk4qA5FYXDOpEftnpUk79ZMRz gJw9nyQER2uGC63pAz2Zp+zAzayzzomBmDJ5xtcJ0uQlSe3Ta18k2S/W28lA/Jnf nLG14QdqrEqmiVgX+nWq1YWJ2LTqIL/eInemwTuc0oVixQ6j9Ppgk0CKCQD+VpVN xBuGUPzkSV9FoDZtxbomIHswJ3nLgvdbN7yrmoxTXFnz -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:08 2026 by rpki-client