This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/p-N3EdizVvRVLmkppfiLBw6qrVA.roa File: p-N3EdizVvRVLmkppfiLBw6qrVA.roa (raw, json) Hash identifier: ONQ5To3WeYsyCD3RqkgWqFExSkcZnR7cjXwSN83Jcb4= Subject key identifier: A7:E3:77:11:D8:B3:56:F4:55:2E:69:29:A5:F8:8B:07:0E:AA:AD:50 Certificate issuer: /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca Certificate serial: 019B7CED1416CE435ECC26AEEE96AAE9616E Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/p-N3EdizVvRVLmkppfiLBw6qrVA.roa Signing time: Fri 02 Jan 2026 04:17:50 +0000 ROA not before: Fri 02 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59891 IP address blocks: 2001:67c:17a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:14:16:ce:43:5e:cc:26:ae:ee:96:aa:e9:61:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca Validity Not Before: Jan 2 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7e37711d8b356f4552e6929a5f88b070eaaad50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:c0:1a:f7:65:3d:5c:d6:7d:34:cd:6c:21: 04:58:e1:bf:7a:bf:a4:01:f5:b5:01:50:cc:c4:df: 27:ce:b9:9f:19:ca:a0:89:7d:f2:6e:d7:0a:43:b1: fd:8a:6c:2c:36:86:23:e9:49:51:51:a3:4d:91:7d: 5e:b4:3f:c0:05:7d:cb:66:30:6c:1d:46:bd:77:15: 5f:13:80:15:41:ab:84:43:65:e7:63:b1:cf:b4:47: da:82:09:12:fa:a5:3e:71:85:68:c1:e0:45:da:95: 93:65:41:12:dc:f9:cf:0a:d5:5a:4c:64:5e:9c:5d: a5:d4:51:74:fc:d7:e4:4d:14:c5:a6:cd:4a:56:16: 2b:6a:89:d9:c0:7b:d8:70:f6:50:a4:36:2c:fe:95: 3c:4d:00:31:fb:ab:35:eb:c9:47:fe:e3:67:12:43: 68:7c:7b:b2:30:1c:21:40:a7:2c:e7:fb:d5:2d:f2: c0:11:46:44:50:9c:87:0d:96:15:a7:58:44:da:79: f4:b4:69:7b:d5:bb:f0:86:38:84:9d:a7:54:28:c1: ac:99:7a:9e:63:6b:d8:09:d8:af:79:8e:c3:96:18: e5:fc:c8:55:86:cf:8d:41:3f:7a:bf:04:38:40:9d: 00:0a:0b:96:8f:05:a3:5e:04:61:2f:59:7e:b6:e9: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E3:77:11:D8:B3:56:F4:55:2E:69:29:A5:F8:8B:07:0E:AA:AD:50 X509v3 Authority Key Identifier: keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/p-N3EdizVvRVLmkppfiLBw6qrVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:17a4::/48 Signature Algorithm: sha256WithRSAEncryption 0b:8e:1f:e9:cd:b6:c8:a9:9d:f1:11:c4:f9:2c:37:82:c7:91: e9:26:d7:6d:69:74:cc:70:c1:79:92:3e:b1:aa:78:cd:d5:6f: 71:ba:0b:0b:98:e4:05:8d:95:2d:fe:45:18:d9:d5:4f:d1:03: dc:9d:52:3d:3a:37:0e:89:8c:14:dd:73:a7:c6:79:76:4a:13: bb:4b:5e:fe:31:c6:3c:e7:eb:c2:f8:b4:b6:c4:1d:c4:69:28: bc:c8:51:ca:ca:13:e0:09:10:f8:92:d0:22:94:8a:e0:98:7d: ca:9d:05:29:b1:7a:73:df:21:79:7b:7b:68:7b:8f:ad:3e:1a: 59:95:9c:07:3c:b5:4c:21:30:6a:95:9d:b3:13:f1:39:88:05: 93:fc:cc:59:8e:71:b4:d7:77:83:e5:c3:03:97:fa:e6:88:79: 72:cb:81:2f:70:b5:64:6c:ef:42:e0:02:26:02:8b:1b:16:e1: 6c:f5:7f:63:36:c8:cd:d5:d8:3c:62:4c:5c:22:83:9f:b9:07: 31:fc:85:27:f2:40:a0:af:d6:4f:05:9b:12:a4:20:72:7b:42: 98:e1:ae:01:39:81:96:4d:38:6d:0b:75:70:41:9c:1d:4f:87: af:30:ab:1b:4e:cf:46:93:10:0f:52:9a:91:aa:95:60:2b:b3: d2:66:2e:36 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87RQWzkNezCau7paq6WFuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZGE0Y2QwNDRjNmU5ODczYWM4ZmQ5Y2ZkMzBmMWVjYjNk ODBiY2EwHhcNMjYwMTAyMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2UzNzcxMWQ4YjM1NmY0NTUyZTY5MjlhNWY4OGIwNzBlYWFhZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbHAGvdlPVzWfTTNbCEEWOG/er+k AfW1AVDMxN8nzrmfGcqgiX3ybtcKQ7H9imwsNoYj6UlRUaNNkX1etD/ABX3LZjBs HUa9dxVfE4AVQauEQ2XnY7HPtEfaggkS+qU+cYVoweBF2pWTZUES3PnPCtVaTGRe nF2l1FF0/NfkTRTFps1KVhYraonZwHvYcPZQpDYs/pU8TQAx+6s168lH/uNnEkNo fHuyMBwhQKcs5/vVLfLAEUZEUJyHDZYVp1hE2nn0tGl71bvwhjiEnadUKMGsmXqe Y2vYCdiveY7Dlhjl/MhVhs+NQT96vwQ4QJ0ACguWjwWjXgRhL1l+tukS2wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKfjdxHYs1b0VS5pKaX4iwcOqq1QMB8GA1UdIwQY MBaAFALaTNBExumHOsj9nP0w8eyz2AvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYt ZDY5MmMzNzI5YzQ4LzEvcC1OM0VkaXpWdlJWTG1rcHBmaUxCdzZxclZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYtZDY5MmMzNzI5YzQ4 LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBek MA0GCSqGSIb3DQEBCwUAA4IBAQALjh/pzbbIqZ3xEcT5LDeCx5HpJtdtaXTMcMF5 kj6xqnjN1W9xugsLmOQFjZUt/kUY2dVP0QPcnVI9OjcOiYwU3XOnxnl2ShO7S17+ McY85+vC+LS2xB3EaSi8yFHKyhPgCRD4ktAilIrgmH3KnQUpsXpz3yF5e3toe4+t PhpZlZwHPLVMITBqlZ2zE/E5iAWT/MxZjnG013eD5cMDl/rmiHlyy4EvcLVkbO9C 4AImAosbFuFs9X9jNsjN1dg8YkxcIoOfuQcx/IUn8kCgr9ZPBZsSpCBye0KY4a4B OYGWTThtC3VwQZwdT4evMKsbTs9GkxAPUpqRqpVgK7PSZi42 -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:46 2026 by rpki-client