This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/3xF5zXncC4lUUlVcqraWFOzrS7Q.roa File: 3xF5zXncC4lUUlVcqraWFOzrS7Q.roa (raw, json) Hash identifier: vnW96IIO7KZsSM+69xxxO0ynFQjIBJXcCGymfdrv09M= Subject key identifier: DF:11:79:CD:79:DC:0B:89:54:52:55:5C:AA:B6:96:14:EC:EB:4B:B4 Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8 Certificate serial: 019B7A5B9DF5C1FE9B934EB418A525AE6022 Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/3xF5zXncC4lUUlVcqraWFOzrS7Q.roa Signing time: Thu 01 Jan 2026 16:19:43 +0000 ROA not before: Thu 01 Jan 2026 16:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 193.192.12.0/26 maxlen: 26 2001:7f8:130::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9d:f5:c1:fe:9b:93:4e:b4:18:a5:25:ae:60:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8 Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df1179cd79dc0b895452555caab69614eceb4bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a4:00:26:23:97:3d:bd:59:6b:a7:21:a3:4e: 07:0d:7e:9e:f3:91:cd:5e:2f:19:20:a0:24:8f:23: c3:7d:bb:ba:dd:a4:c8:e9:1c:77:20:d1:68:91:69: f2:ad:b8:58:7a:d1:a9:da:35:10:86:9c:26:29:c5: 4f:ed:15:c6:49:a5:40:e3:70:0b:01:0f:5f:c1:f2: 17:d3:57:e0:b8:75:be:30:a5:fc:d1:14:c2:36:b4: 14:1c:69:22:b5:a8:dc:1b:cf:49:a9:7e:b2:c8:82: b1:0a:17:a0:fe:4d:05:d6:70:24:3b:19:bb:73:19: 3c:1a:ca:de:76:0a:67:ab:17:0b:bd:b7:d7:4d:3c: 5c:f6:d6:35:99:90:32:da:09:f9:c5:d4:f1:22:39: 7c:48:a5:82:e2:c2:59:05:76:b3:51:70:1a:d6:59: f9:8c:c1:c9:0b:59:41:ec:f2:6c:4c:13:6a:c1:be: 10:de:8c:a7:a0:1b:80:5c:2f:4f:28:7d:cc:57:43: 87:93:7d:0f:f7:ca:0f:db:26:70:78:01:7e:27:95: 9e:ad:82:19:9a:62:0a:d1:05:8e:a4:7a:26:b0:21: 9a:1b:a0:97:97:12:0b:3e:6f:b2:6b:13:84:ae:79: 44:fd:16:7f:ca:71:a0:b8:89:4f:73:5b:f5:82:9c: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:11:79:CD:79:DC:0B:89:54:52:55:5C:AA:B6:96:14:EC:EB:4B:B4 X509v3 Authority Key Identifier: keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/3xF5zXncC4lUUlVcqraWFOzrS7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.192.12.0/26 IPv6: 2001:7f8:130::/48 Signature Algorithm: sha256WithRSAEncryption a5:d9:61:fc:e3:9e:90:b6:04:97:cf:87:fb:95:9b:1f:a1:72: 44:e4:a6:fb:8f:3f:39:b0:16:0e:62:71:08:9e:53:f2:3e:d8: b2:6a:ef:bc:c2:f5:29:e6:e3:0a:17:04:2b:37:31:70:73:df: 68:e5:f0:56:56:dc:78:fd:49:49:6f:da:34:29:d7:38:05:af: 54:2a:b9:2d:2f:32:29:97:54:0a:e0:a7:14:5b:b5:ba:df:30: 9c:07:ff:74:65:9f:0c:3d:02:b7:8c:7e:a3:a6:18:98:a6:32: 8f:c8:86:a3:c6:af:dd:f8:91:f2:cd:e5:78:bb:8f:56:d1:b5: c9:66:8a:dd:29:13:5a:c1:f0:62:50:4f:51:a7:84:f7:90:3e: 38:cb:c7:ce:1b:76:a8:d7:a5:f1:a3:15:b3:d6:32:11:82:94: fb:67:a7:52:f1:18:4b:ca:90:ac:1d:53:b3:b4:26:8b:65:23: 7b:14:bf:be:2c:77:a3:08:48:41:40:37:3f:4f:db:a2:b2:6e: 94:2c:8d:98:0c:07:85:6c:54:1b:f4:bb:4b:74:4b:ca:0c:e7: a2:98:9b:08:2d:73:c1:89:8a:f3:d5:7e:7a:ba:30:39:86:b8: ac:b4:29:56:7f:9d:2f:95:56:5d:1a:c0:aa:ca:b5:7e:5b:4b: d3:c8:f3:25 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6W531wf6bk060GKUlrmAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMzgyZTJlNTRiNjBmMWY2OGY4NWM5ODRkYTFhNjk2MzFj NTJjYTgwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjExNzljZDc5ZGMwYjg5NTQ1MjU1NWNhYWI2OTYxNGVjZWI0YmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaQAJiOXPb1Za6cho04HDX6e85HN Xi8ZIKAkjyPDfbu63aTI6Rx3INFokWnyrbhYetGp2jUQhpwmKcVP7RXGSaVA43AL AQ9fwfIX01fguHW+MKX80RTCNrQUHGkitajcG89JqX6yyIKxCheg/k0F1nAkOxm7 cxk8GsredgpnqxcLvbfXTTxc9tY1mZAy2gn5xdTxIjl8SKWC4sJZBXazUXAa1ln5 jMHJC1lB7PJsTBNqwb4Q3oynoBuAXC9PKH3MV0OHk30P98oP2yZweAF+J5WerYIZ mmIK0QWOpHomsCGaG6CXlxILPm+yaxOErnlE/RZ/ynGguIlPc1v1gpxb5wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFN8Rec153AuJVFJVXKq2lhTs60u0MB8GA1UdIwQY MBaAFKI4Li5Utg8faPhcmE2hppYxxSyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgt ODFkMTMwNGZhZjc2LzEvM3hGNXpYbmNDNGxVVWxWY3FyYVdGT3pyUzdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgtODFkMTMwNGZhZjc2 LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDANBAIAATAHAwUGwcAMADAP BAIAAjAJAwcAIAEH+AEwMA0GCSqGSIb3DQEBCwUAA4IBAQCl2WH8456QtgSXz4f7 lZsfoXJE5Kb7jz85sBYOYnEInlPyPtiyau+8wvUp5uMKFwQrNzFwc99o5fBWVtx4 /UlJb9o0Kdc4Ba9UKrktLzIpl1QK4KcUW7W63zCcB/90ZZ8MPQK3jH6jphiYpjKP yIajxq/d+JHyzeV4u49W0bXJZordKRNawfBiUE9Rp4T3kD44y8fOG3ao16XxoxWz 1jIRgpT7Z6dS8RhLypCsHVOztCaLZSN7FL++LHejCEhBQDc/T9uism6ULI2YDAeF bFQb9LtLdEvKDOeimJsILXPBiYrz1X56ujA5hristClWf50vlVZdGsCqyrV+W0vT yPMl -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:05 2026 by rpki-client