This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/RoI3MM-0KYlxwCOUfkaDOeYsU5U.roa File: RoI3MM-0KYlxwCOUfkaDOeYsU5U.roa (raw, json) Hash identifier: dLJKzgwKEgf2VwAfUCSXlmN7iFsDt2XbjlyglNJp8Nk= Subject key identifier: 46:82:37:30:CF:B4:29:89:71:C0:23:94:7E:46:83:39:E6:2C:53:95 Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae Certificate serial: 019B7F80E2877997EE24F240FCDF06A27A19 Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/RoI3MM-0KYlxwCOUfkaDOeYsU5U.roa Signing time: Fri 02 Jan 2026 16:18:31 +0000 ROA not before: Fri 02 Jan 2026 16:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60236 IP address blocks: 2a0f:2a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:e2:87:79:97:ee:24:f2:40:fc:df:06:a2:7a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae Validity Not Before: Jan 2 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46823730cfb4298971c023947e468339e62c5395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:16:8d:30:d8:f7:e8:f1:27:be:f7:ce:42: 8d:82:c6:fe:73:f3:f1:b6:c2:2c:3f:ba:d2:c9:f2: 13:bc:4e:48:a3:11:2a:ba:7d:34:89:61:0b:16:97: f8:ee:e7:20:76:65:7e:43:ec:b6:69:dd:08:ed:a4: f9:38:d6:e8:32:85:5a:7d:e8:01:a9:cf:c1:9d:41: 65:58:d9:da:74:13:e4:a0:02:65:b0:6d:e5:f1:ea: e4:96:18:7b:48:2d:6c:b7:80:c4:ca:d0:89:16:7c: 08:75:3b:eb:ba:6e:8d:63:0b:e4:a0:54:ab:13:a2: 91:69:14:94:1b:69:20:7c:85:e0:6b:51:c5:87:03: e9:eb:0c:5d:93:3a:6f:92:46:18:ce:e3:69:62:c5: ee:76:07:74:75:82:3b:e9:50:d8:7b:35:6c:c9:eb: c0:e1:36:d5:98:fc:f9:91:9f:b1:aa:67:5d:40:80: ca:22:03:c8:c6:9c:20:44:86:49:66:0a:2b:f6:31: 42:21:2b:21:4d:65:bb:1a:a7:d3:17:e6:90:0e:7e: 0f:ee:f0:0e:55:fc:07:b7:ce:89:28:83:ef:ac:4d: 29:3b:f9:59:49:20:f2:cf:05:d4:cf:1b:fb:82:22: 36:3d:14:9b:56:57:41:ef:c2:03:cb:5e:c3:5c:67: 2e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:82:37:30:CF:B4:29:89:71:C0:23:94:7E:46:83:39:E6:2C:53:95 X509v3 Authority Key Identifier: keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/RoI3MM-0KYlxwCOUfkaDOeYsU5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:2a00::/48 Signature Algorithm: sha256WithRSAEncryption 08:c0:5e:60:cc:9b:dc:8d:61:a6:7d:6e:46:4e:9c:c5:c7:88: 41:d7:72:c0:8a:26:95:3d:9b:46:74:52:cc:74:64:14:24:87: 77:cf:ff:29:d4:a5:df:70:fe:63:c5:d6:cf:9a:37:66:e9:9f: 1c:de:9a:47:98:c1:76:36:1c:fa:b0:10:61:ae:92:53:a9:47: 64:a2:4f:34:48:72:09:3b:97:12:f9:13:cd:82:0d:ca:f1:70: 8f:ea:14:bd:16:e5:d5:d9:7e:8b:00:ec:f9:df:3c:e3:27:0d: 5e:bd:c1:c4:b0:d3:8f:bb:78:12:a6:a7:82:d6:5f:31:29:4c: 23:e0:e5:8a:6e:00:46:50:cb:61:13:74:72:fb:fc:1e:16:ef: f1:e7:dc:47:e2:80:e0:54:fb:5b:f2:30:a6:8e:8b:dc:54:27: ca:7d:ee:a1:58:94:bd:4e:70:9c:ce:7e:c6:b1:e7:26:e4:4b: 9e:72:15:c5:a2:79:8f:ad:ac:e8:a1:e9:27:46:41:ae:35:00: 07:b4:55:d6:63:ab:db:2f:37:27:1b:fd:dd:e4:39:7f:2b:52: 90:a8:4f:33:e8:38:d6:33:55:f6:2c:ac:a5:d6:ae:00:ee:ab: 48:ab:da:54:c4:7d:3f:24:2c:08:df:5d:6a:6a:88:4f:2c:30: c2:cc:89:52 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gOKHeZfuJPJA/N8GonoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMmI0ZmNlYTRiNzIyZjJhNmY2YzcwNWM1NTg5ZWUxYWJj NjIwYWUwHhcNMjYwMTAyMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjgyMzczMGNmYjQyOTg5NzFjMDIzOTQ3ZTQ2ODMzOWU2MmM1Mzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh4WjTDY9+jxJ773zkKNgsb+c/Px tsIsP7rSyfITvE5IoxEqun00iWELFpf47ucgdmV+Q+y2ad0I7aT5ONboMoVafegB qc/BnUFlWNnadBPkoAJlsG3l8erklhh7SC1st4DEytCJFnwIdTvrum6NYwvkoFSr E6KRaRSUG2kgfIXga1HFhwPp6wxdkzpvkkYYzuNpYsXudgd0dYI76VDYezVsyevA 4TbVmPz5kZ+xqmddQIDKIgPIxpwgRIZJZgor9jFCISshTWW7GqfTF+aQDn4P7vAO VfwHt86JKIPvrE0pO/lZSSDyzwXUzxv7giI2PRSbVldB78IDy17DXGcubwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEaCNzDPtCmJccAjlH5GgznmLFOVMB8GA1UdIwQY MBaAFD8rT86ktyLypvbHBcVYnuGrxiCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3Mjkt NjI1M2FkMDhmODU4LzEvUm9JM01NLTBLWWx4d0NPVWZrYURPZVlzVTVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3MjktNjI1M2FkMDhmODU4 LzEvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8qAAAA MA0GCSqGSIb3DQEBCwUAA4IBAQAIwF5gzJvcjWGmfW5GTpzFx4hB13LAiiaVPZtG dFLMdGQUJId3z/8p1KXfcP5jxdbPmjdm6Z8c3ppHmMF2Nhz6sBBhrpJTqUdkok80 SHIJO5cS+RPNgg3K8XCP6hS9FuXV2X6LAOz53zzjJw1evcHEsNOPu3gSpqeC1l8x KUwj4OWKbgBGUMthE3Ry+/weFu/x59xH4oDgVPtb8jCmjovcVCfKfe6hWJS9TnCc zn7Gsecm5EuechXFonmPrazooeknRkGuNQAHtFXWY6vbLzcnG/3d5Dl/K1KQqE8z 6DjWM1X2LKyl1q4A7qtIq9pUxH0/JCwI311qaohPLDDCzIlS -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:49 2026 by rpki-client