This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/3B1zSiSQp67Jrl31LEVpVSHwT7M.roa File: 3B1zSiSQp67Jrl31LEVpVSHwT7M.roa (raw, json) Hash identifier: ijEYmF7smJ/YMv/Mq4qPH33EWmGXeOCioHrILkUjzTs= Subject key identifier: DC:1D:73:4A:24:90:A7:AE:C9:AE:5D:F5:2C:45:69:55:21:F0:4F:B3 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85AB638F557723191617EF94C92ACC Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/3B1zSiSQp67Jrl31LEVpVSHwT7M.roa Signing time: Fri 02 Jan 2026 16:23:45 +0000 ROA not before: Fri 02 Jan 2026 16:23:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216401 IP address blocks: 2a0f:b240:6400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:ab:63:8f:55:77:23:19:16:17:ef:94:c9:2a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc1d734a2490a7aec9ae5df52c45695521f04fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:93:b8:78:4b:d2:c9:c9:c3:ce:87:b5:45: 93:23:5d:2d:c6:05:e3:fa:58:4a:ad:02:6e:c2:e8: 70:73:e4:62:b8:52:90:c5:d1:46:9d:eb:e8:b9:a9: 84:95:7c:a2:92:00:23:6a:c8:0f:85:e4:26:e4:04: e1:b6:45:1a:3e:6d:e8:1e:5c:30:8a:81:b6:af:c5: 55:b4:34:12:98:76:93:f4:af:e6:b1:22:76:f1:12: b8:3f:2b:e0:8e:bc:e2:5a:62:80:79:cb:c9:d5:3c: df:c9:64:f4:55:6c:81:00:d5:58:d4:66:9c:ba:7c: b8:30:69:d4:9f:2a:4a:7a:8d:8e:8a:c5:f3:9d:58: d0:e8:9c:c5:fd:6a:1e:d3:d4:31:06:7d:9e:c3:76: d9:f4:c6:d8:16:15:f8:cd:c5:e1:a6:bd:9a:fb:6e: 3e:a4:1f:a1:bb:5a:ad:20:d3:5b:9c:dc:ac:b0:1c: c1:80:15:71:f7:aa:43:b7:ce:48:f9:18:47:ed:55: 91:c6:ca:a2:8b:73:3e:ec:77:28:a4:68:7d:6f:3e: f5:f2:b5:9d:56:56:db:2c:9f:7f:03:fd:e7:52:33: 12:ab:51:ec:94:d9:77:01:3c:eb:d7:e3:40:bb:30: 00:84:3e:e3:8b:16:c7:b0:60:db:e0:5d:f5:96:11: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1D:73:4A:24:90:A7:AE:C9:AE:5D:F5:2C:45:69:55:21:F0:4F:B3 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/3B1zSiSQp67Jrl31LEVpVSHwT7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:6400::/40 Signature Algorithm: sha256WithRSAEncryption 51:26:c1:61:95:47:c6:c9:39:b4:a7:20:8a:b8:9b:97:cc:73: 1d:8b:8f:ee:2a:e7:45:c5:c4:c6:07:78:76:95:21:ff:62:61: 01:5e:1d:bd:7a:90:fb:64:62:91:f6:ee:f6:31:77:54:48:be: c1:ea:bd:64:c8:45:6d:95:00:5d:31:c0:d8:b7:05:b5:38:4d: 26:f3:46:31:65:e3:cb:e1:62:26:be:18:83:4a:69:02:f6:38: a1:19:f3:83:cf:21:2e:29:61:68:c0:85:69:3b:2d:b8:1b:1b: 22:ea:6f:58:31:fe:ae:09:12:cb:55:37:2e:fb:88:79:e5:21: 32:e7:5f:58:e3:df:e3:2d:a8:32:ee:63:59:82:97:30:ca:e8: 14:9c:e3:f0:63:f2:26:53:54:08:57:65:69:77:5e:e2:e2:c9: 8d:8e:2b:cb:7a:62:9f:77:da:cc:68:37:df:81:f2:73:e4:e9: 0d:5e:49:59:43:f2:57:47:be:e5:52:27:8e:e3:11:fa:4e:01: 24:4e:60:3b:92:45:b8:a4:c3:44:28:a9:bf:51:f2:6e:93:d1: 23:6a:e6:fa:12:1b:86:f8:35:fd:e9:0e:4d:98:e3:c9:66:82: 12:19:16:69:f3:39:94:32:57:06:b1:61:3f:50:8a:11:65:bb: b3:7e:83:5a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/hatjj1V3IxkWF++UySrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzFkNzM0YTI0OTBhN2FlYzlhZTVkZjUyYzQ1Njk1NTIxZjA0ZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmaTuHhL0snJw86HtUWTI10txgXj +lhKrQJuwuhwc+RiuFKQxdFGnevouamElXyikgAjasgPheQm5AThtkUaPm3oHlww ioG2r8VVtDQSmHaT9K/msSJ28RK4PyvgjrziWmKAecvJ1TzfyWT0VWyBANVY1Gac uny4MGnUnypKeo2OisXznVjQ6JzF/Woe09QxBn2ew3bZ9MbYFhX4zcXhpr2a+24+ pB+hu1qtINNbnNyssBzBgBVx96pDt85I+RhH7VWRxsqii3M+7HcopGh9bz718rWd VlbbLJ9/A/3nUjMSq1HslNl3ATzr1+NAuzAAhD7jixbHsGDb4F31lhFbmQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNwdc0okkKeuya5d9SxFaVUh8E+zMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvM0IxelNpU1FwNjdKcmwzMUxFVnBWU0h3VDdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQGQw DQYJKoZIhvcNAQELBQADggEBAFEmwWGVR8bJObSnIIq4m5fMcx2Lj+4q50XFxMYH eHaVIf9iYQFeHb16kPtkYpH27vYxd1RIvsHqvWTIRW2VAF0xwNi3BbU4TSbzRjFl 48vhYia+GINKaQL2OKEZ84PPIS4pYWjAhWk7LbgbGyLqb1gx/q4JEstVNy77iHnl ITLnX1jj3+MtqDLuY1mClzDK6BSc4/Bj8iZTVAhXZWl3XuLiyY2OK8t6Yp932sxo N9+B8nPk6Q1eSVlD8ldHvuVSJ47jEfpOASROYDuSRbikw0Qoqb9R8m6T0SNq5voS G4b4Nf3pDk2Y48lmghIZFmnzOZQyVwaxYT9QihFlu7N+g1o= -----END CERTIFICATE-----Generated at Wed Jan 21 11:59:01 2026 by rpki-client