This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/3D6ST7VPwU1ruJHTqcORchHTAiE.roa File: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (raw, json) Hash identifier: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0= Subject key identifier: DC:3E:92:4F:B5:4F:C1:4D:6B:B8:91:D3:A9:C3:91:72:11:D3:02:21 Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c Certificate serial: 019B78351D069C6A01C8AA5E469EFC3358C4 Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/3D6ST7VPwU1ruJHTqcORchHTAiE.roa Signing time: Thu 01 Jan 2026 06:18:25 +0000 ROA not before: Thu 01 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 2a04:1240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1d:06:9c:6a:01:c8:aa:5e:46:9e:fc:33:58:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741736f657221fc134316323b0740585a9c1b20c Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc3e924fb54fc14d6bb891d3a9c3917211d30221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:fb:28:1a:9e:1d:ea:33:79:fd:82:cf:b4: d8:9a:93:2c:c9:f8:af:b4:1c:9c:04:4b:f9:c0:72: e6:05:7a:bd:60:15:53:c8:9e:93:28:24:b1:09:67: a2:8b:d6:df:44:75:92:dd:8e:f3:eb:43:f0:76:8d: 8e:c2:a1:d5:b6:52:9c:e1:7a:c4:f1:d1:87:fc:68: 5a:8b:10:14:a0:46:ec:9b:e7:01:02:19:39:39:45: f8:85:67:6d:b1:40:79:8e:a0:68:54:b4:33:ed:a7: b2:57:f6:4e:da:b6:aa:94:59:31:23:ac:f7:27:e2: b4:8d:ad:cf:00:e8:53:a5:3b:49:43:cc:0f:9d:bd: ca:37:75:49:2d:46:f4:b8:02:54:de:ac:29:0b:fe: d5:3d:6e:4c:b0:33:21:75:c5:f1:04:c2:67:10:5d: 4a:11:c5:b3:01:6d:e8:bb:f6:07:2b:3f:15:c7:2b: 9e:5d:e1:e6:84:91:fe:82:61:13:29:9a:df:a0:4d: 23:d5:ca:21:e6:43:6f:88:c0:02:50:e6:7b:27:49: 9f:5d:53:0d:50:fe:c6:af:21:ec:4c:b2:59:4b:be: bb:02:76:a9:d8:24:80:c4:2a:b2:4f:9e:53:35:e4: 15:ef:42:6f:eb:e3:ab:0d:bb:34:32:d5:51:e4:b4: 12:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3E:92:4F:B5:4F:C1:4D:6B:B8:91:D3:A9:C3:91:72:11:D3:02:21 X509v3 Authority Key Identifier: keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/3D6ST7VPwU1ruJHTqcORchHTAiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:1240::/29 Signature Algorithm: sha256WithRSAEncryption 22:be:ec:0b:8d:3e:5d:00:ba:05:2a:81:ac:bc:82:89:9b:c2: 5c:cb:fe:03:4c:cb:17:14:01:37:fb:95:60:c7:b7:ba:79:c1: 51:71:c4:bd:36:4e:7f:fe:2e:af:05:7d:28:12:d3:3c:77:22: 79:41:70:9a:f6:5d:65:6f:20:3e:68:9b:7f:a4:c4:6e:15:a7: 4a:47:7e:cd:21:0a:ee:e4:5d:12:c9:0b:e5:78:08:57:64:52: 5c:5d:f5:9b:2d:02:0f:4b:e2:ec:d7:3c:72:06:85:1a:27:eb: 2f:a5:89:d8:9b:5a:ea:32:83:9f:bb:15:12:f3:25:75:80:d5: 46:d6:46:4a:76:a8:cc:14:15:48:81:3d:05:ce:25:83:54:73: f2:76:98:01:61:9f:ef:7e:f5:07:02:0e:5a:d2:8a:aa:64:2d: 9f:68:a9:72:e4:9b:8f:1d:88:fc:bd:2d:d5:ad:2c:42:f6:cd: 7d:32:1b:23:af:e3:53:ff:e1:a4:fc:b6:4e:0e:17:23:42:9c: 51:65:09:50:50:ce:ed:8f:6d:d7:d1:62:df:f6:9b:72:b7:be: cf:ab:b8:ff:5d:50:cd:ae:1a:9a:c2:88:4b:a8:44:2b:0c:f7: f0:3a:52:93:9e:b1:b6:ce:bd:dd:32:1d:7c:24:7a:55:60:95: 60:c1:95:75 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NR0GnGoByKpeRp78M1jEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTczNmY2NTcyMjFmYzEzNDMxNjMyM2IwNzQwNTg1YTlj MWIyMGMwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzNlOTI0ZmI1NGZjMTRkNmJiODkxZDNhOWMzOTE3MjExZDMwMjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KD7KBqeHeozef2Cz7TYmpMsyfiv tBycBEv5wHLmBXq9YBVTyJ6TKCSxCWeii9bfRHWS3Y7z60Pwdo2OwqHVtlKc4XrE 8dGH/GhaixAUoEbsm+cBAhk5OUX4hWdtsUB5jqBoVLQz7aeyV/ZO2raqlFkxI6z3 J+K0ja3PAOhTpTtJQ8wPnb3KN3VJLUb0uAJU3qwpC/7VPW5MsDMhdcXxBMJnEF1K EcWzAW3ou/YHKz8VxyueXeHmhJH+gmETKZrfoE0j1coh5kNviMACUOZ7J0mfXVMN UP7GryHsTLJZS767Anap2CSAxCqyT55TNeQV70Jv6+OrDbs0MtVR5LQSmQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNw+kk+1T8FNa7iR06nDkXIR0wIhMB8GA1UdIwQY MBaAFHQXNvZXIh/BNDFjI7B0BYWpwbIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUt Y2JmYmE0NTlkOGY3LzEvM0Q2U1Q3VlB3VTFydUpIVHFjT1JjaEhUQWlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUtY2JmYmE0NTlkOGY3 LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgQSQDAN BgkqhkiG9w0BAQsFAAOCAQEAIr7sC40+XQC6BSqBrLyCiZvCXMv+A0zLFxQBN/uV YMe3unnBUXHEvTZOf/4urwV9KBLTPHcieUFwmvZdZW8gPmibf6TEbhWnSkd+zSEK 7uRdEskL5XgIV2RSXF31my0CD0vi7Nc8cgaFGifrL6WJ2Jta6jKDn7sVEvMldYDV RtZGSnaozBQVSIE9Bc4lg1Rz8naYAWGf7371BwIOWtKKqmQtn2ipcuSbjx2I/L0t 1a0sQvbNfTIbI6/jU//hpPy2Tg4XI0KcUWUJUFDO7Y9t19Fi3/abcre+z6u4/11Q za4amsKIS6hEKwz38DpSk56xts693TIdfCR6VWCVYMGVdQ== -----END CERTIFICATE-----Generated at Mon Jan 26 14:11:54 2026 by rpki-client