This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/3N3x697PdBQfSoEa3ipvDa4IgGc.roa File: 3N3x697PdBQfSoEa3ipvDa4IgGc.roa (raw, json) Hash identifier: km/jt2nK2MZ3YgEOAe9PMTWQMqWp8onbkpGJJyxmD+A= Subject key identifier: DC:DD:F1:EB:DE:CF:74:14:1F:4A:81:1A:DE:2A:6F:0D:AE:08:80:67 Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1 Certificate serial: 019B7D5C5A3F39EC42F333C0C6D3AFD23AF4 Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/3N3x697PdBQfSoEa3ipvDa4IgGc.roa Signing time: Fri 02 Jan 2026 06:19:22 +0000 ROA not before: Fri 02 Jan 2026 06:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a10:6640:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5a:3f:39:ec:42:f3:33:c0:c6:d3:af:d2:3a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1 Validity Not Before: Jan 2 06:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcddf1ebdecf74141f4a811ade2a6f0dae088067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:b8:f9:d5:d9:04:49:fb:4d:9e:94:93:08: 7a:63:a6:43:57:b8:fc:2a:c6:c2:e4:bc:d6:5c:1d: 4f:87:96:f7:11:61:23:e4:2b:ca:b1:48:69:e8:73: cd:52:ba:86:d0:02:7f:13:96:65:5f:09:ce:6d:e9: 69:a3:db:4e:ba:c4:99:82:86:ad:a1:ec:49:c6:58: 4d:f4:d3:dc:f5:62:f4:20:f2:ad:af:5d:5c:87:93: 84:25:2d:c2:dd:aa:54:ce:7d:dd:99:a6:3f:26:eb: c1:06:ff:fe:66:26:96:15:39:4e:64:b8:7c:2d:da: 87:e8:6e:15:46:27:d8:5a:66:88:3c:c1:49:83:1a: 1d:0c:d5:f2:76:01:81:38:58:61:87:13:2e:a3:f4: f8:c7:8e:76:a1:ff:7d:ac:58:7b:2b:d2:4d:40:87: 47:39:cf:ef:43:0a:8e:ee:fc:91:82:01:76:51:c3: 90:dd:b4:49:55:ac:0c:a8:45:99:49:7f:39:a1:81: 4f:0e:a9:eb:14:f4:69:7d:34:b1:15:68:c1:53:15: f6:a8:43:d2:74:5a:10:7b:04:cf:b4:1c:2b:f8:d9: 49:20:9e:70:fd:cd:cb:5d:c7:d7:c2:7a:65:12:15: f1:59:1f:05:5e:57:e0:f3:e4:29:49:8d:6e:70:08: 8c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DD:F1:EB:DE:CF:74:14:1F:4A:81:1A:DE:2A:6F:0D:AE:08:80:67 X509v3 Authority Key Identifier: keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/3N3x697PdBQfSoEa3ipvDa4IgGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:6640:1::/48 Signature Algorithm: sha256WithRSAEncryption 22:92:39:8a:fb:78:d3:bd:78:08:a0:20:20:2d:49:5e:ac:52: 51:b1:e9:41:8c:92:83:8a:1a:5c:b4:b1:5d:ac:83:18:c1:93: d6:7b:f9:68:4b:7c:8a:42:04:ce:72:e9:b3:55:36:05:7d:92: 22:32:7d:f5:8c:c3:9d:b6:6a:87:f4:4b:2a:a3:a8:f1:ef:c5: 92:ed:ae:ae:b1:71:c4:70:27:04:40:9e:69:38:a1:1d:d1:19: 4c:96:e4:79:92:4e:3d:bb:59:41:9a:5a:99:9c:04:0a:dd:58: b3:5a:21:a2:1e:15:7d:cc:09:d7:57:c0:84:67:9d:a3:86:74: 5a:bc:77:2b:50:d3:ac:85:a4:43:8b:43:3d:83:11:32:ea:6b: f1:11:ac:93:23:6f:7b:67:72:2b:de:b7:8f:a7:a9:55:8d:bc: e4:11:c1:77:b3:ef:f7:32:e4:ed:fa:19:15:9a:d6:f2:04:91: f3:1e:fb:4e:08:3e:2b:b0:53:64:41:4a:59:fd:cb:1b:7c:01: d8:ed:0b:f2:c7:6e:40:19:b5:e9:e7:ed:78:98:4a:91:d8:2b: 18:08:a5:3c:e8:e2:3e:5b:3e:36:22:4b:df:31:c1:1b:48:39: 7a:f7:4f:4d:10:32:3d:52:08:1e:5f:db:7d:0f:0a:02:30:5f: 8a:e8:b5:55 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XFo/OexC8zPAxtOv0jr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTZkOGUwMmI1YTFhNzU4NTlmNjRhMDVjNWE4ZDc3Yzg0 YzUwZjEwHhcNMjYwMTAyMDYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2RkZjFlYmRlY2Y3NDE0MWY0YTgxMWFkZTJhNmYwZGFlMDg4MDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsu4+dXZBEn7TZ6Ukwh6Y6ZDV7j8 KsbC5LzWXB1Ph5b3EWEj5CvKsUhp6HPNUrqG0AJ/E5ZlXwnObelpo9tOusSZgoat oexJxlhN9NPc9WL0IPKtr11ch5OEJS3C3apUzn3dmaY/JuvBBv/+ZiaWFTlOZLh8 LdqH6G4VRifYWmaIPMFJgxodDNXydgGBOFhhhxMuo/T4x452of99rFh7K9JNQIdH Oc/vQwqO7vyRggF2UcOQ3bRJVawMqEWZSX85oYFPDqnrFPRpfTSxFWjBUxX2qEPS dFoQewTPtBwr+NlJIJ5w/c3LXcfXwnplEhXxWR8FXlfg8+QpSY1ucAiMvwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNzd8evez3QUH0qBGt4qbw2uCIBnMB8GA1UdIwQY MBaAFJQW2OArWhp1hZ9koFxajXfITFDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEt ZWI0ZTEzYmU1MDZhLzEvM04zeDY5N1BkQlFmU29FYTNpcHZEYTRJZ0djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEtZWI0ZTEzYmU1MDZh LzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBmQAAB MA0GCSqGSIb3DQEBCwUAA4IBAQAikjmK+3jTvXgIoCAgLUlerFJRselBjJKDihpc tLFdrIMYwZPWe/loS3yKQgTOcumzVTYFfZIiMn31jMOdtmqH9Esqo6jx78WS7a6u sXHEcCcEQJ5pOKEd0RlMluR5kk49u1lBmlqZnAQK3VizWiGiHhV9zAnXV8CEZ52j hnRavHcrUNOshaRDi0M9gxEy6mvxEayTI297Z3Ir3rePp6lVjbzkEcF3s+/3MuTt +hkVmtbyBJHzHvtOCD4rsFNkQUpZ/csbfAHY7Qvyx25AGbXp5+14mEqR2CsYCKU8 6OI+Wz42IkvfMcEbSDl6909NEDI9UggeX9t9DwoCMF+K6LVV -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:31 2026 by rpki-client