This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/3t7MGPFMuBSxJLCxDF_3n50KStc.roa File: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (raw, json) Hash identifier: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U= Subject key identifier: DE:DE:CC:18:F1:4C:B8:14:B1:24:B0:B1:0C:5F:F7:9F:9D:0A:4A:D7 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12FC77187C15B170C5E1A719BFA574 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/3t7MGPFMuBSxJLCxDF_3n50KStc.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211718 IP address blocks: 2a0d:1a40:7b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fc:77:18:7c:15:b1:70:c5:e1:a7:19:bf:a5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dedecc18f14cb814b124b0b10c5ff79f9d0a4ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:b0:f7:cb:cb:b3:dd:01:fa:5c:6d:f4:af: 20:e5:9d:f8:e5:93:5c:21:76:a1:cd:b6:d9:d8:56: cb:2e:bc:b7:e6:67:f2:8b:05:83:73:a2:8a:1c:8f: d5:a3:c1:bd:c6:a7:57:b7:88:fc:02:0c:01:8a:cc: dd:0e:8d:da:e4:05:89:a5:cc:fb:73:33:7c:55:5e: 74:b2:7b:53:00:d5:f1:76:48:ee:ea:02:5a:f4:64: 62:39:c6:a9:0d:69:32:c6:6e:8c:28:6e:bf:33:2d: 71:3e:32:fa:f6:03:bb:d0:74:52:62:5a:54:30:75: 76:f2:d8:b2:05:d0:3a:7d:3a:34:67:72:dc:eb:02: 4f:2e:3c:3d:72:01:c7:8f:e3:49:dd:84:6f:f9:b4: a2:33:04:8b:e2:1a:b9:1b:6d:c7:c7:5c:ae:2d:93: bf:ed:f9:9c:50:86:ff:a4:87:29:45:34:ad:11:62: cb:ed:0e:06:56:19:d7:d1:c7:71:72:af:3f:01:37: a7:27:af:98:06:b1:b8:4a:98:e4:d6:0f:60:4e:a5: d1:e6:c6:03:92:49:5e:1a:ec:c6:ee:22:f7:f2:09: 05:f8:00:b4:87:f6:da:9c:10:e1:54:b8:7f:44:09: 65:14:a4:01:76:e4:36:5e:b9:7f:da:cf:f8:73:09: 7c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DE:CC:18:F1:4C:B8:14:B1:24:B0:B1:0C:5F:F7:9F:9D:0A:4A:D7 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/3t7MGPFMuBSxJLCxDF_3n50KStc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:1a40:7b00::/48 Signature Algorithm: sha256WithRSAEncryption 60:5d:a3:18:b7:a8:e2:1e:42:bc:90:77:34:8a:e8:91:ce:53: b6:25:f1:8c:ad:23:a9:6e:5f:be:aa:6a:cc:0c:16:4c:92:0c: 66:b7:0f:71:f4:e1:5f:b4:ff:51:89:ac:5c:c3:e4:e4:43:3c: 19:6e:6f:6e:cb:49:68:7f:91:38:cf:e3:07:bd:c3:c8:7c:d3: b0:eb:4c:c2:19:ea:82:19:42:81:d3:fb:77:fb:3b:48:88:3d: 95:b9:18:6c:cd:a2:af:ed:52:67:78:02:71:79:84:cc:3f:1c: bd:84:a0:6c:34:33:a3:ec:7d:51:8c:3c:dc:f0:4f:74:f0:8e: 30:21:82:a5:5c:f7:d7:f6:22:c2:c1:04:2d:8e:ab:58:cf:1e: a6:e6:9f:7d:bf:4f:25:64:b4:c6:28:c7:0b:b8:38:d9:e0:87: 67:db:ab:5e:0a:f6:3e:99:29:ea:1f:9f:e1:e0:45:1b:65:92: 75:b5:36:9a:66:cd:f5:f2:0a:de:48:1b:fe:02:ce:3d:4e:99: 8a:6e:4e:9c:6b:3e:62:43:7d:f0:b5:36:ea:dc:a2:fe:b2:83: d2:ce:85:92:d7:12:b4:bc:db:80:81:80:69:d8:e3:83:bb:23: bc:80:d1:5d:c4:16:8a:1b:12:34:a5:5e:a3:e4:3d:72:53:cf: e2:0a:10:a7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8Evx3GHwVsXDF4acZv6V0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWRlY2MxOGYxNGNiODE0YjEyNGIwYjEwYzVmZjc5ZjlkMGE0YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb2w98vLs90B+lxt9K8g5Z345ZNc IXahzbbZ2FbLLry35mfyiwWDc6KKHI/Vo8G9xqdXt4j8AgwBiszdDo3a5AWJpcz7 czN8VV50sntTANXxdkju6gJa9GRiOcapDWkyxm6MKG6/My1xPjL69gO70HRSYlpU MHV28tiyBdA6fTo0Z3Lc6wJPLjw9cgHHj+NJ3YRv+bSiMwSL4hq5G23Hx1yuLZO/ 7fmcUIb/pIcpRTStEWLL7Q4GVhnX0cdxcq8/ATenJ6+YBrG4Spjk1g9gTqXR5sYD kkleGuzG7iL38gkF+AC0h/banBDhVLh/RAllFKQBduQ2Xrl/2s/4cwl8kwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN7ezBjxTLgUsSSwsQxf95+dCkrXMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvM3Q3TUdQRk11QlN4SkxDeERGXzNuNTBLU3RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0aQHsA MA0GCSqGSIb3DQEBCwUAA4IBAQBgXaMYt6jiHkK8kHc0iuiRzlO2JfGMrSOpbl++ qmrMDBZMkgxmtw9x9OFftP9Riaxcw+TkQzwZbm9uy0lof5E4z+MHvcPIfNOw60zC GeqCGUKB0/t3+ztIiD2VuRhszaKv7VJneAJxeYTMPxy9hKBsNDOj7H1RjDzc8E90 8I4wIYKlXPfX9iLCwQQtjqtYzx6m5p99v08lZLTGKMcLuDjZ4Idn26teCvY+mSnq H5/h4EUbZZJ1tTaaZs318greSBv+As49TpmKbk6caz5iQ33wtTbq3KL+soPSzoWS 1xK0vNuAgYBp2OODuyO8gNFdxBaKGxI0pV6j5D1yU8/iChCn -----END CERTIFICATE-----Generated at Wed Jan 7 15:56:09 2026 by rpki-client