This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/N3bXffW8yKFqU5UMm7fvxG-jz6A.roa File: N3bXffW8yKFqU5UMm7fvxG-jz6A.roa (raw, json) Hash identifier: bdRoY8TZDQQa0PscQFcX1AU8tV8n2oKXvuQ9ADHxYzU= Subject key identifier: 37:76:D7:7D:F5:BC:C8:A1:6A:53:95:0C:9B:B7:EF:C4:6F:A3:CF:A0 Certificate issuer: /CN=0fa8fb5399a27a430ae727c532cd224999e8864f Certificate serial: 019B797F068213284E4FC7106661C56137D1 Authority key identifier: 0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/N3bXffW8yKFqU5UMm7fvxG-jz6A.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30811 IP address blocks: 217.114.80.0/20 maxlen: 20 217.114.94.0/24 maxlen: 24 2a00:1c50:1::/48 maxlen: 48 2a00:1c50:5::/48 maxlen: 48 2a00:1c50:6::/48 maxlen: 48 2a00:1c50:7::/48 maxlen: 48 2a00:1c50:94::/48 maxlen: 48 2a00:1c50:2002::/48 maxlen: 48 2a00:1c50:2003::/48 maxlen: 48 2a00:1c50:2004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 18:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:06:82:13:28:4e:4f:c7:10:66:61:c5:61:37:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fa8fb5399a27a430ae727c532cd224999e8864f Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3776d77df5bcc8a16a53950c9bb7efc46fa3cfa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:91:b5:28:b7:ac:a5:38:b8:58:fb:0d:77: a7:7b:d1:ed:b1:44:7e:96:0b:89:e4:9a:5f:98:ce: 12:b0:8c:83:51:d6:6e:50:54:0a:86:6b:57:e2:8e: 15:32:af:e8:f6:d5:95:f6:92:3a:d5:16:4d:f4:65: 40:0a:1b:04:dc:79:56:18:a7:bd:8c:16:5f:6d:7f: 8d:ee:66:bd:cd:e2:28:1a:65:4e:63:00:32:f9:82: 88:cc:f7:59:df:60:54:54:98:b4:11:80:6c:22:84: 36:37:b9:6b:b5:76:24:3c:89:dc:99:9f:f0:e3:b1: 10:60:57:b6:27:27:ba:a4:78:7b:3e:7d:38:2b:d6: 46:55:59:72:6a:48:df:ae:2a:ba:36:72:9c:50:ed: d3:8d:57:25:c5:ea:ea:59:77:3a:b9:33:eb:26:12: 24:4a:de:32:1a:cb:af:1d:b3:f9:b9:44:5c:f4:6e: 52:ef:3f:79:9c:3f:54:08:59:2a:39:cf:cc:33:d0: 0a:7f:4b:db:47:c9:24:f0:5c:ac:7f:aa:04:b2:14: 30:fd:6e:7b:89:df:aa:d8:fe:15:1d:b1:83:04:f4: 56:46:d9:90:3c:8d:ed:08:ef:dd:a2:14:74:6f:70: b6:a5:08:3b:ff:60:c0:4f:1b:2a:fe:5d:e3:87:2f: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:76:D7:7D:F5:BC:C8:A1:6A:53:95:0C:9B:B7:EF:C4:6F:A3:CF:A0 X509v3 Authority Key Identifier: keyid:0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/N3bXffW8yKFqU5UMm7fvxG-jz6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.114.80.0/20 IPv6: 2a00:1c50:1::/48 2a00:1c50:5::-2a00:1c50:7:ffff:ffff:ffff:ffff:ffff 2a00:1c50:94::/48 2a00:1c50:2002::-2a00:1c50:2004:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 52:b9:2b:f9:03:95:db:41:48:3c:71:ff:5c:45:90:31:c6:2c: ac:a8:12:75:9c:a6:0b:81:9f:15:61:e5:7a:0b:b8:57:b1:82: c0:21:c2:e3:be:d5:d2:bc:9d:38:26:69:a8:d9:46:cf:27:27: 99:12:f0:14:ef:3e:4a:de:01:97:e4:37:48:b5:d1:9a:b8:2b: 84:96:f9:a4:42:17:9e:47:c1:64:5c:4c:d4:bc:c1:74:29:a7: 5d:06:7b:a8:47:f1:72:bb:3d:9f:3e:e9:5c:98:fe:5d:ce:c5: c0:e6:48:a8:13:39:b6:42:02:b2:ef:70:f4:be:bd:59:2d:c8: 9b:5b:21:53:4a:ac:a7:dd:83:5c:a6:ee:f1:10:9b:c0:af:03: df:73:eb:73:ec:01:fe:81:13:6f:cb:b8:ec:48:27:8a:ad:b8: b2:83:d6:9f:a6:9e:17:f6:0b:11:a9:87:cc:2f:6d:fd:d0:65: 17:51:5b:7c:7e:e6:d8:c3:08:e5:16:63:d4:e5:2f:f8:af:51: a0:e4:72:d6:17:d0:77:e1:45:55:cb:31:0b:9f:d0:5e:b7:85: f5:a9:72:69:14:a5:70:41:87:69:dd:3c:f5:49:45:9e:c4:fc: 8a:27:18:10:91:96:09:5f:15:c2:8c:c3:1c:0a:a0:c2:51:e6: fa:19:fb:21 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt5fwaCEyhOT8cQZmHFYTfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYThmYjUzOTlhMjdhNDMwYWU3MjdjNTMyY2QyMjQ5OTll ODg2NGYwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzc2ZDc3ZGY1YmNjOGExNmE1Mzk1MGM5YmI3ZWZjNDZmYTNjZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6aRtSi3rKU4uFj7DXene9HtsUR+ lguJ5JpfmM4SsIyDUdZuUFQKhmtX4o4VMq/o9tWV9pI61RZN9GVAChsE3HlWGKe9 jBZfbX+N7ma9zeIoGmVOYwAy+YKIzPdZ32BUVJi0EYBsIoQ2N7lrtXYkPIncmZ/w 47EQYFe2Jye6pHh7Pn04K9ZGVVlyakjfriq6NnKcUO3TjVclxerqWXc6uTPrJhIk St4yGsuvHbP5uURc9G5S7z95nD9UCFkqOc/MM9AKf0vbR8kk8Fysf6oEshQw/W57 id+q2P4VHbGDBPRWRtmQPI3tCO/dohR0b3C2pQg7/2DATxsq/l3jhy+6UQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDd21331vMihalOVDJu378Rvo8+gMB8GA1UdIwQY MBaAFA+o+1OZonpDCucnxTLNIkmZ6IZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDZqN1U1bWlla01LNXlmRk1zMGlTWm5vaGs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zODZmODEtYjEzOS00OGFmLWJjZWEt YTcxZmI0NjM1MDY1LzEvTjNiWGZmVzh5S0ZxVTVVTW03ZnZ4Ry1qejZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zODZmODEtYjEzOS00OGFmLWJjZWEtYTcxZmI0NjM1MDY1 LzEvRDZqN1U1bWlla01LNXlmRk1zMGlTWm5vaGs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAMBAIAATAGAwQE2XJQMEAE AgACMDoDBwAqABxQAAEwEgMHACoAHFAABQMHAyoAHFAAAAMHACoAHFAAlDASAwcB KgAcUCACAwcAKgAcUCAEMA0GCSqGSIb3DQEBCwUAA4IBAQBSuSv5A5XbQUg8cf9c RZAxxiysqBJ1nKYLgZ8VYeV6C7hXsYLAIcLjvtXSvJ04Jmmo2UbPJyeZEvAU7z5K 3gGX5DdItdGauCuElvmkQheeR8FkXEzUvMF0KaddBnuoR/Fyuz2fPulcmP5dzsXA 5kioEzm2QgKy73D0vr1ZLcibWyFTSqyn3YNcpu7xEJvArwPfc+tz7AH+gRNvy7js SCeKrbiyg9afpp4X9gsRqYfML2390GUXUVt8fubYwwjlFmPU5S/4r1Gg5HLWF9B3 4UVVyzELn9Bet4X1qXJpFKVwQYdp3Tz1SUWexPyKJxgQkZYJXxXCjMMcCqDCUeb6 Gfsh -----END CERTIFICATE-----Generated at Sat Jan 10 04:37:50 2026 by rpki-client