This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa File: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (raw, json) Hash identifier: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0= Subject key identifier: D5:2A:F7:5E:54:4C:74:E3:93:B6:01:6E:5B:16:2E:92:C2:F4:AB:54 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019B77594B2EA087064C9E584E1A6A97B98B Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215528 IP address blocks: 2a13:cc82:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4b:2e:a0:87:06:4c:9e:58:4e:1a:6a:97:b9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d52af75e544c74e393b6016e5b162e92c2f4ab54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f6:f9:47:e5:d2:43:f7:c6:bd:3e:fa:d7:61: e8:54:bf:7b:3c:48:63:b3:f0:d5:b4:fa:13:f0:9b: bd:af:cc:98:f4:ba:aa:dd:b3:73:9d:7a:ab:b0:88: b3:b4:0c:9d:70:ef:9f:f6:5d:91:09:d5:ec:8a:a9: 2a:fb:6f:c2:84:e0:11:3a:12:0f:8d:35:56:a8:1e: ac:26:75:3c:34:c3:5b:27:9a:ce:91:53:5f:08:7d: 71:16:29:6f:5d:3f:c3:25:e6:78:e9:93:6b:d6:b4: 7f:68:e8:f7:b5:66:33:2b:19:29:8e:20:53:94:75: a2:e3:9b:2b:62:83:6e:74:50:98:8c:2e:67:86:79: 10:b6:66:50:5b:c4:87:0c:d8:63:79:af:f6:44:52: ba:5b:ae:40:9a:49:e7:1c:c5:af:1a:97:3c:4f:ad: 66:b1:98:41:56:22:cd:16:eb:1b:32:bc:c1:12:aa: 9b:f3:d4:a5:b5:62:33:b7:23:eb:2f:60:4a:a2:e3: 63:10:c7:aa:7c:6b:5a:bd:ea:06:0a:59:f3:57:0f: 83:13:d1:b1:fa:e5:4d:c4:5b:be:90:c8:70:e7:e6: 7d:f9:86:81:fa:9b:7d:07:9c:51:93:90:be:5b:d9: 4e:0e:87:b0:c6:4b:74:60:7d:32:c9:f0:32:46:40: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2A:F7:5E:54:4C:74:E3:93:B6:01:6E:5B:16:2E:92:C2:F4:AB:54 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:cc82:2::/48 Signature Algorithm: sha256WithRSAEncryption 33:c6:8d:da:b3:88:c2:73:49:57:78:3a:06:8b:64:3b:ff:e5: 46:64:8d:08:52:6e:7d:6f:38:a6:8f:55:c1:59:ad:1c:eb:d7: 85:dc:56:18:1b:91:b1:74:16:fc:f6:46:7f:f0:c6:ff:ab:92: ac:68:55:8c:f1:89:f9:a8:a3:22:42:8a:0a:84:e1:4f:b5:6a: 9d:08:5d:bd:8a:89:76:32:13:0e:66:77:23:8b:3e:d7:2e:96: b6:0b:ed:7d:66:99:c3:59:ed:31:ee:ea:1f:ce:c0:81:ae:ea: 26:d5:27:a8:af:d2:4b:b0:7b:c3:50:99:2d:29:95:59:a2:0f: 73:ef:78:c5:cb:e3:b7:c8:d3:7e:16:22:d4:d8:c7:3f:d3:d4: 8a:02:45:bc:bc:ef:10:45:35:25:6e:78:67:33:e0:da:6b:5e: 22:9c:23:48:57:61:5b:6f:8d:ea:93:33:84:ef:64:0c:85:56: ad:25:23:08:24:ac:49:46:80:f0:5a:c2:1b:42:ac:54:8a:48: 59:69:f5:a5:ef:3d:a1:de:77:7c:a5:cf:3b:84:ee:98:96:09: 47:70:0c:6e:4a:ae:4d:0a:9c:96:73:3b:78:cc:50:a7:b0:26: bc:a0:86:39:13:6f:64:e6:c4:c3:54:e3:3e:af:f9:13:1c:81: c7:1c:b9:c0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WUsuoIcGTJ5YThpql7mLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTJhZjc1ZTU0NGM3NGUzOTNiNjAxNmU1YjE2MmU5MmMyZjRhYjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvb5R+XSQ/fGvT7612HoVL97PEhj s/DVtPoT8Ju9r8yY9Lqq3bNznXqrsIiztAydcO+f9l2RCdXsiqkq+2/ChOAROhIP jTVWqB6sJnU8NMNbJ5rOkVNfCH1xFilvXT/DJeZ46ZNr1rR/aOj3tWYzKxkpjiBT lHWi45srYoNudFCYjC5nhnkQtmZQW8SHDNhjea/2RFK6W65AmknnHMWvGpc8T61m sZhBViLNFusbMrzBEqqb89SltWIztyPrL2BKouNjEMeqfGtaveoGClnzVw+DE9Gx +uVNxFu+kMhw5+Z9+YaB+pt9B5xRk5C+W9lODoewxkt0YH0yyfAyRkACjQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNUq915UTHTjk7YBblsWLpLC9KtUMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvMVNyM1hsUk1kT09UdGdGdVd4WXVrc0wwcTFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPMggAC MA0GCSqGSIb3DQEBCwUAA4IBAQAzxo3as4jCc0lXeDoGi2Q7/+VGZI0IUm59bzim j1XBWa0c69eF3FYYG5GxdBb89kZ/8Mb/q5KsaFWM8Yn5qKMiQooKhOFPtWqdCF29 iol2MhMOZncjiz7XLpa2C+19ZpnDWe0x7uofzsCBruom1Seor9JLsHvDUJktKZVZ og9z73jFy+O3yNN+FiLU2Mc/09SKAkW8vO8QRTUlbnhnM+Daa14inCNIV2Fbb43q kzOE72QMhVatJSMIJKxJRoDwWsIbQqxUikhZafWl7z2h3nd8pc87hO6YlglHcAxu Sq5NCpyWczt4zFCnsCa8oIY5E29k5sTDVOM+r/kTHIHHHLnA -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:27 2026 by rpki-client