This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa File: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (raw, json) Hash identifier: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8= Subject key identifier: DC:B7:8A:0E:37:8C:79:2D:0F:58:9A:90:2E:60:E4:42:5E:11:60:6C Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f Certificate serial: 019B7B36F08C397902E56B1B554377CE04F1 Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa Signing time: Thu 01 Jan 2026 20:19:16 +0000 ROA not before: Thu 01 Jan 2026 20:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57602 IP address blocks: 2001:67c:240c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f0:8c:39:79:02:e5:6b:1b:55:43:77:ce:04:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcb78a0e378c792d0f589a902e60e4425e11606c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:d7:be:c6:8b:08:cb:fe:14:cb:62:0e:29: 82:a8:19:dc:2b:8a:07:3e:39:a4:62:b2:a1:76:ae: 1e:03:69:95:8e:f8:a1:1e:7e:7f:c0:f7:16:be:5a: 51:75:a6:06:32:b4:72:39:70:c1:fe:22:91:63:52: af:26:ee:f7:8a:b4:1a:15:f5:cd:91:2b:21:62:5e: 42:1a:30:4e:76:e0:c0:91:d5:54:71:6d:45:0d:c5: 14:da:63:9f:4a:1b:97:49:73:77:74:2d:54:c5:6d: 15:f3:7c:97:3d:2c:7c:3a:42:b2:a5:fa:12:f4:85: 0f:0f:68:4b:96:21:84:d1:af:1b:65:89:36:6f:bd: c6:3b:30:26:75:d2:40:26:2b:3f:fe:1a:82:cf:f0: 66:b7:24:d3:53:a1:d1:38:7c:89:6b:85:7f:45:4c: f8:56:d0:8c:44:93:d3:16:54:49:2e:6a:3c:04:c2: 5a:3e:26:47:d6:e6:bb:2c:14:5d:6b:aa:ec:95:2c: c8:91:30:84:4a:d4:c7:7f:c5:61:e4:6f:c1:f1:14: aa:ce:81:98:03:64:bc:81:f3:24:04:12:b5:fa:00: 61:30:c7:e1:50:01:69:af:94:ef:74:09:28:71:81: 7c:4f:46:df:c5:f0:91:76:da:81:79:b6:c9:6f:ea: 12:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B7:8A:0E:37:8C:79:2D:0F:58:9A:90:2E:60:E4:42:5E:11:60:6C X509v3 Authority Key Identifier: keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:240c::/48 Signature Algorithm: sha256WithRSAEncryption 17:66:f8:cc:77:0d:1e:a1:95:41:0b:27:67:b6:0b:42:a5:d4: 16:39:ec:dc:d1:88:62:6a:d0:95:a5:f8:bb:0e:ad:e9:7f:84: ad:da:6f:e5:3f:bd:de:4f:71:0c:e2:57:aa:08:e8:97:d4:31: b3:d7:70:dd:e8:7f:59:06:ea:76:17:26:10:0e:cf:16:d8:7d: f4:11:01:76:e6:d8:ef:a0:56:74:d7:35:d4:d8:0c:05:5e:c7: be:33:13:21:08:54:d0:3e:4b:b0:32:61:92:56:c4:3c:20:1c: d1:0a:d6:c6:43:01:18:3f:c0:fe:21:0f:13:9f:04:90:88:89: 9d:81:6b:9c:bf:e7:05:15:ab:fa:09:79:ea:0a:f9:2f:09:ca: a7:08:57:fc:8b:f8:ab:36:34:a5:35:91:a2:56:55:11:76:25: 33:21:ff:35:29:41:d6:37:bb:1d:7f:36:4f:51:3f:be:f7:27: 6f:54:b9:8b:4f:b3:82:98:ee:7e:f1:7e:12:62:c5:6d:b7:f1: 30:6b:85:f5:f0:72:08:79:53:cc:ca:be:56:7a:c5:bb:7d:36: a1:6a:aa:70:fa:c1:aa:de:ff:24:81:98:13:a0:ee:eb:cf:f8: a2:bb:28:61:06:f8:04:74:68:0a:ff:f6:f8:e6:5d:b9:9e:53: eb:d1:1b:1f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NvCMOXkC5WsbVUN3zgTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFm NGU3N2YwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2I3OGEwZTM3OGM3OTJkMGY1ODlhOTAyZTYwZTQ0MjVlMTE2MDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshDXvsaLCMv+FMtiDimCqBncK4oH PjmkYrKhdq4eA2mVjvihHn5/wPcWvlpRdaYGMrRyOXDB/iKRY1KvJu73irQaFfXN kSshYl5CGjBOduDAkdVUcW1FDcUU2mOfShuXSXN3dC1UxW0V83yXPSx8OkKypfoS 9IUPD2hLliGE0a8bZYk2b73GOzAmddJAJis//hqCz/BmtyTTU6HROHyJa4V/RUz4 VtCMRJPTFlRJLmo8BMJaPiZH1ua7LBRda6rslSzIkTCEStTHf8Vh5G/B8RSqzoGY A2S8gfMkBBK1+gBhMMfhUAFpr5TvdAkocYF8T0bfxfCRdtqBebbJb+oStwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNy3ig43jHktD1iakC5g5EJeEWBsMB8GA1UdIwQY MBaAFPReeRQRMM7shXIV+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2Ut MzNiZDg0MzQ5NWY4LzEvM0xlS0RqZU1lUzBQV0pxUUxtRGtRbDRSWUd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4 LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCQM MA0GCSqGSIb3DQEBCwUAA4IBAQAXZvjMdw0eoZVBCydntgtCpdQWOezc0YhiatCV pfi7Dq3pf4St2m/lP73eT3EM4leqCOiX1DGz13Dd6H9ZBup2FyYQDs8W2H30EQF2 5tjvoFZ01zXU2AwFXse+MxMhCFTQPkuwMmGSVsQ8IBzRCtbGQwEYP8D+IQ8TnwSQ iImdgWucv+cFFav6CXnqCvkvCcqnCFf8i/irNjSlNZGiVlURdiUzIf81KUHWN7sd fzZPUT++9ydvVLmLT7OCmO5+8X4SYsVtt/Ewa4X18HIIeVPMyr5WesW7fTahaqpw +sGq3v8kgZgToO7rz/iiuyhhBvgEdGgK//b45l25nlPr0Rsf -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:10 2026 by rpki-client