This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/3_oD99IEVzjB5IgYkKV3vMqmt0k.roa File: 3_oD99IEVzjB5IgYkKV3vMqmt0k.roa (raw, json) Hash identifier: ltBFy9S2eEa2fushjHDliPYb5SfUvPC+V6EqKo6/85U= Subject key identifier: DF:FA:03:F7:D2:04:57:38:C1:E4:88:18:90:A5:77:BC:CA:A6:B7:49 Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019B663CA85B548900162C283A0E044E338B Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/3_oD99IEVzjB5IgYkKV3vMqmt0k.roa Signing time: Sun 28 Dec 2025 18:33:29 +0000 ROA not before: Sun 28 Dec 2025 18:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3170 IP address blocks: 62.122.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:3c:a8:5b:54:89:00:16:2c:28:3a:0e:04:4e:33:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Dec 28 18:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dffa03f7d2045738c1e4881890a577bccaa6b749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:44:32:af:ef:f5:27:2f:b1:a8:0a:c7:12: f6:dc:50:20:48:26:1f:fd:f0:75:89:87:78:56:d6: 5a:89:45:e5:85:1f:f1:15:96:8e:13:1b:68:b0:18: 70:d6:1e:9c:37:68:d3:4c:86:98:bf:11:3a:b8:ae: a3:80:2e:fc:05:e5:69:c1:7a:5d:97:8e:20:f8:ab: c3:bd:18:6f:51:77:18:78:12:9e:8e:de:93:28:7e: fb:34:2f:47:5b:a4:e9:bd:2a:1d:fd:19:96:be:88: 7e:c1:4f:2e:95:83:fe:21:3a:98:07:07:0d:cc:22: af:d5:e4:ce:53:72:af:5e:1f:94:48:b8:5e:3e:d8: cc:8f:b8:df:00:ce:f8:69:23:97:7d:80:e3:67:42: 63:85:42:25:52:8c:fa:a0:ea:b2:10:bb:3d:21:a8: 5d:c0:94:c4:11:3d:9b:66:94:13:66:31:7c:c4:a0: 3c:9d:b2:d9:3a:53:59:56:42:71:14:e0:6b:a4:f0: 61:f2:2e:51:21:01:fa:39:16:93:e5:ed:83:c0:08: b0:03:cd:5b:54:07:25:74:e2:3f:56:7f:39:d0:89: 60:73:a7:26:15:a0:24:07:53:27:90:e1:0f:96:09: 89:81:5d:ea:25:61:21:de:6d:09:0d:c8:65:71:80: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FA:03:F7:D2:04:57:38:C1:E4:88:18:90:A5:77:BC:CA:A6:B7:49 X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/3_oD99IEVzjB5IgYkKV3vMqmt0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.189.0/24 Signature Algorithm: sha256WithRSAEncryption 20:38:fb:70:b8:b6:5c:86:6a:73:f3:43:20:bb:49:cd:a9:91: 01:a9:bd:d2:02:c8:cc:47:40:fb:d5:d1:ab:9c:cb:42:6f:6a: 3c:34:4b:a7:54:03:0a:3b:11:bd:8c:a6:0f:16:54:24:a5:73: fd:63:d8:45:72:56:7b:ba:b9:5e:a0:af:6b:f7:e2:bb:11:0f: b2:00:48:3a:a0:bc:ea:bf:2d:d6:4a:3e:ad:ce:21:f9:d9:08: 12:53:51:33:46:24:4c:99:58:b0:51:c1:c4:a3:12:bc:35:f8: 16:08:9e:a3:ed:dd:b6:18:56:0e:5c:d9:62:72:51:2f:f4:6f: 13:74:ec:62:f1:1c:f8:55:96:b5:a0:9c:cc:14:1e:fa:c1:81: b1:de:0e:c2:ec:e5:54:e0:33:74:8b:59:a7:97:d2:96:32:6b: 8a:3b:71:1d:90:84:43:07:b4:3a:3c:dd:f9:79:b2:74:21:13: d6:ec:f5:c8:61:fc:a7:03:8b:55:4d:d7:eb:d5:6c:6e:66:a9: f2:dc:4e:d3:3e:f7:b1:e6:88:34:b3:dd:e7:6a:24:0b:2c:09: bd:aa:b4:b4:ba:51:9b:e3:66:f5:d4:81:df:ae:13:64:2e:5c: 13:80:52:ce:25:e9:82:cb:1e:93:6d:80:14:7b:1f:34:10:d9: 3d:6a:89:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtmPKhbVIkAFiwoOg4ETjOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjUxMjI4MTgzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmZhMDNmN2QyMDQ1NzM4YzFlNDg4MTg5MGE1NzdiY2NhYTZiNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM9EMq/v9ScvsagKxxL23FAgSCYf /fB1iYd4VtZaiUXlhR/xFZaOExtosBhw1h6cN2jTTIaYvxE6uK6jgC78BeVpwXpd l44g+KvDvRhvUXcYeBKejt6TKH77NC9HW6TpvSod/RmWvoh+wU8ulYP+ITqYBwcN zCKv1eTOU3KvXh+USLhePtjMj7jfAM74aSOXfYDjZ0JjhUIlUoz6oOqyELs9Iahd wJTEET2bZpQTZjF8xKA8nbLZOlNZVkJxFOBrpPBh8i5RIQH6ORaT5e2DwAiwA81b VAcldOI/Vn850Ilgc6cmFaAkB1MnkOEPlgmJgV3qJWEh3m0JDchlcYDDXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/6A/fSBFc4weSIGJCld7zKprdJMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvM19vRDk5SUVWempCNUlnWWtLVjN2TXFtdDBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnq9MA0G CSqGSIb3DQEBCwUAA4IBAQAgOPtwuLZchmpz80Mgu0nNqZEBqb3SAsjMR0D71dGr nMtCb2o8NEunVAMKOxG9jKYPFlQkpXP9Y9hFclZ7urleoK9r9+K7EQ+yAEg6oLzq vy3WSj6tziH52QgSU1EzRiRMmViwUcHEoxK8NfgWCJ6j7d22GFYOXNliclEv9G8T dOxi8Rz4VZa1oJzMFB76wYGx3g7C7OVU4DN0i1mnl9KWMmuKO3EdkIRDB7Q6PN35 ebJ0IRPW7PXIYfynA4tVTdfr1WxuZqny3E7TPvex5og0s93naiQLLAm9qrS0ulGb 42b11IHfrhNkLlwTgFLOJemCyx6TbYAUex80ENk9aomv -----END CERTIFICATE-----Generated at Wed Dec 31 00:58:43 2025 by rpki-client