This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/3PPf4Y_qIxC7RLvddn7XhPdaKJc.roa File: 3PPf4Y_qIxC7RLvddn7XhPdaKJc.roa (raw, json) Hash identifier: OFq30+iv/yFFA0xKQ9BO17H+DIvPQ0bkiTx0cNerIAg= Subject key identifier: DC:F3:DF:E1:8F:EA:23:10:BB:44:BB:DD:76:7E:D7:84:F7:5A:28:97 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019A50346870E5A63F575D60642F8D35F756 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/3PPf4Y_qIxC7RLvddn7XhPdaKJc.roa Signing time: Tue 04 Nov 2025 18:50:03 +0000 ROA not before: Tue 04 Nov 2025 18:50:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210538 IP address blocks: 45.133.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:34:68:70:e5:a6:3f:57:5d:60:64:2f:8d:35:f7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Nov 4 18:50:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dcf3dfe18fea2310bb44bbdd767ed784f75a2897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:9c:4c:c4:2e:6b:3b:ed:78:2a:c3:6f:b9: 2d:70:f9:1c:3e:74:de:30:03:68:64:c1:8f:9e:ce: 4d:d9:6e:83:9d:ff:a2:97:0b:99:34:f9:40:60:3b: e2:37:88:e9:4c:cc:a3:3d:af:51:2f:47:c0:a1:65: ab:25:32:9a:36:08:b9:3a:df:a4:3c:bd:29:c0:b4: f7:90:71:52:e9:bb:04:f3:28:fa:d3:bd:c9:aa:f1: ab:81:85:65:39:1a:e9:c4:48:e6:46:77:b9:c4:bb: 4e:a8:14:ad:04:d3:15:8c:54:55:37:be:9f:c5:ac: 0f:3f:aa:ec:65:36:7a:30:ab:28:7b:f2:5d:24:92: 74:12:24:9f:da:40:fc:fc:86:8e:73:f5:5a:5f:d8: b0:0a:ce:77:7c:6f:1c:68:9c:1a:6d:1f:cb:35:a0: 47:61:c1:61:21:f6:0f:fc:db:e2:49:f2:25:2f:28: 5d:4a:f8:8c:fb:5f:4d:b0:07:4a:ce:f3:b3:9c:97: 6f:3f:24:16:cd:eb:4e:ef:57:ed:11:37:62:f3:c6: 09:1c:b0:68:e4:57:73:33:85:95:e9:81:e1:ca:a7: de:a4:9b:34:40:90:3e:c2:39:40:b4:d5:3d:25:5e: ad:46:c4:60:2f:b1:c1:12:fb:38:22:82:61:ba:c3: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F3:DF:E1:8F:EA:23:10:BB:44:BB:DD:76:7E:D7:84:F7:5A:28:97 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/3PPf4Y_qIxC7RLvddn7XhPdaKJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.36.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:d0:7a:90:e8:25:6f:c1:b6:4d:86:26:8b:96:bb:95:2b:86: 31:33:95:38:45:d1:0b:6e:a5:49:ae:33:92:bc:4e:42:dd:13: 34:0e:cc:62:15:04:cd:14:aa:93:b8:59:7c:a5:f5:2c:2e:5e: 43:b7:f3:6f:e4:ad:e7:01:21:73:2e:f5:e2:77:21:71:dc:a6: 5d:cf:4e:1f:3f:2b:13:5c:dc:38:ec:b6:70:f9:c2:a9:02:ae: a2:b0:6b:50:f4:53:8e:9d:c9:53:24:9e:22:52:fb:2c:ef:eb: ec:75:a9:b4:e4:fe:b5:65:6b:c8:f0:46:27:ac:01:a1:a5:43: da:7e:91:58:d9:f3:21:b8:54:0d:9c:e2:59:cf:41:91:7d:46: 83:1a:f6:bb:7c:3d:29:01:07:4b:03:db:66:53:ae:96:f5:fb: ad:66:17:9f:35:b6:e7:07:b1:53:84:22:89:94:b0:13:92:a8: ce:86:c7:ac:c4:02:e7:ce:37:2c:d6:18:74:11:e1:ca:85:a1: 7e:4b:77:af:78:cc:8b:ba:97:04:54:44:e4:eb:5f:7e:0e:08: f6:bc:10:59:a1:48:d7:5b:8b:77:e7:77:a7:62:35:d7:d3:6c: cf:ae:da:0e:d4:e9:fc:02:16:9b:18:0d:9f:43:d0:6f:a1:e1: d1:8c:bf:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpQNGhw5aY/V11gZC+NNfdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjUxMTA0MTg1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2YzZGZlMThmZWEyMzEwYmI0NGJiZGQ3NjdlZDc4NGY3NWEyODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHycTMQuazvteCrDb7ktcPkcPnTe MANoZMGPns5N2W6Dnf+ilwuZNPlAYDviN4jpTMyjPa9RL0fAoWWrJTKaNgi5Ot+k PL0pwLT3kHFS6bsE8yj6073JqvGrgYVlORrpxEjmRne5xLtOqBStBNMVjFRVN76f xawPP6rsZTZ6MKsoe/JdJJJ0EiSf2kD8/IaOc/VaX9iwCs53fG8caJwabR/LNaBH YcFhIfYP/NviSfIlLyhdSviM+19NsAdKzvOznJdvPyQWzetO71ftETdi88YJHLBo 5FdzM4WV6YHhyqfepJs0QJA+wjlAtNU9JV6tRsRgL7HBEvs4IoJhusN5RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNzz3+GP6iMQu0S73XZ+14T3WiiXMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvM1BQZjRZX3FJeEM3Ukx2ZGRuN1hoUGRhS0pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYUkMA0G CSqGSIb3DQEBCwUAA4IBAQAO0HqQ6CVvwbZNhiaLlruVK4YxM5U4RdELbqVJrjOS vE5C3RM0DsxiFQTNFKqTuFl8pfUsLl5Dt/Nv5K3nASFzLvXidyFx3KZdz04fPysT XNw47LZw+cKpAq6isGtQ9FOOnclTJJ4iUvss7+vsdam05P61ZWvI8EYnrAGhpUPa fpFY2fMhuFQNnOJZz0GRfUaDGva7fD0pAQdLA9tmU66W9futZhefNbbnB7FThCKJ lLATkqjOhsesxALnzjcs1hh0EeHKhaF+S3eveMyLupcEVETk619+Dgj2vBBZoUjX W4t353enYjXX02zPrtoO1On8AhabGA2fQ9BvoeHRjL/n -----END CERTIFICATE-----Generated at Fri Dec 5 16:14:44 2025 by rpki-client