This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/35-RC4YDZpErq0qZEtlrtSl4SMw.roa File: 35-RC4YDZpErq0qZEtlrtSl4SMw.roa (raw, json) Hash identifier: FOYizqXKHMLapyQGMwFyEz9qVvs69XW13Uh469YQNIU= Subject key identifier: DF:9F:91:0B:86:03:66:91:2B:AB:4A:99:12:D9:6B:B5:29:78:48:CC Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C732CB08BEA100BCAFCC7FEEECA4BA Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/35-RC4YDZpErq0qZEtlrtSl4SMw.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214576 IP address blocks: 2a0e:4005:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:32:cb:08:be:a1:00:bc:af:cc:7f:ee:ec:a4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df9f910b860366912bab4a9912d96bb5297848cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:8f:d7:85:47:d4:b6:bb:63:ce:f9:3c:bb: ea:f3:9f:f8:87:f9:8b:5c:11:7b:cf:fc:a8:7c:bd: 22:60:24:4a:ae:66:0c:54:ac:1e:a1:76:14:a6:23: f9:e7:f7:91:8c:37:ac:aa:ce:ef:52:52:91:26:19: 25:fa:33:41:03:36:a2:a5:d1:4d:37:a8:5f:08:f1: 27:92:87:1d:40:9c:2f:8e:aa:43:33:0c:ce:e1:eb: f2:18:57:ef:f0:bb:ec:32:c6:17:88:46:4e:18:36: 8e:9e:9c:c7:65:8a:6c:9e:43:d0:64:46:58:51:f8: e4:40:63:b7:db:b6:53:ba:7c:f3:b7:fe:81:85:09: 18:34:5c:c5:cd:08:be:ae:b5:ee:77:3b:c6:71:c9: 25:57:ce:d5:d7:e0:ab:c3:27:e9:0f:01:c8:48:d7: eb:6c:74:13:52:3a:ba:d8:ec:d4:76:2e:2e:0e:50: 18:d9:88:f2:d0:09:75:5b:5a:62:79:6e:9a:f2:56: fb:d0:35:b9:a5:28:ef:3f:f3:a3:25:9b:c0:b2:9a: c7:66:3c:6e:f9:0f:2e:d4:8e:c6:1f:9a:63:8f:b2: 37:90:1c:d9:03:3a:26:2f:bd:65:65:4c:34:48:7f: 61:c1:e4:b4:ec:a7:42:fe:03:b3:0c:97:6a:9b:e3: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9F:91:0B:86:03:66:91:2B:AB:4A:99:12:D9:6B:B5:29:78:48:CC X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/35-RC4YDZpErq0qZEtlrtSl4SMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:4005:1002::/48 Signature Algorithm: sha256WithRSAEncryption c0:84:df:48:77:5a:dd:f4:7a:d7:30:fd:35:b1:17:07:da:b3: 3e:51:b9:73:69:42:74:58:82:06:a1:4d:40:5a:ee:6f:4a:2a: 43:4d:d3:e7:6f:1c:7e:c8:3a:66:a2:96:2b:3f:8e:cc:9e:ec: d9:c7:41:c9:a4:3a:e6:8f:e3:de:c4:a4:8a:eb:48:7b:84:cf: 93:54:d0:5a:b7:c7:6f:33:db:6e:85:c5:95:5a:02:31:1a:c6: 97:c3:22:ea:c2:b4:d4:ea:a8:03:22:42:d0:cf:34:c0:c3:d3: aa:e6:4d:0a:a6:cb:0d:87:00:f0:0c:ad:22:e4:d3:71:c4:09: 6b:99:72:6a:19:80:0a:a3:3c:b4:ae:b4:4e:7a:e7:cf:75:b1: 7f:7b:4e:66:2a:32:94:24:f5:17:28:94:f4:db:ca:e2:4d:5a: b3:b5:88:ff:c5:a7:f7:95:32:5f:41:58:18:64:78:83:48:a6: 21:15:28:f9:a9:d5:91:de:8c:84:5e:b3:7d:ad:b7:ae:b5:a7: 29:ca:d5:96:0f:a9:c1:a8:c3:c1:15:3f:11:25:a2:4f:b5:2c: f1:2a:3e:ea:67:a2:e9:4e:3c:91:3f:49:60:54:87:c1:50:20: 6d:6e:32:98:1e:bf:f9:1c:ce:2c:ed:11:b7:42:58:95:49:f6: 22:96:82:b7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xzLLCL6hALyvzH/u7KS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjlmOTEwYjg2MDM2NjkxMmJhYjRhOTkxMmQ5NmJiNTI5Nzg0OGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkaP14VH1La7Y875PLvq85/4h/mL XBF7z/yofL0iYCRKrmYMVKweoXYUpiP55/eRjDesqs7vUlKRJhkl+jNBAzaipdFN N6hfCPEnkocdQJwvjqpDMwzO4evyGFfv8LvsMsYXiEZOGDaOnpzHZYpsnkPQZEZY UfjkQGO327ZTunzzt/6BhQkYNFzFzQi+rrXudzvGccklV87V1+CrwyfpDwHISNfr bHQTUjq62OzUdi4uDlAY2Yjy0Al1W1pieW6a8lb70DW5pSjvP/OjJZvAsprHZjxu +Q8u1I7GH5pjj7I3kBzZAzomL71lZUw0SH9hweS07KdC/gOzDJdqm+PMFQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN+fkQuGA2aRK6tKmRLZa7UpeEjMMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvMzUtUkM0WURacEVycTBxWkV0bHJ0U2w0U013LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg5ABRAC MA0GCSqGSIb3DQEBCwUAA4IBAQDAhN9Id1rd9HrXMP01sRcH2rM+UblzaUJ0WIIG oU1AWu5vSipDTdPnbxx+yDpmopYrP47MnuzZx0HJpDrmj+PexKSK60h7hM+TVNBa t8dvM9tuhcWVWgIxGsaXwyLqwrTU6qgDIkLQzzTAw9Oq5k0KpssNhwDwDK0i5NNx xAlrmXJqGYAKozy0rrROeufPdbF/e05mKjKUJPUXKJT028riTVqztYj/xaf3lTJf QVgYZHiDSKYhFSj5qdWR3oyEXrN9rbeutacpytWWD6nBqMPBFT8RJaJPtSzxKj7q Z6LpTjyRP0lgVIfBUCBtbjKYHr/5HM4s7RG3QliVSfYiloK3 -----END CERTIFICATE-----Generated at Wed Jan 21 06:47:48 2026 by rpki-client