This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/vLt31u2LuYunvD1Z_qD2Pny8Vm4.roa File: vLt31u2LuYunvD1Z_qD2Pny8Vm4.roa (raw, json) Hash identifier: +q32KVm8qCu/bkMttiIT0OppWTKc8bPsrl6PWUt3FeI= Subject key identifier: BC:BB:77:D6:ED:8B:B9:8B:A7:BC:3D:59:FE:A0:F6:3E:7C:BC:56:6E Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019A65589DB0354B5EF7C6A2B78955361F36 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/vLt31u2LuYunvD1Z_qD2Pny8Vm4.roa Signing time: Sat 08 Nov 2025 21:21:37 +0000 ROA not before: Sat 08 Nov 2025 21:21:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29491 IP address blocks: 62.3.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:65:58:9d:b0:35:4b:5e:f7:c6:a2:b7:89:55:36:1f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Nov 8 21:21:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bcbb77d6ed8bb98ba7bc3d59fea0f63e7cbc566e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:b2:a3:c6:3b:ae:a6:c5:5a:2e:5f:39:35: 01:66:cd:9c:5b:a6:a1:2b:ed:53:7f:f0:72:04:ca: 5a:c1:e8:d8:c1:cb:36:8d:d6:3a:e6:43:b2:4b:3d: 43:9d:89:f5:7d:57:b1:ac:c8:83:ea:82:7a:87:7d: d3:5c:51:38:ec:14:76:b1:d7:1a:e4:66:af:6a:84: fd:43:26:91:68:50:2e:01:b5:46:df:3c:c9:97:56: eb:e8:4f:87:38:ac:b7:d8:b5:11:7f:c5:6b:81:3a: 28:5e:1a:76:72:06:77:e1:77:5a:0e:8d:75:e4:03: 92:81:03:d7:d8:58:9f:b0:b2:54:8f:e9:06:d9:25: 51:e3:e7:5b:36:fe:f9:e6:d8:23:cd:1c:6b:68:dc: ad:50:be:b3:df:fd:77:77:48:20:e5:f4:45:a1:37: 2e:40:55:d0:4b:49:58:4d:cb:59:c1:07:51:29:04: cd:cd:3a:13:27:60:e1:69:cb:f7:30:f8:4e:e7:0d: b6:ee:97:4d:41:a7:80:32:80:10:d9:07:3c:83:c4: aa:29:d6:5d:1d:4e:5e:8a:2c:88:64:88:a5:1e:04: f4:e0:4a:cd:7d:f1:08:47:37:a4:c2:f4:58:6d:aa: 4c:d1:eb:66:05:3b:16:ca:3f:32:82:fd:f3:04:ea: 86:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BB:77:D6:ED:8B:B9:8B:A7:BC:3D:59:FE:A0:F6:3E:7C:BC:56:6E X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/vLt31u2LuYunvD1Z_qD2Pny8Vm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.26.0/24 Signature Algorithm: sha256WithRSAEncryption 68:19:d2:79:f4:f0:a9:86:5d:53:de:ea:4b:80:e6:e9:b5:e2: c2:30:59:82:6d:1f:a2:13:37:e5:e7:06:05:79:3f:95:fa:dc: 5d:a9:28:0b:36:61:ce:6d:67:ba:f1:d5:7a:06:5a:70:fe:8f: 04:c0:bb:a4:de:81:33:95:a8:b0:38:08:57:80:71:7e:3f:a7: 7b:1a:69:ad:b0:79:67:46:05:e8:f9:d6:53:ec:19:d0:80:6d: 95:ce:3c:f5:14:47:30:c2:b1:03:2b:5c:91:9d:4d:30:16:70: 37:11:a3:c0:69:63:f3:b7:c4:98:c9:1d:5d:74:86:e5:f6:5c: 14:a8:29:0b:46:8f:25:c7:ee:a9:83:c8:96:8f:34:29:44:57: 36:0d:ac:b9:46:37:0e:c6:20:43:86:27:5c:15:c7:90:31:67: cb:b6:44:31:fa:ad:4a:cb:c0:f7:92:b5:67:33:39:10:99:53: e2:d5:f0:9c:d6:47:61:70:f3:64:76:e9:81:f7:a9:fd:17:61: 46:2c:76:a3:56:ab:c9:91:ff:25:66:99:80:89:a3:98:4c:32: c8:07:d8:0c:de:74:78:a2:1f:6a:fa:78:73:3b:09:ee:cf:47: e8:d5:4a:12:78:86:51:54:b0:bb:4c:1f:99:df:10:e7:73:5b: 7f:9f:e8:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZplWJ2wNUte98ait4lVNh82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMTA4MjEyMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2JiNzdkNmVkOGJiOThiYTdiYzNkNTlmZWEwZjYzZTdjYmM1NjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrOyo8Y7rqbFWi5fOTUBZs2cW6ah K+1Tf/ByBMpawejYwcs2jdY65kOySz1DnYn1fVexrMiD6oJ6h33TXFE47BR2sdca 5GavaoT9QyaRaFAuAbVG3zzJl1br6E+HOKy32LURf8VrgTooXhp2cgZ34XdaDo11 5AOSgQPX2FifsLJUj+kG2SVR4+dbNv755tgjzRxraNytUL6z3/13d0gg5fRFoTcu QFXQS0lYTctZwQdRKQTNzToTJ2Dhacv3MPhO5w227pdNQaeAMoAQ2Qc8g8SqKdZd HU5eiiyIZIilHgT04ErNffEIRzekwvRYbapM0etmBTsWyj8ygv3zBOqGjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLy7d9bti7mLp7w9Wf6g9j58vFZuMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvdkx0MzF1Mkx1WXVudkQxWl9xRDJQbnk4Vm00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMaMA0G CSqGSIb3DQEBCwUAA4IBAQBoGdJ59PCphl1T3upLgObpteLCMFmCbR+iEzfl5wYF eT+V+txdqSgLNmHObWe68dV6Blpw/o8EwLuk3oEzlaiwOAhXgHF+P6d7GmmtsHln RgXo+dZT7BnQgG2Vzjz1FEcwwrEDK1yRnU0wFnA3EaPAaWPzt8SYyR1ddIbl9lwU qCkLRo8lx+6pg8iWjzQpRFc2Day5RjcOxiBDhidcFceQMWfLtkQx+q1Ky8D3krVn MzkQmVPi1fCc1kdhcPNkdumB96n9F2FGLHajVqvJkf8lZpmAiaOYTDLIB9gM3nR4 oh9q+nhzOwnuz0fo1UoSeIZRVLC7TB+Z3xDnc1t/n+jJ -----END CERTIFICATE-----Generated at Sat Dec 6 04:48:06 2025 by rpki-client