This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/3lFf3-sn7CbCrHiUq-18oHz7T1c.roa File: 3lFf3-sn7CbCrHiUq-18oHz7T1c.roa (raw, json) Hash identifier: 9Ta5O8FpZyag1SlXhYN4q/r9UzqLiY5msiZgY4NqYTY= Subject key identifier: DE:51:5F:DF:EB:27:EC:26:C2:AC:78:94:AB:ED:7C:A0:7C:FB:4F:57 Certificate issuer: /CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d Certificate serial: 019B289D332C993ED3CD613E6D9B2481017B Authority key identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/3lFf3-sn7CbCrHiUq-18oHz7T1c.roa Signing time: Tue 16 Dec 2025 19:22:29 +0000 ROA not before: Tue 16 Dec 2025 19:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203903 IP address blocks: 2001:67c:22dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:9d:33:2c:99:3e:d3:cd:61:3e:6d:9b:24:81:01:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d Validity Not Before: Dec 16 19:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de515fdfeb27ec26c2ac7894abed7ca07cfb4f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7c:e4:52:dd:09:7d:6a:8e:77:80:d5:6b:ed: 97:66:f7:a7:38:58:67:26:ea:f0:08:6d:3e:47:17: 8a:b1:72:78:e4:d8:39:da:8f:ee:11:b7:ef:00:64: 3b:e2:09:8b:81:a5:bf:54:62:b7:09:91:f3:a3:90: fc:c2:f9:55:da:f0:90:ac:19:0a:c6:b5:07:7c:3f: 4d:4c:52:c0:ad:66:9b:71:23:85:f9:86:64:a4:aa: cb:4a:4b:af:2d:43:bb:5a:d1:01:49:e1:50:d7:a0: 98:04:38:64:20:1c:ab:84:eb:22:f9:5e:0a:fe:7a: cc:cb:8d:77:d9:df:c1:67:c2:38:67:44:1a:2e:7c: b5:a0:02:d9:83:27:57:c2:1f:cf:99:cb:66:55:5d: 96:75:62:0f:b6:4e:ad:f3:c2:45:74:82:b3:98:dc: ee:a7:72:2a:51:5b:ce:70:5a:97:cf:4a:66:f6:9c: a3:ac:b7:0d:77:b6:dd:04:11:e0:67:e1:6a:10:0a: fd:48:e4:b5:8f:a3:69:b4:2b:f2:be:43:73:30:20: 0c:1f:32:50:b6:ca:2a:8c:a5:fb:a2:e6:42:dc:f1: 63:94:0e:5a:3e:d6:b0:20:39:db:71:19:61:04:05: b6:0f:8c:3a:5b:6c:59:cb:da:76:30:20:2c:a6:7d: a0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:51:5F:DF:EB:27:EC:26:C2:AC:78:94:AB:ED:7C:A0:7C:FB:4F:57 X509v3 Authority Key Identifier: keyid:D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/3lFf3-sn7CbCrHiUq-18oHz7T1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:22dc::/48 Signature Algorithm: sha256WithRSAEncryption 5d:d3:54:54:39:0f:05:76:f3:5a:7a:a4:f6:2f:eb:01:45:af: 16:ba:10:ed:19:92:76:1a:1e:88:12:a3:fd:e4:e2:b3:d2:c5: 31:2d:88:3a:a6:54:13:51:78:2c:2c:a3:25:71:8d:a0:68:99: 7f:cd:7a:c7:5e:24:a8:e6:78:c1:28:9b:7f:cd:0e:22:a3:41: ea:46:45:a0:99:e6:25:d4:93:65:99:6f:b9:85:90:45:52:82: 2a:e1:d2:8a:a1:87:bc:96:5f:e6:82:31:fd:3d:e4:2e:02:71: 4b:df:23:02:1f:d7:2f:a2:36:c5:dd:cd:a6:05:0a:8b:27:b3: 32:71:81:5c:cd:a0:20:2c:87:37:54:9d:b0:29:d1:d2:28:bb: 0f:0d:87:92:93:c2:64:86:05:44:c9:1a:a6:3e:92:b6:c0:8a: 13:3a:26:48:35:fb:43:08:7c:05:f9:59:42:b7:e8:a9:8e:7a: 9e:fd:26:e5:93:41:46:fd:c0:b1:e3:92:a2:fe:ba:eb:28:67: bb:66:eb:7e:1b:13:a2:92:d0:a2:f9:b3:ec:99:f1:6e:ac:70: ab:38:2f:05:bf:c8:ca:5f:eb:43:ae:82:ea:af:a0:b2:21:c6: bc:14:e9:47:d2:da:dd:bf:71:ff:e5:09:84:bf:82:20:60:46: a4:dd:86:75 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsonTMsmT7TzWE+bZskgQF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNWY2Y2Y3YTk4NThiMDI4NzFjMWM3ZjEzZDFiMzM4ODBl OThhMmQwHhcNMjUxMjE2MTkyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTUxNWZkZmViMjdlYzI2YzJhYzc4OTRhYmVkN2NhMDdjZmI0ZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XzkUt0JfWqOd4DVa+2XZvenOFhn JurwCG0+RxeKsXJ45Ng52o/uEbfvAGQ74gmLgaW/VGK3CZHzo5D8wvlV2vCQrBkK xrUHfD9NTFLArWabcSOF+YZkpKrLSkuvLUO7WtEBSeFQ16CYBDhkIByrhOsi+V4K /nrMy4132d/BZ8I4Z0QaLny1oALZgydXwh/PmctmVV2WdWIPtk6t88JFdIKzmNzu p3IqUVvOcFqXz0pm9pyjrLcNd7bdBBHgZ+FqEAr9SOS1j6NptCvyvkNzMCAMHzJQ tsoqjKX7ouZC3PFjlA5aPtawIDnbcRlhBAW2D4w6W2xZy9p2MCAspn2grQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN5RX9/rJ+wmwqx4lKvtfKB8+09XMB8GA1UdIwQY MBaAFNBfbPephYsChxwcfxPRsziA6YotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zNjRjNzgtYTlmNS00ZTg1LWJkY2Yt MWNhNGNlMDI0Y2UwLzEvM2xGZjMtc243Q2JDckhpVXEtMThvSHo3VDFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zNjRjNzgtYTlmNS00ZTg1LWJkY2YtMWNhNGNlMDI0Y2Uw LzEvMEY5czk2bUZpd0tISEJ4X0U5R3pPSURwaWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCLc MA0GCSqGSIb3DQEBCwUAA4IBAQBd01RUOQ8FdvNaeqT2L+sBRa8WuhDtGZJ2Gh6I EqP95OKz0sUxLYg6plQTUXgsLKMlcY2gaJl/zXrHXiSo5njBKJt/zQ4io0HqRkWg meYl1JNlmW+5hZBFUoIq4dKKoYe8ll/mgjH9PeQuAnFL3yMCH9cvojbF3c2mBQqL J7MycYFczaAgLIc3VJ2wKdHSKLsPDYeSk8JkhgVEyRqmPpK2wIoTOiZINftDCHwF +VlCt+ipjnqe/Sblk0FG/cCx45Ki/rrrKGe7Zut+GxOiktCi+bPsmfFurHCrOC8F v8jKX+tDroLqr6CyIca8FOlH0trdv3H/5QmEv4IgYEak3YZ1 -----END CERTIFICATE-----Generated at Sun Dec 21 01:57:50 2025 by rpki-client