This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/3ZWcNmn5erML4VHXNobevFjL1II.roa File: 3ZWcNmn5erML4VHXNobevFjL1II.roa (raw, json) Hash identifier: 9zrAADBPNvAmUMEvLNtcmLho0vlng1Bax7GLA/WgjCY= Subject key identifier: DD:95:9C:36:69:F9:7A:B3:0B:E1:51:D7:36:86:DE:BC:58:CB:D4:82 Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Certificate serial: 019B210933BD60991665178A916892E3C14D Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/3ZWcNmn5erML4VHXNobevFjL1II.roa Signing time: Mon 15 Dec 2025 08:03:29 +0000 ROA not before: Mon 15 Dec 2025 08:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198949 IP address blocks: 141.226.109.0/24 maxlen: 24 141.226.110.0/24 maxlen: 24 141.226.252.0/22 maxlen: 24 144.249.128.0/18 maxlen: 24 167.17.128.0/19 maxlen: 24 185.139.240.0/22 maxlen: 24 2a07:1980::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:09:33:bd:60:99:16:65:17:8a:91:68:92:e3:c1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Validity Not Before: Dec 15 08:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dd959c3669f97ab30be151d73686debc58cbd482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:98:4c:40:b7:c9:7a:6c:fb:40:3c:16:68:00: d9:0f:4d:7c:25:b7:18:fc:04:78:f7:e7:25:bb:14: 9a:51:d2:60:6e:03:5d:0b:f2:e4:e8:4d:2e:80:b4: 24:50:23:99:b4:38:fe:f8:66:e5:e9:fd:50:a6:8c: 85:42:e9:ff:11:d4:da:d5:43:70:8a:0a:77:76:54: 10:9f:45:e8:4a:39:cc:84:35:8e:81:48:40:d5:c9: 31:03:ae:4a:d4:fe:38:d3:25:44:9e:60:6f:a7:79: 44:f2:45:c1:55:92:5a:7f:c6:c8:6c:a0:3f:4c:2b: 75:db:bf:1d:c4:e7:a5:ed:5a:d0:7d:6c:36:48:5f: c3:0b:4b:74:ec:21:9f:e0:53:a1:ca:54:65:02:d1: d0:3b:93:6f:54:cd:71:45:bc:cf:18:c4:55:a7:79: 70:f1:d7:4b:4f:a6:ca:0e:94:4d:a4:72:63:cb:00: f4:0d:18:3c:9c:3b:f0:7d:98:70:f8:1c:9e:62:71: 9f:81:63:1e:4c:7d:ab:51:3c:0d:26:69:35:12:bf: 94:4e:ef:48:7c:5e:09:d6:75:26:35:28:54:00:42: 4b:df:76:fa:d4:2a:95:7e:c5:a1:74:61:22:d2:0f: 92:bb:6a:a0:6d:98:b0:53:75:8c:06:23:d2:f8:19: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:95:9C:36:69:F9:7A:B3:0B:E1:51:D7:36:86:DE:BC:58:CB:D4:82 X509v3 Authority Key Identifier: keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/3ZWcNmn5erML4VHXNobevFjL1II.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.109.0-141.226.110.255 141.226.252.0/22 144.249.128.0/18 167.17.128.0/19 185.139.240.0/22 IPv6: 2a07:1980::/29 Signature Algorithm: sha256WithRSAEncryption 17:ff:32:89:84:90:7c:ef:58:11:38:ec:94:88:96:c9:98:6f: 3c:12:42:c0:38:34:43:b2:85:38:2c:4d:18:4d:ee:a3:19:72: 4a:a9:12:d8:d0:95:98:a7:6a:8f:8e:52:e5:cf:7e:0f:e8:28: 44:22:24:04:59:77:85:f3:04:02:02:de:80:5d:69:41:76:c4: 16:b7:6d:28:41:ee:6d:37:6b:4b:2d:77:ac:8d:46:ce:67:e4: b9:26:61:10:01:56:08:4b:b7:68:f5:36:0e:20:29:b6:52:cb: 54:0a:e9:f1:1d:95:b9:64:83:59:9b:1c:bd:b5:e6:7d:e8:50: 14:b0:63:7a:a6:35:2f:45:12:cd:d7:5a:ab:ce:f8:b9:b8:8f: 12:ad:af:f4:68:96:cb:1d:d5:61:3f:53:33:5d:7d:64:86:84: 32:7e:40:d7:b0:13:76:f6:20:a7:18:92:08:40:7a:46:bd:61: 01:3d:bd:84:c0:2d:6b:bf:45:ac:de:8a:b9:d3:20:8e:21:75: f6:5a:ea:40:9c:77:af:c9:e7:97:aa:c9:d1:13:57:40:dc:6c: 08:c1:76:43:78:01:92:7e:c7:97:5b:36:8a:2d:5a:2a:34:b8: 80:01:b5:39:4f:76:40:d9:ac:2a:89:42:8e:64:bf:e4:73:16: 65:e3:96:81 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZshCTO9YJkWZReKkWiS48FNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2 M2Y5YWQwHhcNMjUxMjE1MDgwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDk1OWMzNjY5Zjk3YWIzMGJlMTUxZDczNjg2ZGViYzU4Y2JkNDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZhMQLfJemz7QDwWaADZD018JbcY /AR49+cluxSaUdJgbgNdC/Lk6E0ugLQkUCOZtDj++Gbl6f1QpoyFQun/EdTa1UNw igp3dlQQn0XoSjnMhDWOgUhA1ckxA65K1P440yVEnmBvp3lE8kXBVZJaf8bIbKA/ TCt1278dxOel7VrQfWw2SF/DC0t07CGf4FOhylRlAtHQO5NvVM1xRbzPGMRVp3lw 8ddLT6bKDpRNpHJjywD0DRg8nDvwfZhw+ByeYnGfgWMeTH2rUTwNJmk1Er+UTu9I fF4J1nUmNShUAEJL33b61CqVfsWhdGEi0g+Su2qgbZiwU3WMBiPS+BlEUQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFN2VnDZp+XqzC+FR1zaG3rxYy9SCMB8GA1UdIwQY MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt MzQ2MGNjMjY0ODBiLzEvM1pXY05tbjVlck1MNFZIWE5vYmV2RmpMMUlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmMAwDBACN4m0D BACN4m4DBAKN4vwDBAaQ+YADBAWnEYADBAK5i/AwDQQCAAIwBwMFAyoHGYAwDQYJ KoZIhvcNAQELBQADggEBABf/MomEkHzvWBE47JSIlsmYbzwSQsA4NEOyhTgsTRhN 7qMZckqpEtjQlZinao+OUuXPfg/oKEQiJARZd4XzBAIC3oBdaUF2xBa3bShB7m03 a0std6yNRs5n5LkmYRABVghLt2j1Ng4gKbZSy1QK6fEdlblkg1mbHL215n3oUBSw Y3qmNS9FEs3XWqvO+Lm4jxKtr/Rolssd1WE/UzNdfWSGhDJ+QNewE3b2IKcYkghA eka9YQE9vYTALWu/RazeirnTII4hdfZa6kCcd6/J55eqydETV0DcbAjBdkN4AZJ+ x5dbNootWio0uIABtTlPdkDZrCqJQo5kv+RzFmXjloE= -----END CERTIFICATE-----Generated at Sat Dec 20 21:44:08 2025 by rpki-client