This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/3C5DR3EmLqD-VGb9bZXI_WeAckg.roa File: 3C5DR3EmLqD-VGb9bZXI_WeAckg.roa (raw, json) Hash identifier: Ip3yW2sbhlHnUaNInTCFblBY+tcQ6N7kHbKCY4ft/ik= Subject key identifier: DC:2E:43:47:71:26:2E:A0:FE:54:66:FD:6D:95:C8:FD:67:80:72:48 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019A75800DB190232BA09497322F6C9143DB Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/3C5DR3EmLqD-VGb9bZXI_WeAckg.roa Signing time: Wed 12 Nov 2025 00:38:37 +0000 ROA not before: Wed 12 Nov 2025 00:38:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61298 IP address blocks: 2a12:bec0:180::/44 maxlen: 48 2a12:bec0:e00::/48 maxlen: 48 2a12:bec0:e01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:75:80:0d:b1:90:23:2b:a0:94:97:32:2f:6c:91:43:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Nov 12 00:38:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dc2e434771262ea0fe5466fd6d95c8fd67807248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:f0:3f:51:33:09:19:83:d0:ce:79:65:c8: e4:d6:c3:15:4a:8a:66:c9:5e:a2:1d:81:5f:82:b2: 66:f7:f5:f0:d2:40:de:6e:5c:a8:ce:11:f1:26:50: 89:df:d0:6c:5d:1f:86:d9:4e:62:bb:fd:68:db:02: 31:78:15:84:fc:8f:88:00:16:e9:b4:05:f8:58:e6: 14:98:58:2c:c2:64:d6:df:4c:46:4a:ef:2c:e7:32: 14:2d:85:8f:59:06:57:a2:0a:82:64:ff:7b:2d:eb: 3f:84:86:32:3f:45:f8:ae:73:4d:00:dd:c4:c4:a0: ed:db:7c:f3:db:ec:38:4d:0d:7c:72:5a:ad:ff:33: e3:46:ec:ea:97:93:95:ef:cc:a5:62:75:bc:81:08: bf:91:c8:ee:e5:63:f3:d5:47:21:37:ab:8c:50:d3: 4e:76:9b:bb:32:bd:eb:f0:55:63:51:b3:96:dd:d9: 15:54:e4:a3:da:fc:0f:42:1f:b2:58:68:18:dc:a5: 9c:b2:f4:19:78:58:fa:f1:f9:b0:61:68:26:56:bb: 34:4a:11:8e:75:17:54:11:d8:4e:52:f6:5a:f8:38: 6b:ea:18:11:22:e3:61:04:2e:d1:3e:20:b6:52:5e: e1:f6:af:8c:88:ce:67:ef:ef:6c:68:39:ca:bf:c0: c6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2E:43:47:71:26:2E:A0:FE:54:66:FD:6D:95:C8:FD:67:80:72:48 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/3C5DR3EmLqD-VGb9bZXI_WeAckg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:180::/44 2a12:bec0:e00::/47 Signature Algorithm: sha256WithRSAEncryption 00:c9:f8:c9:fc:a9:34:67:87:05:79:de:76:29:f4:15:b9:23: 8b:58:17:16:98:37:45:18:cb:5f:b0:a2:66:e9:d5:e0:bf:be: 82:04:2d:34:2e:50:e3:a4:d2:40:73:1b:c2:ce:03:08:7e:6d: 73:15:cf:69:ea:95:1a:39:5b:83:5d:51:79:b7:3c:d1:13:dc: b6:c7:ab:b3:88:8e:7a:61:9e:e8:98:7e:8d:6f:60:5e:66:de: 1e:fe:9a:ce:6b:47:85:c5:ae:25:1e:d3:0a:8a:49:47:c6:b4: 6b:0c:fa:f2:58:f0:59:ee:7b:ca:aa:34:c1:c5:72:13:37:b5: 62:ca:c5:b9:17:36:97:7f:31:b5:63:39:dd:1a:86:d0:d7:29: 0c:cd:85:1e:7e:81:f5:45:5d:91:54:bc:2e:fa:b3:fd:ff:df: 34:a2:85:f5:f7:74:1c:12:ff:c8:07:c1:37:38:4d:cb:8d:55: b5:57:15:70:5f:a6:8d:56:51:0e:f5:12:2b:53:dd:79:31:78: 97:6e:28:80:4f:e9:ee:ce:ea:e2:bc:b1:4e:f4:39:4e:e4:ed: 29:02:1c:93:d3:77:13:81:d0:41:12:22:68:02:cf:03:e4:a0: 01:b8:62:d3:b9:e3:37:9e:2a:b1:a6:e6:2e:a0:a7:f7:4a:87: f7:ea:77:f5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZp1gA2xkCMroJSXMi9skUPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjUxMTEyMDAzODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzJlNDM0NzcxMjYyZWEwZmU1NDY2ZmQ2ZDk1YzhmZDY3ODA3MjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6bwP1EzCRmD0M55Zcjk1sMVSopm yV6iHYFfgrJm9/Xw0kDeblyozhHxJlCJ39BsXR+G2U5iu/1o2wIxeBWE/I+IABbp tAX4WOYUmFgswmTW30xGSu8s5zIULYWPWQZXogqCZP97Les/hIYyP0X4rnNNAN3E xKDt23zz2+w4TQ18clqt/zPjRuzql5OV78ylYnW8gQi/kcju5WPz1UchN6uMUNNO dpu7Mr3r8FVjUbOW3dkVVOSj2vwPQh+yWGgY3KWcsvQZeFj68fmwYWgmVrs0ShGO dRdUEdhOUvZa+Dhr6hgRIuNhBC7RPiC2Ul7h9q+MiM5n7+9saDnKv8DGrQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNwuQ0dxJi6g/lRm/W2VyP1ngHJIMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvM0M1RFIzRW1McUQtVkdiOWJaWElfV2VBY2tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+wAGA AwcBKhK+wA4AMA0GCSqGSIb3DQEBCwUAA4IBAQAAyfjJ/Kk0Z4cFed52KfQVuSOL WBcWmDdFGMtfsKJm6dXgv76CBC00LlDjpNJAcxvCzgMIfm1zFc9p6pUaOVuDXVF5 tzzRE9y2x6uziI56YZ7omH6Nb2BeZt4e/prOa0eFxa4lHtMKiklHxrRrDPryWPBZ 7nvKqjTBxXITN7ViysW5FzaXfzG1YzndGobQ1ykMzYUefoH1RV2RVLwu+rP9/980 ooX193QcEv/IB8E3OE3LjVW1VxVwX6aNVlEO9RIrU915MXiXbiiAT+nuzurivLFO 9DlO5O0pAhyT03cTgdBBEiJoAs8D5KABuGLTueM3niqxpuYuoKf3Sof36nf1 -----END CERTIFICATE-----Generated at Fri Dec 5 20:06:40 2025 by rpki-client