This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/3n4-ucZdGz_1X3fIAf9XxJmNHo0.roa File: 3n4-ucZdGz_1X3fIAf9XxJmNHo0.roa (raw, json) Hash identifier: Qb7wFX91g78lr4g5B/mSH8rgR/DbATD0NzeRsFaH16Y= Subject key identifier: DE:7E:3E:B9:C6:5D:1B:3F:F5:5F:77:C8:01:FF:57:C4:99:8D:1E:8D Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019ABEF3BA89869AB4FA7B2142DBC08483E0 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/3n4-ucZdGz_1X3fIAf9XxJmNHo0.roa Signing time: Wed 26 Nov 2025 06:57:15 +0000 ROA not before: Wed 26 Nov 2025 06:57:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 62.112.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:be:f3:ba:89:86:9a:b4:fa:7b:21:42:db:c0:84:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Nov 26 06:57:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de7e3eb9c65d1b3ff55f77c801ff57c4998d1e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:43:7d:4e:ff:95:b4:ee:a4:54:79:45:d8: 9a:c0:f7:0b:69:df:20:95:67:41:05:24:11:40:ed: fe:01:b9:36:18:7e:ff:24:91:7f:32:e3:58:51:80: da:5f:fd:24:d6:04:90:2c:a4:91:3f:da:30:1a:0c: f7:33:a4:bb:d9:a1:e2:76:bd:89:10:42:2d:09:b1: a3:2b:41:58:5e:7a:60:67:3a:63:13:82:a2:13:24: 87:a6:c1:6f:e5:bd:f0:d7:83:22:47:68:79:2b:58: 04:9a:28:ab:fd:41:e5:2c:46:de:d1:b3:e3:0a:35: da:37:60:99:1f:05:91:ce:2b:58:a3:53:c2:b0:fa: d1:2b:9a:39:a7:46:e2:33:6c:00:47:82:5a:d6:d7: 9e:d8:e0:c4:b9:52:91:68:be:2d:a8:65:a6:d1:46: 5e:85:0c:3e:99:b0:a7:42:00:b2:c8:7f:55:e3:5f: e7:c1:e6:ed:01:1f:71:45:f7:91:ac:47:11:34:41: 7f:cc:d8:63:73:8e:74:ac:df:fa:b0:9a:dd:64:7f: 2d:0f:de:e3:a4:34:e1:70:09:71:73:27:86:25:2c: a3:9f:5e:de:f0:e7:7c:0b:c3:74:0d:f7:2a:d4:7a: 0a:8c:79:81:b3:4d:7f:71:23:93:e9:11:1a:25:7b: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7E:3E:B9:C6:5D:1B:3F:F5:5F:77:C8:01:FF:57:C4:99:8D:1E:8D X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/3n4-ucZdGz_1X3fIAf9XxJmNHo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.30.0/24 Signature Algorithm: sha256WithRSAEncryption 69:51:ae:fb:32:24:eb:7c:14:42:81:a2:7b:dd:e3:7e:05:12: 57:b2:ef:89:78:14:35:d0:64:0f:c6:97:ad:98:af:aa:7c:06: c3:2e:fd:5c:4b:3c:c9:0e:1a:8b:3a:06:e1:9b:50:e4:01:97: a8:6f:ab:66:00:af:5d:e7:1d:98:01:8b:e4:16:77:3d:1f:6b: 36:ae:09:92:65:56:99:f5:81:08:76:5d:2f:62:72:7e:a5:af: c0:8e:44:df:41:ec:d3:2f:1d:ba:75:27:a5:7a:6c:53:17:bb: c9:4f:16:77:f8:7f:4a:5f:70:54:24:64:88:08:a7:5d:6d:86: ed:54:03:bf:93:54:8b:5d:23:44:9b:46:5c:a6:ef:92:75:a9: fd:66:6f:be:bc:5e:e8:52:11:a4:8b:a3:10:e8:eb:38:d7:80: 0c:8b:df:38:74:cd:b7:a7:9a:59:ad:ac:be:c3:40:fb:f9:f2: 85:9c:13:9b:04:9f:0a:42:44:bb:d3:db:4c:c9:63:3a:42:0c: 7d:9d:0a:8a:82:89:84:3d:26:64:17:32:c6:02:04:c1:2b:03: e3:12:d0:d4:27:fb:5b:62:80:6b:1c:00:20:8c:41:af:4c:89: c8:bf:e1:2b:08:ff:e1:2d:6b:7e:44:6b:af:0a:b6:69:31:e2: 2a:eb:af:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq+87qJhpq0+nshQtvAhIPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjUxMTI2MDY1NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTdlM2ViOWM2NWQxYjNmZjU1Zjc3YzgwMWZmNTdjNDk5OGQxZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IpDfU7/lbTupFR5RdiawPcLad8g lWdBBSQRQO3+Abk2GH7/JJF/MuNYUYDaX/0k1gSQLKSRP9owGgz3M6S72aHidr2J EEItCbGjK0FYXnpgZzpjE4KiEySHpsFv5b3w14MiR2h5K1gEmiir/UHlLEbe0bPj CjXaN2CZHwWRzitYo1PCsPrRK5o5p0biM2wAR4Ja1tee2ODEuVKRaL4tqGWm0UZe hQw+mbCnQgCyyH9V41/nwebtAR9xRfeRrEcRNEF/zNhjc450rN/6sJrdZH8tD97j pDThcAlxcyeGJSyjn17e8Od8C8N0Dfcq1HoKjHmBs01/cSOT6REaJXu8FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5+PrnGXRs/9V93yAH/V8SZjR6NMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvM240LXVjWmRHel8xWDNmSUFmOVh4Sm1OSG8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnAeMA0G CSqGSIb3DQEBCwUAA4IBAQBpUa77MiTrfBRCgaJ73eN+BRJXsu+JeBQ10GQPxpet mK+qfAbDLv1cSzzJDhqLOgbhm1DkAZeob6tmAK9d5x2YAYvkFnc9H2s2rgmSZVaZ 9YEIdl0vYnJ+pa/AjkTfQezTLx26dSelemxTF7vJTxZ3+H9KX3BUJGSICKddbYbt VAO/k1SLXSNEm0Zcpu+Sdan9Zm++vF7oUhGki6MQ6Os414AMi984dM23p5pZray+ w0D7+fKFnBObBJ8KQkS709tMyWM6Qgx9nQqKgomEPSZkFzLGAgTBKwPjEtDUJ/tb YoBrHAAgjEGvTInIv+ErCP/hLWt+RGuvCrZpMeIq668l -----END CERTIFICATE-----Generated at Fri Nov 28 07:22:41 2025 by rpki-client