This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/3wmc1QYw4mfuocmEfGMfi1HHD8k.roa File: 3wmc1QYw4mfuocmEfGMfi1HHD8k.roa (raw, json) Hash identifier: SS3zb4L+Y19yv16W1udbGaR8EWB9tuMbwSavNQhf5RQ= Subject key identifier: DF:09:9C:D5:06:30:E2:67:EE:A1:C9:84:7C:63:1F:8B:51:C7:0F:C9 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019AB69BD2B2752C79B860EBB80D94FBC15C Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/3wmc1QYw4mfuocmEfGMfi1HHD8k.roa Signing time: Mon 24 Nov 2025 16:04:16 +0000 ROA not before: Mon 24 Nov 2025 16:04:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208753 IP address blocks: 2a05:b0c6:200a::/48 maxlen: 48 2a05:b0c6:200b::/48 maxlen: 48 2a05:b0c6:200c::/48 maxlen: 48 2a05:b0c6:200f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:9b:d2:b2:75:2c:79:b8:60:eb:b8:0d:94:fb:c1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Nov 24 16:04:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=df099cd50630e267eea1c9847c631f8b51c70fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:87:34:4a:d8:7c:7e:e2:14:bb:57:db:9e: df:1d:e1:58:af:5b:c2:93:fa:29:e5:06:80:d1:8a: 24:5f:35:41:0c:2a:74:a2:46:c5:a9:0b:07:75:5e: 50:d2:77:b6:f5:69:23:53:8a:ea:8b:92:39:22:e2: 48:ba:e4:ee:bd:36:02:f2:f2:da:98:f9:2b:2a:fa: eb:14:cc:0a:c7:a5:06:00:49:b2:ad:b6:60:c4:1b: 61:f0:aa:8a:e2:a2:cb:c0:e0:3d:b0:c7:97:36:8e: 88:e8:8d:95:ed:13:eb:a2:24:00:1c:a4:b9:31:ac: 77:86:19:b0:da:aa:94:e9:89:bc:37:1a:a0:83:9d: 7c:51:4d:2b:e1:1d:24:89:43:3d:f8:ea:e8:e8:7f: ae:e1:82:88:e2:5f:c3:bb:90:96:f3:89:30:7b:92: 5e:e6:c4:00:e3:cd:63:ef:44:f4:cb:eb:5c:d8:fb: 5a:c2:a8:61:92:34:ac:6c:34:c2:b5:89:18:82:3c: d7:eb:8b:29:9a:f6:34:4f:3b:fd:bb:57:a1:9c:22: 83:49:71:02:aa:e4:f7:8d:0c:c2:10:07:4c:3f:56: c0:28:90:89:72:f4:03:28:1b:1c:67:dd:a9:a7:7d: 33:06:74:d9:32:ba:d5:75:cc:fc:42:c9:67:38:62: 00:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:09:9C:D5:06:30:E2:67:EE:A1:C9:84:7C:63:1F:8B:51:C7:0F:C9 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/3wmc1QYw4mfuocmEfGMfi1HHD8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b0c6:200a::-2a05:b0c6:200c:ffff:ffff:ffff:ffff:ffff 2a05:b0c6:200f::/48 Signature Algorithm: sha256WithRSAEncryption 23:90:79:5e:c7:8b:48:5c:1a:8e:71:bd:5a:5f:8b:30:f0:fb: f2:36:bf:55:c9:e2:0c:d5:9f:a1:68:86:e8:dd:69:6d:b8:0a: 62:b1:ee:98:39:b4:ed:9e:50:9f:59:f6:92:af:9b:ce:c7:51: 8e:0d:8d:2b:a6:c0:49:58:7f:23:b4:2f:aa:15:37:6a:38:f7: a3:2a:28:70:73:b1:20:cf:db:8b:08:a6:8c:df:15:6b:51:55: 1e:f9:d6:0e:ed:9c:20:51:f5:d6:b0:03:f0:f5:5c:01:3d:40: c8:2d:9c:d1:ac:88:53:f2:d2:4e:08:ad:87:54:c2:78:41:a2: 8a:61:8b:48:7c:b8:89:80:15:51:22:a1:ee:05:a4:1e:c9:65: d2:e5:56:69:c8:b5:43:d7:3d:2e:29:e6:f6:10:c8:10:d8:85: 46:35:e8:9c:0d:95:f2:1b:a0:8f:83:15:34:e2:44:cf:ff:79: f6:b2:0c:6c:4a:28:54:94:44:1f:97:c5:a8:df:2f:bd:ba:91: 98:bb:a6:d7:e3:5f:2f:c9:9b:22:b2:62:5c:ad:49:35:b8:b4: ee:d0:bf:2e:c0:43:0d:b6:5f:64:b5:99:7f:8e:1e:8a:fc:e7: 6a:f3:d4:bc:46:e5:1d:25:21:70:5a:92:f9:fb:bb:e6:a1:36: b4:ac:9d:47 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZq2m9KydSx5uGDruA2U+8FcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjUxMTI0MTYwNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjA5OWNkNTA2MzBlMjY3ZWVhMWM5ODQ3YzYzMWY4YjUxYzcwZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDeHNErYfH7iFLtX257fHeFYr1vC k/op5QaA0YokXzVBDCp0okbFqQsHdV5Q0ne29WkjU4rqi5I5IuJIuuTuvTYC8vLa mPkrKvrrFMwKx6UGAEmyrbZgxBth8KqK4qLLwOA9sMeXNo6I6I2V7RProiQAHKS5 Max3hhmw2qqU6Ym8Nxqgg518UU0r4R0kiUM9+Oro6H+u4YKI4l/Du5CW84kwe5Je 5sQA481j70T0y+tc2PtawqhhkjSsbDTCtYkYgjzX64spmvY0Tzv9u1ehnCKDSXEC quT3jQzCEAdMP1bAKJCJcvQDKBscZ92pp30zBnTZMrrVdcz8QslnOGIAKQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFN8JnNUGMOJn7qHJhHxjH4tRxw/JMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvM3dtYzFRWXc0bWZ1b2NtRWZHTWZpMUhIRDhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwEqBbDG IAoDBwAqBbDGIAwDBwAqBbDGIA8wDQYJKoZIhvcNAQELBQADggEBACOQeV7Hi0hc Go5xvVpfizDw+/I2v1XJ4gzVn6FohujdaW24CmKx7pg5tO2eUJ9Z9pKvm87HUY4N jSumwElYfyO0L6oVN2o496MqKHBzsSDP24sIpozfFWtRVR751g7tnCBR9dawA/D1 XAE9QMgtnNGsiFPy0k4IrYdUwnhBoophi0h8uImAFVEioe4FpB7JZdLlVmnItUPX PS4p5vYQyBDYhUY16JwNlfIboI+DFTTiRM//efayDGxKKFSURB+XxajfL726kZi7 ptfjXy/JmyKyYlytSTW4tO7Qvy7AQw22X2S1mX+OHor852rz1LxG5R0lIXBakvn7 u+ahNrSsnUc= -----END CERTIFICATE-----Generated at Fri Nov 28 08:34:46 2025 by rpki-client