This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/m3TRa6nWC63HzRQfYTKwUyjUKGg.roa File: m3TRa6nWC63HzRQfYTKwUyjUKGg.roa (raw, json) Hash identifier: 15UgqL76Yz4nvpetIkMSihUXVxDlC3E6RmY+SwfSL3Y= Subject key identifier: 9B:74:D1:6B:A9:D6:0B:AD:C7:CD:14:1F:61:32:B0:53:28:D4:28:68 Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019B2B9F2A631436AF386ECCF114C66C2285 Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/m3TRa6nWC63HzRQfYTKwUyjUKGg.roa Signing time: Wed 17 Dec 2025 09:23:29 +0000 ROA not before: Wed 17 Dec 2025 09:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 2a0f:9bc0::/32 maxlen: 32 2a0f:9bc1::/32 maxlen: 32 2a0f:9bc2::/32 maxlen: 32 2a0f:9bc3::/32 maxlen: 32 2a0f:9bc4::/32 maxlen: 32 2a0f:9bc5::/32 maxlen: 32 2a0f:9bc6::/32 maxlen: 32 2a0f:9bc7::/32 maxlen: 32 2a13:1300::/32 maxlen: 32 2a13:1301::/32 maxlen: 32 2a13:1302::/32 maxlen: 32 2a13:1303::/32 maxlen: 32 2a13:1304::/32 maxlen: 32 2a13:1305::/32 maxlen: 32 2a13:1306::/32 maxlen: 32 2a13:1307::/32 maxlen: 32 2a13:be40::/32 maxlen: 32 2a13:be41::/32 maxlen: 32 2a13:be42::/32 maxlen: 32 2a13:be43::/32 maxlen: 32 2a13:be44::/32 maxlen: 32 2a13:be45::/32 maxlen: 32 2a13:be46::/32 maxlen: 32 2a13:be47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:9f:2a:63:14:36:af:38:6e:cc:f1:14:c6:6c:22:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Dec 17 09:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9b74d16ba9d60badc7cd141f6132b05328d42868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:f9:53:89:86:53:ec:d0:5f:ff:3b:a8:57: f8:b9:e0:db:fc:10:98:f1:30:02:94:fc:ae:76:35: f6:84:f3:e1:4a:1a:b1:6e:9a:49:65:b1:34:04:fa: 78:ac:59:3d:1a:55:2c:63:2d:72:af:a3:57:58:0c: f6:e7:de:66:24:02:5f:2a:52:b4:b7:dd:c3:90:fb: 99:76:d3:c0:20:a8:9b:2e:62:6a:10:77:a9:dd:f9: 1b:cb:fd:ff:a1:c9:65:8c:fd:44:6a:61:6b:44:1e: bb:28:24:a7:da:8e:30:b3:85:55:3a:f8:03:c6:80: 3a:bd:ef:3a:ed:c4:0b:b9:6f:88:e1:74:4b:a4:7c: bd:f4:d6:de:4a:32:0e:b2:39:24:34:72:5c:4b:9f: ff:c0:fa:91:b7:ee:2a:ba:10:07:43:11:53:dc:e8: 66:12:37:19:f4:b3:82:9c:b8:18:b1:e9:a3:e2:46: 63:92:53:a4:29:6f:3c:02:b7:71:63:59:eb:a0:9e: 12:46:ac:08:58:88:67:c6:b4:44:2d:9f:bf:93:2e: 89:92:bb:bd:89:e1:2b:cf:9b:fc:36:56:3a:22:11: 22:05:c4:e8:c1:5a:a3:2d:c4:88:0f:62:46:9d:bf: b0:f4:65:48:4e:1c:02:48:2b:4d:8f:00:19:2a:7b: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:D1:6B:A9:D6:0B:AD:C7:CD:14:1F:61:32:B0:53:28:D4:28:68 X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/m3TRa6nWC63HzRQfYTKwUyjUKGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9bc0::/29 2a13:1300::/29 2a13:be40::/29 Signature Algorithm: sha256WithRSAEncryption 30:aa:ec:5b:64:9f:99:ef:bf:a6:ee:5d:c1:e8:11:e9:a6:19: 6f:88:1b:e5:56:eb:8e:9b:fd:10:ad:6e:f5:79:40:bf:4c:a9: 88:a2:4d:c7:69:d4:49:4f:aa:af:11:32:1b:91:ea:46:86:62: e9:74:6a:76:5d:35:32:58:4e:65:41:c1:4c:08:c0:4a:00:2f: 7a:b3:a3:8d:74:07:de:ae:3b:4d:45:4a:6a:cd:9f:aa:9e:76: 19:4d:7c:46:31:31:91:ee:67:c3:b9:12:0e:0d:e8:f9:01:82: 16:11:c9:82:6c:9f:d0:73:71:9f:38:b1:37:70:b4:bb:71:62: 20:ee:07:aa:07:4f:62:1d:89:00:21:30:4a:e0:ba:99:af:8d: 14:48:6c:1d:5c:32:9f:8d:18:72:8b:86:c7:4f:f5:bf:ec:a0: e4:b4:50:9c:02:16:09:cd:4c:73:6c:26:5c:67:5b:2d:b8:82: 33:0b:c5:64:95:36:6e:d8:d7:94:7b:ca:c7:22:e9:88:59:ec: b0:13:d0:f0:c8:9c:85:8e:f9:a1:56:e4:a4:cb:f0:77:3d:db: e2:6e:66:b9:c0:1b:c2:bf:f3:8c:74:06:a0:aa:24:1f:3d:d8: a5:1f:3c:a0:ff:3e:3d:bd:9d:bf:6f:33:b3:f3:d3:de:70:a0: 45:06:c2:27 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsrnypjFDavOG7M8RTGbCKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjUxMjE3MDkyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjc0ZDE2YmE5ZDYwYmFkYzdjZDE0MWY2MTMyYjA1MzI4ZDQyODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF35U4mGU+zQX/87qFf4ueDb/BCY 8TAClPyudjX2hPPhShqxbppJZbE0BPp4rFk9GlUsYy1yr6NXWAz2595mJAJfKlK0 t93DkPuZdtPAIKibLmJqEHep3fkby/3/oclljP1EamFrRB67KCSn2o4ws4VVOvgD xoA6ve867cQLuW+I4XRLpHy99NbeSjIOsjkkNHJcS5//wPqRt+4quhAHQxFT3Ohm EjcZ9LOCnLgYsemj4kZjklOkKW88ArdxY1nroJ4SRqwIWIhnxrRELZ+/ky6Jkru9 ieErz5v8NlY6IhEiBcTowVqjLcSID2JGnb+w9GVIThwCSCtNjwAZKnt4fQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJt00Wup1gutx80UH2EysFMo1ChoMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvbTNUUmE2bldDNjNIelJRZllUS3dVeWpVS0dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg+bwAMF AyoTEwADBQMqE75AMA0GCSqGSIb3DQEBCwUAA4IBAQAwquxbZJ+Z77+m7l3B6BHp phlviBvlVuuOm/0QrW71eUC/TKmIok3HadRJT6qvETIbkepGhmLpdGp2XTUyWE5l QcFMCMBKAC96s6ONdAferjtNRUpqzZ+qnnYZTXxGMTGR7mfDuRIODej5AYIWEcmC bJ/Qc3GfOLE3cLS7cWIg7geqB09iHYkAITBK4LqZr40USGwdXDKfjRhyi4bHT/W/ 7KDktFCcAhYJzUxzbCZcZ1stuIIzC8VklTZu2NeUe8rHIumIWeywE9DwyJyFjvmh VuSky/B3Pdvibma5wBvCv/OMdAagqiQfPdilHzyg/z49vZ2/bzOz89PecKBFBsIn -----END CERTIFICATE-----Generated at Sat Dec 20 21:44:04 2025 by rpki-client