This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/p3Z6TcZ-DNBXih2j3drNhJVDO4o.roa File: p3Z6TcZ-DNBXih2j3drNhJVDO4o.roa (raw, json) Hash identifier: hdtTLz83rn6aIFswr53FTkFyzMnetBQTfBufBu8CoFE= Subject key identifier: A7:76:7A:4D:C6:7E:0C:D0:57:8A:1D:A3:DD:DA:CD:84:95:43:3B:8A Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6 Certificate serial: 019A5371DFFA8830095ACA460908AF110920 Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/p3Z6TcZ-DNBXih2j3drNhJVDO4o.roa Signing time: Wed 05 Nov 2025 09:56:03 +0000 ROA not before: Wed 05 Nov 2025 09:56:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 131.150.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:71:df:fa:88:30:09:5a:ca:46:09:08:af:11:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6 Validity Not Before: Nov 5 09:56:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7767a4dc67e0cd0578a1da3dddacd8495433b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:59:fa:83:3d:32:a0:b2:6c:d2:71:ce:30:c6: 03:75:b4:4f:f8:18:d4:b1:c4:fd:75:0e:25:ab:ef: 5b:6c:a9:62:47:53:28:2c:c7:66:50:34:5a:14:0f: 1d:79:28:13:b9:8a:db:ca:54:39:20:7c:44:0a:96: 5c:55:a0:dd:65:de:ca:4c:16:aa:86:66:da:15:8a: c7:1e:7a:2e:c1:ad:a7:de:7d:38:3d:fa:96:34:99: 57:2a:8a:f1:18:42:90:0b:ab:e4:6c:74:dc:1c:b9: 71:51:60:7e:e2:cd:23:65:66:b6:f1:43:19:b7:d7: 18:03:b3:94:42:db:b2:88:ea:38:2c:9c:bf:62:31: 61:08:e2:87:0d:a8:a9:82:46:54:0b:11:79:8b:4f: 29:57:8d:30:13:b9:8e:8f:9b:66:ae:84:d8:7b:12: db:c7:ca:e0:c5:28:d9:89:76:ea:c3:6c:7d:c7:3c: aa:9f:4e:46:4e:68:ab:f5:e1:8a:bc:b2:da:16:78: 30:57:27:65:e4:e5:59:4b:55:31:69:05:2b:70:46: 1d:ab:51:bf:2b:30:73:31:df:f9:16:57:b1:26:fc: 0f:f7:13:11:7a:a5:94:33:ba:2f:84:9d:20:fa:6f: ba:e2:10:01:45:ec:3d:1b:f4:6a:cb:c3:7c:d6:41: 55:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:76:7A:4D:C6:7E:0C:D0:57:8A:1D:A3:DD:DA:CD:84:95:43:3B:8A X509v3 Authority Key Identifier: keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/p3Z6TcZ-DNBXih2j3drNhJVDO4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.150.144.0/20 Signature Algorithm: sha256WithRSAEncryption 54:4e:79:2a:e4:9d:fb:51:06:eb:a3:7e:96:9f:fa:38:69:53: 0e:a5:ac:5c:3a:41:c6:c2:7e:6d:0d:8e:de:08:46:af:55:cd: 31:91:de:b2:ac:97:fe:f7:6f:8e:ce:1f:c9:19:5a:e5:5a:4e: 05:9f:80:04:58:80:32:ff:de:a5:f8:a1:9a:c6:ee:21:73:d8: 55:86:af:00:f4:02:83:8f:0f:7b:d2:c7:e4:26:04:14:0a:15: 86:d0:9d:3f:8a:8b:11:7d:83:72:93:5d:85:0e:0c:7f:90:68: 4a:47:c8:33:ff:af:a5:6f:88:4d:0a:f2:13:c4:d0:0c:58:24: 82:d3:b7:bb:69:ef:b6:3d:b1:b4:a1:18:a3:e6:ec:e3:1a:b5: c2:3f:ee:a5:a5:8d:75:a7:bf:01:35:07:9a:e8:39:25:07:3e: 62:1f:81:e2:a0:55:91:33:ed:be:a5:c0:a1:9e:57:98:fa:b0: 0b:84:2a:bf:af:ca:6a:e5:75:52:88:8b:e1:57:a6:a8:d6:38: 95:05:d4:6a:04:e4:a3:a5:f7:71:c7:65:1e:cb:e9:60:55:09: fc:37:61:4a:17:32:34:ec:5a:1c:de:4f:a9:6a:f4:76:d1:bf: ed:55:7c:5b:ad:1d:b3:67:88:3d:89:88:e8:be:3f:b8:89:d3: fe:a2:9c:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpTcd/6iDAJWspGCQivEQkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxOWY3NWIyNTkzY2EyYjFiMGE1ZmQwYzU0MDE1ZGUzMDZj NDdlZTYwHhcNMjUxMTA1MDk1NjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzc2N2E0ZGM2N2UwY2QwNTc4YTFkYTNkZGRhY2Q4NDk1NDMzYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1n6gz0yoLJs0nHOMMYDdbRP+BjU scT9dQ4lq+9bbKliR1MoLMdmUDRaFA8deSgTuYrbylQ5IHxECpZcVaDdZd7KTBaq hmbaFYrHHnouwa2n3n04PfqWNJlXKorxGEKQC6vkbHTcHLlxUWB+4s0jZWa28UMZ t9cYA7OUQtuyiOo4LJy/YjFhCOKHDaipgkZUCxF5i08pV40wE7mOj5tmroTYexLb x8rgxSjZiXbqw2x9xzyqn05GTmir9eGKvLLaFngwVydl5OVZS1UxaQUrcEYdq1G/ KzBzMd/5FlexJvwP9xMReqWUM7ovhJ0g+m+64hABRew9G/Rqy8N81kFVzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKd2ek3GfgzQV4odo93azYSVQzuKMB8GA1UdIwQY MBaAFMGfdbJZPKKxsKX9DFQBXeMGxH7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMt MDEyNDBiY2ZkYjQyLzEvcDNaNlRjWi1ETkJYaWgyajNkck5oSlZETzRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMtMDEyNDBiY2ZkYjQy LzEvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEg5aQMA0G CSqGSIb3DQEBCwUAA4IBAQBUTnkq5J37UQbro36Wn/o4aVMOpaxcOkHGwn5tDY7e CEavVc0xkd6yrJf+92+Ozh/JGVrlWk4Fn4AEWIAy/96l+KGaxu4hc9hVhq8A9AKD jw970sfkJgQUChWG0J0/iosRfYNyk12FDgx/kGhKR8gz/6+lb4hNCvITxNAMWCSC 07e7ae+2PbG0oRij5uzjGrXCP+6lpY11p78BNQea6DklBz5iH4HioFWRM+2+pcCh nleY+rALhCq/r8pq5XVSiIvhV6ao1jiVBdRqBOSjpfdxx2Uey+lgVQn8N2FKFzI0 7Foc3k+pavR20b/tVXxbrR2zZ4g9iYjovj+4idP+opzp -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:52 2025 by rpki-client