This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/3kGHYnkV4trFVhTCT6A7R1pYboI.roa File: 3kGHYnkV4trFVhTCT6A7R1pYboI.roa (raw, json) Hash identifier: FuJfV2dx2p5wSIRaMGCSlnlW4cSAtcJ0K3HuEcMKsOk= Subject key identifier: DE:41:87:62:79:15:E2:DA:C5:56:14:C2:4F:A0:3B:47:5A:58:6E:82 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B370520DC5B655C64916F87427E072761 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/3kGHYnkV4trFVhTCT6A7R1pYboI.roa Signing time: Fri 19 Dec 2025 14:30:41 +0000 ROA not before: Fri 19 Dec 2025 14:30:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202532 IP address blocks: 2a0c:b641:660::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:05:20:dc:5b:65:5c:64:91:6f:87:42:7e:07:27:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Dec 19 14:30:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de4187627915e2dac55614c24fa03b475a586e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:75:76:85:8b:51:be:14:e2:0e:f2:fd:ae: 31:12:8b:e8:e3:f0:7a:78:e7:28:ab:cc:c6:de:13: ee:e8:c2:39:aa:00:d6:4d:7d:61:35:3a:08:ce:e1: 87:83:04:85:09:55:a4:d8:99:40:fc:bf:e4:f4:38: 9b:ad:9b:f4:8a:d3:84:11:f0:f4:82:e2:50:84:8e: e6:79:b3:fc:f1:83:85:bf:8d:3a:83:7a:b8:cc:e8: ae:e6:86:47:03:c7:ec:e8:e8:9d:9a:e9:91:c0:4a: 30:06:a9:e1:00:45:cf:c8:9f:f1:63:0f:67:f9:21: 69:57:2f:b4:ca:00:8e:54:ce:e2:f6:a2:a5:e8:ce: 32:aa:7f:1d:3b:48:19:d0:22:73:37:c6:ee:45:c7: c4:c4:68:c0:a5:28:d9:e6:e2:a3:d5:92:9e:43:30: b0:3e:76:72:b8:01:bd:6c:0b:90:bf:40:68:24:97: d6:bd:fb:93:ef:ad:21:e0:16:68:e4:f4:9b:2c:09: 10:86:be:73:e3:b0:78:6d:48:c6:9f:8c:ab:5f:c9: db:12:67:c5:4c:4e:49:24:d8:48:cd:44:53:62:9b: 82:f5:8b:0a:5b:8c:49:b0:fb:59:f9:88:d4:e0:f7: 00:69:d0:92:2f:19:a1:80:8c:b6:5a:cb:aa:d4:06: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:41:87:62:79:15:E2:DA:C5:56:14:C2:4F:A0:3B:47:5A:58:6E:82 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/3kGHYnkV4trFVhTCT6A7R1pYboI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:660::/44 Signature Algorithm: sha256WithRSAEncryption 71:5e:32:59:fc:90:f2:c6:a4:ab:79:45:4a:5a:c1:5e:3f:49: 58:6b:b7:5d:9a:c0:66:60:4d:b9:fa:60:3c:69:4d:75:c6:25: e4:a6:55:fe:28:e4:6c:51:63:a6:27:90:32:6e:32:b9:08:19: 26:5f:3a:68:04:9f:bf:f0:ed:d3:49:92:d0:43:ea:a0:a0:6d: 0c:16:34:95:37:b4:f9:46:c2:3c:29:ed:da:cc:56:fe:2e:8b: 33:ae:96:88:bf:06:9e:7b:d3:99:04:37:5b:4a:4a:01:28:21: fc:ea:b7:71:2f:78:90:ec:b8:70:f1:49:66:28:3b:8d:ba:2b: 94:0c:18:e6:c7:07:70:21:fb:1d:6a:6d:58:b3:d1:b1:db:d0: d4:7f:8d:7e:4f:dc:95:ae:16:1b:f3:f9:da:46:ea:c8:f5:6d: 1c:e8:72:1b:48:cc:0f:b4:4c:3f:65:6d:47:fc:90:2c:c6:91: 61:64:be:9d:d9:c8:6a:2f:da:88:92:70:65:33:4b:e9:33:b3: 05:d4:c9:8d:65:90:a0:e7:86:28:ef:b2:85:c5:1b:e6:21:95: df:d4:6e:c4:e5:a6:10:4a:47:3b:63:33:09:f9:be:35:1d:fc: 03:1e:5f:81:ea:a2:49:3d:2a:9f:85:27:08:64:5f:9c:ed:4a: 7a:e7:63:ec -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZs3BSDcW2VcZJFvh0J+BydhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjUxMjE5MTQzMDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTQxODc2Mjc5MTVlMmRhYzU1NjE0YzI0ZmEwM2I0NzVhNTg2ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7x1doWLUb4U4g7y/a4xEovo4/B6 eOcoq8zG3hPu6MI5qgDWTX1hNToIzuGHgwSFCVWk2JlA/L/k9DibrZv0itOEEfD0 guJQhI7mebP88YOFv406g3q4zOiu5oZHA8fs6OidmumRwEowBqnhAEXPyJ/xYw9n +SFpVy+0ygCOVM7i9qKl6M4yqn8dO0gZ0CJzN8buRcfExGjApSjZ5uKj1ZKeQzCw PnZyuAG9bAuQv0BoJJfWvfuT760h4BZo5PSbLAkQhr5z47B4bUjGn4yrX8nbEmfF TE5JJNhIzURTYpuC9YsKW4xJsPtZ+YjU4PcAadCSLxmhgIy2Wsuq1AYszQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN5Bh2J5FeLaxVYUwk+gO0daWG6CMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvM2tHSFlua1Y0dHJGVmhUQ1Q2QTdSMXBZYm9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQZg MA0GCSqGSIb3DQEBCwUAA4IBAQBxXjJZ/JDyxqSreUVKWsFeP0lYa7ddmsBmYE25 +mA8aU11xiXkplX+KORsUWOmJ5AybjK5CBkmXzpoBJ+/8O3TSZLQQ+qgoG0MFjSV N7T5RsI8Ke3azFb+LoszrpaIvwaee9OZBDdbSkoBKCH86rdxL3iQ7Lhw8UlmKDuN uiuUDBjmxwdwIfsdam1Ys9Gx29DUf41+T9yVrhYb8/naRurI9W0c6HIbSMwPtEw/ ZW1H/JAsxpFhZL6d2chqL9qIknBlM0vpM7MF1MmNZZCg54Yo77KFxRvmIZXf1G7E 5aYQSkc7YzMJ+b41HfwDHl+B6qJJPSqfhScIZF+c7Up652Ps -----END CERTIFICATE-----Generated at Sat Dec 20 02:37:29 2025 by rpki-client