This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/3iHWqDf9s-c8gy1CXXhIY-FFlCE.roa File: 3iHWqDf9s-c8gy1CXXhIY-FFlCE.roa (raw, json) Hash identifier: STolQlt34gUWvsOGZ6MtArtBz9GhblcpKnlVeWw/liA= Subject key identifier: DE:21:D6:A8:37:FD:B3:E7:3C:83:2D:42:5D:78:48:63:E1:45:94:21 Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c Certificate serial: 019B4C8084AC8FA5881F3C9D0ABCC119EE1B Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/3iHWqDf9s-c8gy1CXXhIY-FFlCE.roa Signing time: Tue 23 Dec 2025 18:37:29 +0000 ROA not before: Tue 23 Dec 2025 18:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 54113 IP address blocks: 2a00:8c40:f000::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:80:84:ac:8f:a5:88:1f:3c:9d:0a:bc:c1:19:ee:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c Validity Not Before: Dec 23 18:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de21d6a837fdb3e73c832d425d784863e1459421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:b0:ac:65:ec:57:b3:1b:4e:5e:2a:e2:1b: ba:45:bc:30:55:31:ab:96:b3:1b:3b:0e:12:d9:c4: 23:99:39:59:d0:39:3b:8f:93:68:89:f9:c4:ac:76: 73:c7:d9:9e:73:de:92:06:48:91:1b:b5:a8:19:91: 12:34:17:cd:5c:cf:9c:97:da:86:43:da:c9:ef:55: 8a:77:c9:fc:06:f3:e1:6f:d2:cb:e5:96:8f:e9:82: f8:5a:95:0d:c1:88:d8:10:4f:bc:40:33:c4:b4:b4: 4f:67:79:70:86:39:5e:18:26:dc:d1:be:37:75:d3: ac:72:35:64:0b:5f:d9:c6:71:1b:00:60:8f:7f:6d: 0a:aa:15:f2:92:f4:5f:26:dc:ab:f1:f8:f7:57:18: d8:e4:d3:0e:e7:2d:4e:8c:49:82:1d:da:fe:08:08: 6e:c0:aa:06:94:4e:42:fb:bf:76:a9:f2:24:44:dc: cd:cc:73:f2:8f:78:e1:5c:06:0d:37:98:21:f6:31: 44:73:e0:86:09:b7:32:10:5e:28:bf:43:7f:73:85: 84:84:57:ff:0a:46:01:a1:26:c1:48:57:02:a8:12: d8:eb:5e:a1:d5:89:d3:ba:00:00:0d:4a:b7:84:7b: 5d:36:cf:f9:a2:da:bd:bb:8e:a0:96:ec:36:eb:81: 64:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:21:D6:A8:37:FD:B3:E7:3C:83:2D:42:5D:78:48:63:E1:45:94:21 X509v3 Authority Key Identifier: keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/3iHWqDf9s-c8gy1CXXhIY-FFlCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:8c40:f000::/36 Signature Algorithm: sha256WithRSAEncryption 13:b3:0a:49:26:4a:13:f1:4d:bc:79:16:2a:f7:3f:57:c0:34: 7f:37:4f:d7:8a:cf:28:f4:dd:a0:36:e5:bd:5f:5a:4d:02:94: 70:45:a3:a5:8f:2b:d7:60:7a:1a:de:ad:27:a2:aa:bc:93:9b: 23:db:21:90:51:0d:cb:93:73:aa:82:56:0e:76:69:c1:c8:0a: fc:86:03:f8:bc:d2:5b:ef:c5:66:0d:1d:7f:ab:e1:ab:05:52: f7:87:1f:9a:b5:cd:37:1a:db:c4:63:a3:7e:73:20:49:7e:21: 69:b6:4a:37:0b:30:7c:73:c5:e6:18:06:f1:e2:ce:cd:e0:e5: 57:60:9f:d1:5e:c8:45:a3:d7:77:7c:94:d4:40:27:35:94:83: 15:0f:82:88:d1:36:0c:ab:c4:12:43:ec:ee:49:cb:21:3b:ea: 9d:79:f1:f9:68:69:7b:02:46:45:25:54:1e:7c:02:53:2b:65: 5d:44:48:21:af:d0:af:8c:38:62:a7:8a:63:ad:a7:e4:0d:f3: 89:31:ba:d5:c7:d3:50:95:09:66:67:31:2a:2a:d2:96:54:f0: 17:f9:c1:d2:14:51:c6:36:c6:bb:cf:a4:6b:7c:70:1c:4f:48: 17:25:48:e1:fc:ef:d1:b3:5f:9b:79:54:a4:41:b1:00:59:04: 3d:95:52:9a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZtMgISsj6WIHzydCrzBGe4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWYwMTg4MWI3M2M4ZTliNWQ5MjIzOTIyOWE2ZTUxMmVj YTRlN2MwHhcNMjUxMjIzMTgzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTIxZDZhODM3ZmRiM2U3M2M4MzJkNDI1ZDc4NDg2M2UxNDU5NDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6CwrGXsV7MbTl4q4hu6RbwwVTGr lrMbOw4S2cQjmTlZ0Dk7j5NoifnErHZzx9mec96SBkiRG7WoGZESNBfNXM+cl9qG Q9rJ71WKd8n8BvPhb9LL5ZaP6YL4WpUNwYjYEE+8QDPEtLRPZ3lwhjleGCbc0b43 ddOscjVkC1/ZxnEbAGCPf20KqhXykvRfJtyr8fj3VxjY5NMO5y1OjEmCHdr+CAhu wKoGlE5C+792qfIkRNzNzHPyj3jhXAYNN5gh9jFEc+CGCbcyEF4ov0N/c4WEhFf/ CkYBoSbBSFcCqBLY616h1YnTugAADUq3hHtdNs/5otq9u46gluw264FkyQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFN4h1qg3/bPnPIMtQl14SGPhRZQhMB8GA1UdIwQY MBaAFO8fAYgbc8jptdkiOSKablEuyk58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYt NTUxMzFjYzFlZmVhLzEvM2lIV3FEZjlzLWM4Z3kxQ1hYaElZLUZGbENFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYtNTUxMzFjYzFlZmVh LzEvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgCMQPAw DQYJKoZIhvcNAQELBQADggEBABOzCkkmShPxTbx5Fir3P1fANH83T9eKzyj03aA2 5b1fWk0ClHBFo6WPK9dgehrerSeiqryTmyPbIZBRDcuTc6qCVg52acHICvyGA/i8 0lvvxWYNHX+r4asFUveHH5q1zTca28Rjo35zIEl+IWm2SjcLMHxzxeYYBvHizs3g 5Vdgn9FeyEWj13d8lNRAJzWUgxUPgojRNgyrxBJD7O5JyyE76p158floaXsCRkUl VB58AlMrZV1ESCGv0K+MOGKnimOtp+QN84kxutXH01CVCWZnMSoq0pZU8Bf5wdIU UcY2xrvPpGt8cBxPSBclSOH879GzX5t5VKRBsQBZBD2VUpo= -----END CERTIFICATE-----Generated at Sat Dec 27 12:30:01 2025 by rpki-client