This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J3j-z3qukBlWWGuTc_KVNw9CIiQ.roa File: J3j-z3qukBlWWGuTc_KVNw9CIiQ.roa (raw, json) Hash identifier: 4uz/+QMKSNfx1Yol4GPZ5KLCZb6hUTKLui+4euFUfsk= Subject key identifier: 27:78:FE:CF:7A:AE:90:19:56:58:6B:93:73:F2:95:37:0F:42:22:24 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B0CF919574A2983CECA5E2AB0FB56E98F Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J3j-z3qukBlWWGuTc_KVNw9CIiQ.roa Signing time: Thu 11 Dec 2025 10:33:30 +0000 ROA not before: Thu 11 Dec 2025 10:33:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41095 IP address blocks: 2a06:1180:10::/48 maxlen: 48 2a06:1184:55::/48 maxlen: 48 2a06:35c4:100::/48 maxlen: 48 2a06:dfc0::/29 maxlen: 32 2a07:bb40::/29 maxlen: 32 2a09:17c0:b19a::/48 maxlen: 48 2a09:17c1:11d::/48 maxlen: 48 2a0a:2d00:10::/48 maxlen: 48 2a0a:2d00:20::/48 maxlen: 48 2a0a:2d07:fc4c::/48 maxlen: 48 2a0c:7881:100::/48 maxlen: 48 2a0c:7882:11::/48 maxlen: 48 2a0d:e5c0::/29 maxlen: 32 2a0e:15c0:6::/48 maxlen: 48 2a0e:15c7:2d::/48 maxlen: 48 2a0e:1a83:1::/48 maxlen: 48 2a0e:f600:2::/48 maxlen: 48 2a0e:f600:14::/48 maxlen: 48 2a0e:f603:1312::/48 maxlen: 48 2a0f:1200:11::/48 maxlen: 48 2a0f:1200:100::/48 maxlen: 48 2a0f:1581:10::/48 maxlen: 48 2a0f:1f80::/29 maxlen: 32 2a0f:2d82:100::/48 maxlen: 48 2a0f:31c3:100::/48 maxlen: 48 2a0f:3d80:2::/48 maxlen: 48 2a0f:7d00:10::/48 maxlen: 48 2a0f:7d06:101::/48 maxlen: 48 2a0f:dd40::/29 maxlen: 32 2a0f:df46:100::/48 maxlen: 48 2a0f:e1c0:acab::/48 maxlen: 48 2a0f:e202:fc06::/48 maxlen: 48 2a0f:e6c2:100::/48 maxlen: 48 2a0f:e7c4:22::/48 maxlen: 48 2a0f:e7c7:95::/48 maxlen: 48 2a0f:e842:100::/48 maxlen: 48 2a0f:e844:8642::/48 maxlen: 48 2a0f:e940::/29 maxlen: 32 2a0f:ea00::/29 maxlen: 32 2a0f:ea43:10::/48 maxlen: 48 2a10:30c0::/29 maxlen: 32 2a10:6400::/29 maxlen: 32 2a10:67c2:1::/48 maxlen: 48 2a12:ac43:acab::/48 maxlen: 48 2a12:ecc4:2213::/48 maxlen: 48 2a13:18c6:99::/48 maxlen: 48 2a13:7400::/29 maxlen: 32 2a13:8c86:140::/48 maxlen: 48 2a13:9282:100::/48 maxlen: 48 2a13:9d00::/29 maxlen: 32 2a13:9f00::/29 maxlen: 32 2a13:c500::/29 maxlen: 32 2a13:c900:44::/48 maxlen: 48 2a13:c900:55::/48 maxlen: 48 2a13:e102:10::/48 maxlen: 48 2a13:fd00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:f9:19:57:4a:29:83:ce:ca:5e:2a:b0:fb:56:e9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 11 10:33:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2778fecf7aae901956586b9373f295370f422224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:ab:0a:71:a6:ce:5d:76:8f:83:a0:e3:67: 94:f5:26:d2:c0:76:f6:24:1b:65:85:53:13:7d:b6: f3:49:9f:dc:8a:5b:16:b4:a1:a0:67:af:d5:d7:40: 8c:c2:39:75:45:fe:bb:e3:bc:f1:52:45:18:39:9c: 77:e3:f2:e1:b5:31:d7:1c:de:4b:1d:ed:0f:d8:c1: a6:be:63:b0:61:88:05:9b:88:d2:32:89:d6:2f:30: 9b:9b:37:20:fb:5e:a4:93:ce:8d:7d:4c:e1:fe:0e: 91:cc:92:1b:15:df:47:e1:a0:af:c5:4d:b8:20:c0: 8c:22:06:28:82:8e:46:cf:6c:48:90:d7:10:30:4c: ea:41:9b:ef:34:7b:34:01:38:04:44:99:72:a6:28: c1:04:7e:8d:6c:f5:fc:f0:b4:ea:08:3a:4e:8c:80: cd:9f:4f:97:dc:e1:b2:ae:cf:24:fa:71:45:9d:3f: 56:46:a8:c0:46:34:ab:ed:77:fb:1c:b0:8a:1e:d3: b1:9c:57:84:8f:69:e0:94:de:9a:e6:b7:3b:58:bd: 5d:53:dd:37:93:d1:12:13:e6:a7:00:2c:d4:31:8a: 7e:83:8c:10:47:d5:23:ab:00:7a:c9:f2:ef:c1:24: 0c:57:83:76:f0:d0:58:c2:af:93:04:89:7a:c8:94: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:78:FE:CF:7A:AE:90:19:56:58:6B:93:73:F2:95:37:0F:42:22:24 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J3j-z3qukBlWWGuTc_KVNw9CIiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1180:10::/48 2a06:1184:55::/48 2a06:35c4:100::/48 2a06:dfc0::/29 2a07:bb40::/29 2a09:17c0:b19a::/48 2a09:17c1:11d::/48 2a0a:2d00:10::/48 2a0a:2d00:20::/48 2a0a:2d07:fc4c::/48 2a0c:7881:100::/48 2a0c:7882:11::/48 2a0d:e5c0::/29 2a0e:15c0:6::/48 2a0e:15c7:2d::/48 2a0e:1a83:1::/48 2a0e:f600:2::/48 2a0e:f600:14::/48 2a0e:f603:1312::/48 2a0f:1200:11::/48 2a0f:1200:100::/48 2a0f:1581:10::/48 2a0f:1f80::/29 2a0f:2d82:100::/48 2a0f:31c3:100::/48 2a0f:3d80:2::/48 2a0f:7d00:10::/48 2a0f:7d06:101::/48 2a0f:dd40::/29 2a0f:df46:100::/48 2a0f:e1c0:acab::/48 2a0f:e202:fc06::/48 2a0f:e6c2:100::/48 2a0f:e7c4:22::/48 2a0f:e7c7:95::/48 2a0f:e842:100::/48 2a0f:e844:8642::/48 2a0f:e940::/29 2a0f:ea00::/29 2a0f:ea43:10::/48 2a10:30c0::/29 2a10:6400::/29 2a10:67c2:1::/48 2a12:ac43:acab::/48 2a12:ecc4:2213::/48 2a13:18c6:99::/48 2a13:7400::/29 2a13:8c86:140::/48 2a13:9282:100::/48 2a13:9d00::/29 2a13:9f00::/29 2a13:c500::/29 2a13:c900:44::/48 2a13:c900:55::/48 2a13:e102:10::/48 2a13:fd00::/29 Signature Algorithm: sha256WithRSAEncryption 37:41:b8:4c:bd:c0:bc:6e:08:d4:28:56:5f:26:b5:a8:e0:35: 80:92:b0:ba:e9:06:58:da:99:1d:b8:65:f0:41:41:dc:65:07: 92:77:58:a1:a2:c0:d9:bb:ab:ac:f6:f4:30:40:6b:20:94:7e: 2e:e9:ad:61:8a:8b:6f:a1:2e:db:75:72:42:d4:1a:b3:c8:48: 20:6f:f4:a1:e9:a6:2b:de:7f:61:a1:8a:95:eb:21:f8:f6:2a: 2f:94:8a:cc:f2:af:51:b7:99:2f:12:1b:4b:92:a4:9f:32:7f: 57:be:c6:36:93:97:18:ed:a1:c0:74:ea:70:4c:45:0a:ad:75: 44:56:2d:58:43:f7:25:35:a2:42:a6:b2:83:f6:f1:af:85:01: a3:c4:26:08:1b:98:f0:92:65:40:1a:97:d9:90:13:68:62:a6: 47:c9:11:f6:07:f9:a0:f3:99:80:a4:de:a0:98:0d:d3:41:ac: 77:ef:1e:22:30:ee:cf:fe:0f:7a:23:9e:0b:e8:fa:d2:c4:03: ee:64:3b:1e:e9:65:a2:1c:87:aa:a3:9a:33:7f:c3:8c:d2:ac: 85:09:2c:43:ab:73:9f:b1:9e:26:bf:f9:09:2f:91:d1:0e:91: b3:92:d5:fe:5c:a8:30:5f:cb:ac:a0:55:85:78:35:fb:32:d8: ae:ae:0b:0e -----BEGIN CERTIFICATE----- MIIG3TCCBcWgAwIBAgISAZsM+RlXSimDzspeKrD7VumPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjExMTAzMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzc4ZmVjZjdhYWU5MDE5NTY1ODZiOTM3M2YyOTUzNzBmNDIyMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0SrCnGmzl12j4Og42eU9SbSwHb2 JBtlhVMTfbbzSZ/cilsWtKGgZ6/V10CMwjl1Rf6747zxUkUYOZx34/LhtTHXHN5L He0P2MGmvmOwYYgFm4jSMonWLzCbmzcg+16kk86NfUzh/g6RzJIbFd9H4aCvxU24 IMCMIgYogo5Gz2xIkNcQMEzqQZvvNHs0ATgERJlypijBBH6NbPX88LTqCDpOjIDN n0+X3OGyrs8k+nFFnT9WRqjARjSr7Xf7HLCKHtOxnFeEj2nglN6a5rc7WL1dU903 k9ESE+anACzUMYp+g4wQR9UjqwB6yfLvwSQMV4N28NBYwq+TBIl6yJRPdQIDAQAB o4ID6TCCA+UwHQYDVR0OBBYEFCd4/s96rpAZVlhrk3PylTcPQiIkMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvSjNqLXozcXVrQmxXV0d1VGNfS1ZOdzlDSWlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB/QYIKwYBBQUHAQcBAf8EggHsMIIB6DCCAeQEAgACMIIB 3AMHACoGEYAAEAMHACoGEYQAVQMHACoGNcQBAAMFAyoG38ADBQMqB7tAAwcAKgkX wLGaAwcAKgkXwQEdAwcAKgotAAAQAwcAKgotAAAgAwcAKgotB/xMAwcAKgx4gQEA AwcAKgx4ggARAwUDKg3lwAMHACoOFcAABgMHACoOFccALQMHACoOGoMAAQMHACoO 9gAAAgMHACoO9gAAFAMHACoO9gMTEgMHACoPEgAAEQMHACoPEgABAAMHACoPFYEA EAMFAyoPH4ADBwAqDy2CAQADBwAqDzHDAQADBwAqDz2AAAIDBwAqD30AABADBwAq D30GAQEDBQMqD91AAwcAKg/fRgEAAwcAKg/hwKyrAwcAKg/iAvwGAwcAKg/mwgEA AwcAKg/nxAAiAwcAKg/nxwCVAwcAKg/oQgEAAwcAKg/oRIZCAwUDKg/pQAMFAyoP 6gADBwAqD+pDABADBQMqEDDAAwUDKhBkAAMHACoQZ8IAAQMHACoSrEOsqwMHACoS 7MQiEwMHACoTGMYAmQMFAyoTdAADBwAqE4yGAUADBwAqE5KCAQADBQMqE50AAwUD KhOfAAMFAyoTxQADBwAqE8kAAEQDBwAqE8kAAFUDBwAqE+ECABADBQMqE/0AMA0G CSqGSIb3DQEBCwUAA4IBAQA3QbhMvcC8bgjUKFZfJrWo4DWAkrC66QZY2pkduGXw QUHcZQeSd1ihosDZu6us9vQwQGsglH4u6a1hiotvoS7bdXJC1BqzyEggb/Sh6aYr 3n9hoYqV6yH49iovlIrM8q9Rt5kvEhtLkqSfMn9XvsY2k5cY7aHAdOpwTEUKrXVE Vi1YQ/clNaJCprKD9vGvhQGjxCYIG5jwkmVAGpfZkBNoYqZHyRH2B/mg85mApN6g mA3TQax37x4iMO7P/g96I54L6PrSxAPuZDse6WWiHIeqo5ozf8OM0qyFCSxDq3Of sZ4mv/kJL5HRDpGzktX+XKgwX8usoFWFeDX7MtiurgsO -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:26 2025 by rpki-client