This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/BAAd36CZVgOWDynFqgKAq8WKhxg.roa File: BAAd36CZVgOWDynFqgKAq8WKhxg.roa (raw, json) Hash identifier: bRwPeTE4w2ZwHydHN68q7ab+Z9QFWhGMElAgggCio08= Subject key identifier: 04:00:1D:DF:A0:99:56:03:96:0F:29:C5:AA:02:80:AB:C5:8A:87:18 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B31A315F890406B734FA0AB01DAC039A7 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/BAAd36CZVgOWDynFqgKAq8WKhxg.roa Signing time: Thu 18 Dec 2025 13:25:30 +0000 ROA not before: Thu 18 Dec 2025 13:25:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13127 IP address blocks: 2a04:9a00:1118::/48 maxlen: 48 2a07:3501:1080::/48 maxlen: 48 2a07:3501:1081::/48 maxlen: 48 2a07:3502:1190::/48 maxlen: 48 2a07:3502:1192::/48 maxlen: 48 2a07:3502:1193::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:a3:15:f8:90:40:6b:73:4f:a0:ab:01:da:c0:39:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Dec 18 13:25:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=04001ddfa0995603960f29c5aa0280abc58a8718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:e3:17:e5:2a:e6:5c:9d:19:9a:c5:91:15: d2:39:10:5c:f6:77:48:8d:3d:db:65:7d:7c:2a:e2: 23:03:f0:24:7f:5d:a1:4f:1c:cb:7b:56:e9:9f:a9: 0b:a0:35:eb:96:5d:a2:a7:c6:1a:e5:4a:20:e3:c1: 18:7d:c5:07:93:89:58:05:b3:87:ac:72:b0:8f:37: 75:4b:fd:bf:e1:72:d3:ab:38:1e:e5:8d:a4:06:f5: 1b:0f:9e:e9:0d:01:e5:52:54:62:a6:5b:f7:6f:58: 64:31:18:54:c2:08:79:55:b8:56:cd:c1:b9:3e:86: 97:2e:de:5c:ac:30:3d:73:06:9a:d4:65:b7:bb:8f: 69:f2:f9:08:90:3a:c6:3f:38:2d:59:e3:cc:18:61: 8e:e3:65:57:67:6c:ed:cf:64:b1:e4:ed:9c:d9:93: 76:18:85:11:f5:e5:c9:8e:da:d2:e4:37:9e:8e:f9: 2c:25:27:7d:5a:99:f6:1f:90:1c:f5:36:f5:7f:86: 16:e4:5a:3c:3f:ba:da:fb:f9:b3:79:6e:21:cc:dd: 0d:cc:c3:72:c8:9a:c5:f0:ac:37:78:3d:cf:ab:5e: 95:f1:b5:b5:39:20:a1:4c:08:3c:54:61:2c:25:a2: fc:21:a1:80:49:7f:24:c0:7a:71:70:36:33:00:45: ef:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:00:1D:DF:A0:99:56:03:96:0F:29:C5:AA:02:80:AB:C5:8A:87:18 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/BAAd36CZVgOWDynFqgKAq8WKhxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9a00:1118::/48 2a07:3501:1080::/47 2a07:3502:1190::/48 2a07:3502:1192::/47 Signature Algorithm: sha256WithRSAEncryption c8:1a:db:16:93:97:24:0a:ed:5c:68:28:e7:06:21:6a:6e:12: 83:cf:87:30:2a:bc:aa:11:21:fd:d6:5b:3a:ca:0a:cc:d5:3c: 3a:b4:27:7f:75:0c:61:b7:5b:9f:19:54:3b:4a:62:66:f2:c9: 8f:90:33:35:c9:fc:7d:4f:cc:c2:f8:4e:e0:7f:be:71:9b:50: d0:23:8c:16:89:af:21:44:bd:ab:55:78:09:dd:d9:5f:4c:aa: 92:95:aa:41:9c:a6:17:b5:f0:39:ff:d4:54:3e:4b:61:6c:d2: 80:d9:a3:dd:03:33:f3:2a:59:4f:05:05:1a:cb:13:b3:a2:84: ff:5d:a5:fb:6c:01:c2:36:8c:53:9f:7a:3b:a7:2d:c2:ee:b5: 06:97:ff:50:d6:4b:ff:19:eb:e6:20:3d:63:d3:33:be:19:90: 30:29:c8:c9:b3:ae:3e:72:2e:d7:4d:47:47:8d:2a:10:38:a4: 05:27:8a:7d:60:0c:a5:31:76:85:46:d2:84:af:97:c8:af:f4: 4a:61:c7:b2:59:78:29:94:6d:5b:5f:88:ba:1f:28:04:db:d2: ae:f1:6e:2c:b3:6b:4a:3f:3b:a7:c6:d5:a7:a7:d9:fc:96:d1: 63:f7:39:a0:bf:1e:07:f6:0c:29:e4:f3:b6:44:38:61:1d:8e: 77:2b:59:ae -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsxoxX4kEBrc0+gqwHawDmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjUxMjE4MTMyNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDAwMWRkZmEwOTk1NjAzOTYwZjI5YzVhYTAyODBhYmM1OGE4NzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS7jF+Uq5lydGZrFkRXSORBc9ndI jT3bZX18KuIjA/Akf12hTxzLe1bpn6kLoDXrll2ip8Ya5Uog48EYfcUHk4lYBbOH rHKwjzd1S/2/4XLTqzge5Y2kBvUbD57pDQHlUlRiplv3b1hkMRhUwgh5VbhWzcG5 PoaXLt5crDA9cwaa1GW3u49p8vkIkDrGPzgtWePMGGGO42VXZ2ztz2Sx5O2c2ZN2 GIUR9eXJjtrS5DeejvksJSd9Wpn2H5Ac9Tb1f4YW5Fo8P7ra+/mzeW4hzN0NzMNy yJrF8Kw3eD3Pq16V8bW1OSChTAg8VGEsJaL8IaGASX8kwHpxcDYzAEXvxwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFAQAHd+gmVYDlg8pxaoCgKvFiocYMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvQkFBZDM2Q1pWZ09XRHluRnFnS0FxOFdLaHhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKgSaABEY AwcBKgc1ARCAAwcAKgc1AhGQAwcBKgc1AhGSMA0GCSqGSIb3DQEBCwUAA4IBAQDI GtsWk5ckCu1caCjnBiFqbhKDz4cwKryqESH91ls6ygrM1Tw6tCd/dQxht1ufGVQ7 SmJm8smPkDM1yfx9T8zC+E7gf75xm1DQI4wWia8hRL2rVXgJ3dlfTKqSlapBnKYX tfA5/9RUPkthbNKA2aPdAzPzKllPBQUayxOzooT/XaX7bAHCNoxTn3o7py3C7rUG l/9Q1kv/GevmID1j0zO+GZAwKcjJs64+ci7XTUdHjSoQOKQFJ4p9YAylMXaFRtKE r5fIr/RKYceyWXgplG1bX4i6HygE29Ku8W4ss2tKPzunxtWnp9n8ltFj9zmgvx4H 9gwp5PO2RDhhHY53K1mu -----END CERTIFICATE-----Generated at Sat Dec 20 01:10:33 2025 by rpki-client