This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/g3jf7ggJXN7XtmTJsQz8IO5sKAo.roa File: g3jf7ggJXN7XtmTJsQz8IO5sKAo.roa (raw, json) Hash identifier: re8fKnMp9hgUSfUes8lmDJWAJcIhP4hoE//Y7wSmZMc= Subject key identifier: 83:78:DF:EE:08:09:5C:DE:D7:B6:64:C9:B1:0C:FC:20:EE:6C:28:0A Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Certificate serial: 019B33E3DBDB4792E267793553FDD1FFA33F Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/g3jf7ggJXN7XtmTJsQz8IO5sKAo.roa Signing time: Thu 18 Dec 2025 23:55:29 +0000 ROA not before: Thu 18 Dec 2025 23:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42337 IP address blocks: 2001:30c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e3:db:db:47:92:e2:67:79:35:53:fd:d1:ff:a3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Validity Not Before: Dec 18 23:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8378dfee08095cded7b664c9b10cfc20ee6c280a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:85:c7:02:8c:50:95:7b:0c:86:10:ed:1a: f0:fc:f3:8d:24:8d:49:d3:45:c7:db:29:63:b5:38: ed:08:56:f4:e0:b0:a7:ff:31:01:59:8a:58:a7:77: 95:45:84:58:93:52:80:6b:c2:74:80:25:a8:ec:03: 39:6e:23:77:30:85:e7:41:45:0d:c0:84:b4:19:a6: b0:e6:35:a9:eb:b3:c6:47:c2:2b:47:04:bd:67:dc: be:97:37:2d:52:c5:42:cb:07:02:6c:46:12:ec:81: 15:5e:2a:00:56:e1:a2:55:ac:63:8f:a9:09:a1:e3: ce:c9:0e:c4:72:cf:d9:86:d3:09:35:10:b4:a4:42: e1:bb:ad:7e:c6:93:92:73:50:b4:16:c5:7f:0a:10: 76:c6:7b:4d:60:67:4c:57:43:e8:4f:c5:64:47:61: 6f:26:ae:fb:6d:64:0c:2d:43:da:46:a8:3f:5a:be: e6:f9:1d:48:58:f2:25:52:99:7b:20:c7:01:a6:2a: 0a:d7:fc:7f:5c:e7:60:89:61:61:0c:c7:24:92:dd: 36:f4:1a:06:14:17:28:df:f9:b9:7c:27:5b:07:8a: f6:49:5e:7a:a3:84:09:b5:e3:5c:8a:65:a4:d0:d4: 69:58:04:9a:d8:df:91:b9:81:a5:d1:ae:70:27:08: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:78:DF:EE:08:09:5C:DE:D7:B6:64:C9:B1:0C:FC:20:EE:6C:28:0A X509v3 Authority Key Identifier: keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/g3jf7ggJXN7XtmTJsQz8IO5sKAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:30c0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 7e:fe:12:40:2e:5e:95:57:6d:7a:37:4d:82:bb:21:24:82:60: 37:94:35:f6:ea:24:20:75:b6:99:ef:da:15:44:86:ae:a3:0a: bf:c4:46:05:35:1f:75:c1:a9:9b:d1:53:30:d6:ac:e1:fa:68: 93:5f:a0:3e:6b:5b:fc:e5:26:d1:86:78:f9:32:89:0e:7d:76: 09:78:bf:5c:84:cb:3b:b9:13:46:fd:9b:16:f7:a5:76:39:50: 2e:9b:8a:7e:bb:96:f9:98:76:2f:d5:ee:8c:62:74:81:f0:4f: 12:24:6c:42:5c:ef:30:9f:45:a9:f6:1d:d5:30:83:68:5c:db: 7e:47:86:a9:de:1b:32:55:f6:c0:42:73:af:de:88:18:7b:52: e6:f4:50:16:58:cf:02:ae:b6:0c:d1:8a:17:9d:04:69:d5:25: 46:aa:51:f5:e7:2b:08:a9:22:77:51:e1:27:aa:6a:0f:75:47: 4f:fc:8b:f0:c4:61:11:33:22:26:81:d1:4e:02:10:86:5b:2e: 3e:05:9f:d6:18:5d:33:d3:ea:89:78:44:ab:cb:99:1c:d7:de: be:8f:36:79:5f:31:6c:f7:bb:62:39:fc:59:b6:50:ed:2d:29: aa:db:2d:81:77:30:e9:f3:26:57:66:96:1a:4a:24:33:01:40: ca:01:bc:a2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsz49vbR5LiZ3k1U/3R/6M/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYWY0OGIwMmI5N2RjMmQzMTIyNTBhYTIzNDA4M2I4YzFi YjllODEwHhcNMjUxMjE4MjM1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzc4ZGZlZTA4MDk1Y2RlZDdiNjY0YzliMTBjZmMyMGVlNmMyODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnOFxwKMUJV7DIYQ7Rrw/PONJI1J 00XH2yljtTjtCFb04LCn/zEBWYpYp3eVRYRYk1KAa8J0gCWo7AM5biN3MIXnQUUN wIS0Gaaw5jWp67PGR8IrRwS9Z9y+lzctUsVCywcCbEYS7IEVXioAVuGiVaxjj6kJ oePOyQ7Ecs/ZhtMJNRC0pELhu61+xpOSc1C0FsV/ChB2xntNYGdMV0PoT8VkR2Fv Jq77bWQMLUPaRqg/Wr7m+R1IWPIlUpl7IMcBpioK1/x/XOdgiWFhDMckkt029BoG FBco3/m5fCdbB4r2SV56o4QJteNcimWk0NRpWASa2N+RuYGl0a5wJwiJOwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIN43+4ICVze17ZkybEM/CDubCgKMB8GA1UdIwQY MBaAFG+vSLArl9wtMSJQqiNAg7jBu56BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODct YjM0ZDY0OWNmYjdiLzEvZzNqZjdnZ0pYTjdYdG1USnNRejhJTzVzS0FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODctYjM0ZDY0OWNmYjdi LzEvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEwwP// MA0GCSqGSIb3DQEBCwUAA4IBAQB+/hJALl6VV216N02CuyEkgmA3lDX26iQgdbaZ 79oVRIauowq/xEYFNR91wamb0VMw1qzh+miTX6A+a1v85SbRhnj5MokOfXYJeL9c hMs7uRNG/ZsW96V2OVAum4p+u5b5mHYv1e6MYnSB8E8SJGxCXO8wn0Wp9h3VMINo XNt+R4ap3hsyVfbAQnOv3ogYe1Lm9FAWWM8CrrYM0YoXnQRp1SVGqlH15ysIqSJ3 UeEnqmoPdUdP/IvwxGERMyImgdFOAhCGWy4+BZ/WGF0z0+qJeESry5kc196+jzZ5 XzFs97tiOfxZtlDtLSmq2y2BdzDp8yZXZpYaSiQzAUDKAbyi -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:44 2025 by rpki-client