This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/yY5a4Kwl-q6HmB-bhU4mHmKG0vg.roa File: yY5a4Kwl-q6HmB-bhU4mHmKG0vg.roa (raw, json) Hash identifier: 78dCRD0cD/ht/4V5omzfXbnsmTP7D9YUbQrnWMLKpy4= Subject key identifier: C9:8E:5A:E0:AC:25:FA:AE:87:98:1F:9B:85:4E:26:1E:62:86:D2:F8 Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Certificate serial: 019B33DB5FC4CC4B437551A1DA06D8048EF3 Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/yY5a4Kwl-q6HmB-bhU4mHmKG0vg.roa Signing time: Thu 18 Dec 2025 23:46:13 +0000 ROA not before: Thu 18 Dec 2025 23:46:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214088 IP address blocks: 2001:30c1::/48 maxlen: 48 2001:30c1:1::/48 maxlen: 48 2001:30c1:2::/48 maxlen: 48 2001:30c1:3::/48 maxlen: 48 2001:30c1:4::/48 maxlen: 48 2001:30c1:5::/48 maxlen: 48 2001:30c1:6::/48 maxlen: 48 2001:30c1:7::/48 maxlen: 48 2001:30c1:8::/48 maxlen: 48 2001:30c1:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:db:5f:c4:cc:4b:43:75:51:a1:da:06:d8:04:8e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Validity Not Before: Dec 18 23:46:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c98e5ae0ac25faae87981f9b854e261e6286d2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e1:63:7f:c5:96:2a:90:5b:ad:dc:52:9a:c5: 46:53:3a:b8:53:2b:a6:79:a0:a2:88:bc:20:e5:3d: a2:97:ac:eb:5a:4d:0c:6c:bd:84:6b:86:fa:eb:af: f3:43:bc:2f:36:b1:ea:ab:84:7d:70:db:b2:39:0d: 9f:4a:53:dc:a7:c6:58:49:53:1e:25:b7:7d:db:7e: bf:c2:cf:8d:05:54:fe:05:52:29:af:f6:6e:22:99: c6:86:39:24:e6:57:f1:9d:9a:92:b6:39:f1:52:5a: 3f:d5:b3:a2:71:81:c6:3a:b5:67:ef:a4:1e:a0:1e: fa:9f:7a:0b:0a:81:e6:26:e0:d7:36:cb:a3:c7:b4: 59:e5:60:d6:ce:1d:7b:cd:d6:ee:8d:8d:5a:c6:62: d6:2f:47:c4:fc:e5:a7:65:23:b7:12:f7:fc:69:2a: 50:2d:28:56:02:ed:ef:f7:05:b1:6c:0f:4b:85:87: aa:70:9f:8e:c8:92:f0:c6:94:d5:b2:a4:68:62:06: 01:a9:16:d6:ef:ad:c1:b7:f8:8a:90:fc:fe:cd:44: 42:dc:96:02:85:47:5d:ae:c3:29:71:0e:db:7e:d0: 1b:ad:b5:6a:ba:f4:70:4e:7d:77:95:56:5f:13:74: c8:43:08:e8:e0:90:74:eb:f3:15:14:11:e9:a7:15: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8E:5A:E0:AC:25:FA:AE:87:98:1F:9B:85:4E:26:1E:62:86:D2:F8 X509v3 Authority Key Identifier: keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/yY5a4Kwl-q6HmB-bhU4mHmKG0vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:30c1::-2001:30c1:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 84:26:91:eb:56:0e:5c:06:32:21:b2:49:49:67:d7:b8:fd:fb: 3a:5f:54:1b:3f:a3:82:7c:03:29:02:e6:57:3b:ad:75:9f:49: 9c:3c:96:ad:c5:80:7a:0f:da:79:b5:ac:a4:d8:ee:28:7f:e0: 8a:b1:ca:1a:99:a9:8b:d2:58:c3:94:54:04:d0:4d:60:3b:fd: 79:bf:c0:23:f2:a3:a1:e5:96:c7:c8:ac:b8:bb:13:5e:da:a3: ca:31:ee:93:d6:2c:57:70:61:18:b6:2f:48:48:61:28:ea:c8: e4:e1:5e:30:5b:4a:dc:b5:d5:ea:77:cc:24:bc:16:1b:b9:a3: 69:9e:6d:6e:7e:74:2c:1f:16:ee:d0:aa:fb:d0:82:57:4a:ee: 97:57:21:b7:ee:40:94:e1:1e:a1:95:95:5e:a8:c3:18:57:01: f3:55:5b:64:17:a6:80:16:e1:85:15:9d:54:bf:31:02:68:6e: a9:66:88:fb:9a:64:ea:d6:6b:7f:fc:fe:f9:eb:0c:0a:a8:28: e4:79:73:84:46:1e:25:1d:f0:5d:46:8c:29:3a:91:ea:58:fe: 81:1c:b7:0b:b3:a5:4d:7c:5b:8f:a8:cc:99:72:b6:16:49:1f: c3:54:f9:77:2b:27:9b:56:fe:68:11:23:27:0f:06:46:57:a1: c3:fd:3a:c9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsz21/EzEtDdVGh2gbYBI7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYWY0OGIwMmI5N2RjMmQzMTIyNTBhYTIzNDA4M2I4YzFi YjllODEwHhcNMjUxMjE4MjM0NjEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOThlNWFlMGFjMjVmYWFlODc5ODFmOWI4NTRlMjYxZTYyODZkMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OFjf8WWKpBbrdxSmsVGUzq4Uyum eaCiiLwg5T2il6zrWk0MbL2Ea4b666/zQ7wvNrHqq4R9cNuyOQ2fSlPcp8ZYSVMe Jbd9236/ws+NBVT+BVIpr/ZuIpnGhjkk5lfxnZqStjnxUlo/1bOicYHGOrVn76Qe oB76n3oLCoHmJuDXNsujx7RZ5WDWzh17zdbujY1axmLWL0fE/OWnZSO3Evf8aSpQ LShWAu3v9wWxbA9LhYeqcJ+OyJLwxpTVsqRoYgYBqRbW763Bt/iKkPz+zURC3JYC hUddrsMpcQ7bftAbrbVquvRwTn13lVZfE3TIQwjo4JB06/MVFBHppxXBcQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMmOWuCsJfquh5gfm4VOJh5ihtL4MB8GA1UdIwQY MBaAFG+vSLArl9wtMSJQqiNAg7jBu56BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODct YjM0ZDY0OWNmYjdiLzEveVk1YTRLd2wtcTZIbUItYmhVNG1IbUtHMHZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODctYjM0ZDY0OWNmYjdi LzEvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBQAgATDB AwcBIAEwwQAIMA0GCSqGSIb3DQEBCwUAA4IBAQCEJpHrVg5cBjIhsklJZ9e4/fs6 X1QbP6OCfAMpAuZXO611n0mcPJatxYB6D9p5tayk2O4of+CKscoamamL0ljDlFQE 0E1gO/15v8Aj8qOh5ZbHyKy4uxNe2qPKMe6T1ixXcGEYti9ISGEo6sjk4V4wW0rc tdXqd8wkvBYbuaNpnm1ufnQsHxbu0Kr70IJXSu6XVyG37kCU4R6hlZVeqMMYVwHz VVtkF6aAFuGFFZ1UvzECaG6pZoj7mmTq1mt//P756wwKqCjkeXOERh4lHfBdRowp OpHqWP6BHLcLs6VNfFuPqMyZcrYWSR/DVPl3KyebVv5oESMnDwZGV6HD/TrJ -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:58 2025 by rpki-client