This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/w6qd6pimXzyzbq_lL6bL0qIFcDY.roa File: w6qd6pimXzyzbq_lL6bL0qIFcDY.roa (raw, json) Hash identifier: GP3E0Fs4zdkA4yRQSv2WM00GvN6yRlAiiaArkHkviSI= Subject key identifier: C3:AA:9D:EA:98:A6:5F:3C:B3:6E:AF:E5:2F:A6:CB:D2:A2:05:70:36 Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Certificate serial: 019AA6BD9C4F75E0862A2E1A8B6DA1BC9CFA Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/w6qd6pimXzyzbq_lL6bL0qIFcDY.roa Signing time: Fri 21 Nov 2025 14:07:15 +0000 ROA not before: Fri 21 Nov 2025 14:07:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396982 IP address blocks: 2a10:200:a123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:bd:9c:4f:75:e0:86:2a:2e:1a:8b:6d:a1:bc:9c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Validity Not Before: Nov 21 14:07:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c3aa9dea98a65f3cb36eafe52fa6cbd2a2057036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:83:21:c4:1b:47:87:21:55:b4:16:9a:0f: 1b:9f:9a:76:16:57:28:6c:94:40:12:49:0b:2d:e7: 9c:bb:be:45:ba:01:d5:3a:fa:1e:c0:2e:d0:74:11: db:62:f1:cd:c9:da:0e:4d:0f:87:80:d8:e2:e8:92: 07:56:62:f5:ee:cd:0a:e3:f8:0f:02:25:a8:9c:ca: 08:b7:c6:59:b1:07:66:fc:dd:71:e4:3c:96:e9:2c: a1:dc:69:ef:ea:b9:f4:00:71:cc:50:d2:ea:3a:54: 14:d5:ed:75:35:97:2e:e2:31:d7:06:fb:b0:ac:f7: c6:f3:70:1b:b8:51:49:e7:14:62:79:f4:be:95:92: 16:1d:d9:7c:9f:30:02:3b:9f:c9:30:f2:49:a6:ad: 04:21:29:62:1b:1d:52:23:a2:b4:d6:cb:ad:35:9a: b2:09:b0:97:1a:f0:bf:86:0c:71:c0:bc:6b:ea:63: 9a:2d:b4:ec:2e:89:05:a3:9c:2a:4b:b9:38:12:64: 63:92:64:1e:98:90:3c:a7:59:0a:34:8e:69:87:f2: 16:dc:17:78:a3:c3:af:e6:fc:cc:bd:23:8d:8e:04: 0a:a1:cf:da:ea:27:a0:5e:f6:1d:0f:6e:9a:43:83: ed:ab:cc:5b:e1:48:d1:2c:92:67:37:f7:09:d8:60: 7e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AA:9D:EA:98:A6:5F:3C:B3:6E:AF:E5:2F:A6:CB:D2:A2:05:70:36 X509v3 Authority Key Identifier: keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/w6qd6pimXzyzbq_lL6bL0qIFcDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:200:a123::/48 Signature Algorithm: sha256WithRSAEncryption 72:ac:ec:f4:fe:dd:6f:db:ce:5d:a0:ce:5e:22:39:2c:98:eb: 57:6e:c1:98:17:f3:8b:15:1c:0a:c9:61:65:b5:19:84:d4:12: 34:84:51:1b:2e:5c:b2:fc:cf:e3:a3:dc:fb:bd:f4:e1:7a:7b: ef:9c:6b:e7:9f:18:55:41:d4:d0:9e:56:01:d3:45:4a:57:bd: d3:74:7e:cb:ef:6f:95:95:36:f9:a8:86:ab:2c:ce:57:f1:59: b5:33:4c:4c:e4:da:e9:e2:1a:9b:f9:2e:b9:a4:6c:e2:f5:fd: 45:bf:3c:7e:f2:a3:75:64:3a:4e:5f:67:81:a9:af:db:26:d0: 9d:bb:a8:9f:eb:b7:a2:22:07:84:9b:1f:70:31:8e:6b:a9:96: e1:c2:72:9d:b2:7a:f1:0d:e8:2a:e2:6e:9c:b9:b0:a2:7d:74: 98:0f:e5:ce:70:26:eb:b1:82:6e:68:ec:bb:ad:89:b3:47:ea: 38:eb:1e:7f:dd:62:13:91:01:7e:c1:c6:6c:4e:1b:fd:97:f8: f6:65:49:85:27:05:d1:c5:1a:dc:ce:cd:fc:33:e6:be:f5:17: d7:db:11:10:d5:f0:00:7d:bb:b1:49:df:a3:af:ca:b4:0c:c6: c6:54:98:7b:d9:b4:bc:2a:34:1b:09:e3:93:36:99:78:02:e6: 98:51:c2:4b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqmvZxPdeCGKi4ai22hvJz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGJjNzE1NmE0ZWU3YzY3ZDllNjg0NzY3YTJmNGJhZjhh MzViYWIwHhcNMjUxMTIxMTQwNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2FhOWRlYTk4YTY1ZjNjYjM2ZWFmZTUyZmE2Y2JkMmEyMDU3MDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk+DIcQbR4chVbQWmg8bn5p2Flco bJRAEkkLLeecu75FugHVOvoewC7QdBHbYvHNydoOTQ+HgNji6JIHVmL17s0K4/gP AiWonMoIt8ZZsQdm/N1x5DyW6Syh3Gnv6rn0AHHMUNLqOlQU1e11NZcu4jHXBvuw rPfG83AbuFFJ5xRiefS+lZIWHdl8nzACO5/JMPJJpq0EISliGx1SI6K01sutNZqy CbCXGvC/hgxxwLxr6mOaLbTsLokFo5wqS7k4EmRjkmQemJA8p1kKNI5ph/IW3Bd4 o8Ov5vzMvSONjgQKoc/a6iegXvYdD26aQ4Ptq8xb4UjRLJJnN/cJ2GB+pwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMOqneqYpl88s26v5S+my9KiBXA2MB8GA1UdIwQY MBaAFInbxxVqTufGfZ5oR2ei9Lr4o1urMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2It NDk1MDFhNzY5NGM0LzEvdzZxZDZwaW1Yenl6YnFfbEw2YkwwcUlGY0RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2ItNDk1MDFhNzY5NGM0 LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhACAKEj MA0GCSqGSIb3DQEBCwUAA4IBAQByrOz0/t1v285doM5eIjksmOtXbsGYF/OLFRwK yWFltRmE1BI0hFEbLlyy/M/jo9z7vfThenvvnGvnnxhVQdTQnlYB00VKV73TdH7L 72+VlTb5qIarLM5X8Vm1M0xM5Nrp4hqb+S65pGzi9f1Fvzx+8qN1ZDpOX2eBqa/b JtCdu6if67eiIgeEmx9wMY5rqZbhwnKdsnrxDegq4m6cubCifXSYD+XOcCbrsYJu aOy7rYmzR+o46x5/3WITkQF+wcZsThv9l/j2ZUmFJwXRxRrczs38M+a+9RfX2xEQ 1fAAfbuxSd+jr8q0DMbGVJh72bS8KjQbCeOTNpl4AuaYUcJL -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:43 2025 by rpki-client