This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/03eGanIB24DOZ7MKOXSZJGh-5cA.roa File: 03eGanIB24DOZ7MKOXSZJGh-5cA.roa (raw, json) Hash identifier: iyZvfLEmfTPTO9GO7+ZlUk9hdJrJwgF8x+Hodf8w1sU= Subject key identifier: D3:77:86:6A:72:01:DB:80:CE:67:B3:0A:39:74:99:24:68:7E:E5:C0 Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae Certificate serial: 019AE8782B9FBE4FBC6E21AB56FDBF0B35BD Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/03eGanIB24DOZ7MKOXSZJGh-5cA.roa Signing time: Thu 04 Dec 2025 08:26:20 +0000 ROA not before: Thu 04 Dec 2025 08:26:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42375 IP address blocks: 2a09:1180::/32 maxlen: 32 2a09:1181::/32 maxlen: 32 2a09:1182::/32 maxlen: 32 2a09:1183::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:78:2b:9f:be:4f:bc:6e:21:ab:56:fd:bf:0b:35:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae Validity Not Before: Dec 4 08:26:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d377866a7201db80ce67b30a39749924687ee5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:ed:64:27:66:ea:4f:0a:6d:b6:e1:95:f9: bd:9f:2c:8e:4b:04:8b:56:0f:a7:ee:2d:db:0e:55: 94:db:99:2b:c6:ef:74:ba:11:71:cf:15:05:4c:5f: 96:2a:2b:b1:49:c9:9b:17:7b:3f:23:56:28:31:c9: 79:2a:71:6e:23:fb:c6:10:ba:28:09:39:aa:0e:07: c5:00:da:df:3c:c5:22:d3:17:62:1e:c1:94:56:4e: 88:f7:43:6c:e6:81:65:a0:a1:78:f4:d8:ca:66:22: 59:c4:1d:df:d7:4f:af:65:cc:52:ae:12:6b:2e:ca: 6b:83:2d:26:11:81:b6:08:88:59:08:c7:55:a5:3c: 5b:51:7e:c0:71:c6:07:d3:96:16:bc:0d:10:d6:d3: 69:a6:d5:ba:5b:9c:83:9f:92:d4:98:97:ec:c9:af: 23:cd:5a:0e:20:11:d1:53:88:82:d7:b0:b6:46:7c: 3c:64:9e:53:d1:2b:35:5c:50:65:7e:6c:37:ea:96: 92:c5:e3:8c:17:43:08:4a:bb:f7:8d:ca:0a:86:31: 8e:bd:59:35:a3:e0:68:fd:5b:67:99:dd:42:f9:23: de:de:e4:bd:4d:a8:dc:75:5d:cc:2e:87:b1:b7:3a: 77:5a:6b:1b:18:28:d5:cf:d8:55:70:74:d0:82:df: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:77:86:6A:72:01:DB:80:CE:67:B3:0A:39:74:99:24:68:7E:E5:C0 X509v3 Authority Key Identifier: keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/03eGanIB24DOZ7MKOXSZJGh-5cA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:1180::/30 Signature Algorithm: sha256WithRSAEncryption 2d:e2:7d:ca:64:75:f7:fe:92:8a:fe:d9:da:93:9e:6e:4f:10: fe:0f:2c:d3:4d:cc:bb:80:65:5e:22:60:02:f3:5c:26:6a:61: 3e:9f:14:38:30:bf:7a:72:b4:84:d6:a7:97:9b:bf:71:c7:0c: 78:5b:24:25:66:eb:19:44:78:b1:e5:f9:f8:01:2d:e1:50:78: 24:d2:05:56:f0:7b:eb:b8:24:c6:25:25:82:a0:5e:0a:a8:7a: 8b:4a:bf:e5:3b:a7:9b:c1:ee:06:67:77:a4:7c:f1:1a:9c:5d: 22:88:c4:55:32:a8:9d:4d:86:bc:ea:93:7e:59:9a:dc:97:bb: 44:33:52:7d:99:de:c4:36:8e:89:ac:80:19:63:92:f7:0b:d3: 44:71:58:0b:3d:a1:c9:2e:66:a6:93:8c:2b:1b:f4:c2:36:83: af:26:0c:c3:14:2e:06:dd:ec:f7:9b:0f:4c:3d:2c:46:08:fc: 4d:05:f7:a4:99:f0:fa:9d:ac:39:0d:7c:8c:a7:69:bb:1a:c5: 41:d4:69:69:98:a9:a0:13:a2:16:dd:1c:99:5b:b4:ed:18:b2: 1e:37:dd:d6:bf:5e:70:40:e4:d4:d2:3a:17:5f:5f:ec:44:f2: 9d:f5:46:87:fa:94:5c:c0:86:a2:18:a8:ea:53:9f:12:82:84: 9f:a9:06:90 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZroeCufvk+8biGrVv2/CzW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOWJkMThhMzUzMTM1MzU2NmVkMTgxNDBjYWQ3NDE5MDVi ZWFmYWUwHhcNMjUxMjA0MDgyNjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzc3ODY2YTcyMDFkYjgwY2U2N2IzMGEzOTc0OTkyNDY4N2VlNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnvtZCdm6k8Kbbbhlfm9nyyOSwSL Vg+n7i3bDlWU25krxu90uhFxzxUFTF+WKiuxScmbF3s/I1YoMcl5KnFuI/vGELoo CTmqDgfFANrfPMUi0xdiHsGUVk6I90Ns5oFloKF49NjKZiJZxB3f10+vZcxSrhJr Lsprgy0mEYG2CIhZCMdVpTxbUX7AccYH05YWvA0Q1tNpptW6W5yDn5LUmJfsya8j zVoOIBHRU4iC17C2Rnw8ZJ5T0Ss1XFBlfmw36paSxeOMF0MISrv3jcoKhjGOvVk1 o+Bo/Vtnmd1C+SPe3uS9TajcdV3MLoextzp3WmsbGCjVz9hVcHTQgt+j/QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNN3hmpyAduAzmezCjl0mSRofuXAMB8GA1UdIwQY MBaAFD6b0Yo1MTU1Zu0YFAytdBkFvq+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEt ZWEyNzdiNDkyZjFlLzEvMDNlR2FuSUIyNERPWjdNS09YU1pKR2gtNWNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEtZWEyNzdiNDkyZjFl LzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKgkRgDAN BgkqhkiG9w0BAQsFAAOCAQEALeJ9ymR19/6Siv7Z2pOebk8Q/g8s003Mu4BlXiJg AvNcJmphPp8UODC/enK0hNanl5u/cccMeFskJWbrGUR4seX5+AEt4VB4JNIFVvB7 67gkxiUlgqBeCqh6i0q/5Tunm8HuBmd3pHzxGpxdIojEVTKonU2GvOqTflma3Je7 RDNSfZnexDaOiayAGWOS9wvTRHFYCz2hyS5mppOMKxv0wjaDryYMwxQuBt3s95sP TD0sRgj8TQX3pJnw+p2sOQ18jKdpuxrFQdRpaZipoBOiFt0cmVu07RiyHjfd1r9e cEDk1NI6F19f7ETynfVGh/qUXMCGohio6lOfEoKEn6kGkA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:46 2025 by rpki-client