This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/uftLeQkfqcKXo03jKUeL_D8WtaM.roa File: uftLeQkfqcKXo03jKUeL_D8WtaM.roa (raw, json) Hash identifier: eP3V2NYa/TWTuM8OXhJAO5sPx82m7ITWPPP4AAlDAZE= Subject key identifier: B9:FB:4B:79:09:1F:A9:C2:97:A3:4D:E3:29:47:8B:FC:3F:16:B5:A3 Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b Certificate serial: 019AE32473F4A68D563491B460D2E3B4B058 Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/uftLeQkfqcKXo03jKUeL_D8WtaM.roa Signing time: Wed 03 Dec 2025 07:36:48 +0000 ROA not before: Wed 03 Dec 2025 07:36:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5619 IP address blocks: 2a00:97c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:24:73:f4:a6:8d:56:34:91:b4:60:d2:e3:b4:b0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b Validity Not Before: Dec 3 07:36:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b9fb4b79091fa9c297a34de329478bfc3f16b5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:c1:9f:ca:85:28:90:25:b9:1a:1e:4a:e3: 2c:3e:e6:aa:80:23:00:13:23:e0:26:18:fd:da:bf: f6:7a:bc:48:df:6d:2f:6c:dd:68:75:54:23:bc:7b: 72:76:8d:da:34:32:bd:ac:ab:f2:09:84:7f:ae:12: 1f:55:e9:3d:e6:2a:87:9b:53:1c:2c:f7:56:e9:e4: 12:7a:20:cc:c9:03:6d:5a:28:c7:c7:3c:4e:17:a8: 86:7b:45:32:9f:7f:0d:17:ee:b1:2b:14:46:c6:fb: b9:2f:06:7f:4e:66:d5:21:24:7b:6b:c0:93:cf:fd: 8d:d1:b5:00:45:57:ff:d3:d7:61:8a:55:72:eb:24: d8:ae:62:70:d7:87:0c:55:c7:8b:48:44:3b:2d:21: e8:4f:24:c2:1b:e6:bc:66:de:cf:83:66:f7:32:83: 63:9f:6d:c4:a4:90:9b:90:42:a8:94:81:c0:55:65: 16:7a:48:55:dc:20:88:9c:8b:96:c6:9f:6c:2c:bf: 32:51:1d:3a:9f:6d:f6:83:b6:2e:82:b8:b6:3e:06: 08:6e:3d:14:5a:33:66:32:82:b4:87:27:12:95:25: 32:bc:f9:e1:70:44:89:dc:9d:66:58:c0:cc:f7:38: c7:49:3b:bc:82:9d:3d:ff:93:ab:af:79:72:12:5d: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FB:4B:79:09:1F:A9:C2:97:A3:4D:E3:29:47:8B:FC:3F:16:B5:A3 X509v3 Authority Key Identifier: keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/uftLeQkfqcKXo03jKUeL_D8WtaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 5f:e2:96:2d:47:d9:74:0c:ce:97:e0:c8:d3:16:b5:63:ff:28: 3f:2c:f5:40:0c:75:19:36:70:7f:08:54:d2:82:1f:ad:a6:93: 5f:6f:36:07:9c:11:74:32:3b:5a:44:dd:62:d9:f7:df:b2:bd: c8:87:fe:3b:fe:17:ac:86:ac:d0:63:94:3d:0c:29:c6:1c:56: 8a:38:c9:32:60:58:b8:40:74:fc:8a:de:bd:66:d3:21:cb:b5: 67:11:a0:e3:c9:5d:00:2e:fd:ea:62:50:0a:36:f2:16:51:0e: 4c:0c:37:87:9a:ab:91:0f:6d:81:62:33:39:55:75:cd:ad:c3: 31:89:aa:54:57:2d:ee:4a:6b:8c:d6:da:5b:a4:c7:53:db:3f: 99:32:22:c5:9b:6f:6c:6e:f9:78:83:5e:e7:8a:a8:6e:33:31: 42:60:c7:81:b4:6e:5e:9d:8e:da:10:4c:cb:1d:97:62:0c:0a: 7a:17:08:64:03:58:0e:be:0c:6f:f6:9a:7d:26:c3:2e:a4:49: e2:5b:cc:53:e0:37:c1:48:b7:1f:e4:21:39:ce:54:9b:8e:77: f7:1a:d0:fb:ab:6f:72:32:af:60:22:a8:ea:90:51:96:d5:25: 83:78:ff:13:4e:ab:6d:98:08:6f:ac:59:4b:5b:d8:50:f6:4a: f2:29:04:7c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrjJHP0po1WNJG0YNLjtLBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MjFiYTRiNTM5MTYyZDdlZjE5MWE1NjYyMDQ5ZTUxZmRj MzYyMmIwHhcNMjUxMjAzMDczNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWZiNGI3OTA5MWZhOWMyOTdhMzRkZTMyOTQ3OGJmYzNmMTZiNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0abBn8qFKJAluRoeSuMsPuaqgCMA EyPgJhj92r/2erxI320vbN1odVQjvHtydo3aNDK9rKvyCYR/rhIfVek95iqHm1Mc LPdW6eQSeiDMyQNtWijHxzxOF6iGe0Uyn38NF+6xKxRGxvu5LwZ/TmbVISR7a8CT z/2N0bUARVf/09dhilVy6yTYrmJw14cMVceLSEQ7LSHoTyTCG+a8Zt7Pg2b3MoNj n23EpJCbkEKolIHAVWUWekhV3CCInIuWxp9sLL8yUR06n232g7Yugri2PgYIbj0U WjNmMoK0hycSlSUyvPnhcESJ3J1mWMDM9zjHSTu8gp09/5Orr3lyEl2RQwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLn7S3kJH6nCl6NN4ylHi/w/FrWjMB8GA1UdIwQY MBaAFFQhuktTkWLX7xkaVmIEnlH9w2IrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUt ZWYwNjNlNzg2ZTU0LzEvdWZ0TGVRa2ZxY0tYbzAzaktVZUxfRDhXdGFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUtZWYwNjNlNzg2ZTU0 LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCXwDAN BgkqhkiG9w0BAQsFAAOCAQEAX+KWLUfZdAzOl+DI0xa1Y/8oPyz1QAx1GTZwfwhU 0oIfraaTX282B5wRdDI7WkTdYtn337K9yIf+O/4XrIas0GOUPQwpxhxWijjJMmBY uEB0/IrevWbTIcu1ZxGg48ldAC796mJQCjbyFlEOTAw3h5qrkQ9tgWIzOVV1za3D MYmqVFct7kprjNbaW6THU9s/mTIixZtvbG75eINe54qobjMxQmDHgbRuXp2O2hBM yx2XYgwKehcIZANYDr4Mb/aafSbDLqRJ4lvMU+A3wUi3H+QhOc5Um4539xrQ+6tv cjKvYCKo6pBRltUlg3j/E06rbZgIb6xZS1vYUPZK8ikEfA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:20:20 2025 by rpki-client