This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/36QCi9gQh9tE74apIP0AUk7-Sr8.roa File: 36QCi9gQh9tE74apIP0AUk7-Sr8.roa (raw, json) Hash identifier: bFg76n5+s3/DgXURQWdNC73y3/o3Eq9hbscTlV6BsZY= Subject key identifier: DF:A4:02:8B:D8:10:87:DB:44:EF:86:A9:20:FD:00:52:4E:FE:4A:BF Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E4FA4EA3E9C9055C0EFC980434786 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/36QCi9gQh9tE74apIP0AUk7-Sr8.roa Signing time: Tue 11 Nov 2025 13:32:37 +0000 ROA not before: Tue 11 Nov 2025 13:32:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29182 IP address blocks: 2a0e:4346::/32 maxlen: 32 2a11:34c1::/32 maxlen: 32 2a12:41c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:4f:a4:ea:3e:9c:90:55:c0:ef:c9:80:43:47:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dfa4028bd81087db44ef86a920fd00524efe4abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:e2:2c:93:0e:27:b5:e6:1a:a3:b1:37:87: 74:b5:91:b6:d7:58:5f:03:28:2c:4e:32:4a:2e:90: 69:2d:76:e4:ff:55:02:d5:59:66:67:72:43:bf:de: 19:06:10:e8:1c:ba:43:2f:57:d9:32:ac:3f:43:06: 6c:ee:a1:aa:3c:c4:81:98:29:5d:ea:61:40:57:83: 7e:13:0f:e2:a9:74:b8:8e:fd:12:98:a0:2e:46:91: 84:18:1c:cf:56:c9:55:68:16:c0:bf:8f:0d:ba:c3: e5:5a:63:0b:51:74:a9:35:63:68:d3:25:36:70:62: a6:16:f3:6f:4f:51:c5:ce:17:26:7f:75:f1:5e:a0: 08:c7:99:3e:fe:ee:74:59:c9:cc:74:ea:dc:5a:85: 8a:78:b3:93:cb:6f:94:cf:4c:5c:73:86:f2:b6:62: 63:2f:d5:2b:dc:48:7a:b6:b7:be:4b:69:e7:cf:c3: 41:eb:77:ed:09:48:54:d5:15:b9:85:80:6c:04:29: d0:b4:bd:2e:ea:19:30:07:a3:23:32:63:c8:25:09: cb:2b:37:85:21:b9:35:71:c2:21:69:d9:5d:01:52: 1e:67:44:24:53:bb:7d:3c:99:14:d5:0a:38:ff:70: b1:02:33:bf:2f:6e:60:b8:fe:9c:5f:b9:99:cb:52: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A4:02:8B:D8:10:87:DB:44:EF:86:A9:20:FD:00:52:4E:FE:4A:BF X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/36QCi9gQh9tE74apIP0AUk7-Sr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:4346::/32 2a11:34c1::/32 2a12:41c7::/32 Signature Algorithm: sha256WithRSAEncryption 71:54:d2:88:76:21:b9:0e:5e:28:ea:87:b2:aa:45:11:7a:95: b8:3b:0e:77:01:b7:09:8a:bc:84:31:2e:dd:e1:b9:0a:85:ff: 68:a3:51:6b:78:99:d1:37:b2:93:1f:27:4b:8d:f5:ce:dd:a7: 34:48:a2:6d:f0:d3:4a:b3:7d:0f:77:29:17:f4:7f:44:63:81: 59:9a:c6:16:a7:ee:a5:ec:fc:d3:36:a8:83:86:bd:f7:9a:33: 00:25:0e:c1:e3:ba:be:0d:74:d3:79:c3:7f:4e:2a:a9:a4:80: f2:97:4a:ae:aa:8e:09:15:90:36:22:1e:2f:1a:d7:94:42:b3: 09:81:29:62:4e:45:df:23:f8:d0:29:1e:28:34:89:94:ed:23: fa:67:c4:4c:40:b8:f2:db:f7:99:63:f9:03:02:96:37:dd:9b: ff:ec:d9:fe:8a:cb:62:6d:1c:0e:2b:f6:dc:3f:fc:73:10:04: 00:a4:7a:42:c5:30:42:2b:cb:1e:4d:71:d2:4f:32:03:4d:14: a4:7b:b2:0a:b6:64:14:c5:a2:72:70:b9:79:88:2f:a2:1a:8a: cf:22:ea:e8:95:86:47:1d:23:33:43:13:3c:80:1c:18:fd:75: 56:3d:c5:9f:5c:dc:1b:4e:4c:f9:77:92:a9:24:51:f5:df:36: 4f:e2:df:92 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZpzHk+k6j6ckFXA78mAQ0eGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmE0MDI4YmQ4MTA4N2RiNDRlZjg2YTkyMGZkMDA1MjRlZmU0YWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i7iLJMOJ7XmGqOxN4d0tZG211hf AygsTjJKLpBpLXbk/1UC1VlmZ3JDv94ZBhDoHLpDL1fZMqw/QwZs7qGqPMSBmCld 6mFAV4N+Ew/iqXS4jv0SmKAuRpGEGBzPVslVaBbAv48NusPlWmMLUXSpNWNo0yU2 cGKmFvNvT1HFzhcmf3XxXqAIx5k+/u50WcnMdOrcWoWKeLOTy2+Uz0xcc4bytmJj L9Ur3Eh6tre+S2nnz8NB63ftCUhU1RW5hYBsBCnQtL0u6hkwB6MjMmPIJQnLKzeF Ibk1ccIhadldAVIeZ0QkU7t9PJkU1Qo4/3CxAjO/L25guP6cX7mZy1JMxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN+kAovYEIfbRO+GqSD9AFJO/kq/MB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvMzZRQ2k5Z1FoOXRFNzRhcElQMEFVazctU3I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKg5DRgMF ACoRNMEDBQAqEkHHMA0GCSqGSIb3DQEBCwUAA4IBAQBxVNKIdiG5Dl4o6oeyqkUR epW4Ow53AbcJiryEMS7d4bkKhf9oo1FreJnRN7KTHydLjfXO3ac0SKJt8NNKs30P dykX9H9EY4FZmsYWp+6l7PzTNqiDhr33mjMAJQ7B47q+DXTTecN/TiqppIDyl0qu qo4JFZA2Ih4vGteUQrMJgSliTkXfI/jQKR4oNImU7SP6Z8RMQLjy2/eZY/kDApY3 3Zv/7Nn+istibRwOK/bcP/xzEAQApHpCxTBCK8seTXHSTzIDTRSke7IKtmQUxaJy cLl5iC+iGorPIurolYZHHSMzQxM8gBwY/XVWPcWfXNwbTkz5d5KpJFH13zZP4t+S -----END CERTIFICATE-----Generated at Sat Dec 6 13:43:05 2025 by rpki-client