This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/3qMnzegnJFRMdqj9_RxrliQV9LM.roa File: 3qMnzegnJFRMdqj9_RxrliQV9LM.roa (raw, json) Hash identifier: irVxMyTLI0mdYOfT78wXitWNxqzDfC5hTPTHdWrdTqM= Subject key identifier: DE:A3:27:CD:E8:27:24:54:4C:76:A8:FD:FD:1C:6B:96:24:15:F4:B3 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E5125462C202E66193F13871489C6 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/3qMnzegnJFRMdqj9_RxrliQV9LM.roa Signing time: Tue 11 Nov 2025 13:32:37 +0000 ROA not before: Tue 11 Nov 2025 13:32:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43513 IP address blocks: 2a11:9883::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:51:25:46:2c:20:2e:66:19:3f:13:87:14:89:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dea327cde82724544c76a8fdfd1c6b962415f4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:bf:67:66:88:a2:c7:24:5e:c5:bf:a3:8a: 11:c4:42:77:9b:f8:aa:d1:ec:2b:04:fd:0f:ba:43: 63:28:94:de:e9:bd:aa:12:a1:23:b6:21:7f:c6:42: 3e:7a:6d:74:ec:95:22:e9:c7:17:79:4d:31:53:4b: 2d:14:90:f4:9f:c1:c3:a5:57:e2:71:e0:e1:40:bc: 08:20:94:e2:5e:e0:e7:72:50:89:92:51:1b:0c:20: 36:0b:ff:e3:02:93:9d:e7:76:ee:b2:e7:0b:ce:18: e0:a0:11:ce:d8:15:e3:62:c2:8e:fc:75:56:74:14: c0:49:ec:2d:d9:ac:42:04:46:73:58:9e:ab:39:75: 15:cc:71:68:51:5a:33:42:69:38:93:43:41:4b:6f: 82:5b:6a:3a:93:35:cd:db:2b:97:97:39:04:44:aa: eb:ec:de:72:6b:92:34:48:59:8e:90:b4:f0:0b:5d: 4f:d2:72:ad:88:e6:44:5e:24:fd:4b:41:78:16:83: db:2c:c1:e2:9d:25:93:28:18:c7:5b:58:6a:7a:e5: 66:6a:99:4f:dd:4e:37:10:40:37:d0:56:c5:0f:9e: c5:1f:b0:ed:87:9e:12:b0:54:d9:73:4b:bb:a6:4a: 79:c8:34:a7:3b:87:0c:8f:00:d4:90:1e:eb:76:14: 4f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A3:27:CD:E8:27:24:54:4C:76:A8:FD:FD:1C:6B:96:24:15:F4:B3 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/3qMnzegnJFRMdqj9_RxrliQV9LM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:9883::/32 Signature Algorithm: sha256WithRSAEncryption 9d:b5:c1:a7:af:68:f1:60:5c:6c:6d:87:63:af:b8:73:12:d2: cd:37:64:fe:bd:7a:d5:8e:fe:ba:d6:52:8e:e0:40:35:91:d4: 62:9b:a5:68:be:db:35:b0:c0:65:aa:dc:62:9d:2e:62:1e:33: da:a1:58:f3:25:f4:10:48:24:8d:e1:21:1e:60:b8:a4:b8:8b: 36:50:e4:6f:eb:fc:0a:4b:04:b4:4e:ca:8b:6b:fc:44:06:b6: 13:7c:15:53:71:79:15:ca:8e:81:75:67:73:b0:1c:23:cc:59: 15:d9:44:dc:ce:f8:85:c3:2b:db:68:42:35:33:a1:6f:1f:aa: 4f:e7:60:ed:e8:31:30:9b:c8:62:89:ea:fa:2f:df:eb:5e:6c: 7b:08:99:83:c7:85:85:4c:2a:2f:1d:d2:88:98:f1:cf:95:4b: 26:97:a7:86:c9:c8:9a:bd:39:42:b4:d7:49:a9:d1:e9:a0:a3: f9:ba:60:e1:bf:dd:8d:62:2e:55:1c:dd:0a:9c:e5:dc:11:6c: 3e:5d:15:27:12:c3:4a:b8:60:ff:5c:11:fc:0f:e3:e4:07:40: 0b:49:c8:5d:2f:7c:22:8e:53:40:eb:64:3f:63:12:ea:b4:7d: ac:4d:a2:b4:6c:1e:71:7a:c9:a4:24:7f:96:a1:79:57:4c:7b: c0:c7:bd:20 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZpzHlElRiwgLmYZPxOHFInGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWEzMjdjZGU4MjcyNDU0NGM3NmE4ZmRmZDFjNmI5NjI0MTVmNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx2/Z2aIosckXsW/o4oRxEJ3m/iq 0ewrBP0PukNjKJTe6b2qEqEjtiF/xkI+em107JUi6ccXeU0xU0stFJD0n8HDpVfi ceDhQLwIIJTiXuDnclCJklEbDCA2C//jApOd53busucLzhjgoBHO2BXjYsKO/HVW dBTASewt2axCBEZzWJ6rOXUVzHFoUVozQmk4k0NBS2+CW2o6kzXN2yuXlzkERKrr 7N5ya5I0SFmOkLTwC11P0nKtiOZEXiT9S0F4FoPbLMHinSWTKBjHW1hqeuVmaplP 3U43EEA30FbFD57FH7Dth54SsFTZc0u7pkp5yDSnO4cMjwDUkB7rdhRPCQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFN6jJ83oJyRUTHao/f0ca5YkFfSzMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvM3FNbnplZ25KRlJNZHFqOV9SeHJsaVFWOUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhGYgzAN BgkqhkiG9w0BAQsFAAOCAQEAnbXBp69o8WBcbG2HY6+4cxLSzTdk/r161Y7+utZS juBANZHUYpulaL7bNbDAZarcYp0uYh4z2qFY8yX0EEgkjeEhHmC4pLiLNlDkb+v8 CksEtE7Ki2v8RAa2E3wVU3F5FcqOgXVnc7AcI8xZFdlE3M74hcMr22hCNTOhbx+q T+dg7egxMJvIYonq+i/f615sewiZg8eFhUwqLx3SiJjxz5VLJpenhsnImr05QrTX SanR6aCj+bpg4b/djWIuVRzdCpzl3BFsPl0VJxLDSrhg/1wR/A/j5AdAC0nIXS98 Io5TQOtkP2MS6rR9rE2itGwecXrJpCR/lqF5V0x7wMe9IA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:20 2025 by rpki-client