This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/S3l_ZxOe0vksgRec6YnoaQ1tTcM.roa File: S3l_ZxOe0vksgRec6YnoaQ1tTcM.roa (raw, json) Hash identifier: ZfGKjrYT3zpMcFluD61+mKTayU59cDNHTpqd96ROkBo= Subject key identifier: 4B:79:7F:67:13:9E:D2:F9:2C:81:17:9C:E9:89:E8:69:0D:6D:4D:C3 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E519A46C6AF0401F861F4EC4EBA00 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/S3l_ZxOe0vksgRec6YnoaQ1tTcM.roa Signing time: Tue 11 Nov 2025 13:32:38 +0000 ROA not before: Tue 11 Nov 2025 13:32:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44812 IP address blocks: 2a0d:3046::/32 maxlen: 32 2a0e:4584::/32 maxlen: 32 2a11:9885::/32 maxlen: 32 2a12:9502::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:51:9a:46:c6:af:04:01:f8:61:f4:ec:4e:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b797f67139ed2f92c81179ce989e8690d6d4dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:cd:9f:ec:0f:63:42:42:01:71:88:c0:2a: ce:02:42:0c:44:4d:15:5a:46:d0:91:f0:f3:2e:03: f2:19:47:45:ba:32:dd:a9:0a:a9:b4:ba:09:74:c1: 66:cb:fb:ff:69:00:e2:5c:60:0a:17:32:01:03:a6: 05:8b:2c:07:f6:ff:b2:85:46:dd:0a:97:f2:35:2e: 7d:eb:1a:99:99:d7:72:2b:fd:27:4f:39:88:19:a9: 83:3f:3e:4d:3e:c0:7c:f2:8d:91:10:8d:7b:cc:28: 1e:a4:c6:6d:4a:e3:0c:e2:13:80:c5:0c:84:00:93: cc:31:85:31:54:d6:38:7c:36:95:14:e7:2f:f5:c5: e2:b5:8a:6c:8d:de:19:10:5c:2d:c4:36:5b:7f:6e: fd:34:ad:05:b8:27:03:71:af:a7:fc:d4:91:bd:f1: 7c:87:95:bf:0b:11:78:79:04:1c:f2:1c:dc:8c:ff: 52:47:f4:96:df:40:22:68:15:fe:5c:8a:17:35:96: 4f:d3:eb:02:da:be:1f:b4:70:50:be:0f:93:0b:30: 94:9d:8a:0d:42:90:32:cf:10:f7:50:eb:e8:1f:a3: f5:db:53:08:4e:15:4d:16:b0:97:1e:02:f5:68:50: 95:a3:ae:b8:67:42:e1:58:24:b0:a8:0c:f7:fd:48: 54:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:79:7F:67:13:9E:D2:F9:2C:81:17:9C:E9:89:E8:69:0D:6D:4D:C3 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/S3l_ZxOe0vksgRec6YnoaQ1tTcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:3046::/32 2a0e:4584::/32 2a11:9885::/32 2a12:9502::/32 Signature Algorithm: sha256WithRSAEncryption 5c:31:fc:d4:c9:b2:c6:09:18:ee:7b:d7:2a:69:f6:5b:22:a0: e0:eb:c1:91:78:27:59:44:b8:8f:51:c9:2f:4b:11:90:74:29: 30:bb:28:8a:e2:76:f7:a7:0c:ed:1c:c6:67:b0:6c:c1:73:b9: 51:84:42:89:28:0b:4c:cf:0b:95:47:0e:9d:ab:02:fe:0a:21: 38:fe:26:1a:dd:82:ff:e0:3a:1b:14:d8:ef:4c:9c:07:29:17: 60:51:29:8a:c2:14:0e:41:c6:08:0a:9b:8c:a0:7c:60:d2:f8: fb:b9:b8:d0:04:fc:1d:9a:6c:7b:cf:8c:bf:8e:77:78:93:82: ad:7a:8e:17:b9:22:52:37:02:15:04:f1:a3:c0:eb:d4:33:f5: 57:55:68:4e:25:22:98:6c:fd:11:1d:31:6d:3d:87:ab:53:b2: eb:da:12:46:c9:6f:31:30:78:07:fd:33:d6:01:39:33:85:40: db:ab:37:eb:ae:92:88:c5:66:4d:ea:f3:db:1d:cd:a0:e0:69: 31:24:0b:5b:ec:b9:ce:98:3a:b6:fd:a3:31:0a:94:6d:04:13: 97:75:57:49:db:9a:d6:3f:4e:d0:8f:29:fe:5e:40:d6:72:6a: ba:f5:bb:32:22:f9:ee:9c:dd:6a:a9:f6:2f:f3:d5:0d:81:fe: de:12:74:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZpzHlGaRsavBAH4YfTsTroAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjc5N2Y2NzEzOWVkMmY5MmM4MTE3OWNlOTg5ZTg2OTBkNmQ0ZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbPNn+wPY0JCAXGIwCrOAkIMRE0V WkbQkfDzLgPyGUdFujLdqQqptLoJdMFmy/v/aQDiXGAKFzIBA6YFiywH9v+yhUbd CpfyNS596xqZmddyK/0nTzmIGamDPz5NPsB88o2REI17zCgepMZtSuMM4hOAxQyE AJPMMYUxVNY4fDaVFOcv9cXitYpsjd4ZEFwtxDZbf279NK0FuCcDca+n/NSRvfF8 h5W/CxF4eQQc8hzcjP9SR/SW30AiaBX+XIoXNZZP0+sC2r4ftHBQvg+TCzCUnYoN QpAyzxD3UOvoH6P121MIThVNFrCXHgL1aFCVo664Z0LhWCSwqAz3/UhURwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFEt5f2cTntL5LIEXnOmJ6GkNbU3DMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvUzNsX1p4T2UwdmtzZ1JlYzZZbm9hUTF0VGNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKg0wRgMF ACoORYQDBQAqEZiFAwUAKhKVAjANBgkqhkiG9w0BAQsFAAOCAQEAXDH81MmyxgkY 7nvXKmn2WyKg4OvBkXgnWUS4j1HJL0sRkHQpMLsoiuJ296cM7RzGZ7BswXO5UYRC iSgLTM8LlUcOnasC/gohOP4mGt2C/+A6GxTY70ycBykXYFEpisIUDkHGCAqbjKB8 YNL4+7m40AT8HZpse8+Mv453eJOCrXqOF7kiUjcCFQTxo8Dr1DP1V1VoTiUimGz9 ER0xbT2Hq1Oy69oSRslvMTB4B/0z1gE5M4VA26s3666SiMVmTerz2x3NoOBpMSQL W+y5zpg6tv2jMQqUbQQTl3VXSdua1j9O0I8p/l5A1nJquvW7MiL57pzdaqn2L/PV DYH+3hJ0yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:09 2025 by rpki-client