This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/u3vsO6KFAPBlOPZIV1kl0JVTBgw.roa File: u3vsO6KFAPBlOPZIV1kl0JVTBgw.roa (raw, json) Hash identifier: IB8pV7Q+dwm9Rody8Bp/FIsIiSm2P1roaWpfj3CLMGI= Subject key identifier: BB:7B:EC:3B:A2:85:00:F0:65:38:F6:48:57:59:25:D0:95:53:06:0C Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b Certificate serial: 019AEDF2E43718F3C9485060915371EFD08A Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/u3vsO6KFAPBlOPZIV1kl0JVTBgw.roa Signing time: Fri 05 Dec 2025 09:58:29 +0000 ROA not before: Fri 05 Dec 2025 09:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12387 IP address blocks: 195.4.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:f2:e4:37:18:f3:c9:48:50:60:91:53:71:ef:d0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b Validity Not Before: Dec 5 09:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb7bec3ba28500f06538f648575925d09553060c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:f6:2a:4c:e6:a5:37:af:8a:a3:c4:94:e2: 4a:b3:39:d4:87:a4:ac:e3:87:ae:b1:db:3e:02:4d: 6b:1a:56:7e:3d:a3:74:bd:b5:39:48:29:8b:1b:63: f1:2d:c1:f6:3a:a7:7f:db:85:0e:4a:78:c3:12:07: fa:df:6f:90:1b:f2:20:8a:ad:f0:05:9f:c3:c0:b8: 36:18:3d:41:f6:1c:14:e0:8d:6f:ff:79:25:e4:e7: 09:df:84:cc:fa:d8:99:47:93:1b:3e:67:f1:c0:e3: be:ae:58:e2:24:07:bd:01:85:52:51:29:0b:78:f9: fc:cd:ee:de:91:12:f2:b1:b3:e0:0b:72:04:29:87: 01:72:f4:d7:7b:b4:e8:f8:23:6b:d1:81:c1:b9:94: cf:2c:0b:ea:38:7c:63:14:71:a2:ad:1a:b1:68:37: ff:e7:d8:b7:01:05:48:b2:1e:5e:e4:d2:bb:e9:37: a7:87:ee:f4:db:30:56:bf:8f:04:dc:f1:3f:8b:21: 02:76:b0:03:9f:d7:12:5d:e6:e7:90:af:c3:5f:d0: 0d:e3:2c:5d:1f:8e:c7:74:0f:b7:39:3c:8c:33:08: f0:a1:e9:81:51:03:5d:de:ad:03:04:6d:9a:37:a9: 78:e7:1e:71:40:c3:c3:e3:af:fd:36:c1:2c:0b:ba: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7B:EC:3B:A2:85:00:F0:65:38:F6:48:57:59:25:D0:95:53:06:0C X509v3 Authority Key Identifier: keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/u3vsO6KFAPBlOPZIV1kl0JVTBgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.4.176.0/22 Signature Algorithm: sha256WithRSAEncryption 78:cd:68:a6:0b:43:b7:bf:89:78:f0:37:38:50:25:03:fc:51: 43:ab:1f:73:32:95:72:99:f1:c1:8d:35:ec:29:6c:e8:fa:71: 98:a8:22:7e:0c:4f:b3:23:80:d8:6c:9f:65:44:bf:15:61:83: b9:dd:a5:12:2e:ed:7d:e4:09:62:5c:53:05:24:b3:91:d6:b9: 93:f4:4b:80:3a:12:ed:a1:f2:84:07:6e:b4:e4:92:4e:5b:fb: 81:48:93:cd:c9:b5:89:24:5d:21:57:f0:35:f6:c8:c9:e6:99: 36:55:34:51:ef:9b:eb:37:96:8f:9b:bf:18:ca:fb:73:db:de: 2b:6d:f6:8e:05:2f:8c:fd:01:a7:3b:5a:45:62:c4:41:7b:bd: 2b:16:ea:28:c2:bf:cf:84:39:67:48:b3:1e:fc:94:ba:96:4f: 9a:05:03:46:36:9b:80:a4:26:2c:db:d4:24:d6:84:06:52:9c: f0:d2:06:04:30:a8:c2:91:02:29:a9:a9:0b:d7:e1:98:d7:1f: dc:4a:e9:82:6b:4b:cc:58:05:47:37:7e:26:37:9f:a5:93:62: 0b:b6:d2:f9:0f:4d:da:bf:2a:9f:eb:63:ca:f8:11:5a:1f:84: c3:42:72:f8:1c:56:a5:05:ac:32:1e:05:0c:c9:52:13:37:4c: 98:8e:da:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrt8uQ3GPPJSFBgkVNx79CKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmODAxOTg0Y2MzOGYwYTRmYzVhZmUxYWRlYWI2ODBjMWI4 OWU5NWIwHhcNMjUxMjA1MDk1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjdiZWMzYmEyODUwMGYwNjUzOGY2NDg1NzU5MjVkMDk1NTMwNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVX2KkzmpTeviqPElOJKsznUh6Ss 44eusds+Ak1rGlZ+PaN0vbU5SCmLG2PxLcH2Oqd/24UOSnjDEgf632+QG/Igiq3w BZ/DwLg2GD1B9hwU4I1v/3kl5OcJ34TM+tiZR5MbPmfxwOO+rljiJAe9AYVSUSkL ePn8ze7ekRLysbPgC3IEKYcBcvTXe7To+CNr0YHBuZTPLAvqOHxjFHGirRqxaDf/ 59i3AQVIsh5e5NK76Tenh+702zBWv48E3PE/iyECdrADn9cSXebnkK/DX9AN4yxd H47HdA+3OTyMMwjwoemBUQNd3q0DBG2aN6l45x5xQMPD46/9NsEsC7q2yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLt77DuihQDwZTj2SFdZJdCVUwYMMB8GA1UdIwQY MBaAFK+AGYTMOPCk/Fr+Gt6raAwbielbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQt NDAyMTI2NWMzOWIwLzEvdTN2c082S0ZBUEJsT1BaSVYxa2wwSlZUQmd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQtNDAyMTI2NWMzOWIw LzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwwSwMA0G CSqGSIb3DQEBCwUAA4IBAQB4zWimC0O3v4l48Dc4UCUD/FFDqx9zMpVymfHBjTXs KWzo+nGYqCJ+DE+zI4DYbJ9lRL8VYYO53aUSLu195AliXFMFJLOR1rmT9EuAOhLt ofKEB2605JJOW/uBSJPNybWJJF0hV/A19sjJ5pk2VTRR75vrN5aPm78Yyvtz294r bfaOBS+M/QGnO1pFYsRBe70rFuoowr/PhDlnSLMe/JS6lk+aBQNGNpuApCYs29Qk 1oQGUpzw0gYEMKjCkQIpqakL1+GY1x/cSumCa0vMWAVHN34mN5+lk2ILttL5D03a vyqf62PK+BFaH4TDQnL4HFalBawyHgUMyVITN0yYjtqY -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:15 2025 by rpki-client