This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/326131313a663263303a666663393a3a2f34382d3438203d3e203230373132.roa
File: 326131313a663263303a666663393a3a2f34382d3438203d3e203230373132.roa (raw, json)
Hash identifier: Rp9KJAcanSbSQ/x/ooTfEhh4TI6JTDG8xGHkoqLsfeo=
Subject key identifier: 36:BA:37:50:84:20:27:1E:B4:B6:FD:F7:97:BC:B3:E4:C6:53:6E:64
Certificate issuer: /CN=E02C2B37910DB974089166C0D244DE386B5762C2
Certificate serial: 62AE13AF486AF9DAB4BDEB88235EA9A9AEDC3046
Authority key identifier: E0:2C:2B:37:91:0D:B9:74:08:91:66:C0:D2:44:DE:38:6B:57:62:C2
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/326131313a663263303a666663393a3a2f34382d3438203d3e203230373132.roa
Signing time: Wed 10 Dec 2025 19:47:10 +0000
ROA not before: Wed 10 Dec 2025 19:42:10 +0000
ROA not after: Wed 09 Dec 2026 19:47:10 +0000
asID: 20712
IP address blocks: 2a11:f2c0:ffc9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ae:13:af:48:6a:f9:da:b4:bd:eb:88:23:5e:a9:a9:ae:dc:30:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02C2B37910DB974089166C0D244DE386B5762C2
Validity
Not Before: Dec 10 19:42:10 2025 GMT
Not After : Dec 9 19:47:10 2026 GMT
Subject: CN=36BA37508420271EB4B6FDF797BCB3E4C6536E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:66:25:16:41:c9:d8:56:83:41:c7:2c:ca:
e1:3f:e3:b1:74:30:55:80:e6:cf:30:8f:36:d3:23:
36:26:15:4e:8e:6b:89:4b:d6:e8:5b:f9:eb:5a:9d:
c5:e4:9e:0b:2b:fa:d1:b6:69:b7:e7:85:23:46:d6:
24:90:ac:16:b4:b8:40:5d:1e:39:c6:c6:05:63:6d:
02:d4:14:e2:4d:6a:2c:08:34:5c:a8:33:42:55:ec:
b6:d2:27:f6:f4:41:7e:1a:30:5f:54:25:83:5b:d0:
fd:de:ca:4a:ff:e0:4a:41:24:75:9b:65:a7:5e:48:
3c:00:73:d2:61:1a:6a:1c:28:85:a5:32:92:cf:b3:
00:4c:16:fc:58:1b:7c:d3:e2:e9:25:32:cf:40:25:
b6:5f:c3:b5:ef:81:5b:74:b2:e2:39:e8:d1:27:9b:
aa:db:bb:8d:b9:2c:eb:8b:a5:53:bc:e6:dc:e2:d4:
1c:9f:d4:e0:b5:b8:38:36:d1:45:9c:12:3a:ee:bd:
79:1f:53:46:2c:a0:81:43:a9:eb:c3:d5:20:02:39:
5d:f3:22:0b:67:49:d5:81:7f:d0:13:31:3d:96:e4:
d9:40:ef:3e:3b:c6:55:a0:04:51:4f:f1:b0:49:85:
cc:2c:ff:e4:39:7b:70:0f:6c:94:40:19:ee:2e:91:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BA:37:50:84:20:27:1E:B4:B6:FD:F7:97:BC:B3:E4:C6:53:6E:64
X509v3 Authority Key Identifier:
keyid:E0:2C:2B:37:91:0D:B9:74:08:91:66:C0:D2:44:DE:38:6B:57:62:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/326131313a663263303a666663393a3a2f34382d3438203d3e203230373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc9::/48
Signature Algorithm: sha256WithRSAEncryption
3b:d9:86:c8:09:1b:7f:52:34:57:41:dc:eb:05:a2:53:5d:2e:
40:ec:d5:36:d2:f1:2a:43:5c:6a:82:45:f1:36:ac:65:bc:9e:
f5:8f:62:8a:eb:16:97:90:17:9d:a7:d7:b4:ff:8b:af:6c:cc:
6a:10:61:9b:49:9b:6c:97:5d:d7:3b:b1:cd:19:97:75:9e:e5:
58:6d:3f:fc:22:15:06:b3:80:dc:2c:6b:d3:60:52:23:a5:92:
4f:b8:b3:17:61:19:c1:a2:46:b2:14:55:54:b6:89:af:16:df:
14:af:34:55:81:41:53:d5:f5:d0:5f:ab:a3:ed:c3:ed:b4:0d:
f6:7e:a1:82:07:09:b6:e1:3f:bb:e9:7f:69:32:fd:4b:f4:bf:
29:7a:9f:e8:16:1b:3e:ea:1d:f6:56:c6:e0:53:0b:69:ac:44:
ee:47:95:e9:8e:03:05:21:4d:b9:95:34:ff:ab:b8:3a:9d:4a:
d0:f1:c3:96:eb:c3:c7:86:9e:5e:ec:17:fa:73:c3:ce:f8:35:
35:28:fc:26:e4:27:78:c2:c6:3e:fa:c8:28:28:32:a1:18:84:
00:99:33:7b:92:f3:b9:4e:ed:a2:c0:32:ab:3f:0a:5d:1a:df:
ef:89:9d:6d:4d:8a:d3:66:3a:6a:2e:00:01:37:d1:94:51:10:
ae:71:7d:a0
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUYq4Tr0hq+dq0veuII16pqa7cMEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAyQzJCMzc5MTBEQjk3NDA4OTE2NkMwRDI0NERFMzg2
QjU3NjJDMjAeFw0yNTEyMTAxOTQyMTBaFw0yNjEyMDkxOTQ3MTBaMDMxMTAvBgNV
BAMTKDM2QkEzNzUwODQyMDI3MUVCNEI2RkRGNzk3QkNCM0U0QzY1MzZFNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDWYlFkHJ2FaDQccsyuE/47F0
MFWA5s8wjzbTIzYmFU6Oa4lL1uhb+etancXkngsr+tG2abfnhSNG1iSQrBa0uEBd
HjnGxgVjbQLUFOJNaiwINFyoM0JV7LbSJ/b0QX4aMF9UJYNb0P3eykr/4EpBJHWb
ZadeSDwAc9JhGmocKIWlMpLPswBMFvxYG3zT4uklMs9AJbZfw7XvgVt0suI56NEn
m6rbu425LOuLpVO85tzi1Byf1OC1uDg20UWcEjruvXkfU0YsoIFDqevD1SACOV3z
IgtnSdWBf9ATMT2W5NlA7z47xlWgBFFP8bBJhcws/+Q5e3APbJRAGe4ukU9/AgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUNro3UIQgJx60tv33l7yz5MZTbmQwHwYDVR0j
BBgwFoAU4CwrN5ENuXQIkWbA0kTeOGtXYsIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2E3OTJiZjI0MTY4MjQ3NDhhY2U4NTMwZmIzMmQ5MWM5LzAv
RTAyQzJCMzc5MTBEQjk3NDA4OTE2NkMwRDI0NERFMzg2QjU3NjJDMi5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9FMDJDMkIzNzkxMERCOTc0MDg5MTY2QzBEMjQ0REUz
ODZCNTc2MkMyLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUFBzALhoGR
cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9hNzky
YmYyNDE2ODI0NzQ4YWNlODUzMGZiMzJkOTFjOS8wLzMyNjEzMTMxM2E2NjMyNjMz
MDNhNjY2NjYzMzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzczMTMyLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAKhHywP/JMA0GCSqGSIb3DQEBCwUAA4IBAQA72YbICRt/UjRXQdzr
BaJTXS5A7NU20vEqQ1xqgkXxNqxlvJ71j2KK6xaXkBedp9e0/4uvbMxqEGGbSZts
l13XO7HNGZd1nuVYbT/8IhUGs4DcLGvTYFIjpZJPuLMXYRnBokayFFVUtomvFt8U
rzRVgUFT1fXQX6uj7cPttA32fqGCBwm24T+76X9pMv1L9L8pep/oFhs+6h32Vsbg
UwtprETuR5XpjgMFIU25lTT/q7g6nUrQ8cOW68PHhp5e7Bf6c8PO+DU1KPwm5Cd4
wsY++sgoKDKhGIQAmTN7kvO5Tu2iwDKrPwpdGt/viZ1tTYrTZjpqLgABN9GUURCu
cX2g
-----END CERTIFICATE-----
Generated at Fri Dec 12 16:39:06 2025 by rpki-client