This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/x_RVWVMpfqFCU9C8fHlsYzNg98Y.roa File: x_RVWVMpfqFCU9C8fHlsYzNg98Y.roa (raw, json) Hash identifier: HSJMhqY1VPTAA+uSdO1W+IOvhtrhwbuUBVftKZHkGTo= Subject key identifier: C7:F4:55:59:53:29:7E:A1:42:53:D0:BC:7C:79:6C:63:33:60:F7:C6 Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Certificate serial: 019AA97912D9FE97B266DFD5CE0533ED70E4 Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/x_RVWVMpfqFCU9C8fHlsYzNg98Y.roa Signing time: Sat 22 Nov 2025 02:51:15 +0000 ROA not before: Sat 22 Nov 2025 02:51:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214720 IP address blocks: 2a0a:d686:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a9:79:12:d9:fe:97:b2:66:df:d5:ce:05:33:ed:70:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Validity Not Before: Nov 22 02:51:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c7f4555953297ea14253d0bc7c796c633360f7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:37:8a:c7:ef:4f:a0:11:c2:22:1b:67:70: 52:db:3d:60:02:c8:61:15:0e:64:fc:37:be:b5:de: 30:4d:64:d3:f5:f3:b4:e5:23:55:9a:e3:00:bd:6e: 63:7d:4e:a0:ac:58:81:01:b7:dd:fb:7a:d8:ae:68: c4:ec:7d:5a:c7:a1:30:d4:ea:d4:53:c2:cc:a1:2c: f1:2d:13:57:91:89:31:ef:db:5d:86:fc:af:aa:a8: de:7f:53:92:7d:76:d4:65:9a:f1:cc:d8:bf:d6:e9: e0:74:63:b6:40:1d:e5:1b:21:5b:ad:81:b2:fb:51: 6e:05:86:94:9a:0a:aa:12:89:c5:e0:a3:54:76:1b: c3:2f:3e:f2:0e:50:4b:68:e7:75:61:7b:0e:90:5a: f8:87:78:19:38:fa:e9:c3:4f:68:1b:cb:fd:25:29: 33:d7:f9:21:08:e3:4b:5c:d8:b0:b8:e6:30:f0:5c: a2:ae:2a:a4:29:42:7e:b1:c4:ec:d5:aa:4f:00:8e: d9:6e:52:5e:62:63:ed:d9:84:af:7f:3d:5a:78:36: 9b:ad:df:2e:55:57:dc:c4:67:0b:9f:20:59:19:de: b3:a2:91:5a:db:0b:31:c4:3e:80:20:f3:d4:47:91: 89:9a:c2:44:f5:3a:fe:90:5a:f8:e5:1e:a5:1c:a6: 0a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F4:55:59:53:29:7E:A1:42:53:D0:BC:7C:79:6C:63:33:60:F7:C6 X509v3 Authority Key Identifier: keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/x_RVWVMpfqFCU9C8fHlsYzNg98Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d686:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 62:6d:8c:91:65:8e:60:76:47:d8:8d:18:c1:38:76:c1:54:bd: 8a:6f:e8:ad:63:59:51:b0:73:e5:6a:e4:d8:6d:ec:8b:25:e4: 83:b6:ef:8f:83:97:42:68:93:34:56:c7:d6:e6:46:7c:a8:bb: b9:3f:69:e7:29:f4:05:7b:d0:7c:ac:cb:46:70:73:41:43:cb: 0c:8d:65:8a:5d:eb:ac:7f:69:a4:a2:4b:10:aa:66:c6:56:87: 0b:83:22:42:9b:87:43:3e:d5:ad:44:fc:f1:6e:c2:d5:63:c3: ee:72:60:9c:3c:83:0d:7a:0e:e5:f3:0c:73:22:30:a9:40:62: fa:c8:96:e4:f7:01:94:aa:29:77:d0:11:ec:84:01:0c:9d:8b: 7a:b8:09:11:36:39:73:20:53:6e:73:2e:2c:fc:a6:5e:13:fd: 8d:d5:ed:d0:82:5d:ac:4e:9d:86:85:d2:21:21:6b:6d:42:71: 18:13:fe:81:62:4d:e9:e1:d0:5f:fd:30:0c:2b:a5:5a:b2:4d: 37:24:53:fe:fe:2c:54:5e:c3:64:70:62:cf:0d:4c:5b:ca:cb: cd:43:cc:56:fa:51:1c:b4:f7:43:26:aa:83:f3:d8:6d:cf:52: f3:0e:7a:ce:75:56:e2:cd:92:34:60:04:16:17:9c:47:62:39: 46:d9:7b:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqpeRLZ/peyZt/VzgUz7XDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNzQ0ZGE3OWYwNTMxYTczYWQ2ZjRiYWYwODM3ZTkzZWI2 ODAxYjEwHhcNMjUxMTIyMDI1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2Y0NTU1OTUzMjk3ZWExNDI1M2QwYmM3Yzc5NmM2MzMzNjBmN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC03isfvT6ARwiIbZ3BS2z1gAshh FQ5k/De+td4wTWTT9fO05SNVmuMAvW5jfU6grFiBAbfd+3rYrmjE7H1ax6Ew1OrU U8LMoSzxLRNXkYkx79tdhvyvqqjef1OSfXbUZZrxzNi/1ungdGO2QB3lGyFbrYGy +1FuBYaUmgqqEonF4KNUdhvDLz7yDlBLaOd1YXsOkFr4h3gZOPrpw09oG8v9JSkz 1/khCONLXNiwuOYw8FyiriqkKUJ+scTs1apPAI7ZblJeYmPt2YSvfz1aeDabrd8u VVfcxGcLnyBZGd6zopFa2wsxxD6AIPPUR5GJmsJE9Tr+kFr45R6lHKYKKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMf0VVlTKX6hQlPQvHx5bGMzYPfGMB8GA1UdIwQY MBaAFJt0TaefBTGnOtb0uvCDfpPraAGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUt OTJhYjgwZTJlZmQ1LzEveF9SVldWTXBmcUZDVTlDOGZIbHNZek5nOThZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUtOTJhYjgwZTJlZmQ1 LzEvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgrWhv// MA0GCSqGSIb3DQEBCwUAA4IBAQBibYyRZY5gdkfYjRjBOHbBVL2Kb+itY1lRsHPl auTYbeyLJeSDtu+Pg5dCaJM0VsfW5kZ8qLu5P2nnKfQFe9B8rMtGcHNBQ8sMjWWK Xeusf2mkoksQqmbGVocLgyJCm4dDPtWtRPzxbsLVY8PucmCcPIMNeg7l8wxzIjCp QGL6yJbk9wGUqil30BHshAEMnYt6uAkRNjlzIFNucy4s/KZeE/2N1e3Qgl2sTp2G hdIhIWttQnEYE/6BYk3p4dBf/TAMK6Vask03JFP+/ixUXsNkcGLPDUxbysvNQ8xW +lEctPdDJqqD89htz1LzDnrOdVbizZI0YAQWF5xHYjlG2XtN -----END CERTIFICATE-----Generated at Sun Dec 7 13:10:28 2025 by rpki-client