This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/PqvM7y_EnO197blIAFWJlGm7zPg.roa File: PqvM7y_EnO197blIAFWJlGm7zPg.roa (raw, json) Hash identifier: j3Px2lMJPmqVRk9ekcnvnW8pxUt/aHjy6HcH1LT7SIs= Subject key identifier: 3E:AB:CC:EF:2F:C4:9C:ED:7D:ED:B9:48:00:55:89:94:69:BB:CC:F8 Certificate issuer: /CN=997c825813435fb0115438ee3f607637cebd8e8e Certificate serial: 019A783E43586A24D1456E7A04B997C8AABA Authority key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/PqvM7y_EnO197blIAFWJlGm7zPg.roa Signing time: Wed 12 Nov 2025 13:25:37 +0000 ROA not before: Wed 12 Nov 2025 13:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214895 IP address blocks: 2a0f:9640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Nov 2025 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:3e:43:58:6a:24:d1:45:6e:7a:04:b9:97:c8:aa:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997c825813435fb0115438ee3f607637cebd8e8e Validity Not Before: Nov 12 13:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3eabccef2fc49ced7dedb9480055899469bbccf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:87:34:e1:23:30:4e:e8:7c:fa:6d:75:d3: 4f:90:19:da:1e:ce:74:20:33:26:61:9f:74:25:92: 39:9d:df:cd:94:94:f7:6f:98:d4:5a:d4:15:cc:e2: 17:4f:40:1e:c8:8d:e8:60:84:01:b2:49:1f:99:53: 8b:a7:e3:b8:7e:74:2f:25:ae:c9:3c:d7:d5:b6:9b: ab:cf:f4:07:87:de:c5:ce:82:56:af:74:a9:0c:41: c8:2d:fa:ca:6a:6c:c2:03:34:ff:f8:80:0f:b9:9f: ee:d9:60:f0:40:c5:67:95:43:d0:ee:49:a5:7f:bc: 46:0f:84:12:57:c7:80:bc:92:ac:bb:61:aa:97:d6: 1a:e3:83:0f:85:14:88:55:8f:e6:44:ff:62:62:b8: 2b:34:ef:b5:c0:de:53:eb:d7:cb:4a:95:a3:01:7a: 0d:49:43:fa:d7:d5:52:74:9a:cc:86:ee:21:8f:0e: fe:a4:81:aa:6a:1b:88:40:c8:48:fd:08:25:c0:ad: 25:c7:b5:7c:4c:16:0b:1a:f7:f8:81:6b:a9:8e:45: 3f:e5:e4:76:e7:41:7b:4b:e4:a2:d1:c4:d6:82:56: 20:ff:16:3e:dd:24:3d:36:d1:c7:90:31:58:fa:81: 9b:b4:fb:c6:b1:f2:c7:aa:ce:24:2b:79:2a:43:d0: 19:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AB:CC:EF:2F:C4:9C:ED:7D:ED:B9:48:00:55:89:94:69:BB:CC:F8 X509v3 Authority Key Identifier: keyid:99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/PqvM7y_EnO197blIAFWJlGm7zPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9640::/29 Signature Algorithm: sha256WithRSAEncryption 66:e7:98:43:75:38:b2:79:6c:80:d0:01:b4:e3:2b:3a:23:bd: d2:18:00:b4:8c:2c:e3:ca:3f:b4:e0:80:80:4f:77:0a:d1:de: 9c:18:2f:68:08:1f:2a:83:51:fa:5f:17:b1:ec:6e:6b:6f:5c: 62:c0:8e:10:9b:86:fd:82:de:46:df:1e:4b:2d:b3:cf:37:4c: 14:9f:19:d5:e7:d1:44:ab:21:35:37:24:ed:22:46:90:22:bf: 55:9d:13:ac:68:98:8a:e0:71:b0:a2:46:76:fd:e7:99:64:fe: f4:17:9f:f7:a3:6b:58:59:9e:8a:93:61:f9:69:d6:92:25:88: 97:87:83:09:04:3c:c4:ba:73:1a:fb:cf:5f:1f:d8:bc:37:c3: 50:cf:20:67:57:f4:b5:30:fc:d9:ac:52:d8:c9:35:18:ba:d5: 38:ac:e6:9c:03:ad:7b:6c:06:94:83:ca:a7:ba:5f:dd:20:c8: f8:d1:cf:b3:ba:43:e0:93:69:9a:45:bc:fd:97:6f:da:15:bc: 17:5d:09:de:2a:0a:7b:8b:d4:d5:3f:b3:e5:6f:0f:51:54:53: e7:4c:3b:34:26:31:0f:40:28:ac:dd:61:f0:04:0c:9a:7c:c9: b6:07:06:09:4d:a8:42:7b:74:aa:d5:c0:6b:7f:c7:54:f0:16: bf:5b:48:97 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZp4PkNYaiTRRW56BLmXyKq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5N2M4MjU4MTM0MzVmYjAxMTU0MzhlZTNmNjA3NjM3Y2Vi ZDhlOGUwHhcNMjUxMTEyMTMyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWFiY2NlZjJmYzQ5Y2VkN2RlZGI5NDgwMDU1ODk5NDY5YmJjY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNGHNOEjME7ofPptddNPkBnaHs50 IDMmYZ90JZI5nd/NlJT3b5jUWtQVzOIXT0AeyI3oYIQBskkfmVOLp+O4fnQvJa7J PNfVtpurz/QHh97FzoJWr3SpDEHILfrKamzCAzT/+IAPuZ/u2WDwQMVnlUPQ7kml f7xGD4QSV8eAvJKsu2Gql9Ya44MPhRSIVY/mRP9iYrgrNO+1wN5T69fLSpWjAXoN SUP619VSdJrMhu4hjw7+pIGqahuIQMhI/QglwK0lx7V8TBYLGvf4gWupjkU/5eR2 50F7S+Si0cTWglYg/xY+3SQ9NtHHkDFY+oGbtPvGsfLHqs4kK3kqQ9AZHwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFD6rzO8vxJztfe25SABViZRpu8z4MB8GA1UdIwQY MBaAFJl8glgTQ1+wEVQ47j9gdjfOvY6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzIt MjhmNzFhYmJhMDNhLzEvUHF2TTd5X0VuTzE5N2JsSUFGV0psR203elBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzItMjhmNzFhYmJhMDNh LzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg+WQDAN BgkqhkiG9w0BAQsFAAOCAQEAZueYQ3U4snlsgNABtOMrOiO90hgAtIws48o/tOCA gE93CtHenBgvaAgfKoNR+l8Xsexua29cYsCOEJuG/YLeRt8eSy2zzzdMFJ8Z1efR RKshNTck7SJGkCK/VZ0TrGiYiuBxsKJGdv3nmWT+9Bef96NrWFmeipNh+WnWkiWI l4eDCQQ8xLpzGvvPXx/YvDfDUM8gZ1f0tTD82axS2Mk1GLrVOKzmnAOte2wGlIPK p7pf3SDI+NHPs7pD4JNpmkW8/Zdv2hW8F10J3ioKe4vU1T+z5W8PUVRT50w7NCYx D0AorN1h8AQMmnzJtgcGCU2oQnt0qtXAa3/HVPAWv1tIlw== -----END CERTIFICATE-----Generated at Sun Nov 30 04:44:55 2025 by rpki-client