This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IyIUUpw_Fy9-fatsRIVzy6pyt6Y.roa File: IyIUUpw_Fy9-fatsRIVzy6pyt6Y.roa (raw, json) Hash identifier: 0yP2Wp5gMHWyFvh1lsy8px3AnsmnV+blfjFPwfYvR/k= Subject key identifier: 23:22:14:52:9C:3F:17:2F:7E:7D:AB:6C:44:85:73:CB:AA:72:B7:A6 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B172BF7F45297C9FC8BFCE68A0C9948 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IyIUUpw_Fy9-fatsRIVzy6pyt6Y.roa Signing time: Wed 19 Nov 2025 07:49:38 +0000 ROA not before: Wed 19 Nov 2025 07:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202306 IP address blocks: 2a04:5200:5977::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:17:2b:f7:f4:52:97:c9:fc:8b:fc:e6:8a:0c:99:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=232214529c3f172f7e7dab6c448573cbaa72b7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:6f:e1:ac:c2:2b:63:39:03:72:f4:9e:29: fe:54:19:2a:73:f7:5b:d5:7c:b6:f6:bb:87:e9:3b: ad:ff:88:17:2a:37:09:28:70:de:eb:ba:ae:2b:d4: 16:da:7d:68:80:d7:28:89:4e:fb:ce:db:61:70:97: f9:05:0e:a9:28:73:2d:4b:47:fb:1c:a1:87:2d:b6: 18:fe:26:80:97:b2:b2:cd:c7:ee:aa:6a:8b:53:5c: 17:fd:8f:6d:3d:66:47:d3:58:8d:d4:1e:68:22:b0: e2:f2:0f:5d:a4:4b:b4:98:f6:0b:e9:3e:5a:d3:79: 2c:b8:38:fa:aa:2c:c1:61:10:f9:7f:bb:be:63:5a: 6b:90:04:fd:e4:1b:2d:a5:bc:84:4b:18:09:da:15: 23:c6:53:b9:56:18:cf:12:bc:89:ec:9f:6b:1e:12: bf:a2:c3:bb:85:05:2a:a5:35:86:8d:13:6d:64:f8: 7e:40:b5:f5:bf:6d:a7:8c:a8:e4:dd:89:f3:36:93: 2e:3d:c8:ef:63:f7:c7:2f:e8:b7:81:8a:04:26:be: 34:fd:41:e9:ae:e3:b8:6f:c5:ec:f2:5a:ad:c0:78: 97:b9:87:03:11:e6:48:84:fd:cb:44:6e:14:a7:ca: a1:79:31:1b:37:7d:6c:a9:7d:22:4b:d8:17:1d:89: 96:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:22:14:52:9C:3F:17:2F:7E:7D:AB:6C:44:85:73:CB:AA:72:B7:A6 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IyIUUpw_Fy9-fatsRIVzy6pyt6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5200:5977::/48 Signature Algorithm: sha256WithRSAEncryption 43:28:0d:67:3b:89:1a:c6:ca:74:b7:fb:3b:ec:84:ce:52:47: 39:09:a0:b5:f5:59:65:80:46:72:0d:6c:52:15:66:6c:f5:96: f8:22:ac:3d:d8:ff:b9:97:7c:6d:2a:e5:8d:7d:e7:9e:6b:38: 23:8a:0c:8b:0e:ed:6c:9b:15:06:0a:f6:50:86:5f:ed:c1:09: bc:ea:09:6f:c7:4b:d6:fa:5b:24:68:23:13:9d:67:49:dd:dc: f8:f2:b5:40:01:96:51:eb:7b:53:bd:82:c4:91:29:70:c9:3e: f4:0b:39:39:c7:dc:f2:86:d3:b4:96:f9:5b:1f:34:a9:30:33: 01:48:d5:ce:4a:1b:e8:d4:c9:92:25:16:ca:00:f8:eb:e1:c1: 43:d0:69:89:2b:54:33:bc:9d:69:4b:75:03:64:23:a5:88:8d: f4:bf:97:f4:f7:2c:67:e1:f3:50:e2:59:c8:e6:08:e6:4f:4b: 6c:16:2b:e9:2e:14:71:3e:c6:da:ae:07:d7:31:10:05:14:2b: 79:c7:4b:a1:e8:9c:a0:88:e2:5a:9c:68:57:9f:af:2c:a3:a6: 59:28:39:d8:b4:c4:21:a3:09:5f:aa:09:f5:79:aa:7d:5e:59: a4:56:67:fe:0b:2c:a8:57:f9:20:5e:d9:e5:0d:94:b0:32:f5: c6:c7:60:87 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqbFyv39FKXyfyL/OaKDJlIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzIyMTQ1MjljM2YxNzJmN2U3ZGFiNmM0NDg1NzNjYmFhNzJiN2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLNv4azCK2M5A3L0nin+VBkqc/db 1Xy29ruH6Tut/4gXKjcJKHDe67quK9QW2n1ogNcoiU77ztthcJf5BQ6pKHMtS0f7 HKGHLbYY/iaAl7KyzcfuqmqLU1wX/Y9tPWZH01iN1B5oIrDi8g9dpEu0mPYL6T5a 03ksuDj6qizBYRD5f7u+Y1prkAT95BstpbyESxgJ2hUjxlO5VhjPEryJ7J9rHhK/ osO7hQUqpTWGjRNtZPh+QLX1v22njKjk3YnzNpMuPcjvY/fHL+i3gYoEJr40/UHp ruO4b8Xs8lqtwHiXuYcDEeZIhP3LRG4Up8qheTEbN31sqX0iS9gXHYmWOwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCMiFFKcPxcvfn2rbESFc8uqcremMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvSXlJVVVwd19GeTktZmF0c1JJVnp5NnB5dDZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgRSAFl3 MA0GCSqGSIb3DQEBCwUAA4IBAQBDKA1nO4kaxsp0t/s77ITOUkc5CaC19VllgEZy DWxSFWZs9Zb4Iqw92P+5l3xtKuWNfeeeazgjigyLDu1smxUGCvZQhl/twQm86glv x0vW+lskaCMTnWdJ3dz48rVAAZZR63tTvYLEkSlwyT70Czk5x9zyhtO0lvlbHzSp MDMBSNXOShvo1MmSJRbKAPjr4cFD0GmJK1QzvJ1pS3UDZCOliI30v5f09yxn4fNQ 4lnI5gjmT0tsFivpLhRxPsbargfXMRAFFCt5x0uh6JygiOJanGhXn68so6ZZKDnY tMQhowlfqgn1eap9XlmkVmf+CyyoV/kgXtnlDZSwMvXGx2CH -----END CERTIFICATE-----Generated at Fri Dec 5 21:32:23 2025 by rpki-client