This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/w75X_mb0ntzmp9oXWCHbUyg0XBo.roa File: w75X_mb0ntzmp9oXWCHbUyg0XBo.roa (raw, json) Hash identifier: 1D4Zht2+ygG3tG8bcOOki/cC3ez7HlmhCUhApqgwPmQ= Subject key identifier: C3:BE:57:FE:66:F4:9E:DC:E6:A7:DA:17:58:21:DB:53:28:34:5C:1A Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B172B2FB53CC4D27006C4E13E37B354 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/w75X_mb0ntzmp9oXWCHbUyg0XBo.roa Signing time: Wed 19 Nov 2025 07:49:38 +0000 ROA not before: Wed 19 Nov 2025 07:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62410 IP address blocks: 2a0e:d604::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:17:2b:2f:b5:3c:c4:d2:70:06:c4:e1:3e:37:b3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c3be57fe66f49edce6a7da175821db5328345c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:9f:bd:73:5d:5b:8a:7b:8b:87:5d:5b:4a: ae:d2:41:21:ee:16:d1:ad:7b:3f:20:11:3d:8e:df: 7a:b7:ad:51:22:1e:28:a7:74:16:7a:74:71:db:33: 08:2d:68:f7:66:15:25:9a:0d:6c:79:18:bb:3f:76: 12:f4:a7:59:ca:04:41:9a:85:9d:03:23:a5:8d:eb: 37:cc:bb:e7:0a:d6:55:fa:67:64:b9:1b:d6:4a:da: b3:6b:32:86:e8:0e:ff:00:3b:41:c2:c9:10:99:88: 50:44:54:87:f7:f7:f2:c4:8d:35:b0:97:c7:e6:0e: d6:a3:29:c7:44:7c:3b:a3:9f:b2:fb:25:37:39:d8: cd:7f:ca:21:dc:e2:d6:09:0f:ba:c4:19:22:b1:8f: ae:cf:b5:d9:75:82:30:cd:29:d5:e0:52:cb:46:7e: 72:f9:82:61:f6:09:8d:ae:8d:f3:5a:7d:8b:cc:6b: e6:d8:54:47:8f:d2:88:c3:c1:8b:88:d7:e4:5e:c9: 81:21:a7:c6:c5:01:f5:f2:f4:84:24:d3:fb:d3:80: d3:49:bd:21:cf:62:11:83:39:d5:85:1c:e1:16:96: 72:66:55:43:2f:2a:a5:d6:8b:0b:d2:82:a4:66:69: 27:26:15:1a:f5:21:13:04:eb:ac:51:22:3a:cd:26: d5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BE:57:FE:66:F4:9E:DC:E6:A7:DA:17:58:21:DB:53:28:34:5C:1A X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/w75X_mb0ntzmp9oXWCHbUyg0XBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:d604::/48 Signature Algorithm: sha256WithRSAEncryption c4:a8:ee:08:2e:70:38:3c:c5:5d:b1:71:35:3a:64:dc:e1:22: 4f:31:b5:2a:78:36:ca:14:4d:86:b5:22:dd:cf:76:03:40:da: d8:a2:41:b9:1b:dd:2e:14:74:a5:9c:9a:16:19:31:7d:31:90: b7:a3:b2:aa:3b:ed:f4:75:78:2a:b8:26:c9:45:f5:7a:b7:fb: 68:03:11:bb:95:d2:d0:ad:49:08:ff:00:a6:40:96:ab:6d:e5: b8:f9:b1:01:9b:63:74:e4:8a:2c:2e:44:80:33:f4:a2:45:8e: e1:94:1a:8b:fe:7b:ef:f0:66:81:94:8d:ac:40:18:14:40:d8: 94:71:0e:fd:be:9a:cd:a6:93:2e:cb:2a:42:35:6c:1c:42:04: 67:17:26:59:f7:6e:cb:11:bc:4e:d8:45:68:df:b7:2b:c8:9e: 2e:42:a7:8a:2f:53:40:38:77:0a:72:26:b5:14:61:17:b1:ea: 7a:dc:ce:da:82:53:8b:30:0e:e8:43:db:2d:5b:3a:ee:4a:5a: be:1f:4e:74:89:3d:20:2b:ca:6b:1c:3a:91:eb:2d:d9:22:89: 07:0d:b0:28:5f:8a:a2:f7:8c:68:d8:61:7d:82:a2:e9:e5:ad: 0a:de:38:b2:df:e9:9e:be:6d:40:3c:dd:64:17:07:2b:57:13: 17:2f:9b:dc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqbFysvtTzE0nAGxOE+N7NUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2JlNTdmZTY2ZjQ5ZWRjZTZhN2RhMTc1ODIxZGI1MzI4MzQ1YzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBCfvXNdW4p7i4ddW0qu0kEh7hbR rXs/IBE9jt96t61RIh4op3QWenRx2zMILWj3ZhUlmg1seRi7P3YS9KdZygRBmoWd AyOljes3zLvnCtZV+mdkuRvWStqzazKG6A7/ADtBwskQmYhQRFSH9/fyxI01sJfH 5g7WoynHRHw7o5+y+yU3OdjNf8oh3OLWCQ+6xBkisY+uz7XZdYIwzSnV4FLLRn5y +YJh9gmNro3zWn2LzGvm2FRHj9KIw8GLiNfkXsmBIafGxQH18vSEJNP704DTSb0h z2IRgznVhRzhFpZyZlVDLyql1osL0oKkZmknJhUa9SETBOusUSI6zSbVEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMO+V/5m9J7c5qfaF1gh21MoNFwaMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvdzc1WF9tYjBudHptcDlvWFdDSGJVeWcwWEJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7WBAAA MA0GCSqGSIb3DQEBCwUAA4IBAQDEqO4ILnA4PMVdsXE1OmTc4SJPMbUqeDbKFE2G tSLdz3YDQNrYokG5G90uFHSlnJoWGTF9MZC3o7KqO+30dXgquCbJRfV6t/toAxG7 ldLQrUkI/wCmQJarbeW4+bEBm2N05IosLkSAM/SiRY7hlBqL/nvv8GaBlI2sQBgU QNiUcQ79vprNppMuyypCNWwcQgRnFyZZ927LEbxO2EVo37cryJ4uQqeKL1NAOHcK cia1FGEXsep63M7aglOLMA7oQ9stWzruSlq+H050iT0gK8prHDqR6y3ZIokHDbAo X4qi94xo2GF9gqLp5a0K3jiy3+mevm1APN1kFwcrVxMXL5vc -----END CERTIFICATE-----Generated at Fri Dec 5 21:27:42 2025 by rpki-client