This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mrHOl9a7a0QgKCoScH7aFYNb0hY.roa File: mrHOl9a7a0QgKCoScH7aFYNb0hY.roa (raw, json) Hash identifier: ZxhWyFZHwFFMbkjE+4nMPu2jytjo6N0hLSuvfGhVWTk= Subject key identifier: 9A:B1:CE:97:D6:BB:6B:44:20:28:2A:12:70:7E:DA:15:83:5B:D2:16 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019A96A9A82AE691C4EBBA3C320C1AC651F2 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mrHOl9a7a0QgKCoScH7aFYNb0hY.roa Signing time: Tue 18 Nov 2025 11:11:32 +0000 ROA not before: Tue 18 Nov 2025 11:11:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215330 IP address blocks: 2a0d:6b40::/29 maxlen: 29 2a0d:e340::/29 maxlen: 29 2a11:6040::/29 maxlen: 29 2a11:8bc0::/29 maxlen: 29 2a12:57c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:a9:a8:2a:e6:91:c4:eb:ba:3c:32:0c:1a:c6:51:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Nov 18 11:11:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ab1ce97d6bb6b4420282a12707eda15835bd216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:6e:6c:56:1d:21:c4:ee:c5:0d:86:88:c8: 62:92:aa:3e:37:d4:34:ad:64:b1:71:ea:ef:3c:9f: 0d:09:ae:3d:41:c7:94:33:77:97:fd:42:9d:a6:7e: 11:09:b2:40:59:06:a8:d8:c1:f7:b8:1f:44:27:19: 53:73:e3:f2:46:29:f6:6b:9d:5b:1f:67:85:e0:ee: a0:bf:12:bd:66:77:3a:38:8a:4e:70:b7:a0:8f:e0: ec:13:4b:c1:18:c0:64:6c:c8:c1:c7:e3:66:fd:ac: 00:aa:09:79:8d:89:c4:5b:36:68:b9:c3:02:0a:a6: 15:b6:38:e6:d3:bf:9f:85:9f:83:8a:e8:a6:bc:c8: b3:79:07:80:1f:51:52:4c:64:5b:f5:78:35:95:cb: 01:cb:46:ad:ff:20:c8:30:6c:11:c0:97:c3:cf:3e: 9c:bd:e4:19:65:d5:76:6d:8c:dc:f0:ab:a9:9b:24: b9:11:3c:ff:2f:0c:ba:8d:26:64:a3:c7:c6:9e:a9: 17:c9:ac:d2:50:09:e7:6a:45:ea:53:db:3e:0a:18: 7a:12:fe:d1:2e:f2:15:1e:78:c1:64:14:fa:81:af: 1e:e5:e9:7c:15:39:b7:d5:ae:d5:ab:d3:74:b3:6b: cc:ce:c7:0b:77:4e:98:fe:7a:a7:20:c8:04:c4:75: 98:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B1:CE:97:D6:BB:6B:44:20:28:2A:12:70:7E:DA:15:83:5B:D2:16 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mrHOl9a7a0QgKCoScH7aFYNb0hY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6b40::/29 2a0d:e340::/29 2a11:6040::/29 2a11:8bc0::/29 2a12:57c0::/29 Signature Algorithm: sha256WithRSAEncryption 41:7e:97:26:fd:e2:f9:dd:44:4e:6f:9f:73:8c:5d:3b:a1:c0: de:fe:4c:ab:45:5c:a8:e8:9f:36:2b:46:3b:65:9c:1a:12:78: bc:25:db:5b:89:6d:aa:c6:0f:40:86:37:e0:d2:2a:6e:13:25: 8b:1a:87:ed:60:d8:4f:92:db:1d:da:9f:10:21:d2:19:05:42: 1e:8c:83:7e:ca:a9:2c:ef:04:2f:9b:85:63:56:ea:3f:e0:36: b3:3a:07:e4:6b:8d:b5:a0:1b:ee:5c:60:6b:f5:a9:b8:9f:20: 6a:36:1d:6b:df:35:87:94:6d:42:79:12:d2:0d:af:c7:2a:2a: ff:e5:9a:fe:48:79:7b:a6:d2:19:28:63:7c:85:65:df:d8:55: 51:a0:b9:88:60:e1:b4:bf:77:b2:e3:a3:5a:25:b0:d0:2d:12: 53:a6:4c:d3:3a:18:cd:6a:65:1e:50:22:23:6c:cf:7b:b1:ca: c9:06:07:03:0d:f5:55:c6:0a:7f:b5:b3:7c:6d:66:f8:18:d8: 7d:c5:f2:90:94:98:f6:25:d3:b5:43:51:d1:99:3f:73:44:38: 19:b7:3f:54:68:21:7d:5e:32:6d:f5:26:84:c4:0e:f3:18:0c: 2b:58:d9:2a:c1:69:ae:d8:d7:7d:ab:c8:2a:63:7c:2e:62:a5: 43:61:35:15 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZqWqagq5pHE67o8MgwaxlHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMTE4MTExMTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWIxY2U5N2Q2YmI2YjQ0MjAyODJhMTI3MDdlZGExNTgzNWJkMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrhubFYdIcTuxQ2GiMhikqo+N9Q0 rWSxcervPJ8NCa49QceUM3eX/UKdpn4RCbJAWQao2MH3uB9EJxlTc+PyRin2a51b H2eF4O6gvxK9Znc6OIpOcLegj+DsE0vBGMBkbMjBx+Nm/awAqgl5jYnEWzZoucMC CqYVtjjm07+fhZ+DiuimvMizeQeAH1FSTGRb9Xg1lcsBy0at/yDIMGwRwJfDzz6c veQZZdV2bYzc8KupmyS5ETz/Lwy6jSZko8fGnqkXyazSUAnnakXqU9s+Chh6Ev7R LvIVHnjBZBT6ga8e5el8FTm31a7Vq9N0s2vMzscLd06Y/nqnIMgExHWYnwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJqxzpfWu2tEICgqEnB+2hWDW9IWMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvbXJIT2w5YTdhMFFnS0NvU2NIN2FGWU5iMGhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKg1rQAMF AyoN40ADBQMqEWBAAwUDKhGLwAMFAyoSV8AwDQYJKoZIhvcNAQELBQADggEBAEF+ lyb94vndRE5vn3OMXTuhwN7+TKtFXKjonzYrRjtlnBoSeLwl21uJbarGD0CGN+DS Km4TJYsah+1g2E+S2x3anxAh0hkFQh6Mg37KqSzvBC+bhWNW6j/gNrM6B+RrjbWg G+5cYGv1qbifIGo2HWvfNYeUbUJ5EtINr8cqKv/lmv5IeXum0hkoY3yFZd/YVVGg uYhg4bS/d7Ljo1olsNAtElOmTNM6GM1qZR5QIiNsz3uxyskGBwMN9VXGCn+1s3xt ZvgY2H3F8pCUmPYl07VDUdGZP3NEOBm3P1RoIX1eMm31JoTEDvMYDCtY2SrBaa7Y 132ryCpjfC5ipUNhNRU= -----END CERTIFICATE-----Generated at Fri Dec 5 13:23:16 2025 by rpki-client