This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yHokk4X1Ht_4ZYWZnzUO1n8YMtM.roa File: yHokk4X1Ht_4ZYWZnzUO1n8YMtM.roa (raw, json) Hash identifier: 3908MZHVQu/owa0th1E7/EKdDD3nsFDDirpjJ4GPmSw= Subject key identifier: C8:7A:24:93:85:F5:1E:DF:F8:65:85:99:9F:35:0E:D6:7F:18:32:D3 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019A9BC348E5B3DD0FC34A4A4148247CF54C Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yHokk4X1Ht_4ZYWZnzUO1n8YMtM.roa Signing time: Wed 19 Nov 2025 10:57:37 +0000 ROA not before: Wed 19 Nov 2025 10:57:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204909 IP address blocks: 2a0d:7140::/29 maxlen: 29 2a0d:97c0::/29 maxlen: 29 2a0e:19c2::/32 maxlen: 32 2a11:9900::/29 maxlen: 29 2a11:a2c0::/29 maxlen: 29 2a11:c2c0::/29 maxlen: 29 2a12:d380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:c3:48:e5:b3:dd:0f:c3:4a:4a:41:48:24:7c:f5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Nov 19 10:57:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c87a249385f51edff86585999f350ed67f1832d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:ec:ad:da:07:a7:5c:26:c0:71:cf:c5:00: 22:08:f0:d2:a5:cd:70:3d:29:e1:bf:10:a8:c3:0a: d7:bd:12:4a:c4:06:1c:3c:5c:47:49:4d:33:d7:5c: 1e:f7:3d:a3:00:2c:80:8f:e5:59:c8:72:bf:fb:69: 2d:d4:35:d4:df:a6:df:07:9a:7f:65:3f:ca:76:98: 7c:d0:d8:24:0f:dc:45:5f:b2:ba:52:12:df:0c:21: 3e:4f:3e:47:dd:c8:b5:ca:e5:50:7b:4a:fd:8c:02: 79:e6:43:d3:67:c5:48:28:03:33:82:30:4c:41:02: b6:45:07:75:41:88:ed:4b:68:ea:44:0c:91:c6:5f: 99:4c:39:af:2e:fd:c3:84:7c:1a:62:66:84:12:fa: 5e:e8:bf:9e:fd:12:ba:1a:08:6e:6f:46:c0:52:23: bc:3c:6a:e4:dd:20:27:43:70:6b:1b:fe:3a:cc:47: 13:81:03:7c:57:37:56:cc:81:c9:73:13:04:06:d6: 50:74:51:8b:b2:55:70:a8:e4:e5:20:fb:ea:fd:25: 77:ab:18:7a:4a:b3:2e:8f:f8:7a:7f:d6:37:1e:80: a2:78:d3:37:c2:8b:f8:44:96:4f:b7:a4:85:65:c6: ad:11:ec:c0:76:44:3c:cd:ea:72:71:3a:81:e9:ba: 1e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7A:24:93:85:F5:1E:DF:F8:65:85:99:9F:35:0E:D6:7F:18:32:D3 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yHokk4X1Ht_4ZYWZnzUO1n8YMtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:7140::/29 2a0d:97c0::/29 2a0e:19c2::/32 2a11:9900::/29 2a11:a2c0::/29 2a11:c2c0::/29 2a12:d380::/29 Signature Algorithm: sha256WithRSAEncryption 7c:23:df:2a:7d:2d:31:79:70:20:ca:a4:12:60:e4:53:05:0d: 02:2f:26:e5:d9:8f:2e:1a:12:ce:e5:c7:92:f1:cb:f0:ec:53: 0e:07:27:e0:0b:b0:91:d5:1f:de:ff:75:df:51:07:dc:24:b6: 5a:cd:25:20:09:a0:73:f6:30:ab:6f:8a:2c:bf:01:20:6a:9a: 90:98:11:4b:71:0d:61:fe:d9:4a:a2:f1:f6:eb:a2:ba:74:0d: bb:c4:21:da:af:c9:6e:d9:c9:5a:43:03:99:cd:a5:5b:e3:f4: 1e:e6:5e:d8:ea:21:59:eb:9f:f1:c4:a6:d7:65:a5:f4:6d:dd: 5c:93:ca:83:c3:ee:c6:ed:69:0c:ce:23:69:e5:c5:a3:3d:cc: 68:43:cb:7f:03:72:78:aa:4c:48:b8:fd:10:68:85:d3:db:ef: 4b:4a:85:19:19:eb:9a:59:02:6a:ca:89:1f:3b:c3:d8:91:5f: c9:21:c2:f5:0c:fe:8f:9d:27:01:96:27:f3:80:69:1d:6a:a3: b7:9a:4b:b7:5f:46:e9:5d:8f:bd:7a:a7:79:5b:cd:cb:de:20: 11:2e:4b:5c:b2:a7:70:f2:bb:f6:f2:d5:33:f7:3b:7a:cb:b4: 76:13:c5:63:f5:d4:80:6d:03:ec:89:30:0c:ba:2b:a4:cf:a2: e7:cf:10:77 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZqbw0jls90Pw0pKQUgkfPVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMTE5MTA1NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODdhMjQ5Mzg1ZjUxZWRmZjg2NTg1OTk5ZjM1MGVkNjdmMTgzMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldXsrdoHp1wmwHHPxQAiCPDSpc1w PSnhvxCowwrXvRJKxAYcPFxHSU0z11we9z2jACyAj+VZyHK/+2kt1DXU36bfB5p/ ZT/Kdph80NgkD9xFX7K6UhLfDCE+Tz5H3ci1yuVQe0r9jAJ55kPTZ8VIKAMzgjBM QQK2RQd1QYjtS2jqRAyRxl+ZTDmvLv3DhHwaYmaEEvpe6L+e/RK6Gghub0bAUiO8 PGrk3SAnQ3BrG/46zEcTgQN8VzdWzIHJcxMEBtZQdFGLslVwqOTlIPvq/SV3qxh6 SrMuj/h6f9Y3HoCieNM3wov4RJZPt6SFZcatEezAdkQ8zepycTqB6boeyQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFMh6JJOF9R7f+GWFmZ81DtZ/GDLTMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEveUhva2s0WDFIdF80WllXWm56VU8xbjhZTXRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUDKg1xQAMF AyoNl8ADBQAqDhnCAwUDKhGZAAMFAyoRosADBQMqEcLAAwUDKhLTgDANBgkqhkiG 9w0BAQsFAAOCAQEAfCPfKn0tMXlwIMqkEmDkUwUNAi8m5dmPLhoSzuXHkvHL8OxT Dgcn4AuwkdUf3v9131EH3CS2Ws0lIAmgc/Ywq2+KLL8BIGqakJgRS3ENYf7ZSqLx 9uuiunQNu8Qh2q/JbtnJWkMDmc2lW+P0HuZe2OohWeuf8cSm12Wl9G3dXJPKg8Pu xu1pDM4jaeXFoz3MaEPLfwNyeKpMSLj9EGiF09vvS0qFGRnrmlkCasqJHzvD2JFf ySHC9Qz+j50nAZYn84BpHWqjt5pLt19G6V2PvXqneVvNy94gES5LXLKncPK79vLV M/c7esu0dhPFY/XUgG0D7IkwDLorpM+i588Qdw== -----END CERTIFICATE-----Generated at Fri Dec 5 13:22:58 2025 by rpki-client