This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7YkzK8pusbKV9XHeEMdf4xuqtB4.roa File: 7YkzK8pusbKV9XHeEMdf4xuqtB4.roa (raw, json) Hash identifier: sYBk6nHaqg5J/PcEEe9e30k0TRd9B0NVbC5tZGzRjVI= Subject key identifier: ED:89:33:2B:CA:6E:B1:B2:95:F5:71:DE:10:C7:5F:E3:1B:AA:B4:1E Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019AB0DE63871916CDE20BBDF28EC924A350 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7YkzK8pusbKV9XHeEMdf4xuqtB4.roa Signing time: Sun 23 Nov 2025 13:19:15 +0000 ROA not before: Sun 23 Nov 2025 13:19:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205901 IP address blocks: 2a12:bec4:1e10::/48 maxlen: 48 2a12:bec4:1e11::/48 maxlen: 48 2a12:bec4:1e12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:de:63:87:19:16:cd:e2:0b:bd:f2:8e:c9:24:a3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Nov 23 13:19:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed89332bca6eb1b295f571de10c75fe31baab41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:f0:7a:b7:cd:f8:d7:64:f1:64:5d:d3:a2: 2c:07:d0:f1:af:8d:93:a2:17:6a:07:3c:2a:dd:41: b4:e3:1b:27:43:5c:c1:4b:fa:f9:3a:1c:a8:e6:94: ca:93:12:05:a4:91:f7:56:6c:45:95:09:66:3e:70: 15:9a:9d:cf:05:37:f8:22:6e:bd:66:3e:a8:ec:5e: 4a:ac:a4:e5:ca:17:d5:29:33:84:7d:23:a1:51:f8: 81:88:24:bb:21:7f:a6:f1:5e:8a:a3:f6:25:56:48: 23:4e:28:4d:e3:60:91:6b:8f:eb:23:6f:77:14:c6: 66:a8:28:0e:ac:33:1a:a0:da:55:59:62:4c:cb:c6: bb:15:31:1e:09:fc:93:a7:c3:52:37:03:74:57:e8: 94:f8:e4:68:38:29:5e:4b:35:1b:85:8f:d7:f3:a4: 9c:7d:3b:cc:c2:6f:4b:34:f9:b5:fc:28:6d:93:b5: 3c:e4:a5:68:46:05:a0:d0:a2:40:c8:d2:9f:6f:36: 5b:64:2f:0a:34:99:2a:d3:1b:6f:31:b4:7b:cd:51: 9f:44:1f:58:5f:29:56:9a:a2:6d:a5:09:14:60:d9: 2b:e7:dd:31:b6:8d:e9:cd:ec:41:e4:c8:1f:48:45: 89:f2:7b:99:87:00:05:cc:a6:92:42:73:dd:04:98: 3c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:89:33:2B:CA:6E:B1:B2:95:F5:71:DE:10:C7:5F:E3:1B:AA:B4:1E X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7YkzK8pusbKV9XHeEMdf4xuqtB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1e10::-2a12:bec4:1e12:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 80:9a:55:cd:61:ef:34:2d:be:67:81:8c:5d:56:cd:06:a7:2a: b0:d2:04:cd:c7:eb:bb:e8:fc:d7:e8:d0:de:89:1d:91:39:f4: fe:09:db:d5:15:a3:24:2b:c2:1f:82:1a:50:c7:7d:59:d0:fd: e1:1a:88:db:b3:60:6d:0c:2e:bb:de:3b:16:3e:da:71:e2:b6: 72:9b:21:98:4e:88:3d:a1:a3:cd:6c:45:c4:6d:23:2b:1e:7c: 2e:f6:72:29:30:8a:b2:1d:e1:21:de:0e:97:34:b4:e7:4f:71: 7b:eb:7c:63:32:a6:fd:5b:86:50:4f:31:fe:58:06:a3:96:44: 63:bd:73:c4:92:69:45:0c:e9:85:77:f1:17:43:6f:0e:31:2b: 29:76:0f:64:16:a0:b7:a0:39:ba:8a:98:ee:6f:91:19:98:ab: 66:2b:23:99:97:aa:d3:da:67:ce:d4:97:67:e0:04:23:39:10: fd:59:f9:0c:e6:ce:c9:9f:38:57:71:20:9d:92:8c:01:ad:00: 23:29:52:81:ed:b6:d0:67:91:08:b3:d4:9f:b4:71:b1:bb:44: de:41:27:77:ee:28:7f:78:5a:67:38:f2:3c:d2:63:29:6a:4b: ce:7d:a3:34:d6:5a:3e:9e:f8:61:e1:0b:94:2f:f8:72:84:da: 15:24:b4:dc -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZqw3mOHGRbN4gu98o7JJKNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjUxMTIzMTMxOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDg5MzMyYmNhNmViMWIyOTVmNTcxZGUxMGM3NWZlMzFiYWFiNDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx7werfN+Ndk8WRd06IsB9Dxr42T ohdqBzwq3UG04xsnQ1zBS/r5Ohyo5pTKkxIFpJH3VmxFlQlmPnAVmp3PBTf4Im69 Zj6o7F5KrKTlyhfVKTOEfSOhUfiBiCS7IX+m8V6Ko/YlVkgjTihN42CRa4/rI293 FMZmqCgOrDMaoNpVWWJMy8a7FTEeCfyTp8NSNwN0V+iU+ORoOCleSzUbhY/X86Sc fTvMwm9LNPm1/Chtk7U85KVoRgWg0KJAyNKfbzZbZC8KNJkq0xtvMbR7zVGfRB9Y XylWmqJtpQkUYNkr590xto3pzexB5MgfSEWJ8nuZhwAFzKaSQnPdBJg8EQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFO2JMyvKbrGylfVx3hDHX+MbqrQeMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvN1lreks4cHVzYktWOVhIZUVNZGY0eHVxdEI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqEr7E HhADBwAqEr7EHhIwDQYJKoZIhvcNAQELBQADggEBAICaVc1h7zQtvmeBjF1WzQan KrDSBM3H67vo/Nfo0N6JHZE59P4J29UVoyQrwh+CGlDHfVnQ/eEaiNuzYG0MLrve OxY+2nHitnKbIZhOiD2ho81sRcRtIysefC72cikwirId4SHeDpc0tOdPcXvrfGMy pv1bhlBPMf5YBqOWRGO9c8SSaUUM6YV38RdDbw4xKyl2D2QWoLegObqKmO5vkRmY q2YrI5mXqtPaZ87Ul2fgBCM5EP1Z+QzmzsmfOFdxIJ2SjAGtACMpUoHtttBnkQiz 1J+0cbG7RN5BJ3fuKH94Wmc48jzSYylqS859ozTWWj6e+GHhC5Qv+HKE2hUktNw= -----END CERTIFICATE-----Generated at Fri Dec 5 20:11:33 2025 by rpki-client