This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/1-in9rMNyyFGgYRLDlxHKtg4FB1E.roa File: 1-in9rMNyyFGgYRLDlxHKtg4FB1E.roa (raw, json) Hash identifier: XTsB6+izcSpkaZrV+QFady1SXFl4xfVW0Bsqwj4eQCg= Subject key identifier: FA:29:FD:AC:C3:72:C8:51:A0:61:12:C3:97:11:CA:B6:0E:05:07:51 Certificate issuer: /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Certificate serial: 019A9C3DF3A0C2FAF4C07AB151D7900ACB52 Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/1-in9rMNyyFGgYRLDlxHKtg4FB1E.roa Signing time: Wed 19 Nov 2025 13:11:37 +0000 ROA not before: Wed 19 Nov 2025 13:11:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 2a05:7640:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:3d:f3:a0:c2:fa:f4:c0:7a:b1:51:d7:90:0a:cb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Validity Not Before: Nov 19 13:11:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa29fdacc372c851a06112c39711cab60e050751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:97:f0:d3:04:f5:35:3f:ac:9b:36:dd:9e: cf:2b:73:d6:1a:96:2c:4a:a8:54:bb:dd:92:14:62: 08:4e:56:7b:ca:b9:a8:39:c2:66:ad:13:27:04:d3: 2a:3a:4e:76:aa:03:f4:ff:e3:f7:f4:a8:8c:ab:b3: ac:b7:07:69:5c:3a:c8:3d:aa:31:01:6a:8f:4e:43: 7d:2a:50:11:15:c3:3a:23:b1:bc:dc:2e:cf:49:26: 8d:70:b9:56:dd:01:f9:4d:4a:ac:67:5a:34:7a:45: d2:07:f3:6f:2d:2a:9a:b8:79:31:14:d8:23:3d:b1: 64:53:cd:c5:e5:06:9e:9f:70:63:6a:7a:05:b7:c6: 37:da:2f:4c:64:aa:b8:25:14:fd:31:c4:a4:50:ca: 51:25:d9:d7:a3:73:73:29:d0:2b:12:2e:96:47:49: 63:22:4c:9d:05:67:6b:f1:a1:f8:07:73:fd:00:58: fd:fa:4a:dd:d9:22:a6:b1:07:16:64:53:d6:58:5c: c9:de:5f:89:98:de:80:97:6f:45:98:64:f5:0d:b0: c5:f5:46:8b:44:d8:22:df:68:c1:34:f1:68:36:ca: 95:10:99:53:a4:fd:b0:93:76:5b:5e:5a:aa:c2:85: 15:4f:36:8b:6f:56:31:cd:46:9f:9e:e5:1b:ca:6f: c7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:29:FD:AC:C3:72:C8:51:A0:61:12:C3:97:11:CA:B6:0E:05:07:51 X509v3 Authority Key Identifier: keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/1-in9rMNyyFGgYRLDlxHKtg4FB1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:7640:1000::/36 Signature Algorithm: sha256WithRSAEncryption 49:fd:bd:ed:8a:56:9e:e3:61:40:0c:43:4c:7c:2a:bf:71:dc: 11:09:ff:36:43:e4:66:91:ed:07:6b:6e:fe:22:ed:35:9c:da: 25:cc:e8:8e:fb:3f:e0:ed:a2:41:94:f9:c4:b5:b2:03:18:24: 7c:31:a4:7f:e0:9c:32:fb:d4:95:b1:9e:06:74:73:8a:b5:0e: ff:ac:83:39:3f:0f:c6:2d:4e:49:b9:15:a9:4b:85:dc:64:f4: fd:2e:79:71:98:56:86:bd:9c:99:b2:f4:fc:f1:54:e7:a9:57: e7:a8:9e:3b:e0:62:f5:82:3a:b3:7c:6b:bb:b4:a2:bf:8e:a1: 21:84:26:9c:8a:ec:be:56:8a:93:e7:a7:32:4b:fe:da:c5:13: 8a:ad:70:a2:bb:fe:3a:b3:b0:dc:97:fc:10:c2:3d:2a:1e:53: 12:f8:22:9a:ad:9d:4c:88:5a:db:8e:1d:69:ff:8b:ba:c6:ea: ca:0f:21:d6:8b:0f:d7:16:b1:5d:2c:b9:14:d5:bb:3c:5a:b2: 1e:0b:c6:0d:3d:7c:98:81:8f:2d:77:d4:d0:f5:73:b6:9e:13: 90:eb:95:d6:e4:14:e5:8e:be:32:83:19:a2:45:24:0e:c1:67: 72:30:de:d3:61:e6:3a:8b:bd:5c:44:2b:00:b0:2a:fe:9c:02: 14:91:30:fc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqcPfOgwvr0wHqxUdeQCstSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWJmODE3ZTFhOTJmM2NkN2Y0OWRmNmEzMWMyNjVmZmU0 NzgwMDgwHhcNMjUxMTE5MTMxMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTI5ZmRhY2MzNzJjODUxYTA2MTEyYzM5NzExY2FiNjBlMDUwNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN+X8NME9TU/rJs23Z7PK3PWGpYs SqhUu92SFGIITlZ7yrmoOcJmrRMnBNMqOk52qgP0/+P39KiMq7OstwdpXDrIPaox AWqPTkN9KlARFcM6I7G83C7PSSaNcLlW3QH5TUqsZ1o0ekXSB/NvLSqauHkxFNgj PbFkU83F5Qaen3BjanoFt8Y32i9MZKq4JRT9McSkUMpRJdnXo3NzKdArEi6WR0lj IkydBWdr8aH4B3P9AFj9+krd2SKmsQcWZFPWWFzJ3l+JmN6Al29FmGT1DbDF9UaL RNgi32jBNPFoNsqVEJlTpP2wk3ZbXlqqwoUVTzaLb1YxzUafnuUbym/H9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPop/azDcshRoGESw5cRyrYOBQdRMB8GA1UdIwQY MBaAFHLr+BfhqS881/Sd9qMcJl/+R4AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEt YzlmN2MwZTdhY2M2LzEvMS1pbjlyTU55eUZHZ1lSTERseEhLdGc0RkIxRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTQvNDM0ZWZkLWVlNTQtNGJjZC04MTQxLWM5ZjdjMGU3YWNj Ni8xL2N1djRGLUdwTHp6WDlKMzJveHdtWF81SGdBZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoFdkAQ MA0GCSqGSIb3DQEBCwUAA4IBAQBJ/b3tilae42FADENMfCq/cdwRCf82Q+Rmke0H a27+Iu01nNolzOiO+z/g7aJBlPnEtbIDGCR8MaR/4Jwy+9SVsZ4GdHOKtQ7/rIM5 Pw/GLU5JuRWpS4XcZPT9LnlxmFaGvZyZsvT88VTnqVfnqJ474GL1gjqzfGu7tKK/ jqEhhCaciuy+VoqT56cyS/7axROKrXCiu/46s7Dcl/wQwj0qHlMS+CKarZ1MiFrb jh1p/4u6xurKDyHWiw/XFrFdLLkU1bs8WrIeC8YNPXyYgY8td9TQ9XO2nhOQ65XW 5BTljr4ygxmiRSQOwWdyMN7TYeY6i71cRCsAsCr+nAIUkTD8 -----END CERTIFICATE-----Generated at Sat Nov 22 21:46:56 2025 by rpki-client