This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/rPOXAe8XWSJTapFNZZ9XZ_7GfpE.roa File: rPOXAe8XWSJTapFNZZ9XZ_7GfpE.roa (raw, json) Hash identifier: r8Jur4EJ7hn/7uLzBKDScLJ8L342U+l/tsyZx+LNM6Y= Subject key identifier: AC:F3:97:01:EF:17:59:22:53:6A:91:4D:65:9F:57:67:FE:C6:7E:91 Certificate issuer: /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Certificate serial: 019A9C3DF339417916CAA0B48C59FAFCCF1C Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/rPOXAe8XWSJTapFNZZ9XZ_7GfpE.roa Signing time: Wed 19 Nov 2025 13:11:36 +0000 ROA not before: Wed 19 Nov 2025 13:11:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 2a05:7640:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:3d:f3:39:41:79:16:ca:a0:b4:8c:59:fa:fc:cf:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Validity Not Before: Nov 19 13:11:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=acf39701ef175922536a914d659f5767fec67e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:75:99:e1:0c:38:dd:02:4b:72:b7:a1:83: c6:ee:30:c9:b9:49:d8:c6:d3:6e:8d:bc:1f:f5:a1: 82:6c:26:ca:57:0a:f1:82:dc:a0:ca:a4:af:71:06: 1d:0e:54:42:fb:07:89:3d:29:39:4b:36:7a:7e:66: c3:95:ae:8b:1b:c1:52:02:80:2f:f8:f8:77:7a:43: 7b:a1:d8:7f:c1:3f:54:55:02:22:83:58:77:0d:af: 4b:b2:2d:e1:7b:a1:39:8c:dd:14:1c:32:97:e0:d5: e6:52:97:b4:ba:bb:dc:dd:d9:93:71:59:b8:9e:5c: 9a:3a:ac:3b:a1:6e:a4:f6:02:59:dc:2d:18:bf:a2: d4:b6:f9:b6:cc:42:d1:22:b7:cf:e8:14:3f:4f:45: 30:02:58:74:36:03:52:62:fd:a3:9f:d5:b1:38:0c: d4:c5:03:85:de:d9:b5:d5:32:36:bf:b2:2f:1f:07: c4:3e:f9:a5:06:94:77:44:65:b9:37:25:c0:b1:3e: 99:32:85:b8:58:0d:25:4f:f6:11:6b:bf:f4:be:eb: b8:ae:d9:fd:de:c5:89:ae:ff:ec:7c:71:83:e3:dd: 59:61:81:49:4a:46:5b:1d:85:a0:44:69:e3:cd:4a: 65:dc:37:0b:be:e1:28:5f:8b:3e:6d:d7:37:f5:68: 6a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F3:97:01:EF:17:59:22:53:6A:91:4D:65:9F:57:67:FE:C6:7E:91 X509v3 Authority Key Identifier: keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/rPOXAe8XWSJTapFNZZ9XZ_7GfpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:7640:1000::/36 Signature Algorithm: sha256WithRSAEncryption 38:1e:3c:62:c8:06:33:f8:9f:93:b9:31:6e:a9:8b:32:f6:f4: 53:e0:13:78:3f:9e:ce:39:2c:43:09:1f:04:a3:ab:d1:54:de: 2b:18:13:ac:2b:b7:28:22:63:dd:2f:11:71:18:ef:15:21:37: e3:e0:6c:fc:2d:1f:80:51:b0:8f:31:4d:7f:40:ba:10:2a:02: 05:48:9f:20:a4:44:06:87:87:ca:e1:13:f7:0e:f0:88:95:6e: ee:b3:a3:cd:0b:de:5b:29:5b:8f:a8:c5:89:76:a7:ed:de:86: 90:ff:a1:b7:9e:6f:94:7d:c4:83:8a:c1:75:59:89:4d:bc:ca: 32:e9:73:04:ad:66:32:bd:fd:2d:04:ae:5d:6c:b4:be:a5:25: cf:cb:36:e0:10:73:88:e4:ec:63:a9:b5:40:9b:e2:7c:4c:a5: c5:2a:fe:6d:0f:95:15:d9:32:d9:66:e8:19:d9:d3:86:4a:b9: 80:21:83:2c:e7:80:1a:9d:6b:e1:9b:d4:4e:ba:9d:01:b4:91: c7:08:33:48:28:52:c1:af:7d:46:57:22:ab:c4:bc:d6:6b:c2: fa:31:b0:73:7b:00:b4:ae:cb:9e:71:df:5d:06:ab:f2:22:09: 33:79:98:55:42:6d:41:6a:25:80:ec:65:66:2f:95:aa:82:cf: 03:6f:e6:1d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZqcPfM5QXkWyqC0jFn6/M8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWJmODE3ZTFhOTJmM2NkN2Y0OWRmNmEzMWMyNjVmZmU0 NzgwMDgwHhcNMjUxMTE5MTMxMTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2YzOTcwMWVmMTc1OTIyNTM2YTkxNGQ2NTlmNTc2N2ZlYzY3ZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLF1meEMON0CS3K3oYPG7jDJuUnY xtNujbwf9aGCbCbKVwrxgtygyqSvcQYdDlRC+weJPSk5SzZ6fmbDla6LG8FSAoAv +Ph3ekN7odh/wT9UVQIig1h3Da9Lsi3he6E5jN0UHDKX4NXmUpe0urvc3dmTcVm4 nlyaOqw7oW6k9gJZ3C0Yv6LUtvm2zELRIrfP6BQ/T0UwAlh0NgNSYv2jn9WxOAzU xQOF3tm11TI2v7IvHwfEPvmlBpR3RGW5NyXAsT6ZMoW4WA0lT/YRa7/0vuu4rtn9 3sWJrv/sfHGD491ZYYFJSkZbHYWgRGnjzUpl3DcLvuEoX4s+bdc39WhqxQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKzzlwHvF1kiU2qRTWWfV2f+xn6RMB8GA1UdIwQY MBaAFHLr+BfhqS881/Sd9qMcJl/+R4AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEt YzlmN2MwZTdhY2M2LzEvclBPWEFlOFhXU0pUYXBGTlpaOVhaXzdHZnBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEtYzlmN2MwZTdhY2M2 LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgV2QBAw DQYJKoZIhvcNAQELBQADggEBADgePGLIBjP4n5O5MW6pizL29FPgE3g/ns45LEMJ HwSjq9FU3isYE6wrtygiY90vEXEY7xUhN+PgbPwtH4BRsI8xTX9AuhAqAgVInyCk RAaHh8rhE/cO8IiVbu6zo80L3lspW4+oxYl2p+3ehpD/obeeb5R9xIOKwXVZiU28 yjLpcwStZjK9/S0Erl1stL6lJc/LNuAQc4jk7GOptUCb4nxMpcUq/m0PlRXZMtlm 6BnZ04ZKuYAhgyzngBqda+Gb1E66nQG0kccIM0goUsGvfUZXIqvEvNZrwvoxsHN7 ALSuy55x310Gq/IiCTN5mFVCbUFqJYDsZWYvlaqCzwNv5h0= -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:48 2025 by rpki-client