This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/NOlI_fBk5ac11-vQpefON2wqLdA.roa File: NOlI_fBk5ac11-vQpefON2wqLdA.roa (raw, json) Hash identifier: ol1Kba2KF/6y9D4fnb40Od/kMcn8nYIso3TsGjFV5Uk= Subject key identifier: 34:E9:48:FD:F0:64:E5:A7:35:D7:EB:D0:A5:E7:CE:37:6C:2A:2D:D0 Certificate issuer: /CN=7d415bee222585f2d1aafbffba795031a45129c7 Certificate serial: 019A7C8451734DBE5710DCCFBEB2213A123D Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/NOlI_fBk5ac11-vQpefON2wqLdA.roa Signing time: Thu 13 Nov 2025 09:20:37 +0000 ROA not before: Thu 13 Nov 2025 09:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44486 IP address blocks: 2001:678:110c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:84:51:73:4d:be:57:10:dc:cf:be:b2:21:3a:12:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7 Validity Not Before: Nov 13 09:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=34e948fdf064e5a735d7ebd0a5e7ce376c2a2dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e6:78:87:19:f3:49:e3:ad:7f:15:94:bc:b6: 1a:47:f5:de:b0:34:ac:41:23:fd:8c:c4:66:31:8c: 64:b9:0b:da:86:0e:00:8e:f8:8d:bc:e0:cd:e0:cf: 88:f3:56:36:93:a7:44:6b:f5:5f:27:95:ed:f8:6f: fe:7c:0d:60:58:d8:2f:ac:5f:6a:d6:55:2b:d5:90: b3:ea:a4:6f:d8:36:f1:cd:de:dd:28:e0:c6:22:18: 19:eb:15:f8:18:d1:a4:33:67:39:1f:72:78:59:77: b7:49:fb:4a:96:33:19:80:e1:a9:f5:1d:b7:34:e5: e3:c4:38:8d:99:96:cd:35:a8:5e:9c:ec:34:48:47: 61:ff:51:a4:be:bf:62:51:86:2e:1e:9a:54:2f:e1: 74:92:8e:43:29:48:90:e4:9e:56:ad:7b:b6:aa:66: 15:3a:86:a5:10:18:98:71:81:10:fc:81:b8:35:8f: a4:5b:46:88:65:0e:8c:d8:be:40:29:e6:9b:01:a5: a8:48:3a:b4:e7:ba:62:15:b8:ba:ba:40:5a:4a:3d: 75:6e:58:77:58:82:62:76:a3:41:52:b8:92:3a:64: 26:7a:09:f3:17:17:20:2d:df:43:27:4a:67:d7:40: 02:75:71:c1:6e:73:ec:b5:87:ba:af:36:fe:75:6d: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E9:48:FD:F0:64:E5:A7:35:D7:EB:D0:A5:E7:CE:37:6C:2A:2D:D0 X509v3 Authority Key Identifier: keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/NOlI_fBk5ac11-vQpefON2wqLdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:110c::/48 Signature Algorithm: sha256WithRSAEncryption d0:44:23:e9:3c:4d:b4:b0:29:af:1d:f7:32:50:4e:4d:fc:76: b2:65:a7:fd:69:78:3a:1a:db:0f:14:69:18:08:ff:ff:dc:18: bc:a3:06:89:fd:6c:b8:f1:7f:dc:3c:17:d0:69:dd:e4:ad:9a: c9:f5:70:8e:b0:0d:c1:03:a1:f4:40:8f:a7:7f:71:81:38:c7: e3:4a:4d:74:ad:9c:82:67:93:b8:26:75:b8:ed:07:eb:41:13: a5:5a:a3:d4:7e:5b:2d:77:e9:d8:a3:3d:45:11:ac:4b:1c:48: 8d:a4:8e:01:18:15:63:5b:9b:a0:9d:da:0a:4b:9e:97:94:47: e8:6d:ce:df:1f:41:ac:2a:ac:37:42:57:c8:aa:0d:36:05:a5: 32:71:59:bb:0c:39:63:49:e6:0d:6f:00:ac:dd:0b:21:23:28: c6:70:a4:5e:08:ab:f9:7a:d7:bd:09:87:d7:97:d8:7a:4e:03: 1e:5b:49:8e:c9:35:bf:67:64:30:7d:f5:4f:cd:4f:04:0a:12: d2:db:cc:93:94:93:7e:b0:6a:31:f4:c8:c2:0f:d1:ad:43:f4: 91:af:cb:4b:7b:ea:9c:92:0a:c2:d0:81:04:22:40:1d:8c:53: be:90:72:db:b1:50:73:f3:c1:38:67:3d:02:df:77:c1:e7:32: 78:82:a5:32 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZp8hFFzTb5XENzPvrIhOhI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNDE1YmVlMjIyNTg1ZjJkMWFhZmJmZmJhNzk1MDMxYTQ1 MTI5YzcwHhcNMjUxMTEzMDkyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGU5NDhmZGYwNjRlNWE3MzVkN2ViZDBhNWU3Y2UzNzZjMmEyZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uZ4hxnzSeOtfxWUvLYaR/XesDSs QSP9jMRmMYxkuQvahg4AjviNvODN4M+I81Y2k6dEa/VfJ5Xt+G/+fA1gWNgvrF9q 1lUr1ZCz6qRv2Dbxzd7dKODGIhgZ6xX4GNGkM2c5H3J4WXe3SftKljMZgOGp9R23 NOXjxDiNmZbNNahenOw0SEdh/1Gkvr9iUYYuHppUL+F0ko5DKUiQ5J5WrXu2qmYV OoalEBiYcYEQ/IG4NY+kW0aIZQ6M2L5AKeabAaWoSDq057piFbi6ukBaSj11blh3 WIJidqNBUriSOmQmegnzFxcgLd9DJ0pn10ACdXHBbnPstYe6rzb+dW174wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDTpSP3wZOWnNdfr0KXnzjdsKi3QMB8GA1UdIwQY MBaAFH1BW+4iJYXy0ar7/7p5UDGkUSnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlVGYjdpSWxoZkxScXZ2X3VubFFNYVJSS2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yZDQ0MTktMmViNi00YTczLTk5ZjQt MmNkNGJmMjdiNjdkLzEvTk9sSV9mQms1YWMxMS12UXBlZk9OMndxTGRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8yZDQ0MTktMmViNi00YTczLTk5ZjQtMmNkNGJmMjdiNjdk LzEvZlVGYjdpSWxoZkxScXZ2X3VubFFNYVJSS2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBEM MA0GCSqGSIb3DQEBCwUAA4IBAQDQRCPpPE20sCmvHfcyUE5N/HayZaf9aXg6GtsP FGkYCP//3Bi8owaJ/Wy48X/cPBfQad3krZrJ9XCOsA3BA6H0QI+nf3GBOMfjSk10 rZyCZ5O4JnW47QfrQROlWqPUflstd+nYoz1FEaxLHEiNpI4BGBVjW5ugndoKS56X lEfobc7fH0GsKqw3QlfIqg02BaUycVm7DDljSeYNbwCs3QshIyjGcKReCKv5ete9 CYfXl9h6TgMeW0mOyTW/Z2QwffVPzU8EChLS28yTlJN+sGox9MjCD9GtQ/SRr8tL e+qckgrC0IEEIkAdjFO+kHLbsVBz88E4Zz0C33fB5zJ4gqUy -----END CERTIFICATE-----Generated at Fri Nov 28 22:19:04 2025 by rpki-client