This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/qzz9nJu7BG1fsmJZr7nugjHmA4k.roa File: qzz9nJu7BG1fsmJZr7nugjHmA4k.roa (raw, json) Hash identifier: ovLgRlHBUUAKK9984wcZaSkMR8RGwPfbP0tBvz1JoVk= Subject key identifier: AB:3C:FD:9C:9B:BB:04:6D:5F:B2:62:59:AF:B9:EE:82:31:E6:03:89 Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019AE60A58C99589EAF873FA23929842992C Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/qzz9nJu7BG1fsmJZr7nugjHmA4k.roa Signing time: Wed 03 Dec 2025 21:07:09 +0000 ROA not before: Wed 03 Dec 2025 21:07:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 2a0f:9bc0::/32 maxlen: 32 2a0f:9bc1::/32 maxlen: 32 2a0f:9bc2::/32 maxlen: 32 2a0f:9bc3::/32 maxlen: 32 2a0f:9bc4::/32 maxlen: 32 2a0f:9bc5::/32 maxlen: 32 2a0f:9bc6::/32 maxlen: 32 2a0f:9bc7::/32 maxlen: 32 2a13:1300::/32 maxlen: 32 2a13:1301::/32 maxlen: 32 2a13:1302::/32 maxlen: 32 2a13:1303::/32 maxlen: 32 2a13:1304::/32 maxlen: 32 2a13:1305::/32 maxlen: 32 2a13:1306::/32 maxlen: 32 2a13:1307::/32 maxlen: 32 2a13:be40::/32 maxlen: 32 2a13:be41::/32 maxlen: 32 2a13:be42::/32 maxlen: 32 2a13:be43::/32 maxlen: 32 2a13:be44::/32 maxlen: 32 2a13:be45::/32 maxlen: 32 2a13:be46::/32 maxlen: 32 2a13:be47::/32 maxlen: 32 2a13:d0c0::/32 maxlen: 32 2a13:d0c1::/32 maxlen: 32 2a13:d0c2::/32 maxlen: 32 2a13:d0c3::/32 maxlen: 32 2a13:d0c4::/32 maxlen: 32 2a13:d0c5::/32 maxlen: 32 2a13:d0c6::/32 maxlen: 32 2a13:d0c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:0a:58:c9:95:89:ea:f8:73:fa:23:92:98:42:99:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Dec 3 21:07:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab3cfd9c9bbb046d5fb26259afb9ee8231e60389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bf:38:2f:79:2f:3e:20:ea:4b:7d:b1:e0:c1: 28:e7:3c:53:ce:ad:cd:0e:28:62:4c:eb:45:f1:29: ea:55:c6:59:b4:d0:85:6a:a9:9f:33:14:4c:d3:e3: 03:08:13:13:e7:64:cb:c5:1f:d3:78:44:19:3a:2c: e2:38:7f:cd:a7:7b:54:bf:70:89:56:ea:eb:dc:d0: 85:d8:77:9d:fb:70:eb:98:64:8b:a5:0c:c9:76:8b: 35:0c:d2:96:d3:51:af:53:c2:53:ae:7c:a0:24:eb: 5e:1b:66:28:4b:da:e3:12:72:3a:dd:8a:98:41:1e: 2c:33:33:8e:46:b1:1a:31:8b:8e:bb:ec:8d:d0:73: 13:55:72:9d:de:16:05:97:cd:21:d7:f7:32:cd:c9: 03:91:fd:83:94:70:fa:18:10:66:b8:ac:b0:a9:de: 1e:70:04:0f:3e:eb:41:1f:35:b1:12:f1:4e:2e:85: d3:bf:9a:df:7d:52:02:c5:db:39:90:63:b4:5d:10: e4:13:9e:6d:9e:37:09:24:a1:08:ef:57:63:29:d1: 2b:1d:65:b0:51:b4:ef:26:23:15:59:a3:ea:61:f8: 5b:fc:64:da:af:8a:ab:c7:20:55:18:27:4b:97:ef: f1:24:b6:bf:1d:75:37:66:f5:5e:1c:d2:d1:1f:af: 9a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3C:FD:9C:9B:BB:04:6D:5F:B2:62:59:AF:B9:EE:82:31:E6:03:89 X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/qzz9nJu7BG1fsmJZr7nugjHmA4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9bc0::/29 2a13:1300::/29 2a13:be40::/29 2a13:d0c0::/29 Signature Algorithm: sha256WithRSAEncryption cd:e5:aa:85:96:bc:cd:8a:ca:4b:7a:ab:53:2e:ef:0a:d0:57: 92:c2:2c:2f:fc:71:e3:24:61:d0:39:2d:56:28:30:81:f6:28: 7e:6e:44:36:c1:51:29:81:3f:fe:ae:43:ad:37:95:f1:a9:fb: 13:f8:67:f8:b2:10:b2:be:c3:f3:af:52:f8:47:cf:02:fd:e7: d6:8e:b7:30:a9:b2:cb:e7:b5:ae:fc:e6:97:11:d3:5f:b7:89: a4:8c:c5:28:41:df:ee:17:97:14:27:c7:ef:df:2f:51:f3:12: 38:af:f4:02:af:60:f5:33:0b:20:8b:4a:0a:84:3e:32:fa:7a: 7b:c7:67:04:c0:26:4b:49:56:75:9c:bc:ac:36:8d:98:78:40: 71:b4:07:6d:c3:2d:18:04:b4:67:94:4c:8b:03:3a:44:d3:42: 01:bf:e2:4e:7e:f4:28:71:76:c4:ae:9d:fc:4c:4f:db:30:ad: bf:e8:42:52:e0:6d:09:7b:48:14:cb:ff:56:e7:0f:eb:34:e3: 6a:f0:2a:1c:bd:4e:29:e5:fa:36:af:46:3c:cb:50:2d:85:fd: 3b:f9:a5:67:07:a5:c0:92:ef:3e:36:8b:22:d4:51:07:73:ea: 41:91:94:f3:9d:14:c5:08:24:25:0a:1b:de:7c:44:a5:72:d6: 79:4a:6e:9d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZrmCljJlYnq+HP6I5KYQpksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjUxMjAzMjEwNzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjNjZmQ5YzliYmIwNDZkNWZiMjYyNTlhZmI5ZWU4MjMxZTYwMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL84L3kvPiDqS32x4MEo5zxTzq3N DihiTOtF8SnqVcZZtNCFaqmfMxRM0+MDCBMT52TLxR/TeEQZOiziOH/Np3tUv3CJ Vurr3NCF2Hed+3DrmGSLpQzJdos1DNKW01GvU8JTrnygJOteG2YoS9rjEnI63YqY QR4sMzOORrEaMYuOu+yN0HMTVXKd3hYFl80h1/cyzckDkf2DlHD6GBBmuKywqd4e cAQPPutBHzWxEvFOLoXTv5rffVICxds5kGO0XRDkE55tnjcJJKEI71djKdErHWWw UbTvJiMVWaPqYfhb/GTar4qrxyBVGCdLl+/xJLa/HXU3ZvVeHNLRH6+aJwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFKs8/ZybuwRtX7JiWa+57oIx5gOJMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvcXp6OW5KdTdCRzFmc21KWnI3bnVnakhtQTRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKg+bwAMF AyoTEwADBQMqE75AAwUDKhPQwDANBgkqhkiG9w0BAQsFAAOCAQEAzeWqhZa8zYrK S3qrUy7vCtBXksIsL/xx4yRh0DktVigwgfYofm5ENsFRKYE//q5DrTeV8an7E/hn +LIQsr7D869S+EfPAv3n1o63MKmyy+e1rvzmlxHTX7eJpIzFKEHf7heXFCfH798v UfMSOK/0Aq9g9TMLIItKCoQ+Mvp6e8dnBMAmS0lWdZy8rDaNmHhAcbQHbcMtGAS0 Z5RMiwM6RNNCAb/iTn70KHF2xK6d/ExP2zCtv+hCUuBtCXtIFMv/VucP6zTjavAq HL1OKeX6Nq9GPMtQLYX9O/mlZwelwJLvPjaLItRRB3PqQZGU850UxQgkJQob3nxE pXLWeUpunQ== -----END CERTIFICATE-----Generated at Fri Dec 5 17:40:13 2025 by rpki-client