This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n1_rqbkNCTGfNzfk08jlOUVHNt0.roa File: n1_rqbkNCTGfNzfk08jlOUVHNt0.roa (raw, json) Hash identifier: zZZKyqlBBPJeKg7lPswhy2k/39Kqy/f1mWnvLFh/Vbc= Subject key identifier: 9F:5F:EB:A9:B9:0D:09:31:9F:37:37:E4:D3:C8:E5:39:45:47:36:DD Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AEB0D51AD67FFEC2C8C5A5D83780DA9F9 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n1_rqbkNCTGfNzfk08jlOUVHNt0.roa Signing time: Thu 04 Dec 2025 20:28:29 +0000 ROA not before: Thu 04 Dec 2025 20:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 2a0a:2d07:cc::/48 maxlen: 48 2a0e:1a84::/32 maxlen: 32 2a0f:7d00:1::/48 maxlen: 48 2a0f:bc00:a1c4::/48 maxlen: 48 2a12:ecc0:22::/48 maxlen: 48 2a13:2b40::/29 maxlen: 32 2a13:c900:66::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:0d:51:ad:67:ff:ec:2c:8c:5a:5d:83:78:0d:a9:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 4 20:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f5feba9b90d09319f3737e4d3c8e539454736dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:52:24:50:24:18:55:a3:bd:03:f3:1f:1e: 29:00:18:79:56:6a:20:0e:16:0e:38:3f:d4:1a:ac: 68:e9:a2:9e:83:9a:fe:fe:49:98:d4:de:26:22:01: 06:e8:81:6d:e8:8a:8f:97:3a:b6:a6:65:45:7a:bb: 8f:e6:dc:aa:ba:63:f9:b9:51:ed:5b:f0:ca:69:7b: c5:f4:63:32:a3:26:d1:2e:ec:11:85:f2:c5:71:d5: 27:dd:56:e4:f2:b1:69:b0:59:48:d6:ad:bc:1b:17: 3b:7a:9d:12:08:76:12:58:07:2d:12:c7:f3:d0:9c: 9b:88:a8:4d:d6:b0:46:8f:96:44:ec:8a:cd:e2:8c: 7c:7a:3e:17:87:7d:6f:43:31:19:9f:f5:22:66:8e: a0:ec:92:89:34:e3:a0:8b:e9:b5:86:03:92:b1:73: 58:8b:52:87:f6:26:9c:7d:f5:cf:cb:82:0a:52:34: 86:04:0d:3b:a7:7b:95:a9:77:33:99:a6:c3:79:a3: 57:13:d3:9e:65:94:4d:ae:da:59:82:2f:1a:b3:09: 72:8f:0d:1b:34:0f:4f:42:70:e4:cc:e8:01:d6:da: a2:33:f3:8c:d2:cd:51:19:79:f9:c3:79:6f:d4:dd: 08:65:ea:d5:95:54:7b:4d:25:f2:b3:67:3a:db:0d: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5F:EB:A9:B9:0D:09:31:9F:37:37:E4:D3:C8:E5:39:45:47:36:DD X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n1_rqbkNCTGfNzfk08jlOUVHNt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:2d07:cc::/48 2a0e:1a84::/32 2a0f:7d00:1::/48 2a0f:bc00:a1c4::/48 2a12:ecc0:22::/48 2a13:2b40::/29 2a13:c900:66::/48 Signature Algorithm: sha256WithRSAEncryption cf:f3:e1:8e:5d:fe:4e:6a:2d:6b:5f:16:29:ab:47:0a:52:0b: 06:a5:78:bf:17:71:3d:96:49:11:5f:49:64:26:c6:ae:fe:20: cd:58:45:a3:4e:d8:54:32:a8:10:39:1e:61:ca:8f:c2:69:3d: e1:c2:43:84:c4:ca:d7:80:c8:da:2f:1c:4a:f4:33:8a:f1:8b: 95:fe:06:ea:2b:c5:54:8d:7d:f5:3c:01:dc:3c:1d:5b:77:23: a7:82:99:df:57:22:96:bf:66:54:25:73:25:47:42:c0:ab:20: 79:c7:5c:26:3d:e0:32:4a:74:20:53:3e:3b:ad:d6:5b:bb:d1: 88:7b:aa:4b:c3:00:8f:f0:20:e6:62:3e:cd:2e:d8:a5:27:86: 5b:36:19:03:da:ac:61:2b:b3:68:2e:45:fc:5b:39:42:fe:74: 36:a9:07:22:83:5e:e4:29:f8:28:09:03:aa:57:a1:87:60:de: dc:88:32:77:dc:4d:b4:5e:80:ff:79:4c:40:dd:61:98:4a:41: fe:14:2e:0b:97:f1:82:d0:ab:83:28:3f:ea:8f:7b:b2:da:b0: fa:4d:eb:00:25:d7:83:15:ac:31:91:73:6f:af:f6:8a:96:f3: 38:9f:f6:d5:81:57:67:fd:79:4a:7a:39:47:e2:fd:73:65:fb: 8a:e9:7a:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZrrDVGtZ//sLIxaXYN4Dan5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjA0MjAyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjVmZWJhOWI5MGQwOTMxOWYzNzM3ZTRkM2M4ZTUzOTQ1NDczNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumVSJFAkGFWjvQPzHx4pABh5Vmog DhYOOD/UGqxo6aKeg5r+/kmY1N4mIgEG6IFt6IqPlzq2pmVFeruP5tyqumP5uVHt W/DKaXvF9GMyoybRLuwRhfLFcdUn3Vbk8rFpsFlI1q28Gxc7ep0SCHYSWActEsfz 0JybiKhN1rBGj5ZE7IrN4ox8ej4Xh31vQzEZn/UiZo6g7JKJNOOgi+m1hgOSsXNY i1KH9iacffXPy4IKUjSGBA07p3uVqXczmabDeaNXE9OeZZRNrtpZgi8aswlyjw0b NA9PQnDkzOgB1tqiM/OM0s1RGXn5w3lv1N0IZerVlVR7TSXys2c62w0RVwIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFJ9f66m5DQkxnzc35NPI5TlFRzbdMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvbjFfcnFia05DVEdmTnpmazA4amxPVVZITnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzBBBAIAAjA7AwcAKgotBwDM AwUAKg4ahAMHACoPfQAAAQMHACoPvAChxAMHACoS7MAAIgMFAyoTK0ADBwAqE8kA AGYwDQYJKoZIhvcNAQELBQADggEBAM/z4Y5d/k5qLWtfFimrRwpSCwaleL8XcT2W SRFfSWQmxq7+IM1YRaNO2FQyqBA5HmHKj8JpPeHCQ4TEyteAyNovHEr0M4rxi5X+ BuorxVSNffU8Adw8HVt3I6eCmd9XIpa/ZlQlcyVHQsCrIHnHXCY94DJKdCBTPjut 1lu70Yh7qkvDAI/wIOZiPs0u2KUnhls2GQParGErs2guRfxbOUL+dDapByKDXuQp +CgJA6pXoYdg3tyIMnfcTbRegP95TEDdYZhKQf4ULguX8YLQq4MoP+qPe7LasPpN 6wAl14MVrDGRc2+v9oqW8zif9tWBV2f9eUp6OUfi/XNl+4rpesk= -----END CERTIFICATE-----Generated at Sat Dec 6 03:13:01 2025 by rpki-client