This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qZn-TEDIElf26JLHhXyGHXePm-g.roa File: qZn-TEDIElf26JLHhXyGHXePm-g.roa (raw, json) Hash identifier: tjnyvhR2hBZvlccYYtn5hp/RF98X5Bv40oud/RSXVvs= Subject key identifier: A9:99:FE:4C:40:C8:12:57:F6:E8:92:C7:85:7C:86:1D:77:8F:9B:E8 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019ABCF4DEA666E70CAC6A05B2B294CA5C70 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qZn-TEDIElf26JLHhXyGHXePm-g.roa Signing time: Tue 25 Nov 2025 21:39:15 +0000 ROA not before: Tue 25 Nov 2025 21:39:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25159 IP address blocks: 2a07:7880::/29 maxlen: 29 2a09:17c0:1312::/48 maxlen: 48 2a09:17c0:fbad::/48 maxlen: 48 2a0e:1a86::/32 maxlen: 32 2a0e:f602::/32 maxlen: 32 2a0f:2d83::/32 maxlen: 32 2a0f:3d86:1::/48 maxlen: 48 2a12:5e00::/29 maxlen: 29 2a12:ecc5::/32 maxlen: 32 2a13:18c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:f4:de:a6:66:e7:0c:ac:6a:05:b2:b2:94:ca:5c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 25 21:39:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a999fe4c40c81257f6e892c7857c861d778f9be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:82:94:eb:a2:67:fc:13:e6:ad:dc:6c:23:9a: bb:32:c5:25:c1:c7:72:df:9a:34:95:d0:ca:7b:38: 38:5e:c9:86:a8:e1:50:c8:f2:6d:44:87:40:90:f0: 72:bd:0d:04:76:b5:2a:30:09:62:ef:0b:7f:b6:a9: 2d:bb:e8:95:30:56:49:db:20:cf:0b:ed:ff:8e:e2: b7:b7:2d:d2:8e:9c:85:ee:b3:08:ca:7b:37:06:78: 49:2a:8e:01:51:ca:37:e8:b9:fa:18:40:ed:15:7f: c8:54:98:dd:d3:df:9a:05:39:ab:15:ef:00:e8:a7: c5:a1:16:a0:15:5e:da:08:63:d2:87:96:e8:5e:11: 08:ed:54:6c:da:d3:f4:66:1a:71:df:a6:6b:7c:19: df:52:81:be:4c:0d:eb:8c:ff:ac:cc:0e:ab:68:1e: c4:18:48:58:c5:4b:bd:21:4f:d4:41:76:1c:1d:f5: d5:00:e2:36:2b:bd:17:3b:c9:b3:bb:d1:ad:bb:13: d5:cf:5d:b0:a6:8f:38:c5:b0:69:2d:af:7c:46:9e: 11:eb:cc:7c:85:d1:48:88:e6:a9:5f:91:32:77:06: b3:d6:dd:90:ac:3b:a5:30:03:ab:cc:f4:0f:3e:e2: 12:a0:12:f8:56:36:85:f6:52:3c:42:84:e0:5c:ae: 8f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:99:FE:4C:40:C8:12:57:F6:E8:92:C7:85:7C:86:1D:77:8F:9B:E8 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qZn-TEDIElf26JLHhXyGHXePm-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:7880::/29 2a09:17c0:1312::/48 2a09:17c0:fbad::/48 2a0e:1a86::/32 2a0e:f602::/32 2a0f:2d83::/32 2a0f:3d86:1::/48 2a12:5e00::/29 2a12:ecc5::/32 2a13:18c0:100::/48 Signature Algorithm: sha256WithRSAEncryption 2f:9a:01:7a:5b:52:eb:b6:70:15:ee:5e:b0:c8:37:4f:79:38: 3d:9a:a3:cf:1b:a3:21:75:8c:ab:83:d6:40:6b:2e:d5:c8:d9: 82:f1:7b:3e:dd:7f:16:4f:21:a3:d7:26:09:41:92:6c:06:b9: 26:28:2d:fc:5b:89:e6:c4:1d:0f:51:ed:e6:a1:26:62:96:fc: 1a:67:ce:90:de:8f:4b:93:91:ca:fb:86:d1:50:bc:7a:95:30: 06:5c:94:4d:bc:f5:7d:bb:55:22:bd:c2:11:f7:ff:d4:cd:37: dc:ff:9a:37:68:01:96:48:4b:b8:7b:27:66:33:9a:08:51:d2: ec:ec:d5:74:5d:fd:df:10:38:ce:90:ea:a1:b8:3b:94:d4:75: 01:f4:65:20:1b:c1:9d:96:35:da:17:3e:9f:33:13:8e:df:39: 01:fa:c9:ed:b6:51:99:ca:51:01:ba:3f:d2:d3:e6:38:ae:1c: f8:d4:6e:28:17:e6:d3:2d:b8:ed:31:ac:28:32:f5:ed:f5:fb: 75:52:55:84:c2:45:a2:1d:b1:20:80:fc:f3:a0:fd:ae:1e:a2: 98:0f:58:9c:37:0b:0c:8d:d4:3d:06:54:b5:2f:e8:7c:9e:ec: 6a:fd:49:7d:9d:ca:ae:07:e4:bf:51:96:e8:d5:40:25:35:05: ec:b0:c5:15 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZq89N6mZucMrGoFsrKUylxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTI1MjEzOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTk5ZmU0YzQwYzgxMjU3ZjZlODkyYzc4NTdjODYxZDc3OGY5YmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IKU66Jn/BPmrdxsI5q7MsUlwcdy 35o0ldDKezg4XsmGqOFQyPJtRIdAkPByvQ0EdrUqMAli7wt/tqktu+iVMFZJ2yDP C+3/juK3ty3SjpyF7rMIyns3BnhJKo4BUco36Ln6GEDtFX/IVJjd09+aBTmrFe8A 6KfFoRagFV7aCGPSh5boXhEI7VRs2tP0Zhpx36ZrfBnfUoG+TA3rjP+szA6raB7E GEhYxUu9IU/UQXYcHfXVAOI2K70XO8mzu9GtuxPVz12wpo84xbBpLa98Rp4R68x8 hdFIiOapX5Eydwaz1t2QrDulMAOrzPQPPuISoBL4VjaF9lI8QoTgXK6PpQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFKmZ/kxAyBJX9uiSx4V8hh13j5voMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvcVpuLVRFRElFbGYyNkpMSGhYeUdIWGVQbS1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAAjBOAwUDKgd4gAMH ACoJF8ATEgMHACoJF8D7rQMFACoOGoYDBQAqDvYCAwUAKg8tgwMHACoPPYYAAQMF AyoSXgADBQAqEuzFAwcAKhMYwAEAMA0GCSqGSIb3DQEBCwUAA4IBAQAvmgF6W1Lr tnAV7l6wyDdPeTg9mqPPG6MhdYyrg9ZAay7VyNmC8Xs+3X8WTyGj1yYJQZJsBrkm KC38W4nmxB0PUe3moSZilvwaZ86Q3o9Lk5HK+4bRULx6lTAGXJRNvPV9u1UivcIR 9//UzTfc/5o3aAGWSEu4eydmM5oIUdLs7NV0Xf3fEDjOkOqhuDuU1HUB9GUgG8Gd ljXaFz6fMxOO3zkB+snttlGZylEBuj/S0+Y4rhz41G4oF+bTLbjtMawoMvXt9ft1 UlWEwkWiHbEggPzzoP2uHqKYD1icNwsMjdQ9BlS1L+h8nuxq/Ul9ncquB+S/UZbo 1UAlNQXssMUV -----END CERTIFICATE-----Generated at Sat Dec 6 03:13:29 2025 by rpki-client