This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Sq7qC8cMqGdJsqG5o4-Z3GMIFWU.roa File: Sq7qC8cMqGdJsqG5o4-Z3GMIFWU.roa (raw, json) Hash identifier: 3oUICUwn+ihoCOuyIQpDfL9qXZ0XytVEsYkTPhE0Uz4= Subject key identifier: 4A:AE:EA:0B:C7:0C:A8:67:49:B2:A1:B9:A3:8F:99:DC:63:08:15:65 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019AA0A12BE2771269AF8F0E4824BF087411 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Sq7qC8cMqGdJsqG5o4-Z3GMIFWU.roa Signing time: Thu 20 Nov 2025 09:38:28 +0000 ROA not before: Thu 20 Nov 2025 09:38:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33915 IP address blocks: 2a07:3500:1170::/48 maxlen: 48 2a07:3500:1240::/46 maxlen: 46 2a07:3500:12d0::/48 maxlen: 48 2a07:3500:12f8::/48 maxlen: 48 2a07:3500:15a0::/48 maxlen: 48 2a07:3500:15c0::/48 maxlen: 48 2a07:3500:1778::/48 maxlen: 48 2a07:3500:17f8::/48 maxlen: 48 2a07:3500:1890::/48 maxlen: 48 2a07:3500:1b90::/48 maxlen: 48 2a07:3501:1340::/48 maxlen: 48 2a07:3502:1050::/48 maxlen: 48 2a07:3502:1060::/48 maxlen: 48 2a07:3502:10a1::/48 maxlen: 48 2a07:3502:10c0::/48 maxlen: 48 2a07:3502:11a0::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:a1:2b:e2:77:12:69:af:8f:0e:48:24:bf:08:74:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Nov 20 09:38:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4aaeea0bc70ca86749b2a1b9a38f99dc63081565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:9f:ea:43:83:f7:3c:1a:5b:43:7c:86:e7: 86:9e:e1:c3:ce:21:da:a3:a4:0a:01:ca:ef:6f:98: 5b:53:85:b3:fd:ec:7a:d5:df:93:60:f7:d5:24:6f: 7d:84:80:46:04:d3:bc:9a:5b:13:0a:8c:14:0e:f6: b6:23:a2:37:bd:c6:1a:56:d2:b3:f0:6c:ff:85:47: 8f:76:5c:b5:56:0a:88:7a:87:fa:2f:4f:14:5a:fb: 7c:41:57:15:22:32:76:88:ed:0d:58:50:9e:0a:51: d8:e4:23:77:0d:73:df:9a:85:59:4c:0c:db:54:eb: 3c:3c:e9:f9:ff:d7:7f:80:24:a1:fe:9e:67:e5:18: 3a:c3:d8:f3:4a:b7:39:73:ab:19:90:a8:1d:88:01: f7:9f:2f:db:1f:50:10:36:8d:55:32:68:7e:5c:6e: 89:6e:c1:b9:da:63:28:75:ab:18:00:73:a6:c1:ca: 5c:c7:76:0c:5d:79:30:46:41:19:b8:ff:9c:99:50: a7:f8:8d:f9:67:1c:e1:9b:12:1b:68:ba:35:c3:c1: 99:15:4e:66:ee:94:f4:69:6d:f6:d1:a2:16:ff:ab: 43:72:37:31:1b:67:fe:98:0d:f4:0c:28:ab:ca:5d: 1e:97:e5:3f:f5:46:c3:bb:91:68:84:e8:2f:57:1a: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AE:EA:0B:C7:0C:A8:67:49:B2:A1:B9:A3:8F:99:DC:63:08:15:65 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Sq7qC8cMqGdJsqG5o4-Z3GMIFWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:1170::/48 2a07:3500:1240::/46 2a07:3500:12d0::/48 2a07:3500:12f8::/48 2a07:3500:15a0::/48 2a07:3500:15c0::/48 2a07:3500:1778::/48 2a07:3500:17f8::/48 2a07:3500:1890::/48 2a07:3500:1b90::/48 2a07:3501:1340::/48 2a07:3502:1050::/48 2a07:3502:1060::/48 2a07:3502:10a1::/48 2a07:3502:10c0::/48 2a07:3502:11a0::/46 Signature Algorithm: sha256WithRSAEncryption c4:ce:e7:de:c7:e3:a9:a7:7e:57:93:8b:1f:ee:4e:9d:ab:ee: 39:62:f0:a3:1e:21:3b:01:51:fa:10:24:0c:cd:7f:97:d9:40: 7b:ff:d7:03:c0:90:a2:eb:86:a6:8e:2b:5b:ec:21:3c:d2:84: b4:5a:8a:5e:e1:8d:a2:cc:d8:84:e3:aa:8a:f2:25:94:48:c6: 00:d1:50:f8:d4:91:9c:b3:29:dc:40:5a:c7:ce:13:4e:c3:df: 0f:11:8f:0e:58:4c:a8:0a:da:ac:c1:85:46:ff:a0:10:e0:58: b1:ec:7e:cc:cb:0b:c4:4f:f1:dd:e7:3b:fd:30:67:aa:3e:10: 95:91:85:13:09:ec:10:3d:7b:32:87:67:2d:f9:14:70:19:3a: ae:54:5f:e7:4f:45:0d:17:ac:ee:e6:fd:19:20:15:d8:b0:9b: cd:08:30:7c:54:d1:0a:84:8f:32:1d:e1:0d:83:c0:5e:70:e3: a4:28:4f:15:0c:e6:41:73:28:d7:ce:39:78:f3:2b:47:86:a6: 25:19:1c:52:99:95:89:09:df:9c:04:16:84:c3:a3:a5:0d:d0: 54:8f:ab:e9:1c:ef:61:4f:9d:8d:46:1b:d9:b5:b3:cb:0f:08: f7:28:f6:6e:61:32:6d:92:bb:3b:34:b8:85:62:d0:49:08:aa: 5e:fe:d3:17 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZqgoSvidxJpr48OSCS/CHQRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjUxMTIwMDkzODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWFlZWEwYmM3MGNhODY3NDliMmExYjlhMzhmOTlkYzYzMDgxNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15Sf6kOD9zwaW0N8hueGnuHDziHa o6QKAcrvb5hbU4Wz/ex61d+TYPfVJG99hIBGBNO8mlsTCowUDva2I6I3vcYaVtKz 8Gz/hUePdly1VgqIeof6L08UWvt8QVcVIjJ2iO0NWFCeClHY5CN3DXPfmoVZTAzb VOs8POn5/9d/gCSh/p5n5Rg6w9jzSrc5c6sZkKgdiAH3ny/bH1AQNo1VMmh+XG6J bsG52mModasYAHOmwcpcx3YMXXkwRkEZuP+cmVCn+I35ZxzhmxIbaLo1w8GZFU5m 7pT0aW320aIW/6tDcjcxG2f+mA30DCiryl0el+U/9UbDu5FohOgvVxqqWwIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFEqu6gvHDKhnSbKhuaOPmdxjCBVlMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvU3E3cUM4Y01xR2RKc3FHNW80LVozR01JRldVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAIwgZADBwAq BzUAEXADBwIqBzUAEkADBwAqBzUAEtADBwAqBzUAEvgDBwAqBzUAFaADBwAqBzUA FcADBwAqBzUAF3gDBwAqBzUAF/gDBwAqBzUAGJADBwAqBzUAG5ADBwAqBzUBE0AD BwAqBzUCEFADBwAqBzUCEGADBwAqBzUCEKEDBwAqBzUCEMADBwIqBzUCEaAwDQYJ KoZIhvcNAQELBQADggEBAMTO597H46mnfleTix/uTp2r7jli8KMeITsBUfoQJAzN f5fZQHv/1wPAkKLrhqaOK1vsITzShLRail7hjaLM2ITjqoryJZRIxgDRUPjUkZyz KdxAWsfOE07D3w8Rjw5YTKgK2qzBhUb/oBDgWLHsfszLC8RP8d3nO/0wZ6o+EJWR hRMJ7BA9ezKHZy35FHAZOq5UX+dPRQ0XrO7m/RkgFdiwm80IMHxU0QqEjzId4Q2D wF5w46QoTxUM5kFzKNfOOXjzK0eGpiUZHFKZlYkJ35wEFoTDo6UN0FSPq+kc72FP nY1GG9m1s8sPCPco9m5hMm2Suzs0uIVi0EkIql7+0xc= -----END CERTIFICATE-----Generated at Sat Dec 6 00:06:43 2025 by rpki-client