This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9zJ2hJjXPxauM3NG3rzNVJeoSc4.roa File: 9zJ2hJjXPxauM3NG3rzNVJeoSc4.roa (raw, json) Hash identifier: prR3pdFJh121k8Lg4Z/DLaSXpLFJpLMeuLa6MKpGkzQ= Subject key identifier: F7:32:76:84:98:D7:3F:16:AE:33:73:46:DE:BC:CD:54:97:A8:49:CE Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019AE2DB364C31B60A02CD7872EFD6326EFD Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9zJ2hJjXPxauM3NG3rzNVJeoSc4.roa Signing time: Wed 03 Dec 2025 06:16:48 +0000 ROA not before: Wed 03 Dec 2025 06:16:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198154 IP address blocks: 87.236.38.0/24 maxlen: 24 2a05:9080::/48 maxlen: 48 2a05:9080:4::/48 maxlen: 48 2a05:9080:7::/48 maxlen: 48 2a05:9080:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 08:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e2:db:36:4c:31:b6:0a:02:cd:78:72:ef:d6:32:6e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 3 06:16:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f732768498d73f16ae337346debccd5497a849ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:54:b0:cd:d3:11:ab:95:3d:6c:a6:f0:43:1b: 19:c0:d6:d1:00:e8:10:2a:cb:9b:4a:6a:6d:fb:85: 53:5c:73:32:5d:45:5b:e0:65:60:d6:52:e1:f8:f2: 25:9f:06:ff:e7:78:2d:d5:c2:e5:6e:18:6d:91:a0: 49:97:d4:cb:00:36:3e:8e:e8:ee:62:a3:38:e7:b4: 78:aa:ff:79:9d:4d:0c:21:6f:92:71:ca:b8:fc:82: 6d:c7:35:f8:31:4d:bd:46:6b:ee:c1:8a:d6:f1:c0: 3a:92:ba:41:ce:ae:0d:ab:66:ee:4d:a6:e6:7e:d3: 60:ee:b9:ed:7b:6b:9f:8e:18:75:37:58:f0:b4:35: 9b:c2:a6:9c:d8:8a:79:dc:3a:9f:0b:54:e2:91:5c: e2:f7:65:96:cb:42:08:dd:35:da:68:1c:92:48:ed: 5c:80:53:03:34:12:1b:98:f8:94:01:f5:b0:5d:fc: d7:2f:20:8b:d9:7b:3b:ac:cb:a7:cb:b9:f9:f0:91: ab:4e:09:17:56:eb:98:35:6b:7f:1c:7d:ea:51:1f: 3d:0e:08:f1:5d:1a:9e:1b:01:31:50:31:54:95:e9: 08:47:11:f6:fa:7b:58:97:59:e1:c8:f4:83:fa:ae: a7:6e:d6:94:ec:e1:00:2e:cc:a6:87:12:bb:10:aa: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:32:76:84:98:D7:3F:16:AE:33:73:46:DE:BC:CD:54:97:A8:49:CE X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9zJ2hJjXPxauM3NG3rzNVJeoSc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.38.0/24 IPv6: 2a05:9080::/48 2a05:9080:4::/48 2a05:9080:7::/48 2a05:9080:10::/48 Signature Algorithm: sha256WithRSAEncryption c8:0d:14:cd:32:7b:a4:f6:b9:03:78:10:11:5b:5e:58:05:98: 65:66:b7:4a:10:49:1e:4e:fb:e9:12:84:12:c2:22:ba:01:d7: c8:eb:1a:2c:79:2a:c5:57:c8:5e:84:05:3e:8e:08:9f:08:22: 8e:dc:86:62:c3:0d:9c:1d:1f:10:81:05:a5:fa:5e:99:b9:d4: 2c:b4:ec:65:1f:3a:21:5a:f9:ff:1c:74:15:ab:e2:00:7e:52: c2:c5:2a:d6:0a:67:1b:a7:c3:11:bb:87:50:ed:14:11:2e:19: 76:db:cc:a1:55:17:2b:32:63:21:85:d0:49:46:bf:42:47:4d: 1e:4c:a1:04:88:0b:c4:7f:ba:c6:29:22:74:15:6d:ec:d6:99: 49:8d:5b:4d:ec:69:e6:26:a1:d4:ce:85:f5:b4:f0:b8:f6:5b: 5c:1c:59:02:6e:58:26:b7:1b:79:1b:fd:3e:b3:4c:d4:7d:b9: 34:8f:b1:40:96:f7:68:fb:95:3f:aa:96:2b:19:44:b8:1b:05: 76:6d:ab:ef:c8:87:ea:24:16:3d:21:b9:70:af:97:cd:ec:7f: 01:ac:f8:b5:13:f2:12:b8:d5:d6:f0:df:70:de:bc:c8:4a:e6: ca:c7:5c:4f:94:35:44:f6:52:8a:50:59:61:06:c4:d4:6b:e3: 88:d6:cd:f2 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZri2zZMMbYKAs14cu/WMm79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjAzMDYxNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzMyNzY4NDk4ZDczZjE2YWUzMzczNDZkZWJjY2Q1NDk3YTg0OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lSwzdMRq5U9bKbwQxsZwNbRAOgQ KsubSmpt+4VTXHMyXUVb4GVg1lLh+PIlnwb/53gt1cLlbhhtkaBJl9TLADY+juju YqM457R4qv95nU0MIW+Sccq4/IJtxzX4MU29RmvuwYrW8cA6krpBzq4Nq2buTabm ftNg7rnte2ufjhh1N1jwtDWbwqac2Ip53DqfC1TikVzi92WWy0II3TXaaBySSO1c gFMDNBIbmPiUAfWwXfzXLyCL2Xs7rMuny7n58JGrTgkXVuuYNWt/HH3qUR89Dgjx XRqeGwExUDFUlekIRxH2+ntYl1nhyPSD+q6nbtaU7OEALsymhxK7EKosVQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFPcydoSY1z8WrjNzRt68zVSXqEnOMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvOXpKMmhKalhQeGF1TTNORzNyek5WSmVvU2M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAV+wmMCoE AgACMCQDBwAqBZCAAAADBwAqBZCAAAQDBwAqBZCAAAcDBwAqBZCAABAwDQYJKoZI hvcNAQELBQADggEBAMgNFM0ye6T2uQN4EBFbXlgFmGVmt0oQSR5O++kShBLCIroB 18jrGix5KsVXyF6EBT6OCJ8IIo7chmLDDZwdHxCBBaX6Xpm51Cy07GUfOiFa+f8c dBWr4gB+UsLFKtYKZxunwxG7h1DtFBEuGXbbzKFVFysyYyGF0ElGv0JHTR5MoQSI C8R/usYpInQVbezWmUmNW03saeYmodTOhfW08Lj2W1wcWQJuWCa3G3kb/T6zTNR9 uTSPsUCW92j7lT+qlisZRLgbBXZtq+/Ih+okFj0huXCvl83sfwGs+LUT8hK41dbw 33DevMhK5srHXE+UNUT2UopQWWEGxNRr44jWzfI= -----END CERTIFICATE-----Generated at Wed Dec 3 11:46:07 2025 by rpki-client