This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/Bww04LBwxBB1y6rGH757C_xud3s.roa File: Bww04LBwxBB1y6rGH757C_xud3s.roa (raw, json) Hash identifier: quqNEZs1nsjXNRnY683lQOPEfOLi5g4tury87348zBY= Subject key identifier: 07:0C:34:E0:B0:70:C4:10:75:CB:AA:C6:1F:BE:7B:0B:FC:6E:77:7B Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E54C7311D19ABAE98AA1DFAB6B3BF Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/Bww04LBwxBB1y6rGH757C_xud3s.roa Signing time: Tue 11 Nov 2025 13:32:38 +0000 ROA not before: Tue 11 Nov 2025 13:32:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206728 IP address blocks: 2a11:9880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 09:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:54:c7:31:1d:19:ab:ae:98:aa:1d:fa:b6:b3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=070c34e0b070c41075cbaac61fbe7b0bfc6e777b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:49:8e:59:e6:ab:be:56:05:b1:a4:79:92: cd:58:21:89:c8:95:6f:d0:91:de:da:7e:1a:eb:8e: 0d:31:98:22:84:2e:23:a1:b1:21:ed:6b:3b:dd:cb: 9b:ea:57:eb:3e:03:ee:45:ee:97:ec:6c:0a:71:e4: 20:b4:21:69:e2:25:e5:57:f7:91:17:8c:a5:0c:6a: 49:dc:04:a7:a0:2f:79:44:8c:cd:98:95:5c:4d:6f: ff:f0:55:c4:aa:13:5f:a0:b9:3d:2f:ab:1e:b6:dc: 2d:a8:89:74:c3:b7:79:a7:28:1b:df:65:e3:db:47: 28:1e:2a:50:9c:d3:d5:74:24:6d:38:cb:bd:1b:40: 9f:69:e9:19:8a:a9:be:26:e2:6c:f1:24:b3:3b:f6: 4c:50:59:17:3b:6c:a0:07:c8:cc:2c:07:cd:3f:24: d6:05:d4:dd:e7:6f:f4:52:d4:66:88:36:be:0a:08: 02:fa:e3:45:af:f8:79:96:34:15:d0:4a:e6:11:af: 52:12:bb:51:b5:95:64:58:ad:f7:48:c9:7d:64:b8: 66:77:4f:51:79:1c:13:25:dd:c2:61:21:97:03:8c: 1c:8f:1d:f8:6c:c9:99:20:58:23:41:7a:c8:26:36: 9c:3b:36:93:dd:00:93:99:bb:28:b2:38:bf:0a:5b: 8a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0C:34:E0:B0:70:C4:10:75:CB:AA:C6:1F:BE:7B:0B:FC:6E:77:7B X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/Bww04LBwxBB1y6rGH757C_xud3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:9880::/32 Signature Algorithm: sha256WithRSAEncryption 0f:22:40:5e:e2:05:e2:90:4b:10:7d:ce:19:d1:a7:c2:7e:8a: 42:19:5d:86:23:f3:96:10:bc:b7:f4:cf:fa:ea:06:66:66:bf: 72:31:14:d5:ce:fb:a8:da:19:6b:6f:e4:dc:d1:d7:d5:3c:34: 82:70:fd:fc:ad:86:e3:02:04:4f:f2:8a:1d:26:81:16:17:02: 7d:62:54:f9:0d:10:c7:2c:c0:4d:e7:f2:a6:fe:b2:1a:b6:ce: 14:e9:96:0a:c3:58:37:dd:4e:0a:48:97:5f:72:5e:dc:e2:28: 57:bc:02:51:55:6b:ed:a1:cc:8d:4c:43:6f:91:f1:2f:41:de: 50:38:1b:db:d7:2b:8c:23:43:22:5a:a4:2a:91:bc:c9:f5:f2: 8d:a3:c5:c1:45:0f:be:81:0b:de:13:15:55:f9:fb:54:b0:a7: 23:2b:e1:ac:a8:2f:3d:86:5e:e0:a1:39:69:c2:65:35:89:b8: 71:47:40:06:29:9f:46:46:bb:ea:d0:d8:bc:62:1f:5d:d2:be: d8:5a:2b:2d:bd:8b:aa:37:a9:7c:69:f4:ad:1f:d1:21:0a:c7: 5c:77:aa:11:3f:8e:19:c9:98:e2:8f:16:99:54:ed:99:f5:49: 8e:79:85:4a:da:1d:b4:23:a4:17:88:6f:95:22:1f:9b:8a:90: c3:4b:d1:07 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZpzHlTHMR0Zq66Yqh36trO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzBjMzRlMGIwNzBjNDEwNzVjYmFhYzYxZmJlN2IwYmZjNmU3NzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp9Jjlnmq75WBbGkeZLNWCGJyJVv 0JHe2n4a644NMZgihC4jobEh7Ws73cub6lfrPgPuRe6X7GwKceQgtCFp4iXlV/eR F4ylDGpJ3ASnoC95RIzNmJVcTW//8FXEqhNfoLk9L6settwtqIl0w7d5pygb32Xj 20coHipQnNPVdCRtOMu9G0CfaekZiqm+JuJs8SSzO/ZMUFkXO2ygB8jMLAfNPyTW BdTd52/0UtRmiDa+CggC+uNFr/h5ljQV0ErmEa9SErtRtZVkWK33SMl9ZLhmd09R eRwTJd3CYSGXA4wcjx34bMmZIFgjQXrIJjacOzaT3QCTmbsosji/CluKCwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAcMNOCwcMQQdcuqxh++ewv8bnd7MB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvQnd3MDRMQnd4QkIxeTZyR0g3NTdDX3h1ZDNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhGYgDAN BgkqhkiG9w0BAQsFAAOCAQEADyJAXuIF4pBLEH3OGdGnwn6KQhldhiPzlhC8t/TP +uoGZma/cjEU1c77qNoZa2/k3NHX1Tw0gnD9/K2G4wIET/KKHSaBFhcCfWJU+Q0Q xyzATefypv6yGrbOFOmWCsNYN91OCkiXX3Je3OIoV7wCUVVr7aHMjUxDb5HxL0He UDgb29crjCNDIlqkKpG8yfXyjaPFwUUPvoEL3hMVVfn7VLCnIyvhrKgvPYZe4KE5 acJlNYm4cUdABimfRka76tDYvGIfXdK+2ForLb2LqjepfGn0rR/RIQrHXHeqET+O GcmY4o8WmVTtmfVJjnmFStodtCOkF4hvlSIfm4qQw0vRBw== -----END CERTIFICATE-----Generated at Thu Dec 4 13:13:39 2025 by rpki-client