This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/V1jbg-NiX_oSIpSj0eYvMxiYlKo.roa File: V1jbg-NiX_oSIpSj0eYvMxiYlKo.roa (raw, json) Hash identifier: Y9QvU3WPEkqlp1r7xScFCfD4/+c84H5zgBo5GTZPNnE= Subject key identifier: 57:58:DB:83:E3:62:5F:FA:12:22:94:A3:D1:E6:2F:33:18:98:94:AA Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731C7DE6BA419E789ED58EB91DEDEE02 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/V1jbg-NiX_oSIpSj0eYvMxiYlKo.roa Signing time: Tue 11 Nov 2025 13:30:38 +0000 ROA not before: Tue 11 Nov 2025 13:30:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204968 IP address blocks: 2a0d:48c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1c:7d:e6:ba:41:9e:78:9e:d5:8e:b9:1d:ed:ee:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:30:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5758db83e3625ffa122294a3d1e62f33189894aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:06:ee:c8:d8:1f:72:d8:22:61:26:6e:14:26: fb:1d:84:cd:76:6b:d3:15:36:74:ca:7b:66:d3:9f: 71:b7:63:e9:1d:97:9e:fb:48:2e:dc:5c:61:c3:d7: 27:9e:14:e7:c4:ea:61:95:11:7d:b0:0d:c3:a8:86: 50:11:57:df:e9:1c:92:20:85:bf:62:90:6f:dc:54: b7:a6:4b:50:04:38:77:8f:c9:27:fc:9b:88:43:d7: 06:00:b3:0c:f7:ab:32:7c:a6:3b:38:a3:f0:d4:6b: 11:59:be:7c:49:35:6b:93:64:67:1e:1b:38:52:48: 1b:c6:ca:71:20:0d:b7:b2:51:59:84:94:05:0a:68: 41:7a:fd:ab:05:ec:ce:1f:c1:32:25:44:19:26:dc: 62:19:44:06:ab:b8:c3:ce:b9:b2:c0:d4:1c:66:5d: b9:f6:71:a8:93:64:14:af:05:91:97:2b:75:8a:a8: 62:4e:06:6b:ae:7d:e4:8a:87:4b:0e:c2:14:e1:aa: d1:23:4a:83:a4:84:16:fc:d9:d6:e5:1a:2a:45:99: a5:6b:4c:34:9e:72:3c:eb:92:24:4b:9a:56:7f:57: 52:a7:ff:d8:3d:02:04:e2:30:62:75:c6:cd:38:d0: dc:f5:81:4c:c1:46:d0:09:01:a6:6f:91:8b:4b:f4: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:58:DB:83:E3:62:5F:FA:12:22:94:A3:D1:E6:2F:33:18:98:94:AA X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/V1jbg-NiX_oSIpSj0eYvMxiYlKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:48c0::/29 Signature Algorithm: sha256WithRSAEncryption 43:f2:53:5f:64:1b:9e:4b:5e:0e:32:e6:24:4d:2f:a1:de:27: 00:59:9f:81:fb:86:d1:00:f9:49:a0:a8:03:36:d7:1d:f0:39: 4e:38:21:48:04:b5:76:6b:79:76:97:6d:99:83:45:29:f3:f2: 68:44:c2:9c:a8:1f:9a:d9:84:a3:f9:64:c4:84:08:6e:c0:6a: 27:01:bc:3f:ab:8c:f3:88:54:f4:10:11:e2:e2:2a:5e:59:a8: 5c:3b:cd:3d:41:9f:a5:8f:96:e8:56:2b:e7:ec:59:48:92:41: bf:71:e6:46:02:7e:4e:9a:36:bb:bb:1e:70:e4:02:41:f2:0a: 10:e4:20:c4:96:b4:1c:8e:c8:26:3c:47:64:34:e4:4c:25:3b: c3:49:42:ee:92:79:b1:c3:da:26:8c:74:2e:16:bb:40:f6:6a: ea:fc:a9:16:aa:76:f4:5a:b6:1c:32:b1:6e:02:23:3d:c4:31: b0:96:53:23:89:59:57:aa:4e:32:29:53:54:61:63:c7:0f:81: f6:52:9e:e5:b0:be:ec:8b:18:6a:ef:32:66:cf:a6:34:e3:e0: b6:35:ce:22:e8:92:1a:d5:80:0b:20:25:2d:18:55:91:61:62: 80:83:b7:83:89:de:c1:5c:6d:72:4f:34:f4:d2:4b:8b:79:ca: be:39:1c:c5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZpzHH3mukGeeJ7Vjrkd7e4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzU4ZGI4M2UzNjI1ZmZhMTIyMjk0YTNkMWU2MmYzMzE4OTg5NGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAbuyNgfctgiYSZuFCb7HYTNdmvT FTZ0yntm059xt2PpHZee+0gu3Fxhw9cnnhTnxOphlRF9sA3DqIZQEVff6RySIIW/ YpBv3FS3pktQBDh3j8kn/JuIQ9cGALMM96syfKY7OKPw1GsRWb58STVrk2RnHhs4 UkgbxspxIA23slFZhJQFCmhBev2rBezOH8EyJUQZJtxiGUQGq7jDzrmywNQcZl25 9nGok2QUrwWRlyt1iqhiTgZrrn3kiodLDsIU4arRI0qDpIQW/NnW5RoqRZmla0w0 nnI865IkS5pWf1dSp//YPQIE4jBidcbNONDc9YFMwUbQCQGmb5GLS/SduQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFFdY24PjYl/6EiKUo9HmLzMYmJSqMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvVjFqYmctTmlYX29TSXBTajBlWXZNeGlZbEtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg1IwDAN BgkqhkiG9w0BAQsFAAOCAQEAQ/JTX2QbnkteDjLmJE0vod4nAFmfgfuG0QD5SaCo AzbXHfA5TjghSAS1dmt5dpdtmYNFKfPyaETCnKgfmtmEo/lkxIQIbsBqJwG8P6uM 84hU9BAR4uIqXlmoXDvNPUGfpY+W6FYr5+xZSJJBv3HmRgJ+Tpo2u7secOQCQfIK EOQgxJa0HI7IJjxHZDTkTCU7w0lC7pJ5scPaJox0Lha7QPZq6vypFqp29Fq2HDKx bgIjPcQxsJZTI4lZV6pOMilTVGFjxw+B9lKe5bC+7IsYau8yZs+mNOPgtjXOIuiS GtWACyAlLRhVkWFigIO3g4newVxtck809NJLi3nKvjkcxQ== -----END CERTIFICATE-----Generated at Fri Dec 5 14:49:17 2025 by rpki-client