This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/rQtfM8PefL_hK-A8NPTHmlIKSLs.roa File: rQtfM8PefL_hK-A8NPTHmlIKSLs.roa (raw, json) Hash identifier: f2wwDmx2Wkc12eQdKNSHdJlIoMOj8WliCAuLil9HxNE= Subject key identifier: AD:0B:5F:33:C3:DE:7C:BF:E1:2B:E0:3C:34:F4:C7:9A:52:0A:48:BB Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A92E2F16E39D3BF0D79D45B12FA245DF3 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/rQtfM8PefL_hK-A8NPTHmlIKSLs.roa Signing time: Mon 17 Nov 2025 17:35:37 +0000 ROA not before: Mon 17 Nov 2025 17:35:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205828 IP address blocks: 2a11:1380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:e2:f1:6e:39:d3:bf:0d:79:d4:5b:12:fa:24:5d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 17 17:35:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ad0b5f33c3de7cbfe12be03c34f4c79a520a48bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:1c:93:9b:71:b9:05:47:3f:f3:bb:e2:87: 7e:e8:ab:22:be:63:c4:4b:1c:1e:82:68:fd:7b:38: 2d:3c:fa:24:b5:50:7e:29:4d:50:a8:88:7d:35:bd: 7f:c3:09:2a:36:21:d3:92:b7:87:aa:5f:f8:09:1d: 9c:6c:0e:a8:30:c7:7f:d9:67:17:8c:ce:58:9b:a6: 69:dd:ef:22:bd:59:03:b1:07:f2:92:d2:03:05:6b: c8:2b:75:04:c3:a5:1d:5e:6d:8d:a0:b1:69:27:fd: ad:70:5d:31:c8:2e:cb:c8:da:2c:f4:75:94:bc:c7: 34:d6:6a:04:9e:60:20:31:ad:df:43:22:b2:12:8a: 35:5b:b1:b6:15:d6:19:88:ca:21:cb:3e:66:93:9b: b9:75:70:b4:18:cc:84:c6:5c:82:0e:dd:9a:34:88: 01:73:c8:94:1e:dd:ca:01:cb:e6:b8:76:57:de:f6: d3:ca:71:ef:b3:c3:88:36:8e:39:bf:a4:00:52:67: af:41:2c:19:b6:96:b6:ae:9a:17:d2:93:49:65:38: c9:ed:62:13:d4:d9:7a:92:8e:87:f5:ea:c0:90:21: 9a:a9:2b:83:22:71:ba:39:d6:f6:d3:49:a0:4e:69: 6e:31:0b:fa:ed:c5:db:08:8e:0f:61:bd:16:86:89: 61:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0B:5F:33:C3:DE:7C:BF:E1:2B:E0:3C:34:F4:C7:9A:52:0A:48:BB X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/rQtfM8PefL_hK-A8NPTHmlIKSLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:1380::/29 Signature Algorithm: sha256WithRSAEncryption 9e:2c:69:3b:a9:df:3d:0c:f6:91:04:3b:bd:4b:38:28:ce:12: ee:23:ad:1a:6d:6d:b2:24:65:97:aa:b9:5d:62:25:7e:80:c7: 4e:06:17:6f:96:7d:14:3f:fb:33:a9:dc:11:b1:a9:06:c4:ce: 51:ca:ad:95:f4:d8:be:5d:c8:5c:4f:08:9a:71:68:71:d6:a7: 2f:38:c3:c2:06:6b:cf:50:9a:6a:c8:56:6c:ba:95:47:62:4f: c1:b3:ae:96:1b:13:b1:0b:50:8a:29:5a:fc:2c:c4:bb:e2:a5: 49:ee:52:23:19:f3:3a:8a:d9:9e:97:8d:04:01:da:dc:ee:00: 1f:3f:e5:51:d5:35:49:06:06:08:d1:96:43:42:04:18:5d:f7: 0e:3b:3c:cd:70:a4:58:cb:42:fd:b7:16:5a:67:cf:f0:47:dd: c9:e9:99:f7:93:f5:1b:a3:ff:0e:8f:e8:a7:16:f7:d8:5f:69: d7:8f:1a:3d:0a:b2:99:48:ed:04:12:bb:02:2d:1c:44:70:cc: 08:da:32:d0:ef:0b:93:e7:b6:47:db:d6:0e:ed:40:38:f1:e2: 4f:e1:09:84:72:76:1a:7e:ed:18:fb:8b:d8:a3:2e:9f:de:d7: 3d:2d:84:19:27:7f:29:22:6b:ae:8e:35:51:81:e6:d2:52:0a: af:47:bd:53 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqS4vFuOdO/DXnUWxL6JF3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTE3MTczNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDBiNWYzM2MzZGU3Y2JmZTEyYmUwM2MzNGY0Yzc5YTUyMGE0OGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt8ck5txuQVHP/O74od+6KsivmPE Sxwegmj9ezgtPPoktVB+KU1QqIh9Nb1/wwkqNiHTkreHql/4CR2cbA6oMMd/2WcX jM5Ym6Zp3e8ivVkDsQfyktIDBWvIK3UEw6UdXm2NoLFpJ/2tcF0xyC7LyNos9HWU vMc01moEnmAgMa3fQyKyEoo1W7G2FdYZiMohyz5mk5u5dXC0GMyExlyCDt2aNIgB c8iUHt3KAcvmuHZX3vbTynHvs8OINo45v6QAUmevQSwZtpa2rpoX0pNJZTjJ7WIT 1Nl6ko6H9erAkCGaqSuDInG6Odb200mgTmluMQv67cXbCI4PYb0WholhbQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFK0LXzPD3ny/4SvgPDT0x5pSCki7MB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvclF0Zk04UGVmTF9oSy1BOE5QVEhtbElLU0xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhETgDAN BgkqhkiG9w0BAQsFAAOCAQEAnixpO6nfPQz2kQQ7vUs4KM4S7iOtGm1tsiRll6q5 XWIlfoDHTgYXb5Z9FD/7M6ncEbGpBsTOUcqtlfTYvl3IXE8ImnFocdanLzjDwgZr z1CaashWbLqVR2JPwbOulhsTsQtQiila/CzEu+KlSe5SIxnzOorZnpeNBAHa3O4A Hz/lUdU1SQYGCNGWQ0IEGF33Djs8zXCkWMtC/bcWWmfP8EfdyemZ95P1G6P/Do/o pxb32F9p148aPQqymUjtBBK7Ai0cRHDMCNoy0O8Lk+e2R9vWDu1AOPHiT+EJhHJ2 Gn7tGPuL2KMun97XPS2EGSd/KSJrro41UYHm0lIKr0e9Uw== -----END CERTIFICATE-----Generated at Fri Dec 5 15:04:55 2025 by rpki-client