This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/762tDH7yyhvirdbTfkRz468_FVk.roa File: 762tDH7yyhvirdbTfkRz468_FVk.roa (raw, json) Hash identifier: 5/pRGsunkNhj6ROqIRNNJ/NWZj0o5kv5UhFJhw82eOw= Subject key identifier: EF:AD:AD:0C:7E:F2:CA:1B:E2:AD:D6:D3:7E:44:73:E3:AF:3F:15:59 Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863 Certificate serial: 019AA65E91560378586D8C5B16F341E10967 Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/762tDH7yyhvirdbTfkRz468_FVk.roa Signing time: Fri 21 Nov 2025 12:23:26 +0000 ROA not before: Fri 21 Nov 2025 12:23:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2a13:84c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:5e:91:56:03:78:58:6d:8c:5b:16:f3:41:e1:09:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863 Validity Not Before: Nov 21 12:23:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=efadad0c7ef2ca1be2add6d37e4473e3af3f1559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:70:53:bf:68:6a:0a:6b:ac:e7:23:e8:0d: 55:8f:6c:e5:4c:86:81:72:c2:58:ef:4e:14:87:1a: 35:d2:3a:ef:7e:17:19:9f:ad:4a:83:c3:3d:e2:73: fe:91:17:2a:a9:2a:47:01:5a:da:0c:64:82:7c:ce: 50:85:04:53:f4:48:07:3f:53:d0:36:28:91:bf:e8: a6:61:d3:bf:91:8c:2e:66:0c:14:83:fc:5f:92:38: 55:28:b2:ec:3b:75:5e:1a:e8:98:a3:9c:fc:35:6e: 7e:f2:9a:75:45:1c:d2:b0:5a:58:4e:68:8f:56:2c: cb:f1:56:fe:2d:63:19:25:75:e2:c9:a5:73:61:0c: 8a:84:1c:64:de:fd:b2:bb:80:30:93:17:6f:40:0d: 77:18:0e:24:13:00:2b:8b:99:d4:5a:f7:44:16:7d: 89:ed:48:ea:6b:eb:97:8b:e9:c3:a2:23:fe:3c:c1: 96:80:a5:a5:2c:61:7f:da:39:90:20:37:ae:82:ac: a7:08:9d:1c:55:89:67:cd:4e:0d:04:d0:a8:3f:18: 35:ae:1a:22:a5:7e:d9:d2:46:09:a1:be:1a:63:6c: 03:d3:b6:7c:86:e1:fe:0f:f0:7a:22:49:b2:6b:8d: 5a:86:04:17:8a:c4:cc:da:06:f5:51:86:d4:fe:dc: a2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AD:AD:0C:7E:F2:CA:1B:E2:AD:D6:D3:7E:44:73:E3:AF:3F:15:59 X509v3 Authority Key Identifier: keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/762tDH7yyhvirdbTfkRz468_FVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:84c0::/32 Signature Algorithm: sha256WithRSAEncryption 1c:b7:ee:af:b0:e1:b9:36:7c:88:f4:09:48:99:ac:28:5b:2d: 75:4b:ef:2b:68:6a:2e:ed:0b:1b:83:f6:d9:7e:af:20:4c:4d: 6e:99:c3:22:48:c9:d1:ac:71:a5:ec:7e:13:6a:ac:77:2f:c6: 29:d1:0c:5d:29:f1:41:f6:24:16:04:f4:39:47:5e:71:04:5f: 55:43:ca:0c:79:e1:93:85:18:f4:2a:70:ef:54:83:b4:6f:b3: ff:e0:d0:59:d3:0b:12:a7:8e:a9:8d:dd:85:db:98:46:01:af: 5e:04:68:48:08:9c:b4:d7:1c:c7:d8:0d:53:98:01:bc:bb:47: b8:bd:7c:86:19:de:0e:74:9d:92:fd:8c:4b:44:14:35:6b:29: 1f:18:6a:d2:88:a6:f0:fa:84:d8:a9:91:14:30:59:e6:27:d6: 3b:94:6d:37:36:ee:0d:ef:cd:50:35:d3:75:7f:24:f1:c5:26: 4e:0a:42:ff:db:04:4e:71:7f:1c:9a:43:52:38:34:06:55:61: a3:b4:aa:e0:8f:9f:6c:af:c5:9d:72:bf:72:51:0a:4b:6b:f2: 53:48:01:eb:a4:88:8c:97:64:c1:96:e0:58:a8:e3:5a:a1:79: f3:39:f6:d6:a8:61:52:c3:88:00:c1:ce:14:57:6b:86:28:2d: 9c:01:ab:72 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqmXpFWA3hYbYxbFvNB4QlnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDJkYzFkMmM4ZmJkYzA4NTE2YWIwYmIyMDg4YzM3ZWIw MDI4NjMwHhcNMjUxMTIxMTIyMzI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmFkYWQwYzdlZjJjYTFiZTJhZGQ2ZDM3ZTQ0NzNlM2FmM2YxNTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQNwU79oagprrOcj6A1Vj2zlTIaB csJY704Uhxo10jrvfhcZn61Kg8M94nP+kRcqqSpHAVraDGSCfM5QhQRT9EgHP1PQ NiiRv+imYdO/kYwuZgwUg/xfkjhVKLLsO3VeGuiYo5z8NW5+8pp1RRzSsFpYTmiP VizL8Vb+LWMZJXXiyaVzYQyKhBxk3v2yu4AwkxdvQA13GA4kEwAri5nUWvdEFn2J 7Ujqa+uXi+nDoiP+PMGWgKWlLGF/2jmQIDeugqynCJ0cVYlnzU4NBNCoPxg1rhoi pX7Z0kYJob4aY2wD07Z8huH+D/B6Ikmya41ahgQXisTM2gb1UYbU/tyiDQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFO+trQx+8sob4q3W035Ec+OvPxVZMB8GA1UdIwQY MBaAFLvS3B0sj73AhRarC7IIjDfrAChjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTct MDY0MzdlYzQ2NmI4LzEvNzYydERIN3l5aHZpcmRiVGZrUno0NjhfRlZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTctMDY0MzdlYzQ2NmI4 LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhOEwDAN BgkqhkiG9w0BAQsFAAOCAQEAHLfur7DhuTZ8iPQJSJmsKFstdUvvK2hqLu0LG4P2 2X6vIExNbpnDIkjJ0axxpex+E2qsdy/GKdEMXSnxQfYkFgT0OUdecQRfVUPKDHnh k4UY9Cpw71SDtG+z/+DQWdMLEqeOqY3dhduYRgGvXgRoSAictNccx9gNU5gBvLtH uL18hhneDnSdkv2MS0QUNWspHxhq0oim8PqE2KmRFDBZ5ifWO5RtNzbuDe/NUDXT dX8k8cUmTgpC/9sETnF/HJpDUjg0BlVho7Sq4I+fbK/FnXK/clEKS2vyU0gB66SI jJdkwZbgWKjjWqF58zn21qhhUsOIAMHOFFdrhigtnAGrcg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:46 2025 by rpki-client