This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9ODdCkvx10vbtNHHhk-3aYpr8lA.roa File: 9ODdCkvx10vbtNHHhk-3aYpr8lA.roa (raw, json) Hash identifier: +RGJSxaElj3OJ/fVz/tvCSRWq7nA5HqDgk2ubrT7emg= Subject key identifier: F4:E0:DD:0A:4B:F1:D7:4B:DB:B4:D1:C7:86:4F:B7:69:8A:6B:F2:50 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019AED1381477C0786E58F00FC08697B3270 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9ODdCkvx10vbtNHHhk-3aYpr8lA.roa Signing time: Fri 05 Dec 2025 05:54:29 +0000 ROA not before: Fri 05 Dec 2025 05:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12389 IP address blocks: 2a09:6285::/32 maxlen: 32 2a09:e2c7::/32 maxlen: 32 2a13:3880::/32 maxlen: 32 2a13:3881::/32 maxlen: 32 2a13:3882::/32 maxlen: 32 2a13:3883::/32 maxlen: 32 2a13:3884::/32 maxlen: 32 2a13:3885::/32 maxlen: 32 2a13:3886::/32 maxlen: 32 2a13:3887::/32 maxlen: 32 2a13:93c2::/32 maxlen: 32 2a13:93c4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:13:81:47:7c:07:86:e5:8f:00:fc:08:69:7b:32:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Dec 5 05:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f4e0dd0a4bf1d74bdbb4d1c7864fb7698a6bf250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:0a:b7:21:f6:89:6a:7b:cb:7a:ea:33:3b: 32:83:3c:8b:df:d1:fc:a8:c7:e7:a9:e7:06:d0:81: bf:53:a5:2d:c0:12:b9:82:0e:c3:ff:da:1a:1e:01: 65:a7:8e:fc:c3:d6:8b:7b:66:c0:55:c6:75:aa:db: 3d:7b:63:b8:d3:66:02:fe:30:78:3a:51:c7:53:68: a1:10:aa:4c:60:1f:c2:58:e0:7f:3b:c2:25:be:72: e2:77:ae:b0:cd:27:e2:62:9d:67:2c:24:49:a3:dc: a4:a8:0c:40:74:fe:92:38:6d:3f:bc:53:1b:d6:34: b3:64:e7:fe:0a:16:61:43:63:6a:97:a3:b8:df:5d: a4:0f:3d:e4:f7:bb:83:93:ad:3b:3c:24:e2:2a:65: 30:7d:6b:48:b4:72:4a:88:51:46:09:5c:0c:2c:76: a3:24:00:1d:08:84:a8:4e:0f:93:b1:3f:d2:5d:5e: 60:92:4d:f5:2d:51:ab:3e:6b:72:17:95:de:9d:1c: 4c:4d:1d:2f:a0:9e:d8:d1:d7:bb:d2:58:35:04:1b: 5d:f5:eb:e6:71:67:c6:8a:45:c4:6b:26:3f:84:51: a9:69:f4:1d:9c:47:4f:ed:c6:34:8a:ef:6f:2a:bd: 07:d3:9e:7e:04:82:5e:27:7b:5f:1a:64:2a:6d:7f: 3f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E0:DD:0A:4B:F1:D7:4B:DB:B4:D1:C7:86:4F:B7:69:8A:6B:F2:50 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9ODdCkvx10vbtNHHhk-3aYpr8lA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:6285::/32 2a09:e2c7::/32 2a13:3880::/29 2a13:93c2::/32 2a13:93c4::/32 Signature Algorithm: sha256WithRSAEncryption 96:ff:6a:6d:c0:28:20:3d:91:cb:c3:0b:bf:8f:a7:12:be:fe: a9:ff:86:81:bd:ec:da:d9:db:74:85:a3:7c:00:2a:e8:f0:eb: 4d:ec:37:04:52:b2:25:7d:de:46:c5:7d:39:f6:2d:03:3c:b6: 3d:be:3f:d0:fb:d3:71:1c:5d:7b:c7:ab:09:4d:e5:b9:15:d2: 0a:fa:36:06:62:50:82:56:6c:fa:f9:f3:82:35:3c:75:4c:64: b7:19:e6:1d:5e:c8:f7:61:e8:3c:57:34:72:5e:d2:b2:52:96: 7d:77:aa:58:57:71:51:d7:93:ca:25:7c:b2:a4:be:3d:fe:c3: f3:58:84:60:a1:e4:7e:d6:10:7c:78:9a:11:b6:e1:01:09:c4: d0:39:03:ff:18:af:f3:c1:e4:b2:3f:55:86:4a:78:a8:67:98: ba:af:12:c2:4f:90:4f:28:e7:d0:15:bf:2e:75:70:5a:a4:3e: 97:7e:31:68:63:3e:b8:57:81:7e:e2:91:8d:91:0b:03:2e:7a: c4:7d:f4:30:bd:be:14:57:3e:cc:63:46:2a:77:7c:12:1a:21: 8b:2f:e3:42:5c:cd:27:42:92:50:5c:86:ea:d5:cf:f4:2b:f6: 64:49:7a:cb:66:da:82:b0:5f:f1:c9:57:f6:3c:7f:83:06:17: 69:59:79:cd -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZrtE4FHfAeG5Y8A/AhpezJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjUxMjA1MDU1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGUwZGQwYTRiZjFkNzRiZGJiNGQxYzc4NjRmYjc2OThhNmJmMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxScKtyH2iWp7y3rqMzsygzyL39H8 qMfnqecG0IG/U6UtwBK5gg7D/9oaHgFlp478w9aLe2bAVcZ1qts9e2O402YC/jB4 OlHHU2ihEKpMYB/CWOB/O8IlvnLid66wzSfiYp1nLCRJo9ykqAxAdP6SOG0/vFMb 1jSzZOf+ChZhQ2Nql6O4312kDz3k97uDk607PCTiKmUwfWtItHJKiFFGCVwMLHaj JAAdCISoTg+TsT/SXV5gkk31LVGrPmtyF5XenRxMTR0voJ7Y0de70lg1BBtd9evm cWfGikXEayY/hFGpafQdnEdP7cY0iu9vKr0H055+BIJeJ3tfGmQqbX8/nwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFPTg3QpL8ddL27TRx4ZPt2mKa/JQMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvOU9EZENrdngxMHZidE5ISGhrLTNhWXByOGxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUAKglihQMF ACoJ4scDBQMqEziAAwUAKhOTwgMFACoTk8QwDQYJKoZIhvcNAQELBQADggEBAJb/ am3AKCA9kcvDC7+PpxK+/qn/hoG97NrZ23SFo3wAKujw603sNwRSsiV93kbFfTn2 LQM8tj2+P9D703EcXXvHqwlN5bkV0gr6NgZiUIJWbPr584I1PHVMZLcZ5h1eyPdh 6DxXNHJe0rJSln13qlhXcVHXk8olfLKkvj3+w/NYhGCh5H7WEHx4mhG24QEJxNA5 A/8Yr/PB5LI/VYZKeKhnmLqvEsJPkE8o59AVvy51cFqkPpd+MWhjPrhXgX7ikY2R CwMuesR99DC9vhRXPsxjRip3fBIaIYsv40JczSdCklBchurVz/Qr9mRJestm2oKw X/HJV/Y8f4MGF2lZec0= -----END CERTIFICATE-----Generated at Fri Dec 5 08:38:07 2025 by rpki-client