This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9e7KJX-H-0Wp2Tq1pULUgkLz8lQ.roa File: 9e7KJX-H-0Wp2Tq1pULUgkLz8lQ.roa (raw, json) Hash identifier: XGr2pP24KVYsSQZJtWs/Of6z5QspQbDubjy/ILogR+o= Subject key identifier: F5:EE:CA:25:7F:87:FB:45:A9:D9:3A:B5:A5:42:D4:82:42:F3:F2:54 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019A909CAA4519F6F7700FE72B8F0FE971FF Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9e7KJX-H-0Wp2Tq1pULUgkLz8lQ.roa Signing time: Mon 17 Nov 2025 06:59:37 +0000 ROA not before: Mon 17 Nov 2025 06:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49505 IP address blocks: 2a0e:c380::/30 maxlen: 30 2a0e:c384::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:9c:aa:45:19:f6:f7:70:0f:e7:2b:8f:0f:e9:71:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Nov 17 06:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f5eeca257f87fb45a9d93ab5a542d48242f3f254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:70:e5:66:e6:40:f0:96:fb:e8:9e:a8:23: 95:de:3f:22:95:46:00:7b:9e:e6:c7:67:6c:17:7d: a3:6f:05:da:72:b1:11:33:c0:3c:73:1a:71:b3:f7: 66:56:e0:0c:53:48:11:ee:bd:e4:65:0f:61:b9:ff: 2f:85:1a:f4:70:a8:69:64:4a:e5:50:7b:77:97:41: e1:24:60:20:ce:fe:6b:20:e0:7e:9a:26:e5:99:7c: 52:a4:a6:7e:d7:b3:20:45:7c:51:db:cf:8f:a5:62: aa:a1:e9:44:12:8b:a7:9c:b5:fe:61:86:ba:08:2b: 2a:68:9c:65:30:69:e8:b2:d9:87:31:9c:2f:f8:64: 2b:5a:8e:e1:56:71:93:43:19:c2:7d:21:57:0b:da: c5:3d:b1:cc:f8:ee:30:c0:3f:3f:2b:74:5d:58:79: bc:45:2c:e5:2b:38:ce:d5:10:20:9b:7f:08:af:49: a7:d3:9a:d8:8e:b1:51:74:97:82:fd:31:db:19:de: ae:c0:e6:7b:0e:76:90:f0:27:a5:6a:25:79:1c:8f: 00:3f:6c:2f:c1:ff:5c:02:53:5a:d3:5c:8d:e0:b6: bb:fa:a4:ef:48:fb:52:3b:76:68:d2:82:55:72:29: ec:a5:d6:6f:26:a6:31:e5:70:42:ee:04:a0:5b:a4: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EE:CA:25:7F:87:FB:45:A9:D9:3A:B5:A5:42:D4:82:42:F3:F2:54 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9e7KJX-H-0Wp2Tq1pULUgkLz8lQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:c380::/29 Signature Algorithm: sha256WithRSAEncryption 2d:38:a8:91:20:64:52:58:ec:c8:95:bc:26:b4:fc:1c:ca:83: 95:db:e0:5f:b7:56:77:8d:1a:a0:4f:a9:03:fb:cd:53:3d:5e: 72:81:a6:1a:37:e8:08:05:a9:1b:42:17:d3:79:a4:78:18:f1: b7:b6:f6:2b:35:4d:36:13:f8:1d:98:20:9b:3f:d4:de:46:94: 0c:b7:a9:74:a0:b0:a3:50:24:75:a4:ca:68:ae:94:c7:00:96: a9:96:b7:44:fb:db:e0:7b:9c:ac:88:52:35:9a:63:ef:54:77: c9:06:a4:c2:cf:bb:e6:1a:72:5d:a1:e6:b1:3a:dd:50:8c:fc: b7:bb:66:af:e2:6d:c9:80:41:bb:94:73:1e:ab:b3:8d:78:fe: a2:02:a0:36:88:17:4f:8d:1a:a8:b8:34:72:d2:af:62:4e:98: 8d:3b:a9:44:e3:18:81:ca:09:56:3a:fa:d6:24:1d:8a:13:5b: 5a:2d:d6:65:ca:27:5a:45:80:c6:ea:90:2e:d9:fd:34:6e:b4: eb:72:2e:91:f2:bb:b9:b3:ce:95:90:03:7a:1a:62:5f:b5:d6: 07:fa:0e:6b:e2:b6:90:ce:c0:c6:fe:0e:d1:1d:e4:92:65:3c: 10:c1:44:57:97:58:44:83:8f:84:29:2d:9b:c8:3a:6f:61:20: ff:cb:22:6a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqQnKpFGfb3cA/nK48P6XH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjUxMTE3MDY1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWVlY2EyNTdmODdmYjQ1YTlkOTNhYjVhNTQyZDQ4MjQyZjNmMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Zw5WbmQPCW++ieqCOV3j8ilUYA e57mx2dsF32jbwXacrERM8A8cxpxs/dmVuAMU0gR7r3kZQ9huf8vhRr0cKhpZErl UHt3l0HhJGAgzv5rIOB+miblmXxSpKZ+17MgRXxR28+PpWKqoelEEounnLX+YYa6 CCsqaJxlMGnostmHMZwv+GQrWo7hVnGTQxnCfSFXC9rFPbHM+O4wwD8/K3RdWHm8 RSzlKzjO1RAgm38Ir0mn05rYjrFRdJeC/THbGd6uwOZ7DnaQ8CelaiV5HI8AP2wv wf9cAlNa01yN4La7+qTvSPtSO3Zo0oJVcinspdZvJqYx5XBC7gSgW6SGSwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPXuyiV/h/tFqdk6taVC1IJC8/JUMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvOWU3S0pYLUgtMFdwMlRxMXBVTFVna0x6OGxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg7DgDAN BgkqhkiG9w0BAQsFAAOCAQEALTiokSBkUljsyJW8JrT8HMqDldvgX7dWd40aoE+p A/vNUz1ecoGmGjfoCAWpG0IX03mkeBjxt7b2KzVNNhP4HZggmz/U3kaUDLepdKCw o1AkdaTKaK6UxwCWqZa3RPvb4HucrIhSNZpj71R3yQakws+75hpyXaHmsTrdUIz8 t7tmr+JtyYBBu5RzHquzjXj+ogKgNogXT40aqLg0ctKvYk6YjTupROMYgcoJVjr6 1iQdihNbWi3WZconWkWAxuqQLtn9NG6063IukfK7ubPOlZADehpiX7XWB/oOa+K2 kM7Axv4O0R3kkmU8EMFEV5dYRIOPhCktm8g6b2Eg/8siag== -----END CERTIFICATE-----Generated at Fri Dec 5 08:36:43 2025 by rpki-client