This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/nzqMbVSBco83b7keIuvW9pYFNSQ.roa File: nzqMbVSBco83b7keIuvW9pYFNSQ.roa (raw, json) Hash identifier: /iv3Al903G+RBBku1KufblAOU1jL3taljDs4rXeCbPE= Subject key identifier: 9F:3A:8C:6D:54:81:72:8F:37:6F:B9:1E:22:EB:D6:F6:96:05:35:24 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019A591BAE6E3E3958417FE258DBA27AA8A3 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/nzqMbVSBco83b7keIuvW9pYFNSQ.roa Signing time: Thu 06 Nov 2025 12:19:37 +0000 ROA not before: Thu 06 Nov 2025 12:19:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200993 IP address blocks: 2a0d:d940:52::/47 maxlen: 47 2a0d:d940:1300::/40 maxlen: 40 2a0d:d940:1f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:1b:ae:6e:3e:39:58:41:7f:e2:58:db:a2:7a:a8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Nov 6 12:19:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f3a8c6d5481728f376fb91e22ebd6f696053524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:53:bc:43:2d:9d:c9:21:b2:a7:9f:60:f5:55: e6:f4:72:80:d8:24:fc:24:aa:95:dc:04:99:03:1a: 75:c8:20:c9:8d:f3:6d:62:c9:90:fa:35:8a:a8:23: a3:9b:a2:04:c6:7c:b0:10:5d:de:72:8d:62:51:35: 58:09:bc:ec:35:e1:9d:73:9d:2a:05:bb:e6:a2:2c: 7c:12:e4:37:a8:ad:cb:53:fd:33:81:53:68:18:ad: 35:22:86:c7:c3:43:59:61:5f:4b:a8:ac:dc:9f:d5: bf:85:35:4e:c2:16:9c:5d:6b:02:3e:78:dd:e9:bc: 1e:7e:ef:2d:44:e6:a5:94:4f:a9:65:6b:db:07:c5: 9b:0b:0b:29:44:37:b3:a3:2b:66:b2:9d:7f:4d:76: 0b:94:3c:71:45:a6:26:6a:fb:ff:da:85:47:57:4d: ad:0b:b2:85:75:26:6f:98:b9:d2:12:30:0c:fc:ad: aa:ab:1a:bf:6a:d6:91:ed:64:1f:38:87:60:cd:1d: 36:af:28:e4:e0:78:7a:5c:d3:2c:4d:74:05:42:e7: 58:40:cd:4a:9b:f1:13:6a:b3:87:ca:a0:33:7a:fb: ae:11:76:68:f7:88:b8:03:2e:28:53:f9:d9:0f:bf: 9d:a2:c7:a1:4e:4b:91:85:b1:31:8e:7a:af:81:6d: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3A:8C:6D:54:81:72:8F:37:6F:B9:1E:22:EB:D6:F6:96:05:35:24 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/nzqMbVSBco83b7keIuvW9pYFNSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:52::/47 2a0d:d940:1300::/40 2a0d:d940:1f00::/40 Signature Algorithm: sha256WithRSAEncryption 88:61:10:8e:1c:e8:95:89:ba:be:db:4f:3c:e5:d5:e1:41:b6: 7e:3e:a0:f8:e7:f0:da:d9:76:c7:a3:fc:9d:29:36:ab:13:88: d3:b6:40:43:48:26:39:88:e0:d8:2c:63:1c:21:3b:ea:a3:f6: 89:9d:5d:9c:d1:ca:25:3f:b0:e1:d9:c6:c2:95:f2:ba:9b:ed: dd:17:3d:68:5e:ce:f9:a2:79:c7:36:8f:60:16:dd:75:3a:64: 91:16:18:00:38:e5:57:f9:71:8b:5a:16:6a:67:e6:4e:23:e7: ae:98:34:f9:6d:43:4c:9f:f1:9e:02:17:8f:3b:fc:8a:af:01: 65:2c:3e:fe:19:16:4b:ba:00:a2:a6:24:a9:62:88:5f:f1:3b: b0:b7:77:e0:c5:39:a8:77:82:42:4d:49:24:fe:1d:d6:5a:c2: 68:1d:52:86:80:ed:3a:f6:e5:7f:33:78:70:78:96:76:1d:ac: 40:ba:30:7b:ef:0d:54:d8:3f:55:1a:51:5e:06:37:24:0e:3d: a2:34:15:b5:8e:f3:55:ac:83:74:db:a4:89:c6:1b:e1:95:e1: 9c:4b:8f:32:8b:ad:d4:84:93:8f:01:b4:b2:ea:8f:2a:17:e2: 2e:67:70:7b:00:e9:6c:82:bd:d5:fb:31:a3:e7:97:77:17:66: 85:25:53:3a -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZpZG65uPjlYQX/iWNuieqijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUxMTA2MTIxOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjNhOGM2ZDU0ODE3MjhmMzc2ZmI5MWUyMmViZDZmNjk2MDUzNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolO8Qy2dySGyp59g9VXm9HKA2CT8 JKqV3ASZAxp1yCDJjfNtYsmQ+jWKqCOjm6IExnywEF3eco1iUTVYCbzsNeGdc50q Bbvmoix8EuQ3qK3LU/0zgVNoGK01IobHw0NZYV9LqKzcn9W/hTVOwhacXWsCPnjd 6bwefu8tROallE+pZWvbB8WbCwspRDezoytmsp1/TXYLlDxxRaYmavv/2oVHV02t C7KFdSZvmLnSEjAM/K2qqxq/ataR7WQfOIdgzR02ryjk4Hh6XNMsTXQFQudYQM1K m/ETarOHyqAzevuuEXZo94i4Ay4oU/nZD7+dosehTkuRhbExjnqvgW3HpQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFJ86jG1UgXKPN2+5HiLr1vaWBTUkMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvbnpxTWJWU0JjbzgzYjdrZUl1dlc5cFlGTlNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwcBKg3ZQABS AwYAKg3ZQBMDBgAqDdlAHzANBgkqhkiG9w0BAQsFAAOCAQEAiGEQjhzolYm6vttP POXV4UG2fj6g+Ofw2tl2x6P8nSk2qxOI07ZAQ0gmOYjg2CxjHCE76qP2iZ1dnNHK JT+w4dnGwpXyupvt3Rc9aF7O+aJ5xzaPYBbddTpkkRYYADjlV/lxi1oWamfmTiPn rpg0+W1DTJ/xngIXjzv8iq8BZSw+/hkWS7oAoqYkqWKIX/E7sLd34MU5qHeCQk1J JP4d1lrCaB1ShoDtOvblfzN4cHiWdh2sQLowe+8NVNg/VRpRXgY3JA49ojQVtY7z VayDdNukicYb4ZXhnEuPMout1ISTjwG0suqPKhfiLmdwewDpbIK91fsxo+eXdxdm hSVTOg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:19 2025 by rpki-client