This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/1-7T2_N2cgFTeswdH8nohcZPo69o.roa File: 1-7T2_N2cgFTeswdH8nohcZPo69o.roa (raw, json) Hash identifier: vLeFlqEPiq87khe/5aqQkehrJ4tuQ2aQ8PuLVcLMIyI= Subject key identifier: FB:B4:F6:FC:DD:9C:80:54:DE:B3:07:47:F2:7A:21:71:93:E8:EB:DA Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Certificate serial: 019AEB4F3B2523BF1C03E07E642D9F131187 Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/1-7T2_N2cgFTeswdH8nohcZPo69o.roa Signing time: Thu 04 Dec 2025 21:40:29 +0000 ROA not before: Thu 04 Dec 2025 21:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207754 IP address blocks: 2a14:a900::/29 maxlen: 32 2a14:a900::/32 maxlen: 32 2a14:a900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:4f:3b:25:23:bf:1c:03:e0:7e:64:2d:9f:13:11:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Validity Not Before: Dec 4 21:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fbb4f6fcdd9c8054deb30747f27a217193e8ebda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:05:85:e4:c7:05:0f:47:b0:18:c0:88:73: 6f:7e:6e:37:05:41:a3:3b:45:03:ed:1a:7d:ff:a8: 7d:7f:20:ff:a0:95:b8:80:ad:a8:80:6f:79:b9:5e: b0:2a:a8:98:6f:e0:92:3f:70:6f:c7:75:66:b6:4a: cc:90:94:e5:f0:3a:51:44:c5:83:77:36:77:0e:1a: d7:1f:69:04:48:bc:3d:18:e5:59:0b:ac:9d:5c:76: a0:5e:07:c9:de:f0:66:f8:c8:ed:64:ed:c8:66:36: 36:a4:ef:8d:80:f2:23:81:de:e0:ef:ce:c6:7e:25: fd:ac:ec:e8:ff:2e:4e:cc:92:39:09:44:94:b3:7c: 14:6b:1b:78:91:e3:4d:d7:c7:b5:f9:02:b4:ed:1c: 32:d4:13:7b:a7:22:7d:e9:b3:a7:b7:5b:67:6b:de: dd:40:d5:05:6a:45:b5:61:10:00:35:7d:f4:c5:05: fb:7c:69:e1:dd:94:d0:74:93:f2:eb:22:62:b4:80: 6e:53:af:65:ac:57:6f:0f:4d:a8:a8:23:cd:09:dd: 92:a2:92:46:9f:cc:01:fc:2b:12:c3:ef:6f:4d:39: 78:7c:81:30:8c:09:a2:71:e2:6d:c0:97:a9:00:c0: 0a:f6:33:2e:e9:d5:93:a7:6d:77:f4:90:bc:c4:f6: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B4:F6:FC:DD:9C:80:54:DE:B3:07:47:F2:7A:21:71:93:E8:EB:DA X509v3 Authority Key Identifier: keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/1-7T2_N2cgFTeswdH8nohcZPo69o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:a900::/29 Signature Algorithm: sha256WithRSAEncryption 3c:6d:35:1d:b7:61:b2:e7:c4:ed:bf:18:ee:b6:8b:79:e0:54: 0f:19:d5:fd:c8:01:1f:2b:24:de:f3:ff:66:e8:2c:81:4e:01: 47:ba:c1:e3:14:8f:a9:69:7c:b8:bb:da:2e:68:9d:da:75:62: d4:1c:ed:d0:66:1e:37:1e:b8:65:62:c2:21:26:71:e3:bd:bf: ed:61:2b:69:04:a3:fe:16:a6:65:33:0a:55:8f:d1:7c:6c:29: ed:a4:82:d4:70:bf:40:aa:17:cc:86:a2:26:9d:46:bc:da:66: 8d:54:be:1f:b0:fb:91:69:60:ac:35:db:62:19:4f:b6:6d:d1: 6f:84:53:c0:01:ba:ac:96:66:6c:ce:37:e5:23:92:9f:5c:ef: 2a:56:91:b9:a4:7d:4a:f2:d6:b2:85:a1:b7:a3:05:b5:88:3f: 2f:ef:c1:02:32:51:10:3a:02:cf:70:ec:8d:ea:da:c1:05:dc: 07:fb:55:ca:09:05:10:a4:b8:e0:39:89:f3:60:8b:b9:d9:35: 87:c7:b1:89:e3:b8:b7:b6:28:08:79:63:bb:dd:fd:11:72:7a: d0:84:1b:31:cc:0d:57:66:6f:f1:3c:0b:3f:b1:f4:e4:6e:e8: d1:79:7c:b1:56:fa:8a:d2:ee:c3:43:e3:c3:10:fc:5a:03:06: 70:48:ca:4d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZrrTzslI78cA+B+ZC2fExGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2M2EyNDQ4MGYwNGQxMzE4YmYxYTcwZGFiZmZhNGIyN2Vm MzJkYTIwHhcNMjUxMjA0MjE0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmI0ZjZmY2RkOWM4MDU0ZGViMzA3NDdmMjdhMjE3MTkzZThlYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvQFheTHBQ9HsBjAiHNvfm43BUGj O0UD7Rp9/6h9fyD/oJW4gK2ogG95uV6wKqiYb+CSP3Bvx3VmtkrMkJTl8DpRRMWD dzZ3DhrXH2kESLw9GOVZC6ydXHagXgfJ3vBm+MjtZO3IZjY2pO+NgPIjgd7g787G fiX9rOzo/y5OzJI5CUSUs3wUaxt4keNN18e1+QK07Rwy1BN7pyJ96bOnt1tna97d QNUFakW1YRAANX30xQX7fGnh3ZTQdJPy6yJitIBuU69lrFdvD02oqCPNCd2SopJG n8wB/CsSw+9vTTl4fIEwjAmiceJtwJepAMAK9jMu6dWTp2139JC8xPYHrQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPu09vzdnIBU3rMHR/J6IXGT6OvaMB8GA1UdIwQY MBaAFGY6JEgPBNExi/GnDav/pLJ+8y2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDkt Nzc1ZjVmNzRkNTgxLzEvMS03VDJfTjJjZ0ZUZXN3ZEg4bm9oY1pQbzY5by5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWIvNmY4MGE4LTZiNmEtNGQ5Ni1iZjQ5LTc3NWY1Zjc0ZDU4 MS8xL1pqb2tTQThFMFRHTDhhY05xXy1rc243ekxhSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoUqQAw DQYJKoZIhvcNAQELBQADggEBADxtNR23YbLnxO2/GO62i3ngVA8Z1f3IAR8rJN7z /2boLIFOAUe6weMUj6lpfLi72i5ondp1YtQc7dBmHjceuGViwiEmceO9v+1hK2kE o/4WpmUzClWP0XxsKe2kgtRwv0CqF8yGoiadRrzaZo1Uvh+w+5FpYKw122IZT7Zt 0W+EU8ABuqyWZmzON+Ujkp9c7ypWkbmkfUry1rKFobejBbWIPy/vwQIyURA6As9w 7I3q2sEF3Af7VcoJBRCkuOA5ifNgi7nZNYfHsYnjuLe2KAh5Y7vd/RFyetCEGzHM DVdmb/E8Cz+x9ORu6NF5fLFW+orS7sND48MQ/FoDBnBIyk0= -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:27 2025 by rpki-client