This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/7rLq9Yo_ZKMyDUcDNt839Vf4z_c.roa File: 7rLq9Yo_ZKMyDUcDNt839Vf4z_c.roa (raw, json) Hash identifier: GX2WlcWFxc3/pJKbBIxA3Q2XCXlk/mYW0qr2Ex+/EXA= Subject key identifier: EE:B2:EA:F5:8A:3F:64:A3:32:0D:47:03:36:DF:37:F5:57:F8:CF:F7 Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019AC70693217A718D856E0CCA360E56F27E Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/7rLq9Yo_ZKMyDUcDNt839Vf4z_c.roa Signing time: Thu 27 Nov 2025 20:34:48 +0000 ROA not before: Thu 27 Nov 2025 20:34:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141193 IP address blocks: 2001:b18:1015::/48 maxlen: 48 2001:b18:1091::/48 maxlen: 48 2a0d:82c7:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c7:06:93:21:7a:71:8d:85:6e:0c:ca:36:0e:56:f2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Nov 27 20:34:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eeb2eaf58a3f64a3320d470336df37f557f8cff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:33:61:06:b5:1d:d8:90:5d:b0:96:74:7b:01: 7f:05:c3:45:54:be:5e:99:b9:5e:4f:a2:75:67:2c: de:ab:28:d6:ee:9b:1c:9f:91:59:cc:77:e4:77:26: b4:99:5f:b0:38:de:dd:65:ff:17:11:e8:dd:88:42: 7f:e0:81:b0:fc:e4:77:3a:59:70:c5:ce:29:7c:bd: a7:0e:24:2b:f2:52:ba:1a:2f:e9:6f:b5:cf:33:20: 2e:cd:a0:6f:4c:7f:1c:5a:5f:17:e4:73:be:d7:0c: 82:36:c7:3d:a4:41:9e:42:6b:d0:a3:19:6b:91:70: 18:36:8d:3f:bc:40:74:c0:21:48:fd:39:c3:50:7f: 12:df:74:4a:cf:e8:1e:e3:07:d7:ef:23:f2:ec:1c: ff:c1:24:e8:51:07:e5:c6:44:78:e0:40:96:e0:c1: 83:a7:48:e5:90:a8:1c:8e:ae:70:2b:43:c0:1f:ba: ef:5c:99:79:43:c9:99:57:73:1f:9c:71:44:c3:a1: a5:bf:ee:7e:b0:dd:2d:60:a5:cc:8a:da:80:c1:46: d3:09:32:55:95:1d:d0:c2:5f:cd:0c:53:b5:cb:8f: 1b:e7:10:a9:eb:64:6b:c1:83:e8:bb:62:a6:11:39: dc:ca:01:34:a1:01:94:bc:6b:4e:d6:3d:ee:51:2d: c2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B2:EA:F5:8A:3F:64:A3:32:0D:47:03:36:DF:37:F5:57:F8:CF:F7 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/7rLq9Yo_ZKMyDUcDNt839Vf4z_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:b18:1015::/48 2001:b18:1091::/48 2a0d:82c7:3000::/36 Signature Algorithm: sha256WithRSAEncryption 93:24:20:c7:13:16:85:01:a8:42:c5:13:db:70:20:c1:95:5b: 08:5c:d6:a1:c8:40:35:de:89:52:57:a4:17:fa:e9:4e:c9:8e: d0:7a:83:5a:ae:9e:8a:c9:d9:13:6f:6f:f2:85:60:69:84:3d: d4:b5:55:0a:80:ab:b0:37:a4:43:da:2e:e6:b1:d2:2f:84:fc: b9:b1:36:b9:df:e4:f9:f5:1c:ee:b5:62:88:db:f1:3b:94:21: 73:65:4b:7a:3d:18:15:db:37:83:6f:9f:3b:d1:f0:95:37:00: de:c4:f6:db:39:e7:ec:a3:e4:60:26:c0:ba:31:e1:28:9a:29: a3:4d:5f:69:d9:df:da:3c:78:da:a5:c7:82:31:c5:42:de:36: 6c:45:44:04:65:2d:90:4d:79:c4:8f:1e:6a:c1:fd:83:a6:54: 14:8c:84:41:b6:4d:1a:f0:bf:3e:17:7a:fd:93:ee:6b:1c:b6: b5:aa:0e:8b:cb:a4:a7:a4:fa:bb:f1:3b:f8:97:5b:f6:3d:3b: bc:80:02:69:cd:dc:20:6f:99:2a:0f:72:2e:34:b8:c0:65:6b: 71:93:b1:a7:36:ea:9b:b0:c1:0d:be:a8:ea:dd:64:e8:b1:99: e7:8b:0a:8a:87:c5:f8:a9:cf:b5:7f:ee:bc:71:28:d6:de:a0: ff:59:fb:9f -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZrHBpMhenGNhW4MyjYOVvJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjUxMTI3MjAzNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWIyZWFmNThhM2Y2NGEzMzIwZDQ3MDMzNmRmMzdmNTU3ZjhjZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jNhBrUd2JBdsJZ0ewF/BcNFVL5e mbleT6J1ZyzeqyjW7pscn5FZzHfkdya0mV+wON7dZf8XEejdiEJ/4IGw/OR3Ollw xc4pfL2nDiQr8lK6Gi/pb7XPMyAuzaBvTH8cWl8X5HO+1wyCNsc9pEGeQmvQoxlr kXAYNo0/vEB0wCFI/TnDUH8S33RKz+ge4wfX7yPy7Bz/wSToUQflxkR44ECW4MGD p0jlkKgcjq5wK0PAH7rvXJl5Q8mZV3MfnHFEw6Glv+5+sN0tYKXMitqAwUbTCTJV lR3Qwl/NDFO1y48b5xCp62RrwYPou2KmETncygE0oQGUvGtO1j3uUS3CKwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFO6y6vWKP2SjMg1HAzbfN/VX+M/3MB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvN3JMcTlZb19aS015RFVjRE50ODM5VmY0el9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwcAIAELGBAV AwcAIAELGBCRAwYEKg2CxzAwDQYJKoZIhvcNAQELBQADggEBAJMkIMcTFoUBqELF E9twIMGVWwhc1qHIQDXeiVJXpBf66U7JjtB6g1qunorJ2RNvb/KFYGmEPdS1VQqA q7A3pEPaLuax0i+E/LmxNrnf5Pn1HO61Yojb8TuUIXNlS3o9GBXbN4NvnzvR8JU3 AN7E9ts55+yj5GAmwLox4SiaKaNNX2nZ39o8eNqlx4IxxULeNmxFRARlLZBNecSP HmrB/YOmVBSMhEG2TRrwvz4Xev2T7msctrWqDovLpKek+rvxO/iXW/Y9O7yAAmnN 3CBvmSoPci40uMBla3GTsac26puwwQ2+qOrdZOixmeeLCoqHxfipz7V/7rxxKNbe oP9Z+58= -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:11 2025 by rpki-client