This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/eLWZPqIlPOZugeCN_1jMsaC5Ajw.roa File: eLWZPqIlPOZugeCN_1jMsaC5Ajw.roa (raw, json) Hash identifier: 2hQ1O4JERwzA+kKepYWa1+J0iuXK/3gxUZureCZHKIk= Subject key identifier: 78:B5:99:3E:A2:25:3C:E6:6E:81:E0:8D:FF:58:CC:B1:A0:B9:02:3C Certificate issuer: /CN=31252ce307781d0319fcd7494fa64f26045016ac Certificate serial: 019ACA90078D493E42DDA3E13A23A49B1281 Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/eLWZPqIlPOZugeCN_1jMsaC5Ajw.roa Signing time: Fri 28 Nov 2025 13:03:48 +0000 ROA not before: Fri 28 Nov 2025 13:03:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 224 IP address blocks: 2001:700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:90:07:8d:49:3e:42:dd:a3:e1:3a:23:a4:9b:12:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac Validity Not Before: Nov 28 13:03:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=78b5993ea2253ce66e81e08dff58ccb1a0b9023c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:73:cf:4a:1b:61:e9:02:78:ad:ef:46:e2: 6c:bc:8d:41:2e:5c:1e:59:65:d6:87:54:af:0d:99: 9c:34:e0:cf:45:fb:ca:b6:fb:e2:92:71:d0:04:e6: 9a:12:57:07:8b:cf:cd:56:45:2f:9b:fd:5b:a0:70: 71:e4:10:8c:d9:99:48:a1:93:c3:b2:ea:ec:34:3b: 81:4f:c5:e0:91:99:a7:19:74:4e:ea:9d:01:d2:92: f2:1b:d0:9b:8c:63:d6:17:1c:04:01:6e:6a:f6:8e: e2:f0:3e:68:f3:7c:97:5d:d8:4d:66:82:a6:ca:79: 53:0c:41:c4:31:27:4b:06:8b:52:ab:6b:fd:1b:b7: e3:69:82:f0:6b:dc:96:68:f9:ae:b7:8a:bb:8d:96: ad:bd:3f:ab:7b:47:bb:af:19:b0:13:03:99:7c:53: 48:5f:aa:07:e7:9b:96:f3:56:42:47:08:3e:d9:bf: 23:58:b4:8e:a9:fc:64:9c:0c:83:fd:e7:f8:37:6e: 4a:2c:e6:84:ec:47:f7:43:32:55:3d:e5:e3:c3:67: f8:16:c9:54:5b:91:a0:d5:c3:ce:0d:71:cf:68:d6: 86:f2:80:9c:5e:fa:0c:8a:96:39:a8:19:f6:b3:2a: 80:74:0c:77:67:96:cd:be:23:b5:fe:4b:92:3f:25: 35:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B5:99:3E:A2:25:3C:E6:6E:81:E0:8D:FF:58:CC:B1:A0:B9:02:3C X509v3 Authority Key Identifier: keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/eLWZPqIlPOZugeCN_1jMsaC5Ajw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:700::/32 Signature Algorithm: sha256WithRSAEncryption 42:35:a9:08:24:07:4e:66:ec:6d:a3:d1:05:cd:6a:a1:ca:05: ee:75:7e:92:1b:69:ad:8f:8e:15:53:57:80:ca:d4:ba:fe:67: 8e:85:7e:4f:90:95:24:27:d3:d0:a5:5b:9d:11:9c:08:1e:43: b8:1e:bf:da:09:b8:19:0e:2a:61:fe:47:07:c1:8a:d7:c1:22: 2a:19:74:ce:38:ca:00:33:20:1d:70:52:17:f2:03:bc:e3:17: d5:a9:37:ec:56:84:fc:df:73:86:3b:50:20:86:f5:62:11:83: 4c:fc:b1:9e:e9:dd:55:cc:9d:12:14:0d:c9:7c:b3:24:01:af: 0f:9d:9d:01:a4:bd:f4:f8:f2:49:ec:c9:4b:f1:45:29:da:b9: da:06:82:ec:71:f3:f0:2b:30:88:ee:58:0a:19:a4:e1:9a:86: bc:92:f0:bf:33:4c:21:ed:43:75:63:66:63:f8:16:c9:ee:2a: 7c:ec:ba:ca:dd:ea:50:da:a6:cd:84:1d:0d:98:8f:16:85:78: bc:30:4e:d3:a2:e9:2d:4a:66:4c:6a:42:01:b2:5e:00:04:18: 87:87:44:da:0d:cb:74:a8:4a:08:22:e3:55:e0:dc:38:33:14: ed:7f:25:87:eb:fc:22:7d:c6:76:82:b5:7f:98:51:f3:61:32: 09:68:8c:de -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrKkAeNST5C3aPhOiOkmxKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjUyY2UzMDc3ODFkMDMxOWZjZDc0OTRmYTY0ZjI2MDQ1 MDE2YWMwHhcNMjUxMTI4MTMwMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGI1OTkzZWEyMjUzY2U2NmU4MWUwOGRmZjU4Y2NiMWEwYjkwMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH5zz0obYekCeK3vRuJsvI1BLlwe WWXWh1SvDZmcNODPRfvKtvviknHQBOaaElcHi8/NVkUvm/1boHBx5BCM2ZlIoZPD sursNDuBT8XgkZmnGXRO6p0B0pLyG9CbjGPWFxwEAW5q9o7i8D5o83yXXdhNZoKm ynlTDEHEMSdLBotSq2v9G7fjaYLwa9yWaPmut4q7jZatvT+re0e7rxmwEwOZfFNI X6oH55uW81ZCRwg+2b8jWLSOqfxknAyD/ef4N25KLOaE7Ef3QzJVPeXjw2f4FslU W5Gg1cPODXHPaNaG8oCcXvoMipY5qBn2syqAdAx3Z5bNviO1/kuSPyU1nwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHi1mT6iJTzmboHgjf9YzLGguQI8MB8GA1UdIwQY MBaAFDElLOMHeB0DGfzXSU+mTyYEUBasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgt ZDNmZDkxYWM3YzlmLzEvZUxXWlBxSWxQT1p1Z2VDTl8xak1zYUM1QWp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgtZDNmZDkxYWM3Yzlm LzEvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEHADAN BgkqhkiG9w0BAQsFAAOCAQEAQjWpCCQHTmbsbaPRBc1qocoF7nV+khtprY+OFVNX gMrUuv5njoV+T5CVJCfT0KVbnRGcCB5DuB6/2gm4GQ4qYf5HB8GK18EiKhl0zjjK ADMgHXBSF/IDvOMX1ak37FaE/N9zhjtQIIb1YhGDTPyxnundVcydEhQNyXyzJAGv D52dAaS99PjySezJS/FFKdq52gaC7HHz8CswiO5YChmk4ZqGvJLwvzNMIe1DdWNm Y/gWye4qfOy6yt3qUNqmzYQdDZiPFoV4vDBO06LpLUpmTGpCAbJeAAQYh4dE2g3L dKhKCCLjVeDcODMU7X8lh+v8In3GdoK1f5hR82EyCWiM3g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:23 2025 by rpki-client