This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/fT8PqrrHFdeL6RPAjK_QqVtkY5U.roa File: fT8PqrrHFdeL6RPAjK_QqVtkY5U.roa (raw, json) Hash identifier: EdNppWYe0lfaiYboPQqTv59YS9lpRdN9I3wPP2GcUXA= Subject key identifier: 7D:3F:0F:AA:BA:C7:15:D7:8B:E9:13:C0:8C:AF:D0:A9:5B:64:63:95 Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019ADBD7DC951A5084F45D97152B7BF026EA Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/fT8PqrrHFdeL6RPAjK_QqVtkY5U.roa Signing time: Mon 01 Dec 2025 21:35:48 +0000 ROA not before: Mon 01 Dec 2025 21:35:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30788 IP address blocks: 2a07:d940::/29 maxlen: 29 2a0a:f8c0::/29 maxlen: 29 2a0c:7b80::/32 maxlen: 32 2a0c:7b81::/32 maxlen: 32 2a0c:c180::/32 maxlen: 32 2a0f:a380::/29 maxlen: 29 2a11:52c0::/29 maxlen: 29 2a11:8d80::/29 maxlen: 29 2a12:23c0::/29 maxlen: 29 2a12:2940::/29 maxlen: 29 2a12:5640::/29 maxlen: 29 2a12:e580::/29 maxlen: 29 2a13:5200::/32 maxlen: 32 2a13:5201::/32 maxlen: 32 2a13:5202::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:db:d7:dc:95:1a:50:84:f4:5d:97:15:2b:7b:f0:26:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Dec 1 21:35:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7d3f0faabac715d78be913c08cafd0a95b646395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:df:30:eb:5b:dc:50:77:e2:f9:d7:e1:c4:6a: e6:11:ac:4f:84:c5:f8:77:4d:ac:18:09:c0:b9:47: b3:0c:84:77:2d:2c:42:71:49:be:55:a3:e7:60:80: 34:32:80:fa:bc:ea:80:d7:f1:6c:f7:d8:8c:c4:da: b9:bd:49:46:c0:1d:1f:16:f8:95:94:63:2e:c3:59: a5:12:03:b0:cb:0b:3d:d6:ca:8e:14:2e:b8:0f:3a: f1:f0:27:7e:0f:de:48:3a:c2:a2:da:f8:7e:6c:62: 8c:2d:5a:e8:96:be:24:e5:32:d8:1a:9d:aa:64:67: ec:0b:e1:20:c3:0d:59:9f:a6:ae:26:81:64:ce:ae: 1f:ed:bb:55:f5:13:fe:9e:a1:37:ec:42:98:07:55: 85:51:d6:68:46:ee:7d:10:03:8e:15:c0:0a:34:c2: 53:08:18:01:0c:9b:e0:91:90:a5:8e:2a:26:fa:94: 43:fb:82:69:90:c0:68:bf:60:b6:90:72:09:c9:81: ac:04:00:c6:12:e4:11:0b:85:1b:ad:ef:de:66:9a: 16:07:81:e6:bf:c8:77:c3:be:0d:c5:db:db:5c:a4: 74:e8:82:c4:22:30:fd:b2:a4:a6:00:41:c1:ec:f8: 95:f4:f4:5b:9b:83:20:68:ed:6d:4c:54:4a:c0:a2: f9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3F:0F:AA:BA:C7:15:D7:8B:E9:13:C0:8C:AF:D0:A9:5B:64:63:95 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/fT8PqrrHFdeL6RPAjK_QqVtkY5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:d940::/29 2a0a:f8c0::/29 2a0c:7b80::/31 2a0c:c180::/32 2a0f:a380::/29 2a11:52c0::/29 2a11:8d80::/29 2a12:23c0::/29 2a12:2940::/29 2a12:5640::/29 2a12:e580::/29 2a13:5200::-2a13:5202:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5b:c5:dd:5e:49:7d:70:6a:b0:4d:cf:69:3b:5d:2a:b8:7f:71: f7:b0:ee:99:87:e8:9e:af:5e:3c:be:06:e8:ce:fe:8e:92:a6: 97:77:f2:97:ac:d5:ad:c3:31:72:54:0a:45:a4:f4:42:9d:b5: 4a:a5:e3:44:5d:20:0b:ad:03:20:65:b3:cd:a8:9f:d1:ae:3f: c7:50:e1:b1:dc:12:1b:be:06:e5:b7:9c:a4:b2:b4:80:2f:74: 13:b3:d5:75:4b:73:78:28:5c:e7:93:bb:44:00:f5:b4:6a:ee: 07:08:f0:29:49:16:a1:9d:93:b3:a4:b4:8c:91:ae:0f:6f:57: 11:2d:e1:2c:44:bf:9e:d6:64:2a:c0:bc:3a:cc:19:95:74:06: 29:78:64:8a:d4:cd:7b:e6:3e:b0:e2:9e:08:b1:e5:e4:f4:b2: 88:73:6a:46:6b:49:05:07:24:77:7d:9d:61:04:5e:f8:90:c4: 19:cc:2b:0a:51:c1:92:9c:e7:f8:88:9c:c2:1e:70:6c:84:ac: 2f:59:09:08:1b:d8:1f:4c:70:2a:84:3d:97:de:c7:d0:be:d7: cb:29:6c:b6:82:0a:12:ce:b3:56:90:bc:b5:fd:f9:40:6f:59: 78:e2:6a:8e:80:be:b3:57:96:8d:1a:d0:e3:fe:bf:9b:9f:67: 84:cc:d3:32 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZrb19yVGlCE9F2XFSt78CbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUxMjAxMjEzNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDNmMGZhYWJhYzcxNWQ3OGJlOTEzYzA4Y2FmZDBhOTViNjQ2Mzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk98w61vcUHfi+dfhxGrmEaxPhMX4 d02sGAnAuUezDIR3LSxCcUm+VaPnYIA0MoD6vOqA1/Fs99iMxNq5vUlGwB0fFviV lGMuw1mlEgOwyws91sqOFC64Dzrx8Cd+D95IOsKi2vh+bGKMLVrolr4k5TLYGp2q ZGfsC+Egww1Zn6auJoFkzq4f7btV9RP+nqE37EKYB1WFUdZoRu59EAOOFcAKNMJT CBgBDJvgkZCljiom+pRD+4JpkMBov2C2kHIJyYGsBADGEuQRC4Ubre/eZpoWB4Hm v8h3w74NxdvbXKR06ILEIjD9sqSmAEHB7PiV9PRbm4MgaO1tTFRKwKL5gwIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFH0/D6q6xxXXi+kTwIyv0KlbZGOVMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvZlQ4UHFyckhGZGVMNlJQQWpLX1FxVnRrWTVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAAjBcAwUDKgfZQAMF AyoK+MADBQEqDHuAAwUAKgzBgAMFAyoPo4ADBQMqEVLAAwUDKhGNgAMFAyoSI8AD BQMqEilAAwUDKhJWQAMFAyoS5YAwDQMEASoTUgMFACoTUgIwDQYJKoZIhvcNAQEL BQADggEBAFvF3V5JfXBqsE3PaTtdKrh/cfew7pmH6J6vXjy+BujO/o6Sppd38pes 1a3DMXJUCkWk9EKdtUql40RdIAutAyBls82on9GuP8dQ4bHcEhu+BuW3nKSytIAv dBOz1XVLc3goXOeTu0QA9bRq7gcI8ClJFqGdk7OktIyRrg9vVxEt4SxEv57WZCrA vDrMGZV0Bil4ZIrUzXvmPrDingix5eT0sohzakZrSQUHJHd9nWEEXviQxBnMKwpR wZKc5/iInMIecGyErC9ZCQgb2B9McCqEPZfex9C+18spbLaCChLOs1aQvLX9+UBv WXjiao6AvrNXlo0a0OP+v5ufZ4TM0zI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:07:28 2025 by rpki-client