This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/u7kimDAvt4u6Uslfb6Q8dwxXJ4U.roa File: u7kimDAvt4u6Uslfb6Q8dwxXJ4U.roa (raw, json) Hash identifier: 3A49iTtZkWt31Q7WNjMXCnTT1/h0nEZHLn7n09wUli4= Subject key identifier: BB:B9:22:98:30:2F:B7:8B:BA:52:C9:5F:6F:A4:3C:77:0C:57:27:85 Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d Certificate serial: 019A7AD9AEA989AB6A364F5406C7AB2C5C89 Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/u7kimDAvt4u6Uslfb6Q8dwxXJ4U.roa Signing time: Thu 13 Nov 2025 01:34:37 +0000 ROA not before: Thu 13 Nov 2025 01:34:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31424 IP address blocks: 2001:67c:2c08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7a:d9:ae:a9:89:ab:6a:36:4f:54:06:c7:ab:2c:5c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d Validity Not Before: Nov 13 01:34:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bbb92298302fb78bba52c95f6fa43c770c572785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:82:96:2a:49:61:7e:57:53:f5:39:ec:39: 47:fd:6b:23:82:df:35:64:8b:00:1d:f5:62:de:29: bc:3b:dc:1d:b1:3e:65:72:dd:4b:06:14:aa:7a:26: 0e:d2:f0:3a:7b:22:76:9e:72:ee:a0:30:aa:94:5c: 1d:c3:2f:71:87:9a:75:05:4d:7a:7f:97:15:bc:41: da:ce:26:89:7c:46:68:ef:b1:a6:e5:f0:82:ac:a5: bd:99:3f:df:74:a3:44:c7:a3:9f:cd:59:91:d6:52: 8f:40:2f:a2:e5:c8:79:3d:0a:8c:ce:93:69:84:66: 2e:d2:8e:a3:0f:77:14:13:29:bb:0f:4f:1b:7d:e4: ab:68:99:ac:e4:44:f5:26:59:15:ef:b1:09:66:0c: c2:cd:7c:b6:bd:66:b7:9f:c3:9f:ed:b0:eb:83:73: 84:94:2b:12:d4:c8:5a:38:c3:6a:0f:0b:49:d5:d1: a3:82:4c:d1:2b:81:fd:88:8b:39:ba:5f:3d:c1:0a: 46:84:ae:6d:b7:8b:7c:11:5e:a1:2b:38:93:d8:a1: 59:3c:e4:29:ce:ae:da:80:f7:4f:7c:3d:aa:d3:5c: 06:28:12:6e:c6:69:cf:92:36:48:ad:ae:2f:db:5a: 46:ee:c1:80:06:c4:d4:9a:ed:bf:6a:5c:d2:76:f3: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:22:98:30:2F:B7:8B:BA:52:C9:5F:6F:A4:3C:77:0C:57:27:85 X509v3 Authority Key Identifier: keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/u7kimDAvt4u6Uslfb6Q8dwxXJ4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2c08::/48 Signature Algorithm: sha256WithRSAEncryption 08:43:cd:6c:73:40:70:07:93:59:08:64:89:b4:97:da:1d:81: c3:49:27:b1:c6:8b:4c:c9:7c:42:4b:98:14:45:a1:19:13:8b: d2:85:3d:40:39:5b:34:62:2a:4a:ed:8c:72:d4:5a:11:85:a2: 02:74:7c:26:d7:47:bb:2e:8c:3d:5d:02:6f:4f:95:69:4a:0b: c3:d8:ef:59:dc:1f:0b:93:85:64:07:86:79:dc:e6:7c:e4:b1: ba:ee:26:e4:c1:67:a8:cb:e9:00:77:20:8e:42:7f:73:c4:b8: 2a:48:82:9e:f1:73:06:2a:36:99:fc:d4:7b:4b:88:0b:b0:1f: bd:bc:6e:19:09:a0:a0:68:a3:be:7f:da:30:93:6c:7a:2b:fd: 73:2f:25:68:35:be:9a:08:0f:ab:51:56:00:b9:86:55:d0:3c: 99:0a:7c:33:56:01:fd:4a:08:3f:df:a0:3d:f5:93:6f:32:e1: 0d:a7:b8:49:1d:6a:ac:8f:05:39:f2:9c:c4:aa:26:4c:d5:ad: 0e:74:5a:68:2f:66:4f:f4:e9:1b:84:c9:f9:c7:86:ac:33:4d: 38:23:30:6f:9b:b8:1f:8f:f1:e5:c9:1c:16:dc:de:3a:d7:6a: 46:ef:9e:79:de:53:24:e9:0e:0c:fb:60:3d:85:51:20:5e:41: 00:e6:4d:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZp62a6piatqNk9UBserLFyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZjkyMTI5ZGY3YWFhNzE1N2UxNTk3M2MyNDc1M2UxMThj OTA1N2QwHhcNMjUxMTEzMDEzNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmI5MjI5ODMwMmZiNzhiYmE1MmM5NWY2ZmE0M2M3NzBjNTcyNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr66ClipJYX5XU/U57DlH/Wsjgt81 ZIsAHfVi3im8O9wdsT5lct1LBhSqeiYO0vA6eyJ2nnLuoDCqlFwdwy9xh5p1BU16 f5cVvEHaziaJfEZo77Gm5fCCrKW9mT/fdKNEx6OfzVmR1lKPQC+i5ch5PQqMzpNp hGYu0o6jD3cUEym7D08bfeSraJms5ET1JlkV77EJZgzCzXy2vWa3n8Of7bDrg3OE lCsS1MhaOMNqDwtJ1dGjgkzRK4H9iIs5ul89wQpGhK5tt4t8EV6hKziT2KFZPOQp zq7agPdPfD2q01wGKBJuxmnPkjZIra4v21pG7sGABsTUmu2/alzSdvPGkQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLu5IpgwL7eLulLJX2+kPHcMVyeFMB8GA1UdIwQY MBaAFNT5ISnfeqpxV+FZc8JHU+EYyQV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUt OWYzOGM4YjhhOTI4LzEvdTdraW1EQXZ0NHU2VXNsZmI2UThkd3hYSjRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUtOWYzOGM4YjhhOTI4 LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCwI MA0GCSqGSIb3DQEBCwUAA4IBAQAIQ81sc0BwB5NZCGSJtJfaHYHDSSexxotMyXxC S5gURaEZE4vShT1AOVs0YipK7Yxy1FoRhaICdHwm10e7Low9XQJvT5VpSgvD2O9Z 3B8Lk4VkB4Z53OZ85LG67ibkwWeoy+kAdyCOQn9zxLgqSIKe8XMGKjaZ/NR7S4gL sB+9vG4ZCaCgaKO+f9owk2x6K/1zLyVoNb6aCA+rUVYAuYZV0DyZCnwzVgH9Sgg/ 36A99ZNvMuENp7hJHWqsjwU58pzEqiZM1a0OdFpoL2ZP9OkbhMn5x4asM004IzBv m7gfj/HlyRwW3N4612pG75553lMk6Q4M+2A9hVEgXkEA5k1I -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:34 2025 by rpki-client