This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/K7e8DYQVrLyDgQZTL9x1BDnfoDk.roa File: K7e8DYQVrLyDgQZTL9x1BDnfoDk.roa (raw, json) Hash identifier: Ano8XSEroAfurRDKON9x4e+e1EkY95NNEZEkdCYFqMw= Subject key identifier: 2B:B7:BC:0D:84:15:AC:BC:83:81:06:53:2F:DC:75:04:39:DF:A0:39 Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072 Certificate serial: 019AE961729188CF64CF0E1C37898A5CF347 Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/K7e8DYQVrLyDgQZTL9x1BDnfoDk.roa Signing time: Thu 04 Dec 2025 12:41:08 +0000 ROA not before: Thu 04 Dec 2025 12:41:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47764 IP address blocks: 2a00:46e0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:61:72:91:88:cf:64:cf:0e:1c:37:89:8a:5c:f3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b82433ffe94bf3536fec327543d396158202072 Validity Not Before: Dec 4 12:41:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2bb7bc0d8415acbc838106532fdc750439dfa039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:b9:b9:74:1a:d2:92:b9:59:b1:72:61:c4: d2:e9:c9:d9:4b:3f:5e:34:2a:5c:83:9b:c5:87:f6: db:cb:25:e9:51:09:bf:c8:10:4c:93:18:fe:8f:3d: 73:ab:e7:ff:a0:71:93:a8:74:49:ff:a6:83:97:85: 15:06:97:61:a2:15:8b:c4:7f:8f:b3:92:de:5f:2a: c3:66:0b:eb:ac:d4:ad:68:d2:af:ce:0d:88:51:22: 60:81:62:e9:7b:01:76:9f:32:a8:6c:65:28:b0:68: 80:fc:4d:e4:50:11:86:7a:94:ea:36:2e:64:39:58: 6f:20:55:71:83:7f:b4:30:5a:77:32:fd:c0:5a:3d: 5b:f3:da:82:e8:d3:43:f1:e5:0c:12:e0:5b:59:57: e2:55:11:60:45:b3:b2:d5:22:74:a7:e9:b5:0d:16: 12:63:73:bc:9a:3d:33:92:c5:9a:59:87:9b:c4:48: 9a:66:9b:ea:00:06:d4:5d:cb:1c:77:1d:4a:56:20: ac:8f:0c:9d:53:f7:07:f2:6f:09:cf:ab:08:9d:7e: 1f:a2:e4:d2:c8:8b:4e:59:6c:e8:e5:d8:b0:75:bb: 7c:5e:01:86:2d:cb:51:55:53:c0:59:1d:12:ed:ae: 3e:b6:2a:55:70:ad:b5:42:40:59:39:6c:e8:3e:64: 7a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B7:BC:0D:84:15:AC:BC:83:81:06:53:2F:DC:75:04:39:DF:A0:39 X509v3 Authority Key Identifier: keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/K7e8DYQVrLyDgQZTL9x1BDnfoDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:46e0:2::/48 Signature Algorithm: sha256WithRSAEncryption 99:73:88:d0:35:09:c2:0e:08:b7:00:78:17:6a:26:50:b7:2d: bf:e7:4d:0a:26:ae:37:26:c8:48:d5:8a:27:6d:95:99:37:a3: ca:fc:ba:1c:b8:72:d9:74:33:84:da:a1:a3:01:59:ae:31:b6: d9:61:05:69:c9:c8:f6:7a:91:79:ae:d5:81:9e:02:06:7a:87: 68:7e:eb:d4:82:58:22:78:ac:5e:4a:fd:e4:89:38:ec:57:ca: 18:55:c5:1d:94:d2:db:61:1d:64:a4:ce:04:59:2d:7d:d4:88: 22:87:f3:66:93:fd:c7:cd:28:c7:90:b9:f2:9d:db:39:23:46: 62:8c:9c:ef:fb:9a:77:34:87:7a:e0:86:53:5d:9e:25:c8:f9: 33:6a:51:1d:b5:01:2f:22:63:5f:be:cb:e2:e2:de:92:96:a7: 36:54:f4:2e:37:57:dd:43:80:9a:b6:ec:e4:c2:eb:9c:34:b7: eb:f7:27:35:d5:79:8a:28:ff:71:b3:03:08:03:4c:67:c7:3e: f4:3f:35:af:b6:a4:85:39:e2:5c:7a:27:33:ee:5a:96:17:8c: a7:e3:5f:49:31:23:d6:4d:72:69:1c:98:94:14:62:13:67:a5: 8e:f2:0d:95:f4:24:76:4d:b1:b9:17:72:9c:78:ce:43:b8:1b: 7c:30:06:97 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrpYXKRiM9kzw4cN4mKXPNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy MDIwNzIwHhcNMjUxMjA0MTI0MTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmI3YmMwZDg0MTVhY2JjODM4MTA2NTMyZmRjNzUwNDM5ZGZhMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8a5uXQa0pK5WbFyYcTS6cnZSz9e NCpcg5vFh/bbyyXpUQm/yBBMkxj+jz1zq+f/oHGTqHRJ/6aDl4UVBpdhohWLxH+P s5LeXyrDZgvrrNStaNKvzg2IUSJggWLpewF2nzKobGUosGiA/E3kUBGGepTqNi5k OVhvIFVxg3+0MFp3Mv3AWj1b89qC6NND8eUMEuBbWVfiVRFgRbOy1SJ0p+m1DRYS Y3O8mj0zksWaWYebxEiaZpvqAAbUXcscdx1KViCsjwydU/cH8m8Jz6sInX4fouTS yItOWWzo5diwdbt8XgGGLctRVVPAWR0S7a4+tipVcK21QkBZOWzoPmR6ZwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCu3vA2EFay8g4EGUy/cdQQ536A5MB8GA1UdIwQY MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvSzdlOERZUVZyTHlEZ1FaVEw5eDFCRG5mb0RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgBG4AAC MA0GCSqGSIb3DQEBCwUAA4IBAQCZc4jQNQnCDgi3AHgXaiZQty2/500KJq43JshI 1YonbZWZN6PK/LocuHLZdDOE2qGjAVmuMbbZYQVpycj2epF5rtWBngIGeodofuvU glgieKxeSv3kiTjsV8oYVcUdlNLbYR1kpM4EWS191Igih/Nmk/3HzSjHkLnynds5 I0ZijJzv+5p3NId64IZTXZ4lyPkzalEdtQEvImNfvsvi4t6Slqc2VPQuN1fdQ4Ca tuzkwuucNLfr9yc11XmKKP9xswMIA0xnxz70PzWvtqSFOeJceicz7lqWF4yn419J MSPWTXJpHJiUFGITZ6WO8g2V9CR2TbG5F3KceM5DuBt8MAaX -----END CERTIFICATE-----Generated at Sun Dec 7 07:32:30 2025 by rpki-client