This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/B16Z8jw3-GtAU3hcNRF1sFBOM7U.roa File: B16Z8jw3-GtAU3hcNRF1sFBOM7U.roa (raw, json) Hash identifier: aaAdtl6DDoVRo6SJjsYxRJmj8KdTthVqgWUA1J2mPj4= Subject key identifier: 07:5E:99:F2:3C:37:F8:6B:40:53:78:5C:35:11:75:B0:50:4E:33:B5 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E53517C2D48D3F6E73DF3F91174D5 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/B16Z8jw3-GtAU3hcNRF1sFBOM7U.roa Signing time: Tue 11 Nov 2025 13:32:38 +0000 ROA not before: Tue 11 Nov 2025 13:32:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200993 IP address blocks: 2a12:4141::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:53:51:7c:2d:48:d3:f6:e7:3d:f3:f9:11:74:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=075e99f23c37f86b4053785c351175b0504e33b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1c:29:38:41:46:a0:45:7b:43:ab:f3:36:0e: 8e:cc:30:f1:45:bf:36:e6:81:2a:ac:80:7d:40:8a: 69:e5:b3:ea:ff:f1:1e:53:0d:87:20:84:83:2f:0a: b8:89:a6:50:79:55:bb:c7:c4:e8:0f:bf:45:38:d3: bf:1c:87:58:e9:ba:98:bd:6e:70:3f:5c:6e:dd:b7: c6:8f:f5:9b:fa:96:92:3f:79:51:73:40:6e:0a:be: f5:ed:fa:44:e7:48:1f:ca:a1:bc:0c:a8:2b:77:f5: 9c:48:cd:17:e6:3f:8c:ab:a1:0b:e9:3b:58:54:c4: 92:5a:16:e6:57:9f:3c:04:8d:9f:0d:d5:ff:0f:e3: b8:c1:a7:e7:6b:86:40:e9:eb:8a:57:1c:17:42:9a: b9:b5:a8:a3:f7:0a:35:ef:2b:52:20:d1:d3:8e:ee: c3:83:16:0c:13:74:84:c1:63:e2:03:79:7b:22:4f: 07:6c:1c:13:d6:45:48:b0:3c:8a:a1:e1:e3:9f:a1: 36:38:68:88:72:2e:55:c3:0a:2c:47:d8:f2:73:35: e9:1f:88:b9:76:a3:fb:b9:f4:ae:8a:8d:49:51:8e: bb:65:cb:75:39:0e:03:64:6b:41:f2:c8:d7:23:1a: ef:67:d7:1c:a7:48:c9:62:1b:b0:45:c4:95:65:a5: 3d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5E:99:F2:3C:37:F8:6B:40:53:78:5C:35:11:75:B0:50:4E:33:B5 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/B16Z8jw3-GtAU3hcNRF1sFBOM7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:4141::/32 Signature Algorithm: sha256WithRSAEncryption 25:3b:c7:14:14:42:6d:78:fa:c3:91:33:31:12:4f:73:05:19: 33:bf:a1:01:98:e5:b9:20:99:97:33:02:36:97:de:4e:93:30: 7c:84:2b:dc:35:fb:cc:d8:45:0d:5d:10:22:b0:05:cc:2b:51: f6:4a:70:49:3d:5e:bb:b9:c8:db:40:c0:a1:11:63:49:6d:20: 61:19:0e:a5:fb:66:c4:6d:07:f1:88:a8:3f:df:e6:90:53:cb: 6f:a3:87:a7:db:86:f6:68:26:0c:2a:d5:91:a5:5e:42:74:90: fe:03:9a:9c:f6:db:60:27:56:99:4e:2e:f0:d0:4c:b3:68:7c: bc:88:7c:91:a2:34:15:c0:0b:11:05:23:42:77:0d:11:20:1d: aa:dd:57:2f:fa:cd:68:4f:ba:6b:7b:23:c8:40:0a:b2:07:42: 42:86:28:99:a2:dc:41:33:fe:be:06:f4:e8:64:48:f2:5b:d1: 9d:8b:2e:fd:07:3c:5c:a8:85:25:04:16:ca:9e:fd:45:8f:04: 83:71:9c:34:5f:5d:13:af:6c:4e:83:4e:a8:a8:ce:fb:08:47: c8:32:e1:b7:18:75:18:3d:6d:bc:12:9a:70:43:49:89:a2:08: 58:1e:6c:ea:7b:db:80:d2:81:30:81:2b:16:d2:bd:51:04:05: 18:f2:95:e8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZpzHlNRfC1I0/bnPfP5EXTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzVlOTlmMjNjMzdmODZiNDA1Mzc4NWMzNTExNzViMDUwNGUzM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRwpOEFGoEV7Q6vzNg6OzDDxRb82 5oEqrIB9QIpp5bPq//EeUw2HIISDLwq4iaZQeVW7x8ToD79FONO/HIdY6bqYvW5w P1xu3bfGj/Wb+paSP3lRc0BuCr717fpE50gfyqG8DKgrd/WcSM0X5j+Mq6EL6TtY VMSSWhbmV588BI2fDdX/D+O4wafna4ZA6euKVxwXQpq5taij9wo17ytSINHTju7D gxYME3SEwWPiA3l7Ik8HbBwT1kVIsDyKoeHjn6E2OGiIci5VwwosR9jyczXpH4i5 dqP7ufSuio1JUY67Zct1OQ4DZGtB8sjXIxrvZ9ccp0jJYhuwRcSVZaU9GwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAdemfI8N/hrQFN4XDURdbBQTjO1MB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvQjE2WjhqdzMtR3RBVTNoY05SRjFzRkJPTTdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhJBQTAN BgkqhkiG9w0BAQsFAAOCAQEAJTvHFBRCbXj6w5EzMRJPcwUZM7+hAZjluSCZlzMC NpfeTpMwfIQr3DX7zNhFDV0QIrAFzCtR9kpwST1eu7nI20DAoRFjSW0gYRkOpftm xG0H8YioP9/mkFPLb6OHp9uG9mgmDCrVkaVeQnSQ/gOanPbbYCdWmU4u8NBMs2h8 vIh8kaI0FcALEQUjQncNESAdqt1XL/rNaE+6a3sjyEAKsgdCQoYomaLcQTP+vgb0 6GRI8lvRnYsu/Qc8XKiFJQQWyp79RY8Eg3GcNF9dE69sToNOqKjO+whHyDLhtxh1 GD1tvBKacENJiaIIWB5s6nvbgNKBMIErFtK9UQQFGPKV6A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:52:02 2025 by rpki-client