This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/KPxH6L4VBadP6tk4Gv2ftPNEm2o.roa File: KPxH6L4VBadP6tk4Gv2ftPNEm2o.roa (raw, json) Hash identifier: 2iXYEdSOmwm3bODYrmY9cPs6umm1lNKA4+/nGQ/v4XA= Subject key identifier: 28:FC:47:E8:BE:15:05:A7:4F:EA:D9:38:1A:FD:9F:B4:F3:44:9B:6A Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E539C86B8B1F72343E12A4E495F5A Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/KPxH6L4VBadP6tk4Gv2ftPNEm2o.roa Signing time: Tue 11 Nov 2025 13:32:38 +0000 ROA not before: Tue 11 Nov 2025 13:32:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204490 IP address blocks: 2a0e:f04::/32 maxlen: 32 2a0e:f07::/32 maxlen: 32 2a11:15c1::/32 maxlen: 32 2a11:3180::/32 maxlen: 32 2a11:4a04::/32 maxlen: 32 2a11:4a07::/32 maxlen: 32 2a11:7883::/32 maxlen: 32 2a11:8500::/32 maxlen: 32 2a11:8507::/32 maxlen: 32 2a12:4144::/32 maxlen: 32 2a12:4147::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:53:9c:86:b8:b1:f7:23:43:e1:2a:4e:49:5f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=28fc47e8be1505a74fead9381afd9fb4f3449b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:92:be:fa:ca:97:73:ba:22:e3:50:72:ca: f2:b4:12:1c:49:77:cb:a0:72:66:5f:ed:8b:ae:0b: e9:a7:67:12:e9:bd:77:4f:b4:fd:71:d7:0d:f0:15: 5d:c6:b2:00:dd:56:dd:1a:45:79:eb:5f:51:7e:7d: 25:b6:37:8b:1e:2f:89:b5:59:6c:cf:92:97:f9:28: 79:10:f4:bf:b7:ce:ee:4d:1a:68:7e:c6:44:d3:1a: 86:81:ab:1b:85:d4:75:4e:41:18:c4:1d:d3:58:e9: 4b:1e:e8:39:38:3c:2d:db:6a:fb:0b:dc:72:6a:eb: 13:8d:5f:e4:ff:16:d8:9c:eb:a1:48:a5:08:be:b8: eb:df:1e:1f:35:33:d3:41:ca:69:54:e1:32:3e:85: ff:dd:cd:c1:50:26:57:62:e3:c8:1f:95:dd:a4:e6: ec:33:7d:67:4b:66:a2:b7:b8:d8:ac:51:7b:d1:ba: 36:39:9f:77:43:71:0b:42:50:9b:15:30:7f:01:66: 01:b1:7f:f0:02:a0:f1:ad:05:10:69:ac:17:67:e6: f7:f7:27:ce:3e:78:33:a3:39:25:a3:71:29:23:e9: b5:17:77:f1:84:22:5e:d3:17:ea:46:1a:35:92:84: 0c:4b:90:b5:1b:3b:d5:33:c8:68:43:f0:e9:82:03: 75:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FC:47:E8:BE:15:05:A7:4F:EA:D9:38:1A:FD:9F:B4:F3:44:9B:6A X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/KPxH6L4VBadP6tk4Gv2ftPNEm2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:f04::/32 2a0e:f07::/32 2a11:15c1::/32 2a11:3180::/32 2a11:4a04::/32 2a11:4a07::/32 2a11:7883::/32 2a11:8500::/32 2a11:8507::/32 2a12:4144::/32 2a12:4147::/32 Signature Algorithm: sha256WithRSAEncryption 06:21:95:33:f6:ed:aa:d6:a0:31:fa:f8:88:e9:95:31:d8:db: e7:57:ea:ea:1a:f8:f2:57:4e:95:e8:a9:b3:0c:24:b6:51:48: 10:d4:eb:ec:bd:96:4e:ad:90:f5:d8:72:34:d6:d1:1c:3c:78: a9:87:57:9a:4a:d4:28:7a:6c:8b:c3:53:56:59:ad:7a:a0:00: 79:b0:53:3f:b2:6f:75:aa:fb:57:fc:5f:a3:e2:2a:d3:d7:6e: 43:bd:74:b8:41:0a:25:7f:bc:ff:5c:8b:f7:44:81:0c:90:c2: 82:23:95:49:f4:6f:89:d6:ce:de:fd:c6:72:65:ad:d4:f9:df: 60:14:17:60:ad:40:d5:c1:74:73:a1:85:a1:c3:d4:28:72:51: 68:8c:79:a9:19:d7:4c:63:e7:c2:17:98:a3:0b:74:c5:c2:da: 98:dc:8d:a2:87:2d:c0:06:21:d2:99:63:57:c6:08:6f:21:a7: 29:d2:db:a9:27:43:f8:e4:7e:d9:e7:76:08:d3:da:20:85:04: 52:e8:72:82:22:37:b6:1f:8c:b8:ba:4d:e1:63:77:1a:27:1f: ad:1f:16:0c:a5:c3:88:0e:96:80:46:77:09:71:b0:53:54:7f: 29:96:e5:93:b6:73:0c:66:33:42:cb:ec:15:0f:be:56:5d:29: 39:44:dc:54 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZpzHlOchrix9yND4SpOSV9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGZjNDdlOGJlMTUwNWE3NGZlYWQ5MzgxYWZkOWZiNGYzNDQ5YjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6aSvvrKl3O6IuNQcsrytBIcSXfL oHJmX+2Lrgvpp2cS6b13T7T9cdcN8BVdxrIA3VbdGkV5619Rfn0ltjeLHi+JtVls z5KX+Sh5EPS/t87uTRpofsZE0xqGgasbhdR1TkEYxB3TWOlLHug5ODwt22r7C9xy ausTjV/k/xbYnOuhSKUIvrjr3x4fNTPTQcppVOEyPoX/3c3BUCZXYuPIH5XdpObs M31nS2ait7jYrFF70bo2OZ93Q3ELQlCbFTB/AWYBsX/wAqDxrQUQaawXZ+b39yfO Pngzozklo3EpI+m1F3fxhCJe0xfqRho1koQMS5C1GzvVM8hoQ/DpggN1wQIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFCj8R+i+FQWnT+rZOBr9n7TzRJtqMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvS1B4SDZMNFZCYWRQNnRrNEd2MmZ0UE5FbTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBTBAIAAjBNAwUAKg4PBAMF ACoODwcDBQAqERXBAwUAKhExgAMFACoRSgQDBQAqEUoHAwUAKhF4gwMFACoRhQAD BQAqEYUHAwUAKhJBRAMFACoSQUcwDQYJKoZIhvcNAQELBQADggEBAAYhlTP27arW oDH6+IjplTHY2+dX6uoa+PJXTpXoqbMMJLZRSBDU6+y9lk6tkPXYcjTW0Rw8eKmH V5pK1Ch6bIvDU1ZZrXqgAHmwUz+yb3Wq+1f8X6PiKtPXbkO9dLhBCiV/vP9ci/dE gQyQwoIjlUn0b4nWzt79xnJlrdT532AUF2CtQNXBdHOhhaHD1ChyUWiMeakZ10xj 58IXmKMLdMXC2pjcjaKHLcAGIdKZY1fGCG8hpynS26knQ/jkftnndgjT2iCFBFLo coIiN7YfjLi6TeFjdxonH60fFgylw4gOloBGdwlxsFNUfymW5ZO2cwxmM0LL7BUP vlZdKTlE3FQ= -----END CERTIFICATE-----Generated at Sat Dec 6 21:51:23 2025 by rpki-client