This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/X9YZAIxPcs8Z6oidZTveLJBkHvw.roa File: X9YZAIxPcs8Z6oidZTveLJBkHvw.roa (raw, json) Hash identifier: VGs1xBJh0QfEsITLoj2YbluQOUz4PYPnk7zZRSZl2BY= Subject key identifier: 5F:D6:19:00:8C:4F:72:CF:19:EA:88:9D:65:3B:DE:2C:90:64:1E:FC Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E52283D263E8CE7A3C86EF2640FD7 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/X9YZAIxPcs8Z6oidZTveLJBkHvw.roa Signing time: Tue 11 Nov 2025 13:32:38 +0000 ROA not before: Tue 11 Nov 2025 13:32:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49505 IP address blocks: 2a12:2cc5::/32 maxlen: 32 2a12:4140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:52:28:3d:26:3e:8c:e7:a3:c8:6e:f2:64:0f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5fd619008c4f72cf19ea889d653bde2c90641efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:08:5c:8d:6a:bc:58:5a:98:b8:cc:00:fb: 8d:5b:d9:9b:32:64:dd:b6:d4:9e:6e:2c:ab:a8:1c: 3a:f5:70:a0:b6:c5:a1:07:1e:39:d6:7e:5a:c8:77: d1:69:9f:1a:3f:bb:2f:af:36:87:34:bc:29:64:8b: a7:0b:a0:79:73:21:00:67:e6:9c:43:07:5b:75:81: a0:97:7b:ba:6d:a0:4e:a5:22:6d:d2:98:fe:51:fe: ff:1f:9e:cf:13:b7:b8:a3:75:e1:ef:ad:0e:57:35: ff:b3:8a:f4:42:56:0c:20:21:16:52:7c:6f:4f:40: 07:9c:81:e9:cc:60:01:d1:37:48:b8:99:e6:02:bd: 52:41:d6:62:63:55:6d:c1:5e:0f:e9:8c:c7:0d:29: 59:23:45:02:49:fe:d6:8a:a7:42:f4:c6:a9:79:8b: b3:34:f2:01:cb:85:d5:70:51:70:17:89:0e:d0:26: 03:35:32:1b:d3:28:a3:c1:fc:e6:66:f7:6f:d9:42: 68:dd:1f:64:c9:11:e8:7e:07:03:f6:1b:51:da:6c: c3:89:15:b6:aa:cc:35:0a:14:6d:2f:10:03:3d:5a: 65:fe:09:1d:95:f4:72:03:9f:9b:9a:94:b4:08:cc: cb:f7:1c:a0:f1:1b:3c:f6:11:37:40:ae:b5:9a:65: e5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D6:19:00:8C:4F:72:CF:19:EA:88:9D:65:3B:DE:2C:90:64:1E:FC X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/X9YZAIxPcs8Z6oidZTveLJBkHvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:2cc5::/32 2a12:4140::/32 Signature Algorithm: sha256WithRSAEncryption a0:f5:c5:66:e8:72:31:50:0a:db:e1:e0:e4:4c:a1:8d:5d:56: 10:e4:77:df:1e:ab:b0:93:16:0c:b5:32:96:68:2a:82:f4:89: 3f:35:e3:d3:a5:cd:54:97:a8:c7:ed:de:01:e7:ee:4c:92:b3: 57:61:c4:10:0a:bd:9d:61:13:e9:8f:10:7e:b0:4b:68:7c:f8: b0:91:cc:79:18:ce:8d:fc:89:f9:61:71:e5:1a:7b:f9:b7:96: b2:83:cc:a6:33:31:5a:3d:c8:4f:d2:1f:d8:cb:b0:80:2b:bf: 27:b8:10:95:d0:93:97:bf:2a:96:03:80:e9:7a:94:3d:a9:1f: 5f:2e:6d:25:31:e1:40:3c:47:ea:11:c4:c4:85:da:33:8b:02: 51:64:6e:98:d2:8a:29:75:d2:98:1e:70:df:1f:2e:b7:c9:1d: cc:45:70:b7:7f:29:48:73:68:86:61:91:2f:9e:88:82:65:5b: c5:ef:19:d7:ae:93:5a:9e:b5:6a:ca:47:a5:5f:8c:4e:b6:9a: 3c:06:6b:20:b5:05:30:b2:6d:ce:ad:82:3d:98:4d:d9:9d:0e: 03:55:88:e1:29:ae:d4:d1:86:14:72:6d:8e:62:54:ff:98:db: 17:7e:31:f8:71:35:28:65:d1:7d:4a:73:66:85:fc:e7:b8:a7: 29:1d:fb:83 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZpzHlIoPSY+jOejyG7yZA/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmQ2MTkwMDhjNGY3MmNmMTllYTg4OWQ2NTNiZGUyYzkwNjQxZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2kIXI1qvFhamLjMAPuNW9mbMmTd ttSebiyrqBw69XCgtsWhBx451n5ayHfRaZ8aP7svrzaHNLwpZIunC6B5cyEAZ+ac QwdbdYGgl3u6baBOpSJt0pj+Uf7/H57PE7e4o3Xh760OVzX/s4r0QlYMICEWUnxv T0AHnIHpzGAB0TdIuJnmAr1SQdZiY1VtwV4P6YzHDSlZI0UCSf7WiqdC9MapeYuz NPIBy4XVcFFwF4kO0CYDNTIb0yijwfzmZvdv2UJo3R9kyRHofgcD9htR2mzDiRW2 qsw1ChRtLxADPVpl/gkdlfRyA5+bmpS0CMzL9xyg8Rs89hE3QK61mmXlowIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFF/WGQCMT3LPGeqInWU73iyQZB78MB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvWDlZWkFJeFBjczhaNm9pZFpUdmVMSkJrSHZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhIsxQMF ACoSQUAwDQYJKoZIhvcNAQELBQADggEBAKD1xWbocjFQCtvh4ORMoY1dVhDkd98e q7CTFgy1MpZoKoL0iT8149OlzVSXqMft3gHn7kySs1dhxBAKvZ1hE+mPEH6wS2h8 +LCRzHkYzo38iflhceUae/m3lrKDzKYzMVo9yE/SH9jLsIArvye4EJXQk5e/KpYD gOl6lD2pH18ubSUx4UA8R+oRxMSF2jOLAlFkbpjSiil10pgecN8fLrfJHcxFcLd/ KUhzaIZhkS+eiIJlW8XvGdeuk1qetWrKR6VfjE62mjwGayC1BTCybc6tgj2YTdmd DgNViOEprtTRhhRybY5iVP+Y2xd+MfhxNShl0X1Kc2aF/Oe4pykd+4M= -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:45 2025 by rpki-client