This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/iiDcyFQb9cAke3RBNMr7qfXmkyM.roa File: iiDcyFQb9cAke3RBNMr7qfXmkyM.roa (raw, json) Hash identifier: kzpg6p53Rvmk3JRHQ44t9CSv2lHV19rFFQGgUo5Zijg= Subject key identifier: 8A:20:DC:C8:54:1B:F5:C0:24:7B:74:41:34:CA:FB:A9:F5:E6:93:23 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E5556CE0D1AD7BBEE80777FA49FFD Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/iiDcyFQb9cAke3RBNMr7qfXmkyM.roa Signing time: Tue 11 Nov 2025 13:32:39 +0000 ROA not before: Tue 11 Nov 2025 13:32:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211852 IP address blocks: 2a11:15c7::/32 maxlen: 32 2a11:4a02::/32 maxlen: 32 2a11:8506::/32 maxlen: 32 2a12:4146::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:55:56:ce:0d:1a:d7:bb:ee:80:77:7f:a4:9f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8a20dcc8541bf5c0247b744134cafba9f5e69323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7a:ae:1d:bd:e8:af:af:39:30:5d:cc:ac:c3: 66:4c:bb:f6:8d:de:08:24:f4:94:5e:86:28:26:31: 12:2d:9d:8d:e7:80:6c:d9:04:6d:17:93:10:0f:e4: e3:dc:d0:8a:d2:6b:93:4b:8f:c2:ad:12:e7:13:7f: 55:6b:ed:09:d0:41:e9:30:a0:0f:68:55:2e:c3:1e: e8:a6:0c:ed:44:6e:ca:f6:4a:0f:db:bd:c1:ef:db: 74:15:76:5e:23:ac:fe:a6:52:eb:e0:14:c8:ff:94: 1e:21:68:ee:fa:d7:c7:a5:18:ec:0d:72:bb:0a:fe: cb:01:9a:fe:b5:7e:08:48:c9:37:e1:71:a7:16:1d: 7f:51:51:4c:a6:a6:f2:5c:e4:a4:2b:78:29:04:02: 6d:98:82:d0:ea:12:bb:dc:70:8a:f6:b8:ed:cf:2c: d3:4e:8b:ff:5d:02:e0:ec:2f:78:76:71:41:da:e4: df:da:0c:7d:b0:f1:05:7a:0e:ac:46:00:03:6b:fb: 69:2a:49:a7:b4:9b:4a:8b:b4:6b:ba:11:12:26:e5: db:e5:fe:c0:91:97:b5:a9:8a:2c:ec:88:1a:cc:6b: c2:d1:ce:06:db:92:17:7d:3e:d6:02:1e:5a:a4:c9: 8a:68:1a:9c:e6:93:e8:cd:b9:4d:71:52:7b:10:d4: 37:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:20:DC:C8:54:1B:F5:C0:24:7B:74:41:34:CA:FB:A9:F5:E6:93:23 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/iiDcyFQb9cAke3RBNMr7qfXmkyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:15c7::/32 2a11:4a02::/32 2a11:8506::/32 2a12:4146::/32 Signature Algorithm: sha256WithRSAEncryption 97:17:00:54:18:54:26:46:10:ad:91:a5:b3:9e:2e:21:3f:eb: 45:d6:8c:59:60:41:fc:5d:b8:7b:3e:54:7d:ae:ac:50:0f:c9: fd:ae:f6:4f:f4:03:1c:bf:da:27:d3:5a:dc:53:41:14:36:3e: 56:c5:8d:73:c1:95:bc:dc:ab:6a:a8:6d:fc:fd:7f:43:fa:25: e8:25:87:d7:cc:b8:2c:87:18:d6:65:f6:27:97:76:c1:53:17: 55:28:33:d7:3b:81:a3:b9:d3:71:08:1b:ee:89:dd:32:15:c9: 0b:dc:b7:1f:6c:43:01:1f:b8:89:8e:8a:73:90:1f:c2:5d:4f: 12:7a:75:e4:a3:9c:b1:97:d7:3e:65:7c:a7:e8:53:16:d1:02: 5e:ee:d7:e0:c0:19:c9:85:d8:9b:c9:38:6d:20:13:ff:ff:6c: 32:62:79:12:bb:ae:db:55:05:38:ec:1e:8c:8e:7b:88:13:6b: a2:97:d3:3f:66:9e:60:af:ae:d6:42:a1:ee:b0:fe:25:c0:20: e8:2f:51:73:ae:eb:e5:cb:90:f0:df:5c:e3:27:1f:10:81:9d: 1f:c7:5e:00:75:49:7f:9f:da:a2:8a:e3:9a:d6:93:94:ac:67: 06:d0:ad:9a:3a:a9:bc:75:2f:08:e1:94:bf:5d:a0:3e:4b:03: 92:48:94:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZpzHlVWzg0a17vugHd/pJ/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTIwZGNjODU0MWJmNWMwMjQ3Yjc0NDEzNGNhZmJhOWY1ZTY5MzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XquHb3or685MF3MrMNmTLv2jd4I JPSUXoYoJjESLZ2N54Bs2QRtF5MQD+Tj3NCK0muTS4/CrRLnE39Va+0J0EHpMKAP aFUuwx7opgztRG7K9koP273B79t0FXZeI6z+plLr4BTI/5QeIWju+tfHpRjsDXK7 Cv7LAZr+tX4ISMk34XGnFh1/UVFMpqbyXOSkK3gpBAJtmILQ6hK73HCK9rjtzyzT Tov/XQLg7C94dnFB2uTf2gx9sPEFeg6sRgADa/tpKkmntJtKi7RruhESJuXb5f7A kZe1qYos7IgazGvC0c4G25IXfT7WAh5apMmKaBqc5pPozblNcVJ7ENQ3CQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFIog3MhUG/XAJHt0QTTK+6n15pMjMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvaWlEY3lGUWI5Y0FrZTNSQk5NcjdxZlhta3lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKhEVxwMF ACoRSgIDBQAqEYUGAwUAKhJBRjANBgkqhkiG9w0BAQsFAAOCAQEAlxcAVBhUJkYQ rZGls54uIT/rRdaMWWBB/F24ez5Ufa6sUA/J/a72T/QDHL/aJ9Na3FNBFDY+VsWN c8GVvNyraqht/P1/Q/ol6CWH18y4LIcY1mX2J5d2wVMXVSgz1zuBo7nTcQgb7ond MhXJC9y3H2xDAR+4iY6Kc5Afwl1PEnp15KOcsZfXPmV8p+hTFtECXu7X4MAZyYXY m8k4bSAT//9sMmJ5Eruu21UFOOwejI57iBNropfTP2aeYK+u1kKh7rD+JcAg6C9R c67r5cuQ8N9c4ycfEIGdH8deAHVJf5/aoorjmtaTlKxnBtCtmjqpvHUvCOGUv12g PksDkkiUuw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:22 2025 by rpki-client