This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/m9PcA8-OwFepKS47hmN4AxlvQMY.roa File: m9PcA8-OwFepKS47hmN4AxlvQMY.roa (raw, json) Hash identifier: Qpa25XlvI/sDlWgjx0yG7D6gCCao+tLoIa+GJUVplR8= Subject key identifier: 9B:D3:DC:03:CF:8E:C0:57:A9:29:2E:3B:86:63:78:03:19:6F:40:C6 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E54F76C3428431428FC67BB14C44C Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/m9PcA8-OwFepKS47hmN4AxlvQMY.roa Signing time: Tue 11 Nov 2025 13:32:38 +0000 ROA not before: Tue 11 Nov 2025 13:32:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211009 IP address blocks: 2a09:9300::/29 maxlen: 29 2a09:ba40::/29 maxlen: 29 2a0b:9480::/29 maxlen: 29 2a11:34c3::/32 maxlen: 32 2a12:46c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:54:f7:6c:34:28:43:14:28:fc:67:bb:14:c4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9bd3dc03cf8ec057a9292e3b86637803196f40c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:dd:ce:08:e2:19:7e:75:e7:0e:43:5c:0e: 62:3b:a4:82:34:98:c5:7d:38:0b:de:e5:5c:c9:ba: b0:c5:a1:68:26:e3:67:a0:d0:7d:f0:0f:8d:f5:b2: d0:8d:d2:6c:a7:88:d5:fd:13:4a:da:78:be:fd:6e: 33:6e:01:d6:3a:44:a1:35:b4:b6:10:ad:b4:d2:3a: 89:3d:50:b3:91:ca:26:5f:62:01:4d:1b:9b:65:3a: 0f:dd:09:ee:9a:63:af:c3:b1:e9:d0:4f:bc:a5:fd: 59:30:22:90:b7:3b:6d:02:33:fc:ce:6c:1d:f0:30: 70:cf:a2:7d:4f:fd:3d:3f:6c:13:eb:19:1e:fa:79: e1:ab:47:ae:f9:0b:be:2c:67:af:ab:bf:f8:51:2a: 58:ab:9d:76:9f:93:eb:c7:b6:56:d7:58:e5:e1:41: ad:9d:a3:43:43:ba:a4:67:9a:74:1b:ea:dc:94:98: 2f:04:86:fa:4f:db:c9:0b:44:22:1c:1c:50:10:e9: 38:3c:78:85:e2:d2:00:6e:8e:94:8a:7a:51:31:ba: 80:7a:5c:0e:e2:20:67:39:ae:d5:9e:b1:02:b3:c5: 5d:4f:1b:05:4a:51:c7:9d:5f:b8:bd:80:7d:e2:7c: d8:57:b6:97:f8:90:71:d7:b1:a0:60:77:67:f3:d4: be:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D3:DC:03:CF:8E:C0:57:A9:29:2E:3B:86:63:78:03:19:6F:40:C6 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/m9PcA8-OwFepKS47hmN4AxlvQMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:9300::/29 2a09:ba40::/29 2a0b:9480::/29 2a11:34c3::/32 2a12:46c0::/29 Signature Algorithm: sha256WithRSAEncryption 41:66:8c:39:34:6c:d1:12:6f:52:3c:27:4e:f2:bd:67:0b:4d: 82:b9:e9:1a:4c:72:f0:d6:96:ae:d1:a4:7d:d4:97:00:36:23: e3:53:1d:3b:45:7f:6b:50:33:38:9c:1d:d6:4a:ac:c2:60:f0: ee:a3:ae:1b:9d:13:45:20:c4:76:dd:56:0d:f3:cc:d1:8e:20: 2f:57:95:f1:17:b5:0a:0b:f5:ec:2d:5d:d9:d4:67:a2:ff:6a: 25:bd:20:c2:4f:2f:c5:25:27:c8:bd:9f:dd:5e:7b:61:31:4c: 78:89:38:1e:e8:1d:24:79:78:f1:8e:60:17:57:ee:7c:ca:22: 8d:a1:46:18:69:81:24:e0:2c:a8:c7:79:a7:ec:3c:48:14:03: 86:c2:85:15:a6:da:af:50:e0:be:43:b8:05:2c:15:88:d4:79: f0:1f:1e:65:47:87:19:17:96:47:4c:fd:64:03:1a:3f:22:4a: c5:d0:cd:6f:da:bd:cd:63:df:0c:6e:19:72:2a:37:1a:c9:42: 99:f0:81:74:38:3e:41:54:5a:99:73:83:e0:b7:91:1c:14:85: 02:49:c8:b0:fc:b8:b6:da:04:64:18:97:31:2c:75:b3:18:fb: 60:fc:ec:8c:75:13:b7:d7:69:e7:75:3e:23:f2:33:dc:20:1c: 44:8d:0b:49 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZpzHlT3bDQoQxQo/Ge7FMRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmQzZGMwM2NmOGVjMDU3YTkyOTJlM2I4NjYzNzgwMzE5NmY0MGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyjdzgjiGX515w5DXA5iO6SCNJjF fTgL3uVcybqwxaFoJuNnoNB98A+N9bLQjdJsp4jV/RNK2ni+/W4zbgHWOkShNbS2 EK200jqJPVCzkcomX2IBTRubZToP3QnummOvw7Hp0E+8pf1ZMCKQtzttAjP8zmwd 8DBwz6J9T/09P2wT6xke+nnhq0eu+Qu+LGevq7/4USpYq512n5Prx7ZW11jl4UGt naNDQ7qkZ5p0G+rclJgvBIb6T9vJC0QiHBxQEOk4PHiF4tIAbo6UinpRMbqAelwO 4iBnOa7VnrECs8VdTxsFSlHHnV+4vYB94nzYV7aX+JBx17GgYHdn89S+3wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJvT3APPjsBXqSkuO4ZjeAMZb0DGMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvbTlQY0E4LU93RmVwS1M0N2htTjRBeGx2UU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKgmTAAMF AyoJukADBQMqC5SAAwUAKhE0wwMFAyoSRsAwDQYJKoZIhvcNAQELBQADggEBAEFm jDk0bNESb1I8J07yvWcLTYK56RpMcvDWlq7RpH3UlwA2I+NTHTtFf2tQMzicHdZK rMJg8O6jrhudE0UgxHbdVg3zzNGOIC9XlfEXtQoL9ewtXdnUZ6L/aiW9IMJPL8Ul J8i9n91ee2ExTHiJOB7oHSR5ePGOYBdX7nzKIo2hRhhpgSTgLKjHeafsPEgUA4bC hRWm2q9Q4L5DuAUsFYjUefAfHmVHhxkXlkdM/WQDGj8iSsXQzW/avc1j3wxuGXIq NxrJQpnwgXQ4PkFUWplzg+C3kRwUhQJJyLD8uLbaBGQYlzEsdbMY+2D87Ix1E7fX aed1PiPyM9wgHESNC0k= -----END CERTIFICATE-----Generated at Sun Dec 7 01:07:03 2025 by rpki-client