This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/oDclA6yqobvsaqJJT443zmBke-0.roa File: oDclA6yqobvsaqJJT443zmBke-0.roa (raw, json) Hash identifier: yZKlumYkdmAJnO3OghUN+CNhxfFsX0VhB+tnf4Y6t1E= Subject key identifier: A0:37:25:03:AC:AA:A1:BB:EC:6A:A2:49:4F:8E:37:CE:60:64:7B:ED Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A9BA33D42783C90314612CC8F84D682BE Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/oDclA6yqobvsaqJJT443zmBke-0.roa Signing time: Wed 19 Nov 2025 10:22:37 +0000 ROA not before: Wed 19 Nov 2025 10:22:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206174 IP address blocks: 2a0c:1240::/29 maxlen: 29 2a12:3740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:a3:3d:42:78:3c:90:31:46:12:cc:8f:84:d6:82:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 19 10:22:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a0372503acaaa1bbec6aa2494f8e37ce60647bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:e9:c1:d3:ba:b9:9a:8e:8c:68:f3:20:87: 9c:03:9f:ac:2c:78:aa:d7:d1:94:47:c8:82:fd:e1: 16:06:cb:fe:d8:7d:85:cb:d4:00:64:4c:b7:6b:7f: 62:66:a6:ed:51:c3:2f:a9:00:5a:c5:e7:d4:89:19: ba:4f:3e:b3:fa:02:1a:07:ca:85:19:d2:0c:f1:e2: fc:79:03:f2:c5:ea:ad:c3:aa:e1:e3:cf:b8:9c:5c: 9c:68:05:f7:73:f2:b8:be:ba:6e:51:bf:02:66:df: 1e:43:3e:e3:7c:72:6e:3d:41:42:e4:df:e2:65:2b: 9e:7e:a4:e4:f3:6a:c1:01:51:64:7b:fd:76:65:88: 51:7c:92:b5:b9:a7:d0:e3:40:68:4e:9b:45:16:9c: 49:00:1b:58:8d:92:c6:38:a0:c9:5d:91:77:63:9a: 10:6b:9c:da:76:38:6f:13:49:35:99:3c:aa:2c:0e: b2:17:77:de:34:cf:a2:26:87:eb:98:65:cc:51:a6: b6:2a:71:e2:33:81:cf:7b:04:09:2a:81:8b:70:b6: ba:11:84:02:76:a7:09:d0:b0:37:4b:75:db:8d:be: fc:c5:c2:9e:80:24:cd:63:b7:e7:fa:c5:d6:53:67: 35:e3:0b:73:1e:ff:a1:fd:aa:11:cb:3a:fd:f1:d8: 88:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:37:25:03:AC:AA:A1:BB:EC:6A:A2:49:4F:8E:37:CE:60:64:7B:ED X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/oDclA6yqobvsaqJJT443zmBke-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:1240::/29 2a12:3740::/29 Signature Algorithm: sha256WithRSAEncryption 9c:0f:ff:ea:d4:ab:27:15:18:b1:46:08:33:cc:6f:bf:55:78: 34:4c:ea:7d:6c:56:cc:a0:91:7e:8a:29:20:ba:79:7e:cd:04: 08:e5:4e:6b:e9:92:18:50:7d:50:b4:4c:b0:c7:ee:7e:db:c8: 08:60:35:21:69:fc:ca:fe:0a:a9:99:f6:b4:ff:b1:6c:8c:fa: ed:15:e6:db:15:93:38:fc:79:08:ef:a4:f9:61:6a:8b:fc:3b: dd:d9:c7:fe:cd:11:f2:cb:2a:88:55:4c:be:15:d5:c0:ba:1a: b7:83:53:5f:8b:83:06:b8:e6:3b:82:2d:fe:ac:99:69:b2:b7: 48:e9:e4:96:38:21:28:5c:05:21:f6:51:a1:67:df:0e:ce:36: 3a:4c:8b:ba:49:86:95:00:65:5c:5f:4f:10:3c:49:ad:1f:8c: 6c:96:6c:e9:93:31:64:1a:19:57:6e:f9:a1:96:0b:3e:10:d8: 76:f0:76:ea:db:80:f0:83:b1:a9:65:16:ff:d5:96:f1:5e:2c: 7d:96:77:bc:4c:cd:d8:dd:be:c7:d0:18:46:42:67:3d:9c:48: 80:bc:46:5d:56:e8:76:b7:ef:9e:91:d0:b0:15:59:76:57:87: 03:33:a8:c8:04:fa:e8:fe:10:92:cf:7a:e9:3e:49:da:f1:94: 70:ed:0d:39 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZqboz1CeDyQMUYSzI+E1oK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTE5MTAyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDM3MjUwM2FjYWFhMWJiZWM2YWEyNDk0ZjhlMzdjZTYwNjQ3YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrLpwdO6uZqOjGjzIIecA5+sLHiq 19GUR8iC/eEWBsv+2H2Fy9QAZEy3a39iZqbtUcMvqQBaxefUiRm6Tz6z+gIaB8qF GdIM8eL8eQPyxeqtw6rh48+4nFycaAX3c/K4vrpuUb8CZt8eQz7jfHJuPUFC5N/i ZSuefqTk82rBAVFke/12ZYhRfJK1uafQ40BoTptFFpxJABtYjZLGOKDJXZF3Y5oQ a5zadjhvE0k1mTyqLA6yF3feNM+iJofrmGXMUaa2KnHiM4HPewQJKoGLcLa6EYQC dqcJ0LA3S3Xbjb78xcKegCTNY7fn+sXWU2c14wtzHv+h/aoRyzr98diIRwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKA3JQOsqqG77GqiSU+ON85gZHvtMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvb0RjbEE2eXFvYnZzYXFKSlQ0NDN6bUJrZS0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgwSQAMF AyoSN0AwDQYJKoZIhvcNAQELBQADggEBAJwP/+rUqycVGLFGCDPMb79VeDRM6n1s VsygkX6KKSC6eX7NBAjlTmvpkhhQfVC0TLDH7n7byAhgNSFp/Mr+CqmZ9rT/sWyM +u0V5tsVkzj8eQjvpPlhaov8O93Zx/7NEfLLKohVTL4V1cC6GreDU1+Lgwa45juC Lf6smWmyt0jp5JY4IShcBSH2UaFn3w7ONjpMi7pJhpUAZVxfTxA8Sa0fjGyWbOmT MWQaGVdu+aGWCz4Q2HbwdurbgPCDsallFv/VlvFeLH2Wd7xMzdjdvsfQGEZCZz2c SIC8Rl1W6Ha3756R0LAVWXZXhwMzqMgE+uj+EJLPeuk+SdrxlHDtDTk= -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:19 2025 by rpki-client