This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/p_sKryOv5jzqHsQkohs_QPsmrqk.roa File: p_sKryOv5jzqHsQkohs_QPsmrqk.roa (raw, json) Hash identifier: 9GNjv6WXXhnS29imH4SS0PVJW8Ywrh+W/DxVrG7PAyU= Subject key identifier: A7:FB:0A:AF:23:AF:E6:3C:EA:1E:C4:24:A2:1B:3F:40:FB:26:AE:A9 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E55C9973088CBA67ECA4F604F5F93 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/p_sKryOv5jzqHsQkohs_QPsmrqk.roa Signing time: Tue 11 Nov 2025 13:32:39 +0000 ROA not before: Tue 11 Nov 2025 13:32:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215290 IP address blocks: 2a12:2740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:55:c9:97:30:88:cb:a6:7e:ca:4f:60:4f:5f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7fb0aaf23afe63cea1ec424a21b3f40fb26aea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:9c:3c:fa:6f:79:88:b6:ea:31:eb:27:b3: 02:e7:05:7c:be:fd:0b:fb:9a:b9:c5:62:15:02:ac: dd:28:9f:8b:02:55:68:66:6f:31:76:3e:51:b1:a1: 93:3a:64:a3:c8:af:3f:3a:aa:bc:46:c0:e1:c7:6b: db:a2:ca:0f:c8:63:42:5f:75:88:03:93:0f:7e:6e: c9:4a:63:e6:87:44:ab:db:7c:8b:b8:da:6e:66:09: 3f:0f:ae:d1:93:99:6d:94:85:d2:aa:20:fd:15:02: a4:b0:ca:08:4d:9c:5a:3d:db:f7:42:1d:b1:27:ee: 4c:ac:9d:cd:d7:85:3d:51:a8:27:dd:73:1c:1d:34: 19:38:75:8e:60:2c:87:b5:18:37:6d:ae:fc:70:83: a2:74:8c:25:c7:f6:59:5a:ce:43:7b:ae:cb:b4:fd: 93:f5:fb:4a:2d:b3:b3:d9:c4:8b:f6:7a:cd:13:47: f3:73:c7:02:f9:d4:b4:50:f5:24:49:e3:26:53:ff: a0:b1:15:be:ca:55:03:c0:33:1c:af:1f:c4:d0:92: d4:cc:44:67:c4:be:60:f7:72:59:f2:75:18:94:d4: ab:73:30:c3:ea:58:77:08:11:c3:7f:42:bb:8d:c3: e7:fb:01:5e:51:84:81:16:60:4f:dd:20:b3:8a:27: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FB:0A:AF:23:AF:E6:3C:EA:1E:C4:24:A2:1B:3F:40:FB:26:AE:A9 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/p_sKryOv5jzqHsQkohs_QPsmrqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:2740::/29 Signature Algorithm: sha256WithRSAEncryption 4d:65:97:5a:09:dd:76:c3:f6:e8:a8:db:c6:dc:2a:07:cc:c6: 63:6d:5d:96:f9:ce:83:db:2b:47:d6:da:f1:83:db:ba:23:57: 29:a1:7c:19:a7:d4:c6:4f:8f:72:73:cf:b0:c2:7e:1b:39:3e: c5:db:70:f3:2c:db:d2:16:74:2d:f6:13:32:a2:08:c7:29:d8: f3:86:fc:10:19:63:83:89:2e:d8:33:7e:a8:d0:0e:a9:48:d0: cc:17:d9:2f:ec:12:29:78:c1:07:c7:79:74:ef:0e:b1:44:fd: 7b:cf:70:74:86:d2:6b:97:1f:be:67:f9:ac:9c:71:10:97:58: 7f:a3:d2:47:00:1b:fe:3a:bc:ac:85:24:73:98:bf:86:dd:69: ba:a7:80:a1:5a:a1:6e:89:bf:47:0c:5b:8e:cf:f5:a8:47:2e: ec:a5:fd:70:57:95:0a:cf:81:1d:32:37:34:a4:2e:9f:ea:68: b7:ed:36:fa:4e:d6:77:cd:e0:c3:7b:40:4d:9d:85:5a:8c:c4: a1:32:5c:73:2a:9d:b8:87:1a:ce:c5:5e:6d:47:ec:8f:6e:98: 62:6d:20:71:06:ce:82:8f:22:94:3d:bd:60:b3:a7:28:d2:9b: cc:5f:cf:3d:93:40:d3:d4:3c:97:25:94:27:6a:89:d4:a9:4f: f8:67:7e:77 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZpzHlXJlzCIy6Z+yk9gT1+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZiMGFhZjIzYWZlNjNjZWExZWM0MjRhMjFiM2Y0MGZiMjZhZWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6OcPPpveYi26jHrJ7MC5wV8vv0L +5q5xWIVAqzdKJ+LAlVoZm8xdj5RsaGTOmSjyK8/Oqq8RsDhx2vbosoPyGNCX3WI A5MPfm7JSmPmh0Sr23yLuNpuZgk/D67Rk5ltlIXSqiD9FQKksMoITZxaPdv3Qh2x J+5MrJ3N14U9Uagn3XMcHTQZOHWOYCyHtRg3ba78cIOidIwlx/ZZWs5De67LtP2T 9ftKLbOz2cSL9nrNE0fzc8cC+dS0UPUkSeMmU/+gsRW+ylUDwDMcrx/E0JLUzERn xL5g93JZ8nUYlNSrczDD6lh3CBHDf0K7jcPn+wFeUYSBFmBP3SCziifbwwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKf7Cq8jr+Y86h7EJKIbP0D7Jq6pMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvcF9zS3J5T3Y1anpxSHNRa29oc19RUHNtcnFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhInQDAN BgkqhkiG9w0BAQsFAAOCAQEATWWXWgnddsP26KjbxtwqB8zGY21dlvnOg9srR9ba 8YPbuiNXKaF8GafUxk+PcnPPsMJ+Gzk+xdtw8yzb0hZ0LfYTMqIIxynY84b8EBlj g4ku2DN+qNAOqUjQzBfZL+wSKXjBB8d5dO8OsUT9e89wdIbSa5cfvmf5rJxxEJdY f6PSRwAb/jq8rIUkc5i/ht1puqeAoVqhbom/Rwxbjs/1qEcu7KX9cFeVCs+BHTI3 NKQun+pot+02+k7Wd83gw3tATZ2FWozEoTJccyqduIcazsVebUfsj26YYm0gcQbO go8ilD29YLOnKNKbzF/PPZNA09Q8lyWUJ2qJ1KlP+Gd+dw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:41 2025 by rpki-client