This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/t0tCch-yn7o-pJ5N_Rs5j81xWnc.roa File: t0tCch-yn7o-pJ5N_Rs5j81xWnc.roa (raw, json) Hash identifier: eM+E0i9nzeMdj+coKh8ToZipyJgk/cpYwH4HOyuu2b0= Subject key identifier: B7:4B:42:72:1F:B2:9F:BA:3E:A4:9E:4D:FD:1B:39:8F:CD:71:5A:77 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E558A8B56E63CFCBAA4E46D3DE1B9 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/t0tCch-yn7o-pJ5N_Rs5j81xWnc.roa Signing time: Tue 11 Nov 2025 13:32:39 +0000 ROA not before: Tue 11 Nov 2025 13:32:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213861 IP address blocks: 2a0c:2844::/32 maxlen: 32 2a11:2c40::/29 maxlen: 29 2a12:2cc6::/32 maxlen: 32 2a12:3bc0::/32 maxlen: 32 2a12:3bc1::/32 maxlen: 32 2a14:9703::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:55:8a:8b:56:e6:3c:fc:ba:a4:e4:6d:3d:e1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b74b42721fb29fba3ea49e4dfd1b398fcd715a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:73:35:11:c7:d1:0f:20:ef:11:9c:23:66: 31:d3:ed:2b:7c:43:01:c1:28:e0:ac:1f:de:91:5d: 93:16:82:61:68:93:aa:b1:0f:b1:66:8e:a6:53:5a: 67:5c:26:85:67:f1:09:b0:82:9e:23:fb:95:ea:38: d5:0c:da:0a:13:ad:48:d3:94:99:c7:90:9b:36:bb: c9:cf:4b:47:7d:d8:94:53:05:fd:4f:eb:5c:08:f3: 6a:7f:3a:15:84:7c:06:c1:95:95:d0:19:a5:22:20: 8c:06:13:aa:fb:94:76:12:5a:1d:a4:a9:01:98:b0: 39:47:3e:7d:59:c4:97:fd:06:69:a2:24:b0:e0:ea: b3:56:a3:68:92:18:94:f5:fb:c8:97:79:ee:17:bd: ba:9f:bd:8c:96:85:69:11:09:f8:dc:c7:4b:d5:cc: f0:0a:af:35:fa:cd:1b:0b:3f:5b:0b:51:bb:a5:72: 4b:21:e7:4b:f0:a6:cc:05:de:78:ce:39:36:57:a2: 59:e6:13:1e:08:60:39:04:ce:d1:a8:c3:a5:db:e1: 18:f6:74:97:40:67:57:78:ad:e7:39:8e:02:3a:83: 33:a5:7e:b3:a0:61:26:2e:e1:1d:9e:e0:67:a3:81: 06:87:45:75:3d:4a:85:4b:23:08:70:d6:1c:01:ab: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4B:42:72:1F:B2:9F:BA:3E:A4:9E:4D:FD:1B:39:8F:CD:71:5A:77 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/t0tCch-yn7o-pJ5N_Rs5j81xWnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:2844::/32 2a11:2c40::/29 2a12:2cc6::/32 2a12:3bc0::/31 2a14:9703::/32 Signature Algorithm: sha256WithRSAEncryption 45:e8:47:b6:63:0c:0a:ad:58:74:5b:c6:df:a9:30:02:4d:f7: 67:7c:79:eb:40:91:97:ab:ed:f8:b5:1c:fa:ce:82:3b:45:e4: 2c:35:8c:83:0f:6f:6e:4d:cc:8c:50:8f:3c:0f:5b:a5:4c:b7: d8:67:8f:42:12:fc:15:07:03:d0:21:9f:69:10:97:b1:71:b8: 5c:f0:82:02:ee:4e:32:60:6e:a8:1c:54:a7:37:90:aa:d1:b0: 33:76:d2:28:df:35:ed:61:3b:69:0c:63:d2:c9:56:c1:59:c4: 76:be:59:f9:d9:11:e4:f6:fa:c3:79:80:2a:b6:9a:4f:3c:07: 3f:f5:3c:c5:a5:ac:92:ab:c7:22:8d:ab:85:64:23:66:fa:a0: f9:8b:a2:e3:da:7b:7e:fd:d7:db:c8:ea:0b:e4:1f:bf:47:07: d3:b4:37:bb:84:99:15:b1:06:4a:b5:60:07:6b:7a:77:01:32: 8d:87:d9:c2:05:9e:d7:44:d4:83:fc:ed:70:92:8b:2b:a7:e4: 0c:6b:c5:f4:72:cb:d4:fe:c9:64:ca:e0:6d:f8:b5:a9:33:a3: e7:14:5d:b4:c5:9e:5e:e2:c5:1f:6d:17:54:37:18:0d:46:76: b9:32:36:67:4f:69:6a:09:df:bf:1e:ff:81:ec:f5:d1:31:f4: 17:1c:89:1d -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZpzHlWKi1bmPPy6pORtPeG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzRiNDI3MjFmYjI5ZmJhM2VhNDllNGRmZDFiMzk4ZmNkNzE1YTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwVzNRHH0Q8g7xGcI2Yx0+0rfEMB wSjgrB/ekV2TFoJhaJOqsQ+xZo6mU1pnXCaFZ/EJsIKeI/uV6jjVDNoKE61I05SZ x5CbNrvJz0tHfdiUUwX9T+tcCPNqfzoVhHwGwZWV0BmlIiCMBhOq+5R2ElodpKkB mLA5Rz59WcSX/QZpoiSw4OqzVqNokhiU9fvIl3nuF726n72MloVpEQn43MdL1czw Cq81+s0bCz9bC1G7pXJLIedL8KbMBd54zjk2V6JZ5hMeCGA5BM7RqMOl2+EY9nSX QGdXeK3nOY4COoMzpX6zoGEmLuEdnuBno4EGh0V1PUqFSyMIcNYcAasqDQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFLdLQnIfsp+6PqSeTf0bOY/NcVp3MB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvdDB0Q2NoLXluN28tcEo1Tl9SczVqODF4V25jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUAKgwoRAMF AyoRLEADBQAqEizGAwUBKhI7wAMFACoUlwMwDQYJKoZIhvcNAQELBQADggEBAEXo R7ZjDAqtWHRbxt+pMAJN92d8eetAkZer7fi1HPrOgjtF5Cw1jIMPb25NzIxQjzwP W6VMt9hnj0IS/BUHA9Ahn2kQl7FxuFzwggLuTjJgbqgcVKc3kKrRsDN20ijfNe1h O2kMY9LJVsFZxHa+WfnZEeT2+sN5gCq2mk88Bz/1PMWlrJKrxyKNq4VkI2b6oPmL ouPae37919vI6gvkH79HB9O0N7uEmRWxBkq1YAdrencBMo2H2cIFntdE1IP87XCS iyun5AxrxfRyy9T+yWTK4G34takzo+cUXbTFnl7ixR9tF1Q3GA1GdrkyNmdPaWoJ 378e/4Hs9dEx9BcciR0= -----END CERTIFICATE-----Generated at Sat Dec 6 13:43:05 2025 by rpki-client