This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/9TfeR_30HdflGM3xsr3vdtt0wxc.roa File: 9TfeR_30HdflGM3xsr3vdtt0wxc.roa (raw, json) Hash identifier: I0ktpU2S4wkVyCed3envFEYM53nS3HQyZq29EYOjDpg= Subject key identifier: F5:37:DE:47:FD:F4:1D:D7:E5:18:CD:F1:B2:BD:EF:76:DB:74:C3:17 Certificate issuer: /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4 Certificate serial: 019A8CE0DB2729DDC4183C82F96BC79C58B6 Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/9TfeR_30HdflGM3xsr3vdtt0wxc.roa Signing time: Sun 16 Nov 2025 13:35:37 +0000 ROA not before: Sun 16 Nov 2025 13:35:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5398 IP address blocks: 2001:67c:19e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8c:e0:db:27:29:dd:c4:18:3c:82:f9:6b:c7:9c:58:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4 Validity Not Before: Nov 16 13:35:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f537de47fdf41dd7e518cdf1b2bdef76db74c317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bf:05:c3:03:e9:ff:cb:6c:5d:0f:1f:0b:33: 87:a7:3b:67:de:fc:16:1f:19:c9:e5:33:9e:21:48: 69:6b:64:3e:bd:02:c6:ef:fb:04:4c:bf:ac:fa:61: 61:03:64:77:95:29:bc:1b:a7:86:c2:4b:98:72:83: ee:b4:a4:1a:6a:64:5d:25:75:c8:41:f7:7b:a0:0e: 38:63:31:5f:e4:0e:38:11:60:31:4f:d7:1a:1f:e0: ef:ab:f1:4d:49:00:bb:ad:6a:d5:19:97:66:80:2d: b3:44:91:d7:ad:62:04:a8:ee:92:9b:46:40:5f:ee: 01:b7:db:ae:50:39:74:b1:7c:30:63:cb:c1:67:bb: 0a:10:0a:85:22:d0:dd:60:10:11:f6:e2:b0:54:e5: af:93:62:57:5b:27:53:69:4d:da:0f:9c:67:a7:78: e4:c3:68:fa:14:89:dc:b0:d1:43:ba:cd:2e:fd:f7: c1:1d:c9:ae:33:f7:73:81:08:17:ac:d2:e7:1b:96: b9:6a:99:ac:c1:e6:23:e1:16:95:8a:4b:d5:5f:34: 1e:19:b8:1b:35:8d:c0:c6:c8:d1:2f:c8:90:bb:d8: ad:b1:a3:40:d6:e2:4e:cc:1e:5c:d1:da:e1:86:51: a7:a4:76:da:a3:24:97:0b:8c:6e:ed:0b:32:64:25: f8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:37:DE:47:FD:F4:1D:D7:E5:18:CD:F1:B2:BD:EF:76:DB:74:C3:17 X509v3 Authority Key Identifier: keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/9TfeR_30HdflGM3xsr3vdtt0wxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:19e0::/48 Signature Algorithm: sha256WithRSAEncryption 2b:84:f6:02:b7:f6:1f:d6:93:14:68:4e:04:ce:11:16:57:19: 37:bc:90:3d:b9:43:20:a3:01:14:20:1e:ea:90:20:92:d8:21: b7:43:87:9e:3a:85:6e:3a:5f:75:18:27:e1:b5:6b:fc:4c:d6: 07:82:d3:bd:36:80:65:a0:3f:a9:f1:81:a3:3a:70:40:4e:e6: 6c:11:f8:7a:46:b9:a5:12:1b:ea:48:17:5a:43:e2:33:03:d3: 0a:e2:e3:b1:99:2b:ca:6c:10:21:06:64:82:b2:c6:15:c8:76: 7a:b0:bc:48:1d:ce:63:fe:aa:0c:7b:68:03:36:24:a9:d0:2d: 21:ac:83:24:7b:e5:5f:f7:a8:2e:d3:64:48:38:6b:bb:b8:41: aa:34:98:24:31:df:45:0e:60:aa:dc:91:82:37:bd:62:01:92: 0c:17:6e:ec:65:97:e6:01:64:6e:67:11:41:f8:5c:f7:11:01: f4:16:d9:b5:85:9f:2e:1e:ca:03:32:2d:57:2f:05:83:fc:6b: f9:ba:bd:c8:84:b9:0b:5a:3d:58:ee:66:6f:2b:a1:74:8f:cd: bf:15:74:3d:95:82:24:17:59:a3:f2:fb:e2:4b:78:35:2d:3b: 1d:a7:34:9a:3e:3d:8b:67:33:f0:89:4e:60:43:c9:30:13:00: 7f:09:2b:02 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqM4NsnKd3EGDyC+WvHnFi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OGQyYTVmNTJjZGZmMTVhZTk2YWM1ZjRjOTc2MTBlNDQ0 YjYyYjQwHhcNMjUxMTE2MTMzNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTM3ZGU0N2ZkZjQxZGQ3ZTUxOGNkZjFiMmJkZWY3NmRiNzRjMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b8FwwPp/8tsXQ8fCzOHpztn3vwW HxnJ5TOeIUhpa2Q+vQLG7/sETL+s+mFhA2R3lSm8G6eGwkuYcoPutKQaamRdJXXI Qfd7oA44YzFf5A44EWAxT9caH+Dvq/FNSQC7rWrVGZdmgC2zRJHXrWIEqO6Sm0ZA X+4Bt9uuUDl0sXwwY8vBZ7sKEAqFItDdYBAR9uKwVOWvk2JXWydTaU3aD5xnp3jk w2j6FIncsNFDus0u/ffBHcmuM/dzgQgXrNLnG5a5apmsweYj4RaVikvVXzQeGbgb NY3AxsjRL8iQu9itsaNA1uJOzB5c0drhhlGnpHbaoySXC4xu7QsyZCX49QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPU33kf99B3X5RjN8bK973bbdMMXMB8GA1UdIwQY MBaAFBWNKl9Szf8VrpasX0yXYQ5ES2K0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAt NTYyNDk4YzY4YTc4LzEvOVRmZVJfMzBIZGZsR00zeHNyM3ZkdHQwd3hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAtNTYyNDk4YzY4YTc4 LzEvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBng MA0GCSqGSIb3DQEBCwUAA4IBAQArhPYCt/Yf1pMUaE4EzhEWVxk3vJA9uUMgowEU IB7qkCCS2CG3Q4eeOoVuOl91GCfhtWv8TNYHgtO9NoBloD+p8YGjOnBATuZsEfh6 RrmlEhvqSBdaQ+IzA9MK4uOxmSvKbBAhBmSCssYVyHZ6sLxIHc5j/qoMe2gDNiSp 0C0hrIMke+Vf96gu02RIOGu7uEGqNJgkMd9FDmCq3JGCN71iAZIMF27sZZfmAWRu ZxFB+Fz3EQH0Ftm1hZ8uHsoDMi1XLwWD/Gv5ur3IhLkLWj1Y7mZvK6F0j82/FXQ9 lYIkF1mj8vviS3g1LTsdpzSaPj2LZzPwiU5gQ8kwEwB/CSsC -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:51 2025 by rpki-client