This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7UM_wFvJ3O96JtEpeO8IMz-MmSE.roa File: 7UM_wFvJ3O96JtEpeO8IMz-MmSE.roa (raw, json) Hash identifier: VGUhRLas2hP11S8NcUzHCVYNHD3OZ6NXhLhb+vp9VpY= Subject key identifier: ED:43:3F:C0:5B:C9:DC:EF:7A:26:D1:29:78:EF:08:33:3F:8C:99:21 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019AFE61BF56263A3730048AD76972E8CEE1 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7UM_wFvJ3O96JtEpeO8IMz-MmSE.roa Signing time: Mon 08 Dec 2025 14:33:30 +0000 ROA not before: Mon 08 Dec 2025 14:33:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34567 IP address blocks: 2a0d:8cc0::/29 maxlen: 29 2a0d:ad40::/29 maxlen: 29 2a0d:b840::/29 maxlen: 29 2a0e:af40::/29 maxlen: 29 2a0e:e9c0::/29 maxlen: 29 2a0f:e180::/29 maxlen: 29 2a11:17c0::/29 maxlen: 29 2a11:1c80::/29 maxlen: 29 2a11:2d00::/29 maxlen: 29 2a11:4540::/29 maxlen: 29 2a11:4f00::/29 maxlen: 29 2a11:64c0::/29 maxlen: 29 2a11:6b80::/29 maxlen: 29 2a11:77c0::/29 maxlen: 29 2a11:81c0::/29 maxlen: 29 2a11:86c0::/29 maxlen: 29 2a11:8740::/29 maxlen: 29 2a11:8980::/29 maxlen: 29 2a11:9040::/29 maxlen: 29 2a11:9580::/29 maxlen: 29 2a11:9640::/29 maxlen: 29 2a11:9f00::/29 maxlen: 29 2a11:a040::/29 maxlen: 29 2a11:a140::/29 maxlen: 29 2a11:b0c0::/29 maxlen: 29 2a11:b4c0::/29 maxlen: 29 2a11:b700::/29 maxlen: 29 2a11:bb00::/29 maxlen: 29 2a11:bbc0::/29 maxlen: 29 2a11:bdc0::/29 maxlen: 29 2a11:be40::/29 maxlen: 29 2a11:bf80::/29 maxlen: 29 2a11:c240::/29 maxlen: 29 2a11:c580::/29 maxlen: 29 2a11:c680::/29 maxlen: 29 2a11:cec0::/29 maxlen: 29 2a11:d340::/29 maxlen: 29 2a11:d880::/29 maxlen: 29 2a11:dac0::/29 maxlen: 29 2a11:df00::/29 maxlen: 29 2a11:e2c0::/29 maxlen: 29 2a11:e640::/29 maxlen: 29 2a11:e6c0::/29 maxlen: 29 2a11:e8c0::/29 maxlen: 29 2a11:eac0::/29 maxlen: 29 2a11:fa40::/29 maxlen: 29 2a11:fc40::/29 maxlen: 29 2a11:ff40::/29 maxlen: 29 2a12:580::/29 maxlen: 29 2a12:640::/29 maxlen: 29 2a12:900::/29 maxlen: 29 2a12:dc0::/29 maxlen: 29 2a12:e40::/29 maxlen: 29 2a12:e80::/29 maxlen: 29 2a12:11c0::/29 maxlen: 29 2a12:12c0::/29 maxlen: 29 2a12:1a80::/29 maxlen: 29 2a12:2800::/29 maxlen: 29 2a12:2b80::/29 maxlen: 29 2a12:2e80::/29 maxlen: 29 2a12:3c00::/29 maxlen: 29 2a12:6480::/29 maxlen: 29 2a12:8380::/29 maxlen: 29 2a12:8480::/29 maxlen: 29 2a12:8780::/29 maxlen: 29 2a12:8a00::/29 maxlen: 29 2a12:9200::/29 maxlen: 29 2a12:a500::/29 maxlen: 29 2a12:aa00::/29 maxlen: 29 2a12:af00::/29 maxlen: 29 2a12:b400::/29 maxlen: 29 2a12:b700::/29 maxlen: 29 2a12:bb00::/29 maxlen: 29 2a12:bc80::/29 maxlen: 29 2a12:c980::/29 maxlen: 29 2a12:cf80::/29 maxlen: 29 2a12:d080::/29 maxlen: 29 2a12:d200::/29 maxlen: 29 2a12:d800::/29 maxlen: 29 2a12:f980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:61:bf:56:26:3a:37:30:04:8a:d7:69:72:e8:ce:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Dec 8 14:33:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed433fc05bc9dcef7a26d12978ef08333f8c9921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:e2:1e:1e:8f:0f:59:0e:13:ef:7a:c2:3c: cb:d4:5b:d5:22:35:21:81:e2:09:ff:6a:12:a6:2c: 67:56:16:c7:96:d0:18:00:1d:ad:cc:62:df:b9:0e: cc:94:78:80:37:f6:10:e6:d2:43:55:61:45:14:4b: 69:ac:24:05:21:fd:e2:1c:7a:23:7b:3c:3d:80:7e: 8f:53:0a:de:03:aa:31:ce:04:f6:eb:de:d3:62:38: b4:07:2f:b1:a2:71:32:c3:d2:15:cc:5b:28:8c:1d: 78:45:76:6f:08:59:9f:3d:64:8a:48:52:9e:15:7f: 50:7a:cf:e1:8e:5e:c5:99:43:25:82:7a:68:60:1a: 19:c2:9e:d3:c2:27:bf:72:bf:cb:f0:8b:d8:e6:03: 48:97:0c:6b:2e:58:4c:3a:c7:21:ad:56:5a:c1:3e: e8:f5:01:a6:2d:f5:3d:18:4c:75:ad:63:28:25:6f: d5:b8:77:bb:78:10:f4:c8:9a:a1:f2:c6:d0:43:22: f1:a5:49:da:86:30:fa:73:e0:14:22:d0:55:1e:af: 7a:9b:e9:c4:b1:dc:c7:9a:bb:21:f9:65:ef:b0:42: a4:6f:25:ca:2e:70:88:31:58:cb:41:26:66:4f:1f: e7:f7:48:2a:53:6a:fe:d7:04:95:1b:ef:4a:43:31: bf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:43:3F:C0:5B:C9:DC:EF:7A:26:D1:29:78:EF:08:33:3F:8C:99:21 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7UM_wFvJ3O96JtEpeO8IMz-MmSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:8cc0::/29 2a0d:ad40::/29 2a0d:b840::/29 2a0e:af40::/29 2a0e:e9c0::/29 2a0f:e180::/29 2a11:17c0::/29 2a11:1c80::/29 2a11:2d00::/29 2a11:4540::/29 2a11:4f00::/29 2a11:64c0::/29 2a11:6b80::/29 2a11:77c0::/29 2a11:81c0::/29 2a11:86c0::/29 2a11:8740::/29 2a11:8980::/29 2a11:9040::/29 2a11:9580::/29 2a11:9640::/29 2a11:9f00::/29 2a11:a040::/29 2a11:a140::/29 2a11:b0c0::/29 2a11:b4c0::/29 2a11:b700::/29 2a11:bb00::/29 2a11:bbc0::/29 2a11:bdc0::/29 2a11:be40::/29 2a11:bf80::/29 2a11:c240::/29 2a11:c580::/29 2a11:c680::/29 2a11:cec0::/29 2a11:d340::/29 2a11:d880::/29 2a11:dac0::/29 2a11:df00::/29 2a11:e2c0::/29 2a11:e640::/29 2a11:e6c0::/29 2a11:e8c0::/29 2a11:eac0::/29 2a11:fa40::/29 2a11:fc40::/29 2a11:ff40::/29 2a12:580::/29 2a12:640::/29 2a12:900::/29 2a12:dc0::/29 2a12:e40::/29 2a12:e80::/29 2a12:11c0::/29 2a12:12c0::/29 2a12:1a80::/29 2a12:2800::/29 2a12:2b80::/29 2a12:2e80::/29 2a12:3c00::/29 2a12:6480::/29 2a12:8380::/29 2a12:8480::/29 2a12:8780::/29 2a12:8a00::/29 2a12:9200::/29 2a12:a500::/29 2a12:aa00::/29 2a12:af00::/29 2a12:b400::/29 2a12:b700::/29 2a12:bb00::/29 2a12:bc80::/29 2a12:c980::/29 2a12:cf80::/29 2a12:d080::/29 2a12:d200::/29 2a12:d800::/29 2a12:f980::/29 Signature Algorithm: sha256WithRSAEncryption 80:2f:02:14:c1:ba:e1:38:ab:f0:6d:c3:45:3b:ac:24:bb:fb: 99:c3:10:68:11:96:0e:d6:c7:84:7c:d6:b9:2b:b6:18:13:ef: 03:8c:bb:a3:a4:26:c7:c7:33:80:e9:e4:2c:fe:7e:45:86:9a: 8a:31:d5:cc:9b:89:a5:22:75:30:58:c2:65:ed:03:ca:9a:3d: 53:df:05:51:e1:3e:76:4a:75:49:cf:38:b1:65:30:ee:1b:ca: 5f:9a:ed:bd:9b:8d:d0:23:0f:9a:40:d7:47:08:7f:72:30:40: 7a:93:b4:fd:aa:ef:94:b2:12:86:06:ff:46:59:cd:e9:66:4e: 03:af:4e:a6:c9:aa:ca:e3:bb:3e:84:50:7d:0c:6c:fb:d5:3d: 8e:55:9e:cc:a3:16:61:0c:bf:5f:2c:7d:1f:0d:13:1b:69:38: 39:4d:3a:4c:69:09:ee:47:cf:ae:12:2f:44:9b:05:2a:19:c6: e5:0a:8d:8f:9b:11:0f:45:eb:1c:e9:8c:b0:02:0a:8a:cd:e4: a0:b1:4e:39:41:49:43:33:5a:45:29:b3:71:6e:18:36:67:66: 74:72:af:fd:39:af:bc:b8:43:a0:e7:6b:ef:a9:6d:8d:89:9a: ad:23:6c:54:87:4a:ac:b9:3c:16:73:bb:a1:e0:a5:c2:84:2d: 77:40:00:04 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgISAZr+Yb9WJjo3MASK12ly6M7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMjA4MTQzMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDQzM2ZjMDViYzlkY2VmN2EyNmQxMjk3OGVmMDgzMzNmOGM5OTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPniHh6PD1kOE+96wjzL1FvVIjUh geIJ/2oSpixnVhbHltAYAB2tzGLfuQ7MlHiAN/YQ5tJDVWFFFEtprCQFIf3iHHoj ezw9gH6PUwreA6oxzgT2697TYji0By+xonEyw9IVzFsojB14RXZvCFmfPWSKSFKe FX9Qes/hjl7FmUMlgnpoYBoZwp7Twie/cr/L8IvY5gNIlwxrLlhMOschrVZawT7o 9QGmLfU9GEx1rWMoJW/VuHe7eBD0yJqh8sbQQyLxpUnahjD6c+AUItBVHq96m+nE sdzHmrsh+WXvsEKkbyXKLnCIMVjLQSZmTx/n90gqU2r+1wSVG+9KQzG/dQIDAQAB o4IEPTCCBDkwHQYDVR0OBBYEFO1DP8BbydzveibRKXjvCDM/jJkhMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvN1VNX3dGdkozTzk2SnRFcGVPOElNei1NbVNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICUQYIKwYBBQUHAQcBAf8EggJAMIICPDCCAjgEAgACMIIC MAMFAyoNjMADBQMqDa1AAwUDKg24QAMFAyoOr0ADBQMqDunAAwUDKg/hgAMFAyoR F8ADBQMqERyAAwUDKhEtAAMFAyoRRUADBQMqEU8AAwUDKhFkwAMFAyoRa4ADBQMq EXfAAwUDKhGBwAMFAyoRhsADBQMqEYdAAwUDKhGJgAMFAyoRkEADBQMqEZWAAwUD KhGWQAMFAyoRnwADBQMqEaBAAwUDKhGhQAMFAyoRsMADBQMqEbTAAwUDKhG3AAMF AyoRuwADBQMqEbvAAwUDKhG9wAMFAyoRvkADBQMqEb+AAwUDKhHCQAMFAyoRxYAD BQMqEcaAAwUDKhHOwAMFAyoR00ADBQMqEdiAAwUDKhHawAMFAyoR3wADBQMqEeLA AwUDKhHmQAMFAyoR5sADBQMqEejAAwUDKhHqwAMFAyoR+kADBQMqEfxAAwUDKhH/ QAMFAyoSBYADBQMqEgZAAwUDKhIJAAMFAyoSDcADBQMqEg5AAwUDKhIOgAMFAyoS EcADBQMqEhLAAwUDKhIagAMFAyoSKAADBQMqEiuAAwUDKhIugAMFAyoSPAADBQMq EmSAAwUDKhKDgAMFAyoShIADBQMqEoeAAwUDKhKKAAMFAyoSkgADBQMqEqUAAwUD KhKqAAMFAyoSrwADBQMqErQAAwUDKhK3AAMFAyoSuwADBQMqEryAAwUDKhLJgAMF AyoSz4ADBQMqEtCAAwUDKhLSAAMFAyoS2AADBQMqEvmAMA0GCSqGSIb3DQEBCwUA A4IBAQCALwIUwbrhOKvwbcNFO6wku/uZwxBoEZYO1seEfNa5K7YYE+8DjLujpCbH xzOA6eQs/n5FhpqKMdXMm4mlInUwWMJl7QPKmj1T3wVR4T52SnVJzzixZTDuG8pf mu29m43QIw+aQNdHCH9yMEB6k7T9qu+UshKGBv9GWc3pZk4Dr06myarK47s+hFB9 DGz71T2OVZ7MoxZhDL9fLH0fDRMbaTg5TTpMaQnuR8+uEi9EmwUqGcblCo2PmxEP Resc6YywAgqKzeSgsU45QUlDM1pFKbNxbhg2Z2Z0cq/9Oa+8uEOg52vvqW2NiZqt I2xUh0qsuTwWc7uh4KXChC13QAAE -----END CERTIFICATE-----Generated at Sat Dec 20 11:46:49 2025 by rpki-client