This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/e_7jsBHNvs0E-rtGpVv1tlalDGU.roa File: e_7jsBHNvs0E-rtGpVv1tlalDGU.roa (raw, json) Hash identifier: v34I+bZEXVXagRTaFY/sEL1W9Jf812yExl6yszqNXUY= Subject key identifier: 7B:FE:E3:B0:11:CD:BE:CD:04:FA:BB:46:A5:5B:F5:B6:56:A5:0C:65 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B0C8212FC8D006ED7D3CA021E0368EC12 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/e_7jsBHNvs0E-rtGpVv1tlalDGU.roa Signing time: Thu 11 Dec 2025 08:23:29 +0000 ROA not before: Thu 11 Dec 2025 08:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36530 IP address blocks: 2a0f:7802:e000::/39 maxlen: 48 2a0f:7802:e200::/40 maxlen: 48 2a0f:7803:f4f0::/44 maxlen: 48 2a0f:7803:fb40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:82:12:fc:8d:00:6e:d7:d3:ca:02:1e:03:68:ec:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Dec 11 08:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7bfee3b011cdbecd04fabb46a55bf5b656a50c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:41:a8:5d:af:d8:5f:4d:68:f0:8e:0f:db:ca: c5:1d:b8:06:2a:73:ca:55:71:2c:57:17:52:58:57: a0:f4:ac:49:38:8f:04:bf:96:12:26:f0:8c:36:03: 57:30:a1:64:76:21:64:0c:26:77:1c:7e:39:a7:83: 39:64:51:ef:0f:68:20:45:97:ba:a8:ad:f0:a4:0b: 2a:ac:bf:d0:f9:4f:7e:8d:9f:a3:95:0a:e2:85:03: 5f:2f:73:56:62:cc:16:b6:4c:85:0d:0a:51:4a:ec: 32:65:bf:5c:ae:96:f2:a1:4b:fd:b0:c9:3d:6b:74: 13:b9:22:36:d5:79:cb:01:46:56:d7:21:a7:c6:9f: 2f:3a:48:3b:b5:e4:86:58:47:83:b6:6e:81:08:1b: 4b:7a:e1:15:f0:1c:ed:d4:bd:d0:96:6c:e4:c2:e5: 29:e8:34:0d:8b:4f:a4:dc:19:c0:8f:8d:e5:a4:f9: 56:07:2a:72:64:bb:a5:8b:e8:73:5e:a5:68:2d:40: 7f:f3:aa:00:d2:ea:96:09:65:9f:aa:94:c9:0c:90: 96:45:3b:de:cc:c1:81:60:33:ce:51:48:e6:eb:bf: 93:bb:de:ea:28:ca:d3:4c:ee:fb:01:37:3d:9c:e2: ea:e4:85:62:7a:b2:a9:79:83:34:c4:29:db:c2:1c: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FE:E3:B0:11:CD:BE:CD:04:FA:BB:46:A5:5B:F5:B6:56:A5:0C:65 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/e_7jsBHNvs0E-rtGpVv1tlalDGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e000::-2a0f:7802:e2ff:ffff:ffff:ffff:ffff:ffff 2a0f:7803:f4f0::/44 2a0f:7803:fb40::/44 Signature Algorithm: sha256WithRSAEncryption 7a:93:a0:b5:88:bb:11:54:63:35:a4:a3:66:dd:e0:d8:e0:bc: 17:33:87:a4:66:4a:ab:90:33:0e:84:dd:95:c9:9d:7a:cf:01: 50:a6:55:89:93:39:cb:a9:eb:3b:62:e6:14:e3:c0:b9:35:65: 3b:29:ce:05:74:9d:ee:30:89:75:fc:97:02:e5:ce:bc:d3:c0: b5:34:cc:47:12:20:8c:95:ff:ef:10:70:df:20:6f:8a:20:82: 94:63:d5:7c:5b:61:83:eb:50:5f:f4:b8:db:6d:dc:54:3a:3f: 1b:51:ad:29:f9:82:5c:5c:6b:18:52:76:6f:e7:4d:10:2e:7b: 5e:d3:aa:1a:95:79:46:91:5d:64:cb:61:e7:c1:4a:a5:dd:0d: 54:c7:65:2c:7a:3e:ae:21:f1:48:4f:ee:74:1c:40:51:b6:0c: b5:99:7c:8c:d1:93:9f:9d:b4:86:2e:b9:b8:0d:a7:01:81:c2: f8:87:03:9a:32:07:09:33:5f:39:d2:4d:15:94:04:3d:22:65: 6a:cb:bb:d5:82:f0:d5:62:ad:35:d3:83:0d:03:b8:2f:54:10: 81:da:09:8a:ff:49:af:d8:7f:16:87:bd:74:f8:aa:af:47:b3: 1e:f2:e5:68:c4:b0:9e:8e:cb:38:fa:ed:0f:fb:40:71:1d:23: 66:1c:9b:33 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsMghL8jQBu19PKAh4DaOwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjUxMjExMDgyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmZlZTNiMDExY2RiZWNkMDRmYWJiNDZhNTViZjViNjU2YTUwYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0GoXa/YX01o8I4P28rFHbgGKnPK VXEsVxdSWFeg9KxJOI8Ev5YSJvCMNgNXMKFkdiFkDCZ3HH45p4M5ZFHvD2ggRZe6 qK3wpAsqrL/Q+U9+jZ+jlQrihQNfL3NWYswWtkyFDQpRSuwyZb9crpbyoUv9sMk9 a3QTuSI21XnLAUZW1yGnxp8vOkg7teSGWEeDtm6BCBtLeuEV8Bzt1L3QlmzkwuUp 6DQNi0+k3BnAj43lpPlWBypyZLuli+hzXqVoLUB/86oA0uqWCWWfqpTJDJCWRTve zMGBYDPOUUjm67+Tu97qKMrTTO77ATc9nOLq5IVierKpeYM0xCnbwhwznQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHv+47ARzb7NBPq7RqVb9bZWpQxlMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvZV83anNCSE52czBFLXJ0R3BWdjF0bGFsREdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkMBADBgUqD3gC 4AMGACoPeALiAwcEKg94A/TwAwcEKg94A/tAMA0GCSqGSIb3DQEBCwUAA4IBAQB6 k6C1iLsRVGM1pKNm3eDY4LwXM4ekZkqrkDMOhN2VyZ16zwFQplWJkznLqes7YuYU 48C5NWU7Kc4FdJ3uMIl1/JcC5c6808C1NMxHEiCMlf/vEHDfIG+KIIKUY9V8W2GD 61Bf9LjbbdxUOj8bUa0p+YJcXGsYUnZv500QLnte06oalXlGkV1ky2HnwUql3Q1U x2Usej6uIfFIT+50HEBRtgy1mXyM0ZOfnbSGLrm4DacBgcL4hwOaMgcJM1850k0V lAQ9ImVqy7vVgvDVYq0104MNA7gvVBCB2gmK/0mv2H8Wh710+KqvR7Me8uVoxLCe jss4+u0P+0BxHSNmHJsz -----END CERTIFICATE-----Generated at Fri Dec 19 12:46:39 2025 by rpki-client