This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/eAApdHaPIR2lUBAZFwISpbl18cg.roa File: eAApdHaPIR2lUBAZFwISpbl18cg.roa (raw, json) Hash identifier: uHl5PY3UQhZY/qolDjgsiFJ+kKN2QHJWQS+PQPcWpx8= Subject key identifier: 78:00:29:74:76:8F:21:1D:A5:50:10:19:17:02:12:A5:B9:75:F1:C8 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019A7928A444B4EFEC6C10D611538D21963E Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/eAApdHaPIR2lUBAZFwISpbl18cg.roa Signing time: Wed 12 Nov 2025 17:41:37 +0000 ROA not before: Wed 12 Nov 2025 17:41:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57271 IP address blocks: 2a14:a404::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:28:a4:44:b4:ef:ec:6c:10:d6:11:53:8d:21:96:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Nov 12 17:41:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=78002974768f211da5501019170212a5b975f1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:d1:db:55:dd:44:db:3e:25:77:4a:18:05: 29:37:0b:65:eb:79:14:b6:3f:a3:d2:d6:69:65:b2: 96:62:30:24:7e:a6:1f:eb:0c:9c:0a:a1:19:51:40: 4a:24:6c:20:06:55:83:8c:db:83:36:63:e0:36:dc: ba:4c:16:77:11:c0:9c:b2:0b:b0:9e:49:d1:21:ac: 71:6c:1f:b4:a2:5c:20:30:e4:1b:8e:d9:30:77:90: d1:ee:52:2a:7a:d5:98:7c:45:11:e0:69:34:12:cc: db:93:cc:b0:c4:e9:fe:af:0e:a8:b3:95:87:a8:e5: 65:93:c2:fa:72:da:1e:c8:8d:eb:95:76:8e:17:ff: e3:59:6e:33:8a:2c:8c:dc:76:06:71:ed:0a:c8:7c: 16:b9:c9:31:1a:85:58:83:19:e9:ec:35:ad:9a:24: 44:4c:31:ed:f0:79:17:a5:25:4b:bf:66:df:a2:fc: 72:a9:96:5b:31:b3:39:a1:75:af:44:02:a8:ce:52: 0f:2b:2f:74:40:75:fa:93:f2:fc:ad:cc:9d:d3:24: 4a:19:e6:72:73:85:f1:3c:d1:d3:87:18:66:86:d1: 18:5f:8d:16:fe:31:f0:54:93:a0:02:45:79:05:e7: 01:79:b7:aa:da:bd:56:a5:db:33:95:d1:af:8d:b8: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:00:29:74:76:8F:21:1D:A5:50:10:19:17:02:12:A5:B9:75:F1:C8 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/eAApdHaPIR2lUBAZFwISpbl18cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:a404::/32 Signature Algorithm: sha256WithRSAEncryption 20:82:ba:76:57:b6:0b:85:70:4b:47:6e:98:70:f1:12:96:58: 14:c0:ca:f4:9f:5a:ee:6b:0c:c4:65:53:a4:3f:3e:c3:11:ef: 27:9a:10:f7:02:0d:07:17:90:8a:bd:fa:27:41:8a:be:65:0b: 88:4c:67:e3:1c:05:21:1e:2f:7b:73:89:00:64:08:29:4f:ed: f6:8f:c3:64:72:27:61:c9:f5:33:29:e1:32:d5:18:81:63:c3: 0e:ae:8e:50:cf:a3:8a:54:23:98:27:f7:f7:c9:80:0c:1b:ab: fc:73:c4:04:28:83:2c:08:4c:42:93:2c:df:eb:9a:f7:4c:cc: 83:f3:34:74:59:09:6e:02:91:1a:00:f8:75:f2:6e:1b:c7:6e: 3a:ce:bd:62:7c:b4:60:73:21:55:6b:6c:2b:6b:2d:f2:ff:9e: 01:42:9e:d3:20:65:f5:f3:3a:ff:18:bc:08:c8:ca:66:0d:16: 70:c4:bd:be:58:58:fd:b4:30:1e:cb:16:17:c8:e9:9b:6a:a1: 9c:b8:ed:c9:11:68:19:e2:5b:75:f3:86:f2:39:be:e4:e8:5a: fc:84:b0:28:25:a2:30:9d:e4:cc:b0:d1:96:ab:da:f0:f9:1b: 26:7f:29:79:24:f7:4a:8b:1c:8e:4d:8a:c5:ba:d0:52:d1:ec: 92:58:f3:9c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZp5KKREtO/sbBDWEVONIZY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjUxMTEyMTc0MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODAwMjk3NDc2OGYyMTFkYTU1MDEwMTkxNzAyMTJhNWI5NzVmMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3jR21XdRNs+JXdKGAUpNwtl63kU tj+j0tZpZbKWYjAkfqYf6wycCqEZUUBKJGwgBlWDjNuDNmPgNty6TBZ3EcCcsguw nknRIaxxbB+0olwgMOQbjtkwd5DR7lIqetWYfEUR4Gk0Eszbk8ywxOn+rw6os5WH qOVlk8L6ctoeyI3rlXaOF//jWW4ziiyM3HYGce0KyHwWuckxGoVYgxnp7DWtmiRE TDHt8HkXpSVLv2bfovxyqZZbMbM5oXWvRAKozlIPKy90QHX6k/L8rcyd0yRKGeZy c4XxPNHThxhmhtEYX40W/jHwVJOgAkV5BecBebeq2r1WpdszldGvjbhphQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHgAKXR2jyEdpVAQGRcCEqW5dfHIMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvZUFBcGRIYVBJUjJsVUJBWkZ3SVNwYmwxOGNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhSkBDAN BgkqhkiG9w0BAQsFAAOCAQEAIIK6dle2C4VwS0dumHDxEpZYFMDK9J9a7msMxGVT pD8+wxHvJ5oQ9wINBxeQir36J0GKvmULiExn4xwFIR4ve3OJAGQIKU/t9o/DZHIn Ycn1MynhMtUYgWPDDq6OUM+jilQjmCf398mADBur/HPEBCiDLAhMQpMs3+ua90zM g/M0dFkJbgKRGgD4dfJuG8duOs69Yny0YHMhVWtsK2st8v+eAUKe0yBl9fM6/xi8 CMjKZg0WcMS9vlhY/bQwHssWF8jpm2qhnLjtyRFoGeJbdfOG8jm+5Oha/ISwKCWi MJ3kzLDRlqva8PkbJn8peST3Soscjk2KxbrQUtHskljznA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:27 2025 by rpki-client