This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/KWHdrLH6yltG_lXTKMjWm06JymU.roa File: KWHdrLH6yltG_lXTKMjWm06JymU.roa (raw, json) Hash identifier: gXJ+eakLyWc/URtc7hQ4mdwbuyCLmf/qcAevtcOTkKE= Subject key identifier: 29:61:DD:AC:B1:FA:CA:5B:46:FE:55:D3:28:C8:D6:9B:4E:89:CA:65 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019A7D507A9468D4A2913FCEE0674B8C50FA Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/KWHdrLH6yltG_lXTKMjWm06JymU.roa Signing time: Thu 13 Nov 2025 13:03:37 +0000 ROA not before: Thu 13 Nov 2025 13:03:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204669 IP address blocks: 2a06:b441::/32 maxlen: 32 2a11:2f40::/29 maxlen: 29 2a11:7240::/29 maxlen: 29 2a11:f240::/29 maxlen: 29 2a12:6f40::/29 maxlen: 29 2a12:7740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:50:7a:94:68:d4:a2:91:3f:ce:e0:67:4b:8c:50:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Nov 13 13:03:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2961ddacb1faca5b46fe55d328c8d69b4e89ca65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:99:f3:09:13:92:da:29:93:b7:e2:58:d0: 06:dc:79:b6:18:dc:48:f8:eb:d6:ae:0e:ed:bb:d1: 54:d8:3a:65:e7:83:7a:ce:46:d1:00:71:bd:25:c7: 80:91:92:96:fc:73:0f:69:a2:57:62:b3:a8:3a:1f: fc:ca:79:e0:2d:76:64:68:c5:22:f2:56:5f:b7:c0: a4:3c:3b:b4:24:e5:15:5c:f2:a1:97:ae:8a:e6:76: 22:4a:8b:95:d7:96:30:1d:89:bb:27:b2:67:a4:76: 29:06:28:0b:36:fa:c4:68:a4:a8:d5:14:7a:75:d7: 51:f7:41:6d:2c:6e:8d:b8:40:8b:d0:50:0f:71:77: 7e:bc:5c:f2:bd:bc:3e:d3:32:ae:68:9d:2c:7c:cf: 45:7c:dd:9f:21:ee:e6:29:b8:07:3b:54:ab:47:cd: 01:cb:3f:2d:1e:e9:1a:09:70:a4:4b:7c:15:5b:f1: fb:f7:e8:99:8e:b5:c1:fd:e9:8e:3e:a7:12:85:fa: 92:3e:af:1d:55:3e:41:d8:9a:2b:d5:c5:35:79:49: 1a:3d:50:19:86:d9:c9:3d:d2:2a:78:d9:31:da:26: c7:1f:77:2b:99:68:12:2b:dc:1e:7f:0b:22:d2:1c: 03:d0:2d:18:2a:57:c6:10:32:39:ee:37:6a:18:d2: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:61:DD:AC:B1:FA:CA:5B:46:FE:55:D3:28:C8:D6:9B:4E:89:CA:65 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/KWHdrLH6yltG_lXTKMjWm06JymU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:b441::/32 2a11:2f40::/29 2a11:7240::/29 2a11:f240::/29 2a12:6f40::/29 2a12:7740::/29 Signature Algorithm: sha256WithRSAEncryption 07:e2:d1:88:c2:3d:0c:50:6b:43:52:61:da:64:f6:9b:08:81: 0b:ca:d5:2a:af:dc:1b:a2:e8:9f:38:64:c8:f2:85:fd:40:0b: 23:c9:0e:0d:05:15:65:e1:94:8f:4f:75:0d:cf:6d:bd:6f:03: 4f:25:71:25:34:34:10:af:b5:7d:6f:f1:3a:0e:41:a8:23:84: d0:74:e0:25:d8:61:25:23:78:e4:c1:e8:12:52:a1:15:f1:09: 66:62:78:9c:86:e8:90:fd:d8:f5:31:7b:24:9e:a9:2a:d3:20: c5:bb:ab:67:0b:03:1c:32:fc:3d:2b:e7:3a:cc:e2:89:cc:5a: 01:cf:f6:9e:4b:c4:b4:b6:f1:65:2d:01:70:7b:aa:d3:01:7e: 34:6a:a0:56:d6:1b:70:ca:29:b4:b9:95:b0:77:42:e3:5b:2a: 2a:55:ff:17:be:bb:ee:09:be:11:c8:af:9d:01:a4:f7:8a:68: 08:d6:d6:5d:4a:be:54:85:c9:c2:45:94:88:46:32:22:6b:d6: fc:bd:1b:71:38:d2:32:55:75:cf:bc:94:1b:35:02:ca:8c:e6: 23:eb:f8:94:89:77:1f:97:10:c6:35:7c:66:11:23:d1:10:42: 7e:ff:89:5d:53:94:91:79:d4:da:0f:12:ed:51:a0:25:6c:86: c0:d9:2e:9e -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZp9UHqUaNSikT/O4GdLjFD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjUxMTEzMTMwMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTYxZGRhY2IxZmFjYTViNDZmZTU1ZDMyOGM4ZDY5YjRlODljYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEeZ8wkTktopk7fiWNAG3Hm2GNxI +OvWrg7tu9FU2Dpl54N6zkbRAHG9JceAkZKW/HMPaaJXYrOoOh/8ynngLXZkaMUi 8lZft8CkPDu0JOUVXPKhl66K5nYiSouV15YwHYm7J7JnpHYpBigLNvrEaKSo1RR6 dddR90FtLG6NuECL0FAPcXd+vFzyvbw+0zKuaJ0sfM9FfN2fIe7mKbgHO1SrR80B yz8tHukaCXCkS3wVW/H79+iZjrXB/emOPqcShfqSPq8dVT5B2Jor1cU1eUkaPVAZ htnJPdIqeNkx2ibHH3crmWgSK9wefwsi0hwD0C0YKlfGEDI57jdqGNKtFwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFClh3ayx+spbRv5V0yjI1ptOicplMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvS1dIZHJMSDZ5bHRHX2xYVEtNaldtMDZKeW1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUAKga0QQMF AyoRL0ADBQMqEXJAAwUDKhHyQAMFAyoSb0ADBQMqEndAMA0GCSqGSIb3DQEBCwUA A4IBAQAH4tGIwj0MUGtDUmHaZPabCIELytUqr9wbouifOGTI8oX9QAsjyQ4NBRVl 4ZSPT3UNz229bwNPJXElNDQQr7V9b/E6DkGoI4TQdOAl2GElI3jkwegSUqEV8Qlm YnichuiQ/dj1MXsknqkq0yDFu6tnCwMcMvw9K+c6zOKJzFoBz/aeS8S0tvFlLQFw e6rTAX40aqBW1htwyim0uZWwd0LjWyoqVf8XvrvuCb4RyK+dAaT3imgI1tZdSr5U hcnCRZSIRjIia9b8vRtxONIyVXXPvJQbNQLKjOYj6/iUiXcflxDGNXxmESPREEJ+ /4ldU5SRedTaDxLtUaAlbIbA2S6e -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:15 2025 by rpki-client