This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cmdXkcsKoxv1NfNQ13RfZJdS1vk.roa File: cmdXkcsKoxv1NfNQ13RfZJdS1vk.roa (raw, json) Hash identifier: Kh0AHEe7RMcwBQ63B5R7e55oUi8ayOmgM9aIFTp2hso= Subject key identifier: 72:67:57:91:CB:0A:A3:1B:F5:35:F3:50:D7:74:5F:64:97:52:D6:F9 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019AFEB4235CAF822324A8AB70100E4D2211 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cmdXkcsKoxv1NfNQ13RfZJdS1vk.roa Signing time: Mon 08 Dec 2025 16:03:29 +0000 ROA not before: Mon 08 Dec 2025 16:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2a05:9a40::/29 maxlen: 29 2a06:5fc0::/29 maxlen: 29 2a0b:ac00::/29 maxlen: 29 2a0f:9b40::/29 maxlen: 29 2a10:3f80::/29 maxlen: 29 2a10:77c0::/29 maxlen: 29 2a13:b4c1::/32 maxlen: 32 2a13:b9c0::/29 maxlen: 29 2a13:bb40::/29 maxlen: 29 2a13:c240::/29 maxlen: 29 2a13:c340::/29 maxlen: 29 2a14:1100::/32 maxlen: 32 2a14:1101::/32 maxlen: 32 2a14:1102::/32 maxlen: 32 2a14:1103::/32 maxlen: 32 2a14:1104::/32 maxlen: 32 2a14:1105::/32 maxlen: 32 2a14:1106::/32 maxlen: 32 2a14:1107::/32 maxlen: 32 2a14:42c0::/29 maxlen: 29 2a14:62c0::/29 maxlen: 29 2a14:6a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:b4:23:5c:af:82:23:24:a8:ab:70:10:0e:4d:22:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Dec 8 16:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=72675791cb0aa31bf535f350d7745f649752d6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:4c:c8:eb:ed:6b:4d:cb:d9:99:35:12:23: 78:5b:8d:7f:b7:64:44:46:c7:8a:b9:a0:e1:d3:d1: 4d:45:a7:b7:bc:2b:f0:ce:fb:28:64:19:83:f2:23: 69:08:44:59:de:e8:77:33:70:6f:bc:b1:7f:da:f8: ee:49:e8:22:41:8f:95:06:0c:58:6a:54:f4:97:fa: 3c:a8:35:f3:42:25:95:48:92:07:d2:75:1f:c4:eb: bb:c2:8a:7d:70:8e:cf:d8:08:c8:a6:97:94:c3:43: c8:34:e4:bb:c3:88:91:ff:49:b1:8f:94:de:bd:48: f4:35:e3:b1:24:a0:01:a2:8b:f7:be:7d:f9:17:87: b3:cb:ad:38:24:ab:e2:81:40:2a:b8:a7:48:79:d8: c3:71:2d:29:16:85:c9:e6:19:65:d9:69:b5:7b:82: 35:8b:9e:7f:5f:cb:79:4e:38:8a:2c:f1:b0:17:dd: 56:e5:79:a3:2b:71:26:99:5a:0a:8d:05:b3:4b:01: 00:f9:b5:71:e1:47:d6:e6:be:6f:cf:e3:ff:e1:66: fe:dd:04:e0:d4:cd:08:c2:cb:e5:d9:67:ef:aa:a4: 0d:ca:cc:ea:d8:eb:2c:b2:dd:9b:2d:b5:18:d0:40: 5f:ec:66:09:11:6e:a6:25:e1:4f:87:bc:3a:e6:70: a1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:67:57:91:CB:0A:A3:1B:F5:35:F3:50:D7:74:5F:64:97:52:D6:F9 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cmdXkcsKoxv1NfNQ13RfZJdS1vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9a40::/29 2a06:5fc0::/29 2a0b:ac00::/29 2a0f:9b40::/29 2a10:3f80::/29 2a10:77c0::/29 2a13:b4c1::/32 2a13:b9c0::/29 2a13:bb40::/29 2a13:c240::/29 2a13:c340::/29 2a14:1100::/29 2a14:42c0::/29 2a14:62c0::/29 2a14:6a40::/32 Signature Algorithm: sha256WithRSAEncryption bf:4c:15:4f:8f:1d:2a:0e:d7:04:91:ed:81:1c:5e:19:13:2a: 7d:e2:3f:cf:55:20:3b:28:1d:db:9a:a2:4b:8a:21:ec:a9:c6: bb:63:9d:06:27:35:80:a0:08:3a:42:20:a1:26:a0:36:3b:e7: 9b:ad:d0:8c:35:73:0b:e9:a6:ad:4f:18:bb:1e:58:64:33:6a: a3:8a:8a:88:b5:3e:c4:c9:ec:f8:6f:64:cd:26:1c:fa:d6:db: 75:28:00:7d:e0:05:36:99:a6:3d:8b:8f:2d:be:4c:06:66:a4: ec:85:10:2d:83:e3:b6:c6:3d:5f:d2:7f:07:25:9c:b3:36:9b: e5:ff:d3:33:62:03:a5:a5:38:2a:82:78:57:33:f9:5a:4b:cb: 16:45:29:dc:f6:29:58:3f:f4:a0:84:6a:e8:0f:47:a7:10:8b: a5:a7:b5:eb:e0:bc:17:c3:a6:87:73:00:5f:b1:53:9b:e7:c1: df:95:9b:ec:bc:e8:49:cb:8e:6f:d7:6d:aa:c8:f0:51:22:f4: 84:26:f6:b5:47:d4:ca:f0:c2:6c:4d:76:28:8f:e4:ad:bd:e1: 24:56:8e:89:8b:88:21:4e:40:d8:73:b1:7a:d3:13:44:bd:9e: ee:33:d2:81:e0:c0:5e:fa:c6:d5:17:c5:ce:2a:d5:c4:a3:86: 48:4d:ad:93 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZr+tCNcr4IjJKircBAOTSIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMjA4MTYwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjY3NTc5MWNiMGFhMzFiZjUzNWYzNTBkNzc0NWY2NDk3NTJkNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDpMyOvta03L2Zk1EiN4W41/t2RE RseKuaDh09FNRae3vCvwzvsoZBmD8iNpCERZ3uh3M3BvvLF/2vjuSegiQY+VBgxY alT0l/o8qDXzQiWVSJIH0nUfxOu7wop9cI7P2AjIppeUw0PINOS7w4iR/0mxj5Te vUj0NeOxJKABoov3vn35F4ezy604JKvigUAquKdIedjDcS0pFoXJ5hll2Wm1e4I1 i55/X8t5TjiKLPGwF91W5XmjK3EmmVoKjQWzSwEA+bVx4UfW5r5vz+P/4Wb+3QTg 1M0Iwsvl2WfvqqQNyszq2Ossst2bLbUY0EBf7GYJEW6mJeFPh7w65nCh0QIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFHJnV5HLCqMb9TXzUNd0X2SXUtb5MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvY21kWGtjc0tveHYxTmZOUTEzUmZaSmRTMXZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwbwQCAAIwaQMFAyoFmkAD BQMqBl/AAwUDKgusAAMFAyoPm0ADBQMqED+AAwUDKhB3wAMFACoTtMEDBQMqE7nA AwUDKhO7QAMFAyoTwkADBQMqE8NAAwUDKhQRAAMFAyoUQsADBQMqFGLAAwUAKhRq QDANBgkqhkiG9w0BAQsFAAOCAQEAv0wVT48dKg7XBJHtgRxeGRMqfeI/z1UgOygd 25qiS4oh7KnGu2OdBic1gKAIOkIgoSagNjvnm63QjDVzC+mmrU8Yux5YZDNqo4qK iLU+xMns+G9kzSYc+tbbdSgAfeAFNpmmPYuPLb5MBmak7IUQLYPjtsY9X9J/ByWc szab5f/TM2IDpaU4KoJ4VzP5WkvLFkUp3PYpWD/0oIRq6A9HpxCLpae16+C8F8Om h3MAX7FTm+fB35Wb7LzoScuOb9dtqsjwUSL0hCb2tUfUyvDCbE12KI/krb3hJFaO iYuIIU5A2HOxetMTRL2e7jPSgeDAXvrG1RfFzirVxKOGSE2tkw== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:42 2025 by rpki-client