This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/RVbzzBG5muJC-aBoMdoJbzSr7H8.roa File: RVbzzBG5muJC-aBoMdoJbzSr7H8.roa (raw, json) Hash identifier: o1cjUAzQ2XsMXZ4DvKF1uyqTeyhp2W7U45+BcFLlyM0= Subject key identifier: 45:56:F3:CC:11:B9:9A:E2:42:F9:A0:68:31:DA:09:6F:34:AB:EC:7F Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Certificate serial: 019AA6DDA730EB52A799219303FCE809F0CB Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/RVbzzBG5muJC-aBoMdoJbzSr7H8.roa Signing time: Fri 21 Nov 2025 14:42:15 +0000 ROA not before: Fri 21 Nov 2025 14:42:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199959 IP address blocks: 2a07:efc0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:dd:a7:30:eb:52:a7:99:21:93:03:fc:e8:09:f0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Validity Not Before: Nov 21 14:42:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4556f3cc11b99ae242f9a06831da096f34abec7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:7f:ed:cf:4e:9d:f9:29:e5:8a:e3:19:a7: fb:19:75:e8:3a:d6:43:73:63:d5:ba:56:5a:40:fd: 70:78:17:80:8e:65:c5:90:03:d8:48:d3:0e:7c:d8: 73:92:24:13:8d:01:92:58:bd:06:10:f9:fe:1e:bb: 31:74:95:3e:22:ba:b3:3e:68:a4:80:4d:a6:8e:7c: 64:3a:df:1a:3e:8b:11:bc:0c:92:67:de:3d:1a:3e: 16:2b:da:9d:13:7c:62:3d:10:89:87:08:b5:41:eb: cb:64:f2:67:51:aa:de:e1:0e:77:4c:09:8b:32:a8: 29:bf:73:a6:c9:7f:41:35:08:7d:96:6f:f3:dc:99: 09:f1:c1:62:b5:c3:f6:62:bf:e5:8c:58:2e:86:39: 6f:29:87:d6:28:be:f4:99:5e:f4:81:9e:c1:f6:77: 92:cb:c0:f3:0e:2c:a1:bf:68:28:1a:22:e3:cc:73: 9d:f2:35:16:da:d3:de:3f:79:fc:4b:61:ae:5c:b0: 01:1e:cf:88:3e:b6:d0:03:f1:82:af:52:c8:cf:2d: 4c:7b:f8:5d:1a:81:97:92:f7:3d:f7:2f:59:d0:29: 1f:11:03:54:ab:d5:4e:b1:fb:78:4c:c4:1e:32:ca: d1:6e:7d:9e:03:13:07:2c:d7:a9:62:88:aa:69:99: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:56:F3:CC:11:B9:9A:E2:42:F9:A0:68:31:DA:09:6F:34:AB:EC:7F X509v3 Authority Key Identifier: keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/RVbzzBG5muJC-aBoMdoJbzSr7H8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:efc0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 45:30:51:46:69:c4:f2:b1:4b:21:c2:a1:5e:f4:5f:7d:62:2c: b2:49:7f:88:cc:a2:5f:cb:f9:e9:d0:6c:4b:dc:f3:3e:89:8e: 25:4f:c2:57:61:67:df:b6:97:71:a7:e0:19:d4:d8:aa:ba:70: 91:3e:c7:fa:99:f0:83:c0:be:58:04:e3:73:6e:e0:45:f1:93: c1:d2:20:d3:86:f9:18:24:cc:a8:8f:2c:1d:aa:b3:3f:dd:c2: ad:d6:a9:21:a8:20:69:e7:4c:c8:3f:40:c7:32:2f:9e:27:02: 46:4e:9d:a3:d9:ba:18:65:1a:9e:c3:8d:6a:dc:1a:18:b7:35: 8d:f1:6a:72:3b:39:0a:92:37:95:8f:b6:34:5c:6b:7d:c3:f8: b2:56:f4:cd:4e:7c:76:d8:05:8d:bf:b5:20:3b:ee:0a:99:a3: 77:c5:c0:9b:96:f9:a3:39:55:17:78:30:a9:d1:6b:b4:f8:1b: ff:18:f2:a2:5d:4a:7b:20:57:80:33:68:ec:07:1e:eb:16:b8: 1f:d1:82:70:74:de:36:ee:5d:f9:68:14:3c:da:b2:8e:d4:57: 96:bf:8a:b7:78:60:bc:bb:95:23:df:f5:79:8c:06:67:79:a5: c5:b6:8f:8b:f5:0e:fd:d9:8a:a5:a1:34:9f:a6:17:f2:8c:7d: af:c2:bd:e6 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZqm3acw61KnmSGTA/zoCfDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZjg2Y2YzM2UxNWVhNDA4OWRhMjllMmE3ODgxZDc0NmRm ODI2ZWYwHhcNMjUxMTIxMTQ0MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTU2ZjNjYzExYjk5YWUyNDJmOWEwNjgzMWRhMDk2ZjM0YWJlYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS5/7c9Onfkp5YrjGaf7GXXoOtZD c2PVulZaQP1weBeAjmXFkAPYSNMOfNhzkiQTjQGSWL0GEPn+HrsxdJU+IrqzPmik gE2mjnxkOt8aPosRvAySZ949Gj4WK9qdE3xiPRCJhwi1QevLZPJnUare4Q53TAmL Mqgpv3OmyX9BNQh9lm/z3JkJ8cFitcP2Yr/ljFguhjlvKYfWKL70mV70gZ7B9neS y8DzDiyhv2goGiLjzHOd8jUW2tPeP3n8S2GuXLABHs+IPrbQA/GCr1LIzy1Me/hd GoGXkvc99y9Z0CkfEQNUq9VOsft4TMQeMsrRbn2eAxMHLNepYoiqaZmn3wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEVW88wRuZriQvmgaDHaCW80q+x/MB8GA1UdIwQY MBaAFE/4bPM+FepAidop4qeIHXRt+CbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQt NmZjNWZjYTA5NjI5LzEvUlZienpCRzVtdUpDLWFCb01kb0pielNyN0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQtNmZjNWZjYTA5NjI5 LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgfvwBAw DQYJKoZIhvcNAQELBQADggEBAEUwUUZpxPKxSyHCoV70X31iLLJJf4jMol/L+enQ bEvc8z6JjiVPwldhZ9+2l3Gn4BnU2Kq6cJE+x/qZ8IPAvlgE43Nu4EXxk8HSINOG +RgkzKiPLB2qsz/dwq3WqSGoIGnnTMg/QMcyL54nAkZOnaPZuhhlGp7DjWrcGhi3 NY3xanI7OQqSN5WPtjRca33D+LJW9M1OfHbYBY2/tSA77gqZo3fFwJuW+aM5VRd4 MKnRa7T4G/8Y8qJdSnsgV4AzaOwHHusWuB/RgnB03jbuXfloFDzaso7UV5a/ird4 YLy7lSPf9XmMBmd5pcW2j4v1Dv3ZiqWhNJ+mF/KMfa/CveY= -----END CERTIFICATE-----Generated at Sat Dec 6 09:53:13 2025 by rpki-client