This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/bDeWAt5toPFFtLcQo4OIdz5578k.roa File: bDeWAt5toPFFtLcQo4OIdz5578k.roa (raw, json) Hash identifier: Zpc2oZsR+YkTAX5bL+rqulsdcmLQvzDSUvV8Q9C4Jg8= Subject key identifier: 6C:37:96:02:DE:6D:A0:F1:45:B4:B7:10:A3:83:88:77:3E:79:EF:C9 Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36 Certificate serial: 019AF335A169A5D2E88D273203F5B0AA4792 Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/bDeWAt5toPFFtLcQo4OIdz5578k.roa Signing time: Sat 06 Dec 2025 10:29:29 +0000 ROA not before: Sat 06 Dec 2025 10:29:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203861 IP address blocks: 2a14:9e00:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:35:a1:69:a5:d2:e8:8d:27:32:03:f5:b0:aa:47:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36 Validity Not Before: Dec 6 10:29:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6c379602de6da0f145b4b710a38388773e79efc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a5:8d:76:f9:97:76:37:6a:69:62:50:2f:10: d1:a2:80:4f:67:b1:11:c7:24:79:d4:f0:71:e3:d8: fa:dc:5b:ca:fe:ec:c9:9b:de:78:10:d2:4b:9e:f9: c7:17:ea:b8:14:b0:85:a6:e7:f1:e7:cd:0d:5b:b7: 78:74:b7:81:55:9c:15:cd:7b:e0:b3:bc:13:c3:55: a1:9e:c9:d6:35:fe:a0:02:87:47:5d:5b:fc:a6:df: 56:d1:f8:c7:85:c4:72:13:00:69:a9:07:58:42:74: fa:7f:a7:6c:d6:d8:b4:23:07:f3:2c:2c:e7:a3:d0: 13:2b:31:a3:4a:e5:f4:6b:59:e0:7c:1e:13:11:f7: e2:fe:5d:2d:0f:13:c6:f1:6b:80:e8:05:37:3a:f7: e9:21:f5:a1:fa:4e:85:6d:54:8c:55:6b:00:71:36: 69:9d:d9:83:b4:6d:2f:b2:80:cd:bd:57:1e:36:5d: f0:f0:7f:f8:f1:fa:85:22:e0:ad:9b:84:71:a7:fe: 8a:23:8e:bb:62:6d:91:64:18:d4:95:2a:40:c9:d9: c4:bc:55:0c:ba:3e:2e:37:88:2f:11:ac:14:38:eb: 17:68:b6:3b:a0:b1:75:24:f6:ed:26:03:3e:59:a7: 84:c5:38:3a:7a:bf:fa:9a:d3:3c:bd:4d:f4:56:be: 53:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:37:96:02:DE:6D:A0:F1:45:B4:B7:10:A3:83:88:77:3E:79:EF:C9 X509v3 Authority Key Identifier: keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/bDeWAt5toPFFtLcQo4OIdz5578k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:9e00:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 47:73:0a:02:27:29:1d:a0:8c:20:02:71:52:af:ef:53:76:47: 4e:39:04:1d:a7:bc:0a:28:74:c8:38:79:da:ee:e1:2c:56:58: d0:b1:18:76:9a:e9:58:16:f7:b8:e6:28:fb:8e:15:63:8c:13: 21:06:1f:49:f0:bb:b0:fc:9d:0a:ec:58:4a:4a:a7:db:4a:95: a0:91:95:3a:7f:7d:24:bf:e0:13:b5:de:ea:b9:6c:f5:24:14: 79:fd:d4:5d:dc:60:76:93:a4:dd:85:5f:4b:f7:47:1a:5b:9a: 47:76:1c:47:1e:05:3a:6b:9b:77:87:cf:78:07:99:7d:43:f7: 22:30:ae:fb:ee:3e:b6:43:34:2d:54:ba:4b:e9:17:aa:e9:57: d7:3a:70:52:17:de:3c:ae:98:02:71:fa:b8:bf:8b:e0:b1:e8: b7:02:1e:bc:c1:00:5d:c2:05:c6:a7:1d:6e:ae:b7:dc:6b:ce: 90:f8:d6:e8:f2:5b:00:4e:84:a2:ca:0e:f0:d5:cb:40:7a:55: 67:93:fc:4b:dc:37:0d:34:c6:f6:6b:9c:95:8d:48:61:c7:2f: ea:87:a9:71:20:35:7e:7d:58:da:3f:aa:1c:d7:1d:b7:ad:ed: 5a:2e:f6:5f:bd:c0:ae:fa:59:79:91:97:a8:00:3d:66:10:aa: ba:a5:17:28 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrzNaFppdLojScyA/WwqkeSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNkMTEyNjllZWEwNjcyNjI3N2NlMzYxYWI1MWNlNDIw NDllMzYwHhcNMjUxMjA2MTAyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzM3OTYwMmRlNmRhMGYxNDViNGI3MTBhMzgzODg3NzNlNzllZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6WNdvmXdjdqaWJQLxDRooBPZ7ER xyR51PBx49j63FvK/uzJm954ENJLnvnHF+q4FLCFpufx580NW7d4dLeBVZwVzXvg s7wTw1WhnsnWNf6gAodHXVv8pt9W0fjHhcRyEwBpqQdYQnT6f6ds1ti0IwfzLCzn o9ATKzGjSuX0a1ngfB4TEffi/l0tDxPG8WuA6AU3OvfpIfWh+k6FbVSMVWsAcTZp ndmDtG0vsoDNvVceNl3w8H/48fqFIuCtm4Rxp/6KI467Ym2RZBjUlSpAydnEvFUM uj4uN4gvEawUOOsXaLY7oLF1JPbtJgM+WaeExTg6er/6mtM8vU30Vr5TyQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGw3lgLebaDxRbS3EKODiHc+ee/JMB8GA1UdIwQY MBaAFKzs0RJp7qBnJid842GrUc5CBJ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUt NDA0N2UwZmJlOWNiLzEvYkRlV0F0NXRvUEZGdExjUW80T0lkejU1NzhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUtNDA0N2UwZmJlOWNi LzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSeALAL MA0GCSqGSIb3DQEBCwUAA4IBAQBHcwoCJykdoIwgAnFSr+9TdkdOOQQdp7wKKHTI OHna7uEsVljQsRh2mulYFve45ij7jhVjjBMhBh9J8Luw/J0K7FhKSqfbSpWgkZU6 f30kv+ATtd7quWz1JBR5/dRd3GB2k6TdhV9L90caW5pHdhxHHgU6a5t3h894B5l9 Q/ciMK777j62QzQtVLpL6Req6VfXOnBSF948rpgCcfq4v4vgsei3Ah68wQBdwgXG px1urrfca86Q+Nbo8lsAToSiyg7w1ctAelVnk/xL3DcNNMb2a5yVjUhhxy/qh6lx IDV+fVjaP6oc1x23re1aLvZfvcCu+ll5kZeoAD1mEKq6pRco -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:05 2025 by rpki-client