This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/1-OtTj0eqfh0GfxBOuMeEc8Q8_AA.roa File: 1-OtTj0eqfh0GfxBOuMeEc8Q8_AA.roa (raw, json) Hash identifier: 25H9xJdrvjjN7cufc9xed+r7fU9Rit0dST7O2iYnC00= Subject key identifier: F8:EB:53:8F:47:AA:7E:1D:06:7F:10:4E:B8:C7:84:73:C4:3C:FC:00 Certificate issuer: /CN=4e815c92fc1c6425aacbcc451596c73ed6457007 Certificate serial: 019ABCFE332ED084F88B610D67C34DA76882 Authority key identifier: 4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/1-OtTj0eqfh0GfxBOuMeEc8Q8_AA.roa Signing time: Tue 25 Nov 2025 21:49:27 +0000 ROA not before: Tue 25 Nov 2025 21:49:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210436 IP address blocks: 2001:67c:152c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:fe:33:2e:d0:84:f8:8b:61:0d:67:c3:4d:a7:68:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e815c92fc1c6425aacbcc451596c73ed6457007 Validity Not Before: Nov 25 21:49:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f8eb538f47aa7e1d067f104eb8c78473c43cfc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:32:cf:9a:60:0f:d5:e0:25:ce:6b:89:58: f4:0a:5a:aa:33:b4:df:ce:ed:87:ea:a0:6d:2b:1d: 75:fa:d3:29:9a:7f:a2:57:8d:22:a7:87:18:ad:7c: 1b:35:99:64:d4:12:dd:42:0d:42:64:c7:86:a4:6a: da:a6:6e:6e:53:bb:a5:58:a7:54:33:c9:ab:00:a2: 3e:59:31:ae:02:b5:34:8b:03:21:ff:4c:70:1d:63: 8b:32:c4:8e:10:c7:bd:1d:4c:d5:21:15:8a:d5:a7: ff:65:e7:60:ee:94:1c:49:b7:79:5e:2b:e1:2f:a3: 68:8e:0c:96:17:d0:18:8c:1d:b3:21:89:8b:d8:65: 1a:71:7d:c9:85:03:44:7c:a8:11:55:6b:ec:b7:90: 14:57:7d:3d:3c:ca:49:90:c0:9b:bf:6d:b3:a9:df: 28:ae:33:a9:1f:51:e1:5b:b7:5f:f7:84:b2:17:dd: 66:41:a0:79:86:9a:91:58:c3:c6:00:97:8a:2f:95: 60:0d:6e:21:77:5a:62:e0:50:d1:41:c1:2c:35:94: db:f4:8c:d4:c1:7d:04:60:3d:41:b7:c0:60:f3:5a: d5:9e:f7:3e:d0:1d:7f:7d:87:59:ea:9a:f5:34:a1: db:f8:13:c9:01:13:29:c9:fa:76:62:c2:eb:f7:62: c6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EB:53:8F:47:AA:7E:1D:06:7F:10:4E:B8:C7:84:73:C4:3C:FC:00 X509v3 Authority Key Identifier: keyid:4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/1-OtTj0eqfh0GfxBOuMeEc8Q8_AA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:152c::/48 Signature Algorithm: sha256WithRSAEncryption 42:79:4b:69:f7:e0:14:c2:87:40:f1:b1:00:6f:88:7b:cb:5b: fa:af:bb:24:c4:53:cd:a5:60:69:33:c0:bd:c3:b5:d2:4d:9c: b5:22:58:f9:17:eb:33:78:1e:79:01:81:0b:fb:04:a2:a0:46: 88:2a:ff:e0:df:a6:94:83:50:df:06:10:73:8c:2d:67:3c:2c: a5:7b:41:33:ab:28:78:a5:95:44:20:ad:43:9c:99:ae:5e:50: 94:21:e8:2c:56:8f:62:17:b0:d1:88:af:0f:8d:39:62:95:78: 83:43:0a:f2:ea:ae:2b:11:dc:31:60:37:c8:ef:41:60:6f:ad: 4d:10:40:b2:c2:b8:2f:a5:15:4e:cd:2b:a3:bb:93:41:f0:3f: 4d:0e:2d:3a:95:35:3d:09:f4:b8:17:6f:07:00:e5:90:56:37: c1:70:78:cf:ff:e0:d0:97:ea:45:f8:51:be:0b:aa:a8:31:4b: 9a:2d:ad:29:df:27:70:d7:da:48:2e:c1:89:06:99:73:00:6e: 02:2d:70:e0:eb:5f:b6:15:72:a7:e2:75:56:6a:13:ef:ec:e6: f4:24:41:d0:9c:90:d4:da:3e:96:d3:85:13:b8:a6:4a:44:98: 7d:8c:c5:0b:de:c3:e3:2d:17:3a:35:e6:81:a8:bc:78:89:40: 41:c1:01:c7 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZq8/jMu0IT4i2ENZ8NNp2iCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlODE1YzkyZmMxYzY0MjVhYWNiY2M0NTE1OTZjNzNlZDY0 NTcwMDcwHhcNMjUxMTI1MjE0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGViNTM4ZjQ3YWE3ZTFkMDY3ZjEwNGViOGM3ODQ3M2M0M2NmYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kUyz5pgD9XgJc5riVj0ClqqM7Tf zu2H6qBtKx11+tMpmn+iV40ip4cYrXwbNZlk1BLdQg1CZMeGpGrapm5uU7ulWKdU M8mrAKI+WTGuArU0iwMh/0xwHWOLMsSOEMe9HUzVIRWK1af/Zedg7pQcSbd5Xivh L6NojgyWF9AYjB2zIYmL2GUacX3JhQNEfKgRVWvst5AUV309PMpJkMCbv22zqd8o rjOpH1HhW7df94SyF91mQaB5hpqRWMPGAJeKL5VgDW4hd1pi4FDRQcEsNZTb9IzU wX0EYD1Bt8Bg81rVnvc+0B1/fYdZ6pr1NKHb+BPJARMpyfp2YsLr92LGEQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPjrU49Hqn4dBn8QTrjHhHPEPPwAMB8GA1UdIwQY MBaAFE6BXJL8HGQlqsvMRRWWxz7WRXAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG9GY2t2d2NaQ1dxeTh4RkZaYkhQdFpGY0FjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iY2Y3YjItNDRhNS00ZGExLTk0Nzct MzVjZjg2ZTRlNTZkLzEvMS1PdFRqMGVxZmgwR2Z4Qk91TWVFYzhROF9BQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGMvYmNmN2IyLTQ0YTUtNGRhMS05NDc3LTM1Y2Y4NmU0ZTU2 ZC8xL1RvRmNrdndjWkNXcXk4eEZGWmJIUHRaRmNBYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwV LDANBgkqhkiG9w0BAQsFAAOCAQEAQnlLaffgFMKHQPGxAG+Ie8tb+q+7JMRTzaVg aTPAvcO10k2ctSJY+RfrM3geeQGBC/sEoqBGiCr/4N+mlINQ3wYQc4wtZzwspXtB M6soeKWVRCCtQ5yZrl5QlCHoLFaPYhew0YivD405YpV4g0MK8uquKxHcMWA3yO9B YG+tTRBAssK4L6UVTs0ro7uTQfA/TQ4tOpU1PQn0uBdvBwDlkFY3wXB4z//g0Jfq RfhRvguqqDFLmi2tKd8ncNfaSC7BiQaZcwBuAi1w4OtfthVyp+J1VmoT7+zm9CRB 0JyQ1No+ltOFE7imSkSYfYzFC97D4y0XOjXmgai8eIlAQcEBxw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:07 2025 by rpki-client