This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/X4Bg17E-_zOoMsBVsaZHzSWTfnk.roa File: X4Bg17E-_zOoMsBVsaZHzSWTfnk.roa (raw, json) Hash identifier: AeQay084Jh565kJCkX0/ofutgBRWTrNcsxqVgKztthY= Subject key identifier: 5F:80:60:D7:B1:3E:FF:33:A8:32:C0:55:B1:A6:47:CD:25:93:7E:79 Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c Certificate serial: 019AE9174A02357C3CD65428DA08E16619BB Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/X4Bg17E-_zOoMsBVsaZHzSWTfnk.roa Signing time: Thu 04 Dec 2025 11:20:08 +0000 ROA not before: Thu 04 Dec 2025 11:20:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47630 IP address blocks: 2a0b:7900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:17:4a:02:35:7c:3c:d6:54:28:da:08:e1:66:19:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c Validity Not Before: Dec 4 11:20:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5f8060d7b13eff33a832c055b1a647cd25937e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:c1:a9:43:9a:46:97:13:03:03:73:75:dd: 00:a7:c2:2f:37:cc:11:6d:fc:2e:26:87:1c:90:ac: 47:e1:99:43:2f:50:d8:c3:67:2e:95:f0:d5:df:42: ba:22:f6:63:e6:3c:a4:60:9c:3f:12:6a:2e:c0:d9: 2b:cc:9b:b7:26:b7:f5:5d:76:1c:fb:36:b3:91:de: 01:fb:0f:8e:10:29:c4:cc:a3:a7:a2:0d:80:f6:aa: b2:89:e9:ff:4a:83:32:94:81:79:1f:c1:ab:96:dd: 09:08:a3:b1:49:bc:ca:4e:b2:bb:cf:5d:4c:9d:3e: 61:68:39:2e:89:d8:58:6f:eb:49:ee:d7:7d:04:c2: 4c:fc:1a:85:80:1b:e1:e2:da:db:96:5b:ca:3a:9f: 01:38:bc:b1:3b:2b:bb:2e:e0:61:d7:ad:e2:0d:61: 38:95:c5:66:55:73:42:46:37:02:11:3b:81:a6:25: d4:e2:05:73:97:94:74:35:12:6e:4d:d3:31:2e:a2: 4a:f1:3c:51:ba:75:96:9b:76:e7:5b:66:22:bf:81: ed:94:cc:1f:b8:75:1d:b9:93:e5:ef:a1:00:31:9b: 3f:8f:60:cf:8f:3e:ba:d0:51:20:bf:76:98:bb:0f: 8b:69:00:8f:c6:44:96:af:bd:3d:49:ac:a1:84:b6: e0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:80:60:D7:B1:3E:FF:33:A8:32:C0:55:B1:A6:47:CD:25:93:7E:79 X509v3 Authority Key Identifier: keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/X4Bg17E-_zOoMsBVsaZHzSWTfnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:7900::/48 Signature Algorithm: sha256WithRSAEncryption 1c:72:12:f9:fc:9f:b9:02:86:d5:cd:46:5c:ca:cd:6b:be:59: 3a:44:41:77:dd:e9:ea:75:b2:6a:2c:aa:31:eb:ca:79:89:17: 55:a4:37:84:3a:0c:9e:88:70:c0:93:ee:f2:9e:8b:22:9a:4c: d3:a2:c6:ac:e2:bf:9a:ae:f0:60:48:86:f2:7c:ca:a5:35:72: cd:88:24:5d:09:fb:8a:0a:47:81:9f:4c:56:9e:9d:c6:e8:2c: ff:3e:6b:a3:1f:d6:d5:92:c8:18:09:ab:b5:c5:d0:da:76:08: 85:fa:49:b0:c1:70:18:56:74:d1:a0:b5:f3:93:ee:19:d1:5c: 82:52:f4:9f:06:e8:ba:13:ad:4b:c6:4a:9c:a8:bc:5d:a2:7e: 5a:a4:c4:cd:26:ed:bf:ac:92:2c:dd:d2:ee:c3:9a:eb:7b:5f: fa:e2:ff:1b:4b:fc:0d:9c:47:74:9b:e9:c6:44:a6:09:3b:56: 6b:09:f4:b0:c6:f2:11:8f:d5:6a:cd:d7:7e:89:2c:bb:bb:f4: 35:d0:8d:b9:bf:0b:f5:ef:d3:73:f0:7a:41:0a:e3:c9:57:26: 16:c4:10:c7:9b:55:3e:19:d5:89:5d:92:56:a7:7f:c4:87:f5: 93:0d:97:2a:e7:f1:b6:53:05:e8:34:e8:6c:a7:43:7b:ac:a5: 11:a9:21:ba -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrpF0oCNXw81lQo2gjhZhm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZmFjNzVmMzkwZTg4MDUyODMzN2RkMGJkY2RjNzc5MzRi OGRmM2MwHhcNMjUxMjA0MTEyMDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjgwNjBkN2IxM2VmZjMzYTgzMmMwNTViMWE2NDdjZDI1OTM3ZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmfBqUOaRpcTAwNzdd0Ap8IvN8wR bfwuJocckKxH4ZlDL1DYw2culfDV30K6IvZj5jykYJw/EmouwNkrzJu3Jrf1XXYc +zazkd4B+w+OECnEzKOnog2A9qqyien/SoMylIF5H8Grlt0JCKOxSbzKTrK7z11M nT5haDkuidhYb+tJ7td9BMJM/BqFgBvh4trbllvKOp8BOLyxOyu7LuBh163iDWE4 lcVmVXNCRjcCETuBpiXU4gVzl5R0NRJuTdMxLqJK8TxRunWWm3bnW2Yiv4HtlMwf uHUduZPl76EAMZs/j2DPjz660FEgv3aYuw+LaQCPxkSWr709SayhhLbg8QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF+AYNexPv8zqDLAVbGmR80lk355MB8GA1UdIwQY MBaAFKL6x185DogFKDN90L3Nx3k0uN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYt NzYyMjU5YWI5NTAwLzEvWDRCZzE3RS1fek9vTXNCVnNhWkh6U1dUZm5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYtNzYyMjU5YWI5NTAw LzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgt5AAAA MA0GCSqGSIb3DQEBCwUAA4IBAQAcchL5/J+5AobVzUZcys1rvlk6REF33enqdbJq LKox68p5iRdVpDeEOgyeiHDAk+7ynosimkzTosas4r+arvBgSIbyfMqlNXLNiCRd CfuKCkeBn0xWnp3G6Cz/PmujH9bVksgYCau1xdDadgiF+kmwwXAYVnTRoLXzk+4Z 0VyCUvSfBui6E61LxkqcqLxdon5apMTNJu2/rJIs3dLuw5rre1/64v8bS/wNnEd0 m+nGRKYJO1ZrCfSwxvIRj9Vqzdd+iSy7u/Q10I25vwv179Nz8HpBCuPJVyYWxBDH m1U+GdWJXZJWp3/Eh/WTDZcq5/G2UwXoNOhsp0N7rKURqSG6 -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:52 2025 by rpki-client