This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/aCvDOKi2TN6tpJeC1p4YXWfPNx8.roa File: aCvDOKi2TN6tpJeC1p4YXWfPNx8.roa (raw, json) Hash identifier: KwSLjeIDAPuPR9DVSgjDMLFpX5CphjNP9XJI7OT5VaE= Subject key identifier: 68:2B:C3:38:A8:B6:4C:DE:AD:A4:97:82:D6:9E:18:5D:67:CF:37:1F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019B22A705CE230F6160613A6CF845F2A532 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/aCvDOKi2TN6tpJeC1p4YXWfPNx8.roa Signing time: Mon 15 Dec 2025 15:35:29 +0000 ROA not before: Mon 15 Dec 2025 15:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26383 IP address blocks: 5.10.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:a7:05:ce:23:0f:61:60:61:3a:6c:f8:45:f2:a5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Dec 15 15:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682bc338a8b64cdeada49782d69e185d67cf371f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:64:92:54:c4:4b:db:9b:6b:45:84:14:eb: 7a:88:cf:e4:25:52:c7:fb:4d:cc:34:f6:e0:fe:69: 2d:30:df:3e:65:f7:1f:9b:1d:38:87:3d:37:50:bd: 27:94:08:5b:ae:17:34:4e:c7:1e:99:74:75:cf:08: 6d:e6:65:63:09:2b:dd:8e:90:8d:e1:ee:93:89:76: c0:f9:72:b6:67:65:49:d8:fd:0f:e2:2e:92:86:f2: 0b:3e:ac:27:dc:42:f7:20:63:33:3f:02:cc:50:14: fd:32:e6:f7:2c:67:8b:be:b1:6e:54:da:fe:d0:d4: 00:d5:ce:66:ad:d0:0a:09:5b:3c:3a:05:4b:08:a1: ce:5d:e9:78:c0:8c:93:93:07:f2:fd:3e:bf:d9:96: 63:13:f3:ab:64:ea:cd:d7:6b:0b:80:ae:40:d1:ff: dd:e5:46:92:b6:82:12:74:5c:09:b3:f2:45:f5:72: 04:03:4b:94:dd:0a:4f:fb:4e:59:9a:59:e5:56:00: 07:35:ec:30:69:ae:fc:18:a1:91:91:ce:85:ef:80: e8:b2:eb:a7:e9:3e:13:28:80:0d:62:ed:dc:e1:67: 9e:ea:f8:b9:19:0b:ac:1e:f1:8a:ee:4c:c8:ae:71: 84:da:5c:17:f0:4f:4f:7d:72:26:b3:d3:7a:18:1e: c0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2B:C3:38:A8:B6:4C:DE:AD:A4:97:82:D6:9E:18:5D:67:CF:37:1F X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/aCvDOKi2TN6tpJeC1p4YXWfPNx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.213.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:c3:59:dd:1d:9a:e2:4d:4b:0f:f2:74:99:e8:54:f1:37:22: 22:e1:05:00:bf:b4:cb:54:5a:f7:7e:42:29:81:bd:96:c5:9f: 5d:29:28:b7:ec:36:02:64:04:98:ab:94:2c:fd:d1:54:73:07: f2:a7:69:4b:e5:a3:45:dc:28:30:0f:3c:2a:22:29:c2:0a:e5: 33:18:f0:ee:e0:ea:b9:43:74:08:e3:7e:85:c2:52:09:ce:0e: 34:0e:7a:a0:29:66:cf:c9:33:21:62:6d:c5:26:7f:23:10:ba: ca:0b:04:37:02:9c:7b:0f:f8:f8:8a:0e:70:45:20:81:47:cf: 8b:d2:25:f2:8a:35:14:42:63:d5:ff:84:5c:f3:33:05:56:3e: 57:e4:9e:c5:78:60:85:ba:2c:b5:97:af:ad:0b:f6:33:1c:7c: 16:bb:36:78:b5:8b:8f:30:db:d2:ac:e7:21:66:eb:ee:78:c0: 69:b7:4b:ca:5a:a5:15:2b:8b:f6:c6:b4:b2:94:7a:1a:03:42: 01:fb:6f:51:da:41:47:1a:c5:f3:cb:81:d1:3c:da:76:a6:85: 5e:0f:27:30:7e:b9:c9:7d:d9:e3:62:9b:28:d5:b4:59:7c:17: 4d:0e:c7:76:36:39:0c:9b:4a:28:97:02:e0:76:ea:27:ae:7b: 7a:2d:23:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsipwXOIw9hYGE6bPhF8qUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUxMjE1MTUzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODJiYzMzOGE4YjY0Y2RlYWRhNDk3ODJkNjllMTg1ZDY3Y2YzNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycJkklTES9uba0WEFOt6iM/kJVLH +03MNPbg/mktMN8+Zfcfmx04hz03UL0nlAhbrhc0TscemXR1zwht5mVjCSvdjpCN 4e6TiXbA+XK2Z2VJ2P0P4i6ShvILPqwn3EL3IGMzPwLMUBT9Mub3LGeLvrFuVNr+ 0NQA1c5mrdAKCVs8OgVLCKHOXel4wIyTkwfy/T6/2ZZjE/OrZOrN12sLgK5A0f/d 5UaStoISdFwJs/JF9XIEA0uU3QpP+05ZmlnlVgAHNewwaa78GKGRkc6F74Dosuun 6T4TKIANYu3c4Wee6vi5GQusHvGK7kzIrnGE2lwX8E9PfXIms9N6GB7ApQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgrwziotkzeraSXgtaeGF1nzzcfMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvYUN2RE9LaTJUTjZ0cEplQzFwNFlYV2ZQTng4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQrVMA0G CSqGSIb3DQEBCwUAA4IBAQBqw1ndHZriTUsP8nSZ6FTxNyIi4QUAv7TLVFr3fkIp gb2WxZ9dKSi37DYCZASYq5Qs/dFUcwfyp2lL5aNF3CgwDzwqIinCCuUzGPDu4Oq5 Q3QI436FwlIJzg40DnqgKWbPyTMhYm3FJn8jELrKCwQ3Apx7D/j4ig5wRSCBR8+L 0iXyijUUQmPV/4Rc8zMFVj5X5J7FeGCFuiy1l6+tC/YzHHwWuzZ4tYuPMNvSrOch ZuvueMBpt0vKWqUVK4v2xrSylHoaA0IB+29R2kFHGsXzy4HRPNp2poVeDycwfrnJ fdnjYpso1bRZfBdNDsd2NjkMm0oolwLgduonrnt6LSP/ -----END CERTIFICATE-----Generated at Tue Dec 16 05:03:44 2025 by rpki-client