This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/V6q8pzElkYc0SPjbN9lvMPjY828.roa File: V6q8pzElkYc0SPjbN9lvMPjY828.roa (raw, json) Hash identifier: 2tY8/CCJUxySoupm3+GNPFf1uvxIVS29BvxSQqSbKV4= Subject key identifier: 57:AA:BC:A7:31:25:91:87:34:48:F8:DB:37:D9:6F:30:F8:D8:F3:6F Certificate issuer: /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5 Certificate serial: 019AE496A3BA2AD8DD3A6B657E4993EA9C61 Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/V6q8pzElkYc0SPjbN9lvMPjY828.roa Signing time: Wed 03 Dec 2025 14:21:08 +0000 ROA not before: Wed 03 Dec 2025 14:21:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210896 IP address blocks: 2a0c:d540:1111::/48 maxlen: 48 2a0c:d540:1112::/48 maxlen: 48 2a0c:d540:1113::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:96:a3:ba:2a:d8:dd:3a:6b:65:7e:49:93:ea:9c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5 Validity Not Before: Dec 3 14:21:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=57aabca7312591873448f8db37d96f30f8d8f36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:13:7a:02:59:62:b2:bb:37:dc:35:9d:73: bb:f4:28:fe:8d:12:1c:06:e1:0c:fb:98:eb:3a:11: 4b:ac:61:6d:20:d6:95:7f:cf:ff:3b:8f:2d:46:75: 7f:de:49:02:0b:96:f8:62:4c:b8:7b:56:dc:b6:30: c7:a1:ad:c7:fc:55:d2:f6:09:15:15:01:e1:22:b5: 4f:ee:10:e3:3e:76:67:86:4b:a9:66:ab:83:a1:16: 4e:ff:11:9f:6e:1e:b8:41:a8:ed:23:20:1c:77:2d: f0:56:f4:47:67:3c:e8:ac:3e:59:01:5c:d1:a6:c1: 31:78:82:8e:5e:e4:29:67:f1:3b:a5:17:67:94:61: d4:d1:0d:e6:5e:e1:c5:6a:a5:04:b9:f3:cb:3d:be: b9:0f:df:50:e4:99:7d:46:f3:55:88:13:b7:5f:fb: 76:60:5d:a9:31:95:2a:b8:5b:67:f2:98:14:94:df: d7:ae:b8:c9:14:d2:9e:38:6b:37:d8:ad:8b:12:e9: 96:be:2e:93:d3:e8:60:90:5c:55:11:17:55:e9:2a: cd:74:73:41:c8:8d:29:bc:99:ba:11:4d:c8:48:a5: 81:fc:13:31:ab:f6:07:01:7c:ff:69:1a:d1:27:68: 01:9d:05:6d:ec:42:d9:eb:9b:13:a6:23:71:e5:43: 28:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AA:BC:A7:31:25:91:87:34:48:F8:DB:37:D9:6F:30:F8:D8:F3:6F X509v3 Authority Key Identifier: keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/V6q8pzElkYc0SPjbN9lvMPjY828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:d540:1111::-2a0c:d540:1113:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 75:89:4c:5a:aa:2f:0f:24:87:5a:71:17:8f:b5:fa:1f:6a:54: 97:8d:c6:26:9b:32:d6:36:62:1d:87:23:c8:28:84:3f:49:2e: b0:6d:86:ae:85:cf:76:b9:e1:19:d1:3d:f5:01:5f:b6:53:67: c7:10:4f:aa:24:be:e2:8b:95:f2:2d:1a:75:de:75:ba:2d:ab: 77:9b:47:4d:72:31:a9:25:e2:75:fc:1e:56:57:ce:ef:69:3e: 61:7d:4c:fa:f6:68:48:0f:fd:a2:02:f0:29:dd:2f:fe:ba:14: c7:fe:15:21:e9:d5:9b:c0:f5:83:0c:99:7c:d1:d2:a1:94:65: dc:d3:40:ed:f2:a4:78:c1:c5:b3:d3:44:fd:53:2f:bf:f7:6b: 2f:b5:c1:cc:ae:a7:42:7f:55:46:60:a8:0d:0a:29:a4:1b:4f: 43:f2:c5:d5:63:c2:14:03:e4:56:1e:45:ca:57:d0:59:0e:70: f9:2f:25:97:19:25:a8:82:18:2b:68:c8:d0:40:70:28:ed:7d: e0:d8:34:45:f1:78:16:42:df:70:a7:ee:4e:59:12:77:ac:7f: aa:3c:4c:1a:0d:a9:7c:6e:44:61:3d:58:86:bf:f7:1a:e7:97: e3:58:0f:70:57:73:13:25:7a:1b:93:13:9f:31:08:64:31:79: c9:80:74:74 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZrklqO6KtjdOmtlfkmT6pxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMmMxNWNmNzJmY2RiODU5NmI3YzY0ODliMTVhNmI3MjBj MTRlYjUwHhcNMjUxMjAzMTQyMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2FhYmNhNzMxMjU5MTg3MzQ0OGY4ZGIzN2Q5NmYzMGY4ZDhmMzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM0TegJZYrK7N9w1nXO79Cj+jRIc BuEM+5jrOhFLrGFtINaVf8//O48tRnV/3kkCC5b4Yky4e1bctjDHoa3H/FXS9gkV FQHhIrVP7hDjPnZnhkupZquDoRZO/xGfbh64QajtIyAcdy3wVvRHZzzorD5ZAVzR psExeIKOXuQpZ/E7pRdnlGHU0Q3mXuHFaqUEufPLPb65D99Q5Jl9RvNViBO3X/t2 YF2pMZUquFtn8pgUlN/XrrjJFNKeOGs32K2LEumWvi6T0+hgkFxVERdV6SrNdHNB yI0pvJm6EU3ISKWB/BMxq/YHAXz/aRrRJ2gBnQVt7ELZ65sTpiNx5UMoOwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFeqvKcxJZGHNEj42zfZbzD42PNvMB8GA1UdIwQY MBaAFN8sFc9y/NuFlrfGSJsVprcgwU61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUt ZjE4NTNkMTBlNjEwLzEvVjZxOHB6RWxrWWMwU1BqYk45bHZNUGpZODI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUtZjE4NTNkMTBlNjEw LzEvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDNVA EREDBwIqDNVAERAwDQYJKoZIhvcNAQELBQADggEBAHWJTFqqLw8kh1pxF4+1+h9q VJeNxiabMtY2Yh2HI8gohD9JLrBthq6Fz3a54RnRPfUBX7ZTZ8cQT6okvuKLlfIt GnXedbotq3ebR01yMakl4nX8HlZXzu9pPmF9TPr2aEgP/aIC8CndL/66FMf+FSHp 1ZvA9YMMmXzR0qGUZdzTQO3ypHjBxbPTRP1TL7/3ay+1wcyup0J/VUZgqA0KKaQb T0PyxdVjwhQD5FYeRcpX0FkOcPkvJZcZJaiCGCtoyNBAcCjtfeDYNEXxeBZC33Cn 7k5ZEnesf6o8TBoNqXxuRGE9WIa/9xrnl+NYD3BXcxMlehuTE58xCGQxecmAdHQ= -----END CERTIFICATE-----Generated at Sun Dec 7 08:34:11 2025 by rpki-client