This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/vEKxlZm9BMv8luzA6xaMwOGyVhU.roa File: vEKxlZm9BMv8luzA6xaMwOGyVhU.roa (raw, json) Hash identifier: w0Q5uP6YrITzOZM5siWpGHCDa6znCci6B1ar9OYwLJk= Subject key identifier: BC:42:B1:95:99:BD:04:CB:FC:96:EC:C0:EB:16:8C:C0:E1:B2:56:15 Certificate issuer: /CN=bafed139df0fad6fde0d82869144104d204b92b5 Certificate serial: 019ACC3183ABCA8AD3C135059D001AE3B3E0 Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/vEKxlZm9BMv8luzA6xaMwOGyVhU.roa Signing time: Fri 28 Nov 2025 20:39:48 +0000 ROA not before: Fri 28 Nov 2025 20:39:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205927 IP address blocks: 2a0a:68c0:200::/48 maxlen: 48 2a0a:68c0:203::/48 maxlen: 48 2a0a:68c0:204::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:31:83:ab:ca:8a:d3:c1:35:05:9d:00:1a:e3:b3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5 Validity Not Before: Nov 28 20:39:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bc42b19599bd04cbfc96ecc0eb168cc0e1b25615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:ef:95:21:92:8b:52:79:f9:ab:2c:56:94: 25:13:62:a1:9b:59:0f:e1:fd:44:2d:4d:c8:3c:d0: 3c:18:66:d8:75:19:c0:36:eb:fa:6b:ce:86:be:66: 35:9c:8c:80:a3:a6:30:a0:24:5b:2c:5b:64:f1:3b: a5:87:f6:ef:03:b3:57:8b:11:61:d5:85:2d:9a:ab: 40:5a:76:60:7b:2e:02:b2:07:8f:9d:8e:2d:d0:ac: c4:e9:d3:22:98:d5:ac:1a:f8:1b:52:d4:45:0b:58: 96:65:49:56:3a:13:ba:3b:f5:26:e7:c2:6c:d7:be: ca:d9:8c:99:a1:0e:80:96:20:8e:93:94:f4:13:4d: 39:15:39:10:43:85:b0:7e:09:a8:5c:37:f4:c4:af: 98:66:f6:1a:d1:9b:78:b4:0a:7a:0a:01:d2:71:fb: 6d:cc:b4:72:5a:37:a9:2e:2c:b9:ae:11:04:2c:ae: 91:0b:01:57:11:d9:6f:3f:e1:9b:60:11:88:b3:5d: f9:cc:e9:fc:85:a4:29:3a:8f:0f:29:b9:8f:36:57: c6:0d:f1:3a:a7:5a:a5:e9:a9:27:f4:c7:28:e8:37: 45:7c:3b:d0:9e:d6:bb:30:86:41:4c:58:ce:17:7f: b7:7d:4d:31:97:a7:02:3d:12:10:26:ed:32:9a:ea: 1c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:42:B1:95:99:BD:04:CB:FC:96:EC:C0:EB:16:8C:C0:E1:B2:56:15 X509v3 Authority Key Identifier: keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/vEKxlZm9BMv8luzA6xaMwOGyVhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:68c0:200::/48 2a0a:68c0:203::-2a0a:68c0:204:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 23:72:a2:68:83:4d:b8:49:69:00:6e:ff:b3:1e:06:7e:e9:f1: 11:b2:47:1b:24:1a:69:26:6c:81:39:af:64:d2:dd:b1:a4:2b: 59:93:bb:7f:37:9f:9e:1c:29:09:ef:1a:0f:ac:11:39:58:e5: 55:58:2d:ce:cd:ec:e7:44:a6:b3:65:13:14:b3:47:63:a9:d1: d0:8f:80:f6:38:ac:03:61:27:e5:9f:8a:4b:09:92:65:f8:73: 37:f2:4b:09:e0:11:c3:3c:3a:e2:b7:19:9a:b4:ce:c7:bc:8a: 29:19:b9:b1:a5:a7:5d:d6:a4:67:37:ee:af:4e:b2:ae:9c:57: 3c:fd:d7:72:df:64:e2:90:38:e8:f4:44:c3:f7:36:29:4e:28: 3c:80:a9:80:cf:36:1a:f0:0f:00:97:13:de:e1:b9:a1:8c:04: 4c:c7:28:96:7d:00:54:f0:ac:9f:14:6b:0d:8b:bc:03:e1:69: 4e:9b:77:31:d9:e4:08:07:c5:05:a2:72:06:7e:0e:cf:04:05: 23:fe:04:42:de:98:6e:3d:f6:60:6f:2e:d7:db:b4:51:f1:ce: 74:a3:af:73:78:86:09:61:a5:0d:ae:40:64:95:04:22:92:e3: 0e:5a:a7:a4:d2:28:13:ff:d7:fa:a9:6d:9e:07:e5:39:ef:ef: 10:23:ce:7d -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZrMMYOryorTwTUFnQAa47PgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZmVkMTM5ZGYwZmFkNmZkZTBkODI4NjkxNDQxMDRkMjA0 YjkyYjUwHhcNMjUxMTI4MjAzOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzQyYjE5NTk5YmQwNGNiZmM5NmVjYzBlYjE2OGNjMGUxYjI1NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3jvlSGSi1J5+assVpQlE2Khm1kP 4f1ELU3IPNA8GGbYdRnANuv6a86GvmY1nIyAo6YwoCRbLFtk8Tulh/bvA7NXixFh 1YUtmqtAWnZgey4CsgePnY4t0KzE6dMimNWsGvgbUtRFC1iWZUlWOhO6O/Um58Js 177K2YyZoQ6AliCOk5T0E005FTkQQ4WwfgmoXDf0xK+YZvYa0Zt4tAp6CgHScftt zLRyWjepLiy5rhEELK6RCwFXEdlvP+GbYBGIs135zOn8haQpOo8PKbmPNlfGDfE6 p1ql6akn9Mco6DdFfDvQnta7MIZBTFjOF3+3fU0xl6cCPRIQJu0ymuocIQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFLxCsZWZvQTL/JbswOsWjMDhslYVMB8GA1UdIwQY MBaAFLr+0TnfD61v3g2ChpFEEE0gS5K1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jNTgxMWQtMWRhMC00YzMyLTljNGMt ZDgyYTkwZTM0YzJkLzEvdkVLeGxabTlCTXY4bHV6QTZ4YU13T0d5VmhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9jNTgxMWQtMWRhMC00YzMyLTljNGMtZDgyYTkwZTM0YzJk LzEvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAKgpowAIA MBIDBwAqCmjAAgMDBwAqCmjAAgQwDQYJKoZIhvcNAQELBQADggEBACNyomiDTbhJ aQBu/7MeBn7p8RGyRxskGmkmbIE5r2TS3bGkK1mTu383n54cKQnvGg+sETlY5VVY Lc7N7OdEprNlExSzR2Op0dCPgPY4rANhJ+WfiksJkmX4czfySwngEcM8OuK3GZq0 zse8iikZubGlp13WpGc37q9Osq6cVzz913LfZOKQOOj0RMP3NilOKDyAqYDPNhrw DwCXE97huaGMBEzHKJZ9AFTwrJ8Uaw2LvAPhaU6bdzHZ5AgHxQWicgZ+Ds8EBSP+ BELemG499mBvLtfbtFHxznSjr3N4hglhpQ2uQGSVBCKS4w5ap6TSKBP/1/qpbZ4H 5Tnv7xAjzn0= -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:13 2025 by rpki-client