This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/pOBBbVqVSo953qpLem-AOYSspaQ.roa File: pOBBbVqVSo953qpLem-AOYSspaQ.roa (raw, json) Hash identifier: z3++/MFJKSsuuWn4+EuBAGcT2w5DAJsUTcfm7tfE2Zg= Subject key identifier: A4:E0:41:6D:5A:95:4A:8F:79:DE:AA:4B:7A:6F:80:39:84:AC:A5:A4 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019AA1616D2C8113DE12FC129935D305110A Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/pOBBbVqVSo953qpLem-AOYSspaQ.roa Signing time: Thu 20 Nov 2025 13:08:27 +0000 ROA not before: Thu 20 Nov 2025 13:08:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211507 IP address blocks: 2a14:c380:50::/44 maxlen: 44 2a14:c380:60::/44 maxlen: 44 2a14:c380:70::/44 maxlen: 44 2a14:c380:80::/44 maxlen: 44 2a14:c380:90::/44 maxlen: 44 2a14:c380:130::/44 maxlen: 44 2a14:c380:c70::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:61:6d:2c:81:13:de:12:fc:12:99:35:d3:05:11:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Nov 20 13:08:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a4e0416d5a954a8f79deaa4b7a6f803984aca5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3d:f0:70:61:19:5d:8c:fe:0c:0c:d1:ba:cb: 8f:18:05:08:20:f1:ad:85:ee:3e:4e:f9:a6:bf:7f: 1d:9f:c6:82:6e:61:0b:e2:7c:84:bb:ee:13:45:d0: 5c:da:0c:8d:a8:92:89:18:dd:e1:14:93:ad:da:ee: dc:a6:19:b7:d1:99:77:bd:cf:bf:a5:37:c6:dd:f2: 84:a2:5c:f9:bd:1b:ff:68:0b:31:36:66:58:b7:6e: ab:86:c3:3e:f8:75:6a:b3:00:72:ff:cd:0e:5d:4e: 62:e6:b4:ee:b8:f7:76:6a:9b:dc:8b:87:58:88:ca: df:f8:04:ea:73:fc:8b:c2:78:45:41:c2:44:af:03: 8f:81:28:65:2f:f2:14:e5:d9:71:0e:f6:40:20:1b: e1:0e:3a:81:63:16:fa:39:40:c1:95:f8:56:46:9e: c8:fd:a7:04:46:9b:f0:a5:76:7b:16:8c:8b:7c:b0: d2:40:a6:d8:97:15:a4:d9:f5:bb:5c:4e:7e:39:3b: ff:d8:21:b3:b5:cb:15:f6:51:db:f4:4b:c8:07:50: 4a:90:75:c8:14:ea:3a:ce:fe:9b:fe:dd:50:fb:58: fd:a5:28:34:77:4c:d0:fe:3a:7c:6e:27:b4:b0:b1: e6:91:24:d4:8b:80:a7:13:44:b3:0a:9b:a1:be:15: 57:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E0:41:6D:5A:95:4A:8F:79:DE:AA:4B:7A:6F:80:39:84:AC:A5:A4 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/pOBBbVqVSo953qpLem-AOYSspaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:50::-2a14:c380:9f:ffff:ffff:ffff:ffff:ffff 2a14:c380:130::/44 2a14:c380:c70::/44 Signature Algorithm: sha256WithRSAEncryption 24:2b:08:9d:f7:5b:a0:90:aa:ae:51:af:5b:ed:21:88:9f:77: d5:96:72:a9:b5:ed:b3:af:72:53:f7:d2:f1:16:72:f1:1a:08: 13:1f:92:e3:e7:fc:27:43:60:eb:45:66:59:62:43:40:6f:db: 5f:6f:49:6c:4f:28:7e:01:e1:c1:8a:20:1c:2d:75:2d:38:b3: d6:ce:b6:26:35:8c:5b:28:22:4f:90:3a:9f:e4:1c:17:af:56: 94:39:ba:16:ec:97:e5:ff:76:4d:e1:83:dd:74:87:71:e7:2c: 5e:46:4a:4a:e9:94:97:3d:9a:0e:33:10:1e:3e:35:1b:14:89: 4a:9f:96:7f:dd:eb:72:1e:7c:49:2e:01:1e:84:06:22:37:a3: 00:87:24:b2:32:65:a0:99:dd:91:c9:47:09:9d:8e:30:f0:d5: e1:59:12:6f:dc:1f:2e:da:af:a4:7b:b3:5f:ff:ed:7b:e6:13: bc:b6:df:10:17:83:20:b4:af:bd:84:14:bf:bf:0b:4f:72:30: e3:e9:dd:90:48:e0:63:25:e5:09:20:1e:e7:03:24:a4:87:94: 6d:58:9e:c5:82:be:44:ee:21:18:fb:6b:31:80:0c:70:b7:30: 92:24:8d:b2:24:c9:45:56:5c:10:64:c2:8d:f7:d2:ef:f9:1a: 85:83:b3:66 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZqhYW0sgRPeEvwSmTXTBREKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjUxMTIwMTMwODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGUwNDE2ZDVhOTU0YThmNzlkZWFhNGI3YTZmODAzOTg0YWNhNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T3wcGEZXYz+DAzRusuPGAUIIPGt he4+Tvmmv38dn8aCbmEL4nyEu+4TRdBc2gyNqJKJGN3hFJOt2u7cphm30Zl3vc+/ pTfG3fKEolz5vRv/aAsxNmZYt26rhsM++HVqswBy/80OXU5i5rTuuPd2apvci4dY iMrf+ATqc/yLwnhFQcJErwOPgShlL/IU5dlxDvZAIBvhDjqBYxb6OUDBlfhWRp7I /acERpvwpXZ7FoyLfLDSQKbYlxWk2fW7XE5+OTv/2CGztcsV9lHb9EvIB1BKkHXI FOo6zv6b/t1Q+1j9pSg0d0zQ/jp8bie0sLHmkSTUi4CnE0SzCpuhvhVXGwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKTgQW1alUqPed6qS3pvgDmErKWkMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvcE9CQmJWcVZTbzk1M3FwTGVtLUFPWVNzcGFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBIDBwQqFMOA AFADBwUqFMOAAIADBwQqFMOAATADBwQqFMOADHAwDQYJKoZIhvcNAQELBQADggEB ACQrCJ33W6CQqq5Rr1vtIYifd9WWcqm17bOvclP30vEWcvEaCBMfkuPn/CdDYOtF ZlliQ0Bv219vSWxPKH4B4cGKIBwtdS04s9bOtiY1jFsoIk+QOp/kHBevVpQ5uhbs l+X/dk3hg910h3HnLF5GSkrplJc9mg4zEB4+NRsUiUqfln/d63IefEkuAR6EBiI3 owCHJLIyZaCZ3ZHJRwmdjjDw1eFZEm/cHy7ar6R7s1//7XvmE7y23xAXgyC0r72E FL+/C09yMOPp3ZBI4GMl5QkgHucDJKSHlG1YnsWCvkTuIRj7azGADHC3MJIkjbIk yUVWXBBkwo330u/5GoWDs2Y= -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:38 2025 by rpki-client