This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/5ii7PIOAQ8BZ5etxTtM4nbdO2AQ.roa File: 5ii7PIOAQ8BZ5etxTtM4nbdO2AQ.roa (raw, json) Hash identifier: 5NBOAUdxgxT7tr26H9VtH2yvuaRT2DU8y8+zL7Z3RBQ= Subject key identifier: E6:28:BB:3C:83:80:43:C0:59:E5:EB:71:4E:D3:38:9D:B7:4E:D8:04 Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b Certificate serial: 019AE0B23C1B1776B59068381D4E2C0C30AE Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/5ii7PIOAQ8BZ5etxTtM4nbdO2AQ.roa Signing time: Tue 02 Dec 2025 20:12:48 +0000 ROA not before: Tue 02 Dec 2025 20:12:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24013 IP address blocks: 2a11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b2:3c:1b:17:76:b5:90:68:38:1d:4e:2c:0c:30:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b Validity Not Before: Dec 2 20:12:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e628bb3c838043c059e5eb714ed3389db74ed804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:53:9d:ef:09:83:f7:ae:8e:5f:20:ab:72: 26:1c:d5:f2:f8:2f:0d:bd:bf:5b:44:39:c9:68:8e: be:56:23:fe:65:a2:47:8e:bb:9f:ba:59:2d:79:0f: 42:2a:d0:c2:fd:9c:38:80:ba:4e:b7:2a:bc:6c:6b: c7:ee:09:5b:5b:a3:70:a4:fd:40:e9:7e:24:ea:6b: f7:c1:af:4a:a1:3c:23:ee:a8:fa:79:27:4d:64:ff: 80:6c:70:3e:e5:99:7a:8a:d6:9a:d7:5d:14:de:d2: 4a:c0:3d:b9:41:b1:c1:1d:6a:43:e0:63:2f:ba:5e: 2f:55:66:d9:90:c6:a7:a0:77:5f:ce:b6:05:69:6e: f2:9d:08:b3:6c:2e:49:20:20:8b:86:47:d7:c9:09: ef:8a:dd:5c:94:34:dc:71:fa:b8:2d:df:35:ae:cb: 18:1c:9e:0b:51:08:87:e5:aa:b1:82:3c:34:f9:47: 3f:16:f7:2d:07:ad:bc:23:02:b0:85:32:9c:2d:09: cc:ee:c0:82:30:8d:95:97:37:ed:e6:c8:aa:df:fa: dd:9a:bf:e0:bd:9f:a8:ae:c8:41:7e:f5:7a:cb:5b: 97:a5:f5:ca:06:18:db:b9:67:fb:70:38:6f:d4:af: e2:bf:e9:f2:98:70:58:51:c4:1a:6e:3e:10:35:81: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:28:BB:3C:83:80:43:C0:59:E5:EB:71:4E:D3:38:9D:B7:4E:D8:04 X509v3 Authority Key Identifier: keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/5ii7PIOAQ8BZ5etxTtM4nbdO2AQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11::/48 Signature Algorithm: sha256WithRSAEncryption 2c:62:93:dc:2d:d0:84:57:38:e1:ab:a3:19:9e:1a:02:67:54: be:9b:be:8a:ed:a2:90:58:2d:30:73:04:3d:87:4b:12:e0:04: 76:30:aa:2a:3e:88:a2:11:51:2c:98:5d:b0:83:76:ed:9a:a1: d8:2c:c7:ed:fa:1c:bf:b6:05:aa:9e:96:ff:68:93:c7:19:d0: 90:d2:45:9d:25:f3:8d:56:62:e1:b0:db:ce:ea:6d:63:f2:22: e2:52:17:c5:ef:80:0c:f0:17:8b:62:02:8d:9d:dc:33:aa:fc: e8:9a:96:6c:0c:6f:11:fe:51:91:81:fd:31:80:49:2a:15:14: 29:8a:9b:2d:21:e3:9d:df:e8:d7:8c:d5:32:7e:a3:05:2f:b1: 9d:46:65:b4:cc:11:4c:53:b8:47:6a:f3:b3:21:dd:25:0e:0f: 96:29:e8:e1:3a:b6:33:85:54:d5:14:25:4d:12:ef:e0:cf:e1: 44:63:e8:c9:e1:f8:48:dd:c7:69:29:3f:11:ba:3e:63:e5:dd: d5:60:50:39:5f:24:88:27:65:9f:84:2e:6e:7b:d7:59:9c:d1: 7f:fe:96:54:ac:7f:03:30:ad:4a:81:b3:c4:29:31:68:5a:53: 16:15:14:8c:70:90:5d:54:45:80:69:c2:6a:c9:a5:25:2e:3d: 83:0f:ed:ae -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrgsjwbF3a1kGg4HU4sDDCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjUxMjI5NzczYWY5MTU3ZTMxNzE2MGY5ZGM4MDBmMzgx ZTBiMmIwHhcNMjUxMjAyMjAxMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjI4YmIzYzgzODA0M2MwNTllNWViNzE0ZWQzMzg5ZGI3NGVkODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrZTne8Jg/eujl8gq3ImHNXy+C8N vb9bRDnJaI6+ViP+ZaJHjrufulkteQ9CKtDC/Zw4gLpOtyq8bGvH7glbW6NwpP1A 6X4k6mv3wa9KoTwj7qj6eSdNZP+AbHA+5Zl6itaa110U3tJKwD25QbHBHWpD4GMv ul4vVWbZkManoHdfzrYFaW7ynQizbC5JICCLhkfXyQnvit1clDTccfq4Ld81rssY HJ4LUQiH5aqxgjw0+Uc/FvctB628IwKwhTKcLQnM7sCCMI2Vlzft5siq3/rdmr/g vZ+orshBfvV6y1uXpfXKBhjbuWf7cDhv1K/iv+nymHBYUcQabj4QNYFWjwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOYouzyDgEPAWeXrcU7TOJ23TtgEMB8GA1UdIwQY MBaAFHr1Eil3OvkVfjFxYPncgA84HgsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjIt ZWUxZWE2MzZlZDRmLzEvNWlpN1BJT0FROEJaNWV0eFR0TTRuYmRPMkFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjItZWUxZWE2MzZlZDRm LzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEAAAAA MA0GCSqGSIb3DQEBCwUAA4IBAQAsYpPcLdCEVzjhq6MZnhoCZ1S+m76K7aKQWC0w cwQ9h0sS4AR2MKoqPoiiEVEsmF2wg3btmqHYLMft+hy/tgWqnpb/aJPHGdCQ0kWd JfONVmLhsNvO6m1j8iLiUhfF74AM8BeLYgKNndwzqvzompZsDG8R/lGRgf0xgEkq FRQpipstIeOd3+jXjNUyfqMFL7GdRmW0zBFMU7hHavOzId0lDg+WKejhOrYzhVTV FCVNEu/gz+FEY+jJ4fhI3cdpKT8Ruj5j5d3VYFA5XySIJ2WfhC5ue9dZnNF//pZU rH8DMK1KgbPEKTFoWlMWFRSMcJBdVEWAacJqyaUlLj2DD+2u -----END CERTIFICATE-----Generated at Sat Dec 6 21:12:35 2025 by rpki-client