This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/wKZCcL8oA2Qyb0RkPpAjFn_I_sI.roa File: wKZCcL8oA2Qyb0RkPpAjFn_I_sI.roa (raw, json) Hash identifier: SsTpXwRl20K5uQvI374ufZwdQnMitQ8ZA1e41ZLC3rY= Subject key identifier: C0:A6:42:70:BF:28:03:64:32:6F:44:64:3E:90:23:16:7F:C8:FE:C2 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019A6DF275866918EEB58DE4A99FA68DBA1F Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/wKZCcL8oA2Qyb0RkPpAjFn_I_sI.roa Signing time: Mon 10 Nov 2025 13:26:37 +0000 ROA not before: Mon 10 Nov 2025 13:26:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206499 IP address blocks: 2a0f:5700::/32 maxlen: 48 2a0f:5701::/32 maxlen: 48 2a0f:5701::/33 maxlen: 33 2a0f:5701::/34 maxlen: 34 2a0f:5701:fe10::/48 maxlen: 48 2a0f:5707:af00::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:f2:75:86:69:18:ee:b5:8d:e4:a9:9f:a6:8d:ba:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Nov 10 13:26:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0a64270bf280364326f44643e9023167fc8fec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:d3:f6:8e:ee:21:87:e4:4a:d0:57:65:1a: 86:f2:48:45:b8:5c:c0:0b:ac:4d:99:bb:cb:c7:11: 5a:53:80:75:b1:b2:c7:32:19:f7:d3:f4:f5:64:81: 89:c1:c5:f3:0c:42:28:2c:2d:05:e9:c8:92:3e:99: 33:14:74:8d:d8:24:4b:f0:18:22:1b:5a:e5:be:93: ad:be:38:02:64:51:11:b2:5b:46:b0:7f:6e:35:56: 91:35:45:b1:82:91:9a:3e:ec:ef:bf:21:79:8c:06: 27:07:7c:48:d7:22:7e:1f:e7:66:33:77:b1:5d:27: df:9a:4f:92:34:67:15:7c:68:fa:0f:e2:e5:6e:20: fc:99:b2:12:44:1e:ca:41:c4:15:7c:83:27:08:bf: a8:73:0b:e9:ce:c8:db:ae:a0:b3:57:d4:b9:ea:ed: c7:ad:8a:04:4b:40:3b:09:78:34:35:c5:b5:1d:7a: 91:ab:b7:d4:af:46:1d:b8:78:28:2c:b9:4a:5b:48: e1:3c:98:6d:19:a4:95:f8:c2:a0:67:39:49:5d:6e: 56:72:cc:ba:65:e6:f4:b0:cd:b8:cf:13:11:81:48: 08:e6:03:f0:e0:82:be:1c:63:16:7d:9c:fa:21:f2: 0c:c1:27:b6:0e:33:9b:dc:a7:54:6c:b7:48:8b:00: de:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A6:42:70:BF:28:03:64:32:6F:44:64:3E:90:23:16:7F:C8:FE:C2 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/wKZCcL8oA2Qyb0RkPpAjFn_I_sI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5700::/31 2a0f:5707:af00::/44 Signature Algorithm: sha256WithRSAEncryption 65:5b:1e:3b:2e:e0:21:08:31:cd:c8:92:e6:5c:32:cb:98:2b: 39:ea:36:c6:b2:f4:2c:66:53:d1:86:67:03:2b:28:8c:32:8a: 30:40:14:6d:03:ba:63:4e:94:17:2f:7a:5b:a6:76:fb:95:9f: 67:35:90:6a:73:ef:0a:2c:b4:ae:b3:84:d3:72:39:d4:10:a3: cc:a7:19:98:99:04:c0:a1:70:a4:16:30:8d:02:d4:30:5b:0e: e7:95:0d:fc:af:1e:b8:ff:71:c1:df:81:c7:2e:c8:6c:f2:1e: 68:7e:34:79:f3:18:ef:3b:89:81:42:39:cf:9e:9e:4d:be:5d: 34:76:85:d8:f0:b8:6e:98:54:92:8b:cd:60:08:be:3d:2c:81: 2f:15:3c:82:37:39:b8:ef:f6:64:2d:41:6e:e6:08:7b:cc:98: 7d:fa:79:b6:95:70:03:51:92:69:36:32:f2:ac:5a:3c:c3:c8: 30:ff:1f:ff:12:0d:1e:9d:27:7e:60:d8:f6:53:68:30:0c:91: a9:b8:aa:50:f2:b8:4a:79:00:9f:2e:1b:77:a7:40:4a:02:1d: cf:21:1c:0a:5e:84:4d:70:dd:82:e3:b0:da:5b:1c:c5:62:86: 20:bf:52:1a:94:13:cb:b0:df:c4:5f:e8:f4:8a:c0:79:2d:0a: bb:c8:4c:a5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZpt8nWGaRjutY3kqZ+mjbofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjUxMTEwMTMyNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGE2NDI3MGJmMjgwMzY0MzI2ZjQ0NjQzZTkwMjMxNjdmYzhmZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynjT9o7uIYfkStBXZRqG8khFuFzA C6xNmbvLxxFaU4B1sbLHMhn30/T1ZIGJwcXzDEIoLC0F6ciSPpkzFHSN2CRL8Bgi G1rlvpOtvjgCZFERsltGsH9uNVaRNUWxgpGaPuzvvyF5jAYnB3xI1yJ+H+dmM3ex XSffmk+SNGcVfGj6D+LlbiD8mbISRB7KQcQVfIMnCL+ocwvpzsjbrqCzV9S56u3H rYoES0A7CXg0NcW1HXqRq7fUr0YduHgoLLlKW0jhPJhtGaSV+MKgZzlJXW5Wcsy6 Zeb0sM24zxMRgUgI5gPw4IK+HGMWfZz6IfIMwSe2DjOb3KdUbLdIiwDeiwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFMCmQnC/KANkMm9EZD6QIxZ/yP7CMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvd0taQ2NMOG9BMlF5YjBSa1BwQWpGbl9JX3NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwUBKg9XAAMH BCoPVwevADANBgkqhkiG9w0BAQsFAAOCAQEAZVseOy7gIQgxzciS5lwyy5grOeo2 xrL0LGZT0YZnAysojDKKMEAUbQO6Y06UFy96W6Z2+5WfZzWQanPvCiy0rrOE03I5 1BCjzKcZmJkEwKFwpBYwjQLUMFsO55UN/K8euP9xwd+Bxy7IbPIeaH40efMY7zuJ gUI5z56eTb5dNHaF2PC4bphUkovNYAi+PSyBLxU8gjc5uO/2ZC1BbuYIe8yYffp5 tpVwA1GSaTYy8qxaPMPIMP8f/xINHp0nfmDY9lNoMAyRqbiqUPK4SnkAny4bd6dA SgIdzyEcCl6ETXDdguOw2lscxWKGIL9SGpQTy7DfxF/o9IrAeS0Ku8hMpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:11 2025 by rpki-client