This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/5ck8fgp1M0A37NPs9UVP_EOtxrw.roa File: 5ck8fgp1M0A37NPs9UVP_EOtxrw.roa (raw, json) Hash identifier: WbmPO7ePEW5EiAViCAtfJYzdBLfouLQAKRL4eu5wMz8= Subject key identifier: E5:C9:3C:7E:0A:75:33:40:37:EC:D3:EC:F5:45:4F:FC:43:AD:C6:BC Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019AF094B804FD40D9FEA65D1ED5AE2E1E3C Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/5ck8fgp1M0A37NPs9UVP_EOtxrw.roa Signing time: Fri 05 Dec 2025 22:14:29 +0000 ROA not before: Fri 05 Dec 2025 22:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205941 IP address blocks: 2a10:fa82:1::/48 maxlen: 48 2a10:fa82:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:94:b8:04:fd:40:d9:fe:a6:5d:1e:d5:ae:2e:1e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Dec 5 22:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e5c93c7e0a75334037ecd3ecf5454ffc43adc6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:8f:f8:14:c8:f8:46:e0:9f:b6:22:2e:db: 41:72:eb:96:85:ac:5c:9e:3f:48:66:60:59:f4:ce: 16:df:d1:8f:f2:fe:11:eb:e9:5b:5a:47:53:dd:1e: 4b:ad:bc:5d:97:fd:09:53:e9:b1:6a:cc:67:a1:da: be:6a:4c:98:cd:7d:97:f9:d1:0e:00:7d:51:c9:18: 8e:26:03:0a:3a:ac:86:b1:57:b0:6f:8f:99:a3:35: f1:b5:74:67:a3:43:0e:e1:1a:26:33:51:9d:05:68: 6f:57:cf:be:1c:5d:10:a1:fd:86:ce:f9:d4:6d:0f: d9:26:01:bf:91:9c:80:82:45:c9:17:79:b6:fc:03: 78:2b:86:86:91:ff:29:75:a7:b7:10:30:67:41:b0: 67:41:67:89:4e:63:d4:31:5a:2d:25:77:fe:72:b2: fd:1a:b2:6b:1b:d4:68:3a:5d:1e:5e:68:00:f0:4f: 60:7a:20:19:f4:0b:ec:4e:e3:b1:ba:06:0a:13:cd: cf:ac:33:04:a8:eb:fe:f7:3f:ce:14:a6:d5:ac:16: 6d:52:02:ce:7d:dc:f7:ad:a1:01:a0:3f:94:37:f1: 66:a2:58:c8:e6:9c:98:2d:33:32:5c:d0:52:10:4f: 7f:30:12:22:32:94:c2:ad:11:5b:2a:a9:99:94:68: 33:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C9:3C:7E:0A:75:33:40:37:EC:D3:EC:F5:45:4F:FC:43:AD:C6:BC X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/5ck8fgp1M0A37NPs9UVP_EOtxrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:fa82:1::-2a10:fa82:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 36:ca:70:de:d8:71:6e:bd:da:83:5c:61:58:ad:ca:e8:72:13: 7f:54:a7:ef:83:85:2f:0e:b9:3a:b7:9a:d5:a8:b4:7b:e4:4b: a9:a4:00:0b:fa:df:ce:8c:06:e6:68:14:01:d6:f4:bd:4a:99: 88:25:ea:4f:b9:bd:81:5f:b5:56:88:ee:d5:db:31:6e:a4:d7: 8b:a5:69:b8:8d:51:8e:fd:f3:db:ce:c6:c4:5f:28:6b:e8:d4: 18:3b:30:c0:fd:b8:bf:ed:37:5d:85:63:0a:e4:a4:9d:f0:5f: ad:b5:52:da:1c:a3:0a:a2:2a:68:8c:60:b9:c2:07:d8:82:b8: fb:35:47:b2:20:b7:49:f9:ee:bd:e6:0f:24:1f:76:c3:6f:e3: 82:11:ef:be:ca:78:12:9a:0f:49:5d:fc:26:88:49:a4:f4:22: e3:33:c1:3e:b4:ba:61:45:3e:9a:2f:49:72:fa:2f:8c:b5:b7: a7:00:8f:c5:08:14:ef:f4:c0:da:85:f5:11:61:9d:d2:ca:bd: 5a:a5:61:42:ef:7c:7d:79:3b:a3:97:a7:74:dd:7c:77:9c:fb: 11:98:ed:fd:e0:16:3a:91:f3:7c:42:20:41:38:25:74:8d:e9: 05:2b:92:93:18:b3:92:99:28:08:ee:55:2f:d1:4f:e1:11:44: fb:73:4b:7e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZrwlLgE/UDZ/qZdHtWuLh48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjUxMjA1MjIxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWM5M2M3ZTBhNzUzMzQwMzdlY2QzZWNmNTQ1NGZmYzQzYWRjNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj+P+BTI+Ebgn7YiLttBcuuWhaxc nj9IZmBZ9M4W39GP8v4R6+lbWkdT3R5Lrbxdl/0JU+mxasxnodq+akyYzX2X+dEO AH1RyRiOJgMKOqyGsVewb4+ZozXxtXRno0MO4RomM1GdBWhvV8++HF0Qof2GzvnU bQ/ZJgG/kZyAgkXJF3m2/AN4K4aGkf8pdae3EDBnQbBnQWeJTmPUMVotJXf+crL9 GrJrG9RoOl0eXmgA8E9geiAZ9AvsTuOxugYKE83PrDMEqOv+9z/OFKbVrBZtUgLO fdz3raEBoD+UN/FmoljI5pyYLTMyXNBSEE9/MBIiMpTCrRFbKqmZlGgz0wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOXJPH4KdTNAN+zT7PVFT/xDrca8MB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvNWNrOGZncDFNMEEzN05QczlVVlBfRU90eHJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqEPqC AAEDBwAqEPqCAAIwDQYJKoZIhvcNAQELBQADggEBADbKcN7YcW692oNcYVityuhy E39Up++DhS8OuTq3mtWotHvkS6mkAAv6386MBuZoFAHW9L1KmYgl6k+5vYFftVaI 7tXbMW6k14ulabiNUY7989vOxsRfKGvo1Bg7MMD9uL/tN12FYwrkpJ3wX621Utoc owqiKmiMYLnCB9iCuPs1R7Igt0n57r3mDyQfdsNv44IR777KeBKaD0ld/CaISaT0 IuMzwT60umFFPpovSXL6L4y1t6cAj8UIFO/0wNqF9RFhndLKvVqlYULvfH15O6OX p3TdfHec+xGY7f3gFjqR83xCIEE4JXSN6QUrkpMYs5KZKAjuVS/RT+ERRPtzS34= -----END CERTIFICATE-----Generated at Sat Dec 6 05:45:02 2025 by rpki-client