This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-L1Xlbj1PWritk3sAFv2-3MJKBY.roa File: 1-L1Xlbj1PWritk3sAFv2-3MJKBY.roa (raw, json) Hash identifier: edewsgoY4rRtdGrOwX+q9yn7bSLKGcnO6aEA+Ke7qdY= Subject key identifier: F8:BD:57:95:B8:F5:3D:6A:E2:B6:4D:EC:00:5B:F6:FB:73:09:28:16 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B26D202E89D8AE61902F921620CE9EE79 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-L1Xlbj1PWritk3sAFv2-3MJKBY.roa Signing time: Tue 16 Dec 2025 11:00:55 +0000 ROA not before: Tue 16 Dec 2025 11:00:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34665 IP address blocks: 2a0e:1a81::/32 maxlen: 32 2a0f:31c5::/32 maxlen: 32 2a0f:dec0::/29 maxlen: 29 2a10:3440::/29 maxlen: 29 2a13:1480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:02:e8:9d:8a:e6:19:02:f9:21:62:0c:e9:ee:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 16 11:00:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f8bd5795b8f53d6ae2b64dec005bf6fb73092816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:74:64:34:af:d0:0b:54:5d:b5:21:88:77: 69:49:59:8a:42:d3:c8:7f:28:9f:d9:e2:86:8d:4b: 35:90:38:d4:c8:d0:e2:e2:ed:ae:99:c5:15:bb:65: 8a:35:1c:93:02:d7:69:a3:e5:d7:d5:6e:83:f8:6e: e1:79:ec:cf:78:2b:18:56:0e:0b:d2:28:f0:c1:8f: 5e:89:5c:b9:9c:a2:de:47:87:c5:35:f0:fc:8c:ca: 63:f5:0e:de:5c:d5:d1:18:a0:5f:60:4f:7e:7f:bc: 7b:5b:15:ce:a7:aa:5e:43:63:b6:af:c6:8a:3a:4f: 61:62:f8:d3:55:ab:20:e2:79:fc:fe:2e:54:13:d6: 28:35:ef:62:bd:b0:84:35:55:7c:16:3e:b7:02:21: 6f:5a:dc:d1:37:d5:56:03:cb:c4:54:37:fa:1e:91: 49:88:de:fe:78:52:4c:5a:f4:6b:be:4d:52:ef:e7: 81:aa:2f:a5:85:53:4d:41:f3:b5:25:6f:87:ef:c5: e1:2e:65:7d:e5:36:80:64:94:92:10:fd:b0:34:52: 0e:58:b5:f5:d2:84:5f:4f:19:24:31:9b:9a:d3:c5: 3b:2d:4c:5a:a1:90:6c:6c:7f:b2:4e:e8:c0:de:70: 18:10:94:43:9f:39:75:a7:a3:0c:57:81:38:fd:fd: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BD:57:95:B8:F5:3D:6A:E2:B6:4D:EC:00:5B:F6:FB:73:09:28:16 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-L1Xlbj1PWritk3sAFv2-3MJKBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:1a81::/32 2a0f:31c5::/32 2a0f:dec0::/29 2a10:3440::/29 2a13:1480::/29 Signature Algorithm: sha256WithRSAEncryption 5c:31:4a:2f:49:a2:8e:1a:65:c0:61:7a:b9:c6:7d:8d:2c:d5: ca:8e:b5:0c:2a:3b:c0:d1:9d:9b:dd:cb:4a:33:40:91:0b:69: 93:8f:32:33:53:6d:92:10:d1:d2:be:bc:c2:e4:ea:2c:a7:05: 8e:75:3d:65:d4:bd:28:2d:5b:7b:22:fa:b3:bb:26:3c:10:b1: ff:04:e4:94:68:2f:01:22:14:d4:91:97:98:e8:65:d6:ec:98: 72:0e:c2:e7:3d:3f:e7:55:95:cd:e8:7f:f8:cd:75:c7:f9:5b: 59:c1:22:ce:58:74:17:95:ae:d7:91:79:fc:69:65:96:83:94: 61:08:2e:35:48:6f:4e:84:59:b8:71:49:27:b5:b1:02:67:ff: 1f:78:ef:c6:ed:62:ba:ad:53:3f:a8:19:e9:06:82:e7:7c:24: 46:d1:72:bf:b2:5a:17:4a:0b:e8:00:17:92:5c:f3:44:c1:31: bd:8b:ba:e9:d0:07:30:ef:6b:c2:3a:62:ee:f9:7b:84:b1:25: 3e:e2:38:0c:ad:c6:26:56:33:97:f8:80:46:c4:93:05:f0:ed: a4:1c:55:56:d7:ed:a5:7c:dc:f8:2a:14:01:7b:52:e4:76:1c: c4:1c:9e:a0:07:d3:01:c8:90:31:a3:da:bf:0c:27:d4:f0:46: 6b:66:d0:84 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsm0gLonYrmGQL5IWIM6e55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjE2MTEwMDU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGJkNTc5NWI4ZjUzZDZhZTJiNjRkZWMwMDViZjZmYjczMDkyODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QZ0ZDSv0AtUXbUhiHdpSVmKQtPI fyif2eKGjUs1kDjUyNDi4u2umcUVu2WKNRyTAtdpo+XX1W6D+G7heezPeCsYVg4L 0ijwwY9eiVy5nKLeR4fFNfD8jMpj9Q7eXNXRGKBfYE9+f7x7WxXOp6peQ2O2r8aK Ok9hYvjTVasg4nn8/i5UE9YoNe9ivbCENVV8Fj63AiFvWtzRN9VWA8vEVDf6HpFJ iN7+eFJMWvRrvk1S7+eBqi+lhVNNQfO1JW+H78XhLmV95TaAZJSSEP2wNFIOWLX1 0oRfTxkkMZua08U7LUxaoZBsbH+yTujA3nAYEJRDnzl1p6MMV4E4/f3bBwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPi9V5W49T1q4rZN7ABb9vtzCSgWMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMS1MMVhsYmoxUFdyaXRrM3NBRnYyLTNNSktCWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRi Ni8xL2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQtMCswKQQCAAIwIwMFACoOGoED BQAqDzHFAwUDKg/ewAMFAyoQNEADBQMqExSAMA0GCSqGSIb3DQEBCwUAA4IBAQBc MUovSaKOGmXAYXq5xn2NLNXKjrUMKjvA0Z2b3ctKM0CRC2mTjzIzU22SENHSvrzC 5OospwWOdT1l1L0oLVt7IvqzuyY8ELH/BOSUaC8BIhTUkZeY6GXW7JhyDsLnPT/n VZXN6H/4zXXH+VtZwSLOWHQXla7XkXn8aWWWg5RhCC41SG9OhFm4cUkntbECZ/8f eO/G7WK6rVM/qBnpBoLnfCRG0XK/sloXSgvoABeSXPNEwTG9i7rp0Acw72vCOmLu +XuEsSU+4jgMrcYmVjOX+IBGxJMF8O2kHFVW1+2lfNz4KhQBe1LkdhzEHJ6gB9MB yJAxo9q/DCfU8EZrZtCE -----END CERTIFICATE-----Generated at Wed Dec 17 01:13:56 2025 by rpki-client