This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4fCXO13UbtxaF-O7cnM6c7sEBAM.roa File: 4fCXO13UbtxaF-O7cnM6c7sEBAM.roa (raw, json) Hash identifier: mKLjxWAC+rHBlPP0en7rzecV8YzYbNdPCCR+cS1H1Go= Subject key identifier: E1:F0:97:3B:5D:D4:6E:DC:5A:17:E3:BB:72:73:3A:73:BB:04:04:03 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019ABCF5C9395E0EA122DDFAAAF567C3F786 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4fCXO13UbtxaF-O7cnM6c7sEBAM.roa Signing time: Tue 25 Nov 2025 21:40:15 +0000 ROA not before: Tue 25 Nov 2025 21:40:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12389 IP address blocks: 2a06:a600::/29 maxlen: 29 2a06:bf40::/29 maxlen: 29 2a07:95c0::/29 maxlen: 29 2a09:17c3::/32 maxlen: 32 2a0c:d380::/29 maxlen: 29 2a0d:8f80::/29 maxlen: 29 2a0e:2440::/29 maxlen: 29 2a0f:3d83::/32 maxlen: 32 2a0f:3d86:11::/48 maxlen: 48 2a0f:7d01::/32 maxlen: 32 2a0f:ee00::/29 maxlen: 29 2a10:3140::/29 maxlen: 29 2a11:4e80::/29 maxlen: 29 2a12:d100::/29 maxlen: 29 2a13:2bc0::/29 maxlen: 29 2a13:8f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:f5:c9:39:5e:0e:a1:22:dd:fa:aa:f5:67:c3:f7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 25 21:40:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e1f0973b5dd46edc5a17e3bb72733a73bb040403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:12:83:a7:fc:d2:d6:ad:84:12:25:b0:75: c8:dc:0d:5f:aa:c2:1f:b8:24:8e:72:a6:43:8d:cc: 67:de:b7:93:c7:63:d8:85:f5:27:54:3b:6c:0b:b7: b2:8b:ee:51:5a:42:d7:9b:5a:81:7b:4a:13:a4:9e: 7c:9a:b9:10:3c:be:38:c7:d6:a7:c9:c1:e3:ce:b8: 4d:79:94:2a:6f:e6:13:8d:c3:98:17:5c:0d:06:5f: af:75:7e:71:73:e0:6d:b2:76:9d:ca:98:0b:7a:ab: 1b:04:2b:ae:94:fb:8b:1e:a5:be:f6:aa:ef:92:74: 9e:8a:d8:13:4a:58:32:95:7e:be:04:ac:96:ce:70: 59:44:dc:65:93:89:18:9c:13:e3:fa:fa:e0:b1:45: 10:86:c6:8b:d3:c0:a5:f7:4b:3b:8e:6e:b1:88:17: f0:5f:f6:82:01:11:6e:f3:05:93:ad:bf:3c:66:ad: 8b:15:89:0a:3e:0a:36:c4:61:9d:d6:0a:b9:2c:21: 9e:44:f3:47:0c:e5:06:a6:b5:54:6e:3a:a2:bc:07: 98:6f:cd:aa:12:60:d9:b6:24:be:69:25:bd:21:37: e0:91:d7:4b:fb:57:7a:46:3f:e5:52:96:e7:92:9b: 58:72:d8:1d:57:aa:f0:f3:94:4e:02:26:ad:7c:43: 93:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F0:97:3B:5D:D4:6E:DC:5A:17:E3:BB:72:73:3A:73:BB:04:04:03 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4fCXO13UbtxaF-O7cnM6c7sEBAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a600::/29 2a06:bf40::/29 2a07:95c0::/29 2a09:17c3::/32 2a0c:d380::/29 2a0d:8f80::/29 2a0e:2440::/29 2a0f:3d83::/32 2a0f:3d86:11::/48 2a0f:7d01::/32 2a0f:ee00::/29 2a10:3140::/29 2a11:4e80::/29 2a12:d100::/29 2a13:2bc0::/29 2a13:8f00::/29 Signature Algorithm: sha256WithRSAEncryption 40:3a:1d:f6:56:d9:e1:32:63:d3:a3:04:12:bf:3e:34:e6:05: d9:33:08:c0:59:5d:2a:ce:ba:14:89:16:94:2d:d3:ce:f5:64: d1:2a:99:b8:67:31:79:43:95:d5:c1:36:4f:7e:2f:87:25:f4: 42:34:67:33:fc:06:0c:18:83:7d:26:c0:d6:83:64:0a:4a:f2: df:d2:32:d5:f2:f7:65:05:60:be:95:7f:0e:ef:e3:f9:a5:13: 3d:d3:e4:7d:d0:a8:7c:de:f4:25:98:fd:40:5b:9b:4c:65:5a: 43:cb:8e:22:3b:6a:99:f4:14:e8:28:aa:78:d7:57:b3:3b:6c: 30:d1:35:d3:50:1b:4a:a7:42:c6:df:9b:af:bd:97:f7:5a:7c: 8e:93:ff:50:85:89:e8:7a:06:55:93:a8:1d:e5:c7:9f:02:ae: d7:c5:cb:31:9a:83:4f:cd:d6:ec:9a:5c:26:40:52:95:e7:6d: f8:f0:3c:98:fc:c9:db:9c:35:0c:aa:b3:0d:d1:40:d9:7d:86: 90:c2:9c:1d:b2:3e:cd:2f:8d:87:fc:78:f1:d2:fd:92:3c:42: a2:cf:de:9f:d7:1e:2e:bc:33:02:6f:8a:25:12:c4:84:8c:b8: 37:31:c8:8f:6b:35:85:5e:2b:e9:a0:f4:8a:8e:3c:ad:b9:b6: e6:38:e7:8a -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZq89ck5Xg6hIt36qvVnw/eGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTI1MjE0MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWYwOTczYjVkZDQ2ZWRjNWExN2UzYmI3MjczM2E3M2JiMDQwNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1oSg6f80tathBIlsHXI3A1fqsIf uCSOcqZDjcxn3reTx2PYhfUnVDtsC7eyi+5RWkLXm1qBe0oTpJ58mrkQPL44x9an ycHjzrhNeZQqb+YTjcOYF1wNBl+vdX5xc+BtsnadypgLeqsbBCuulPuLHqW+9qrv knSeitgTSlgylX6+BKyWznBZRNxlk4kYnBPj+vrgsUUQhsaL08Cl90s7jm6xiBfw X/aCARFu8wWTrb88Zq2LFYkKPgo2xGGd1gq5LCGeRPNHDOUGprVUbjqivAeYb82q EmDZtiS+aSW9ITfgkddL+1d6Rj/lUpbnkptYctgdV6rw85ROAiatfEOTqwIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFOHwlztd1G7cWhfju3JzOnO7BAQDMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvNGZDWE8xM1VidHhhRi1PN2NuTTZjN3NFQkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAIwcgMFAyoGpgAD BQMqBr9AAwUDKgeVwAMFACoJF8MDBQMqDNOAAwUDKg2PgAMFAyoOJEADBQAqDz2D AwcAKg89hgARAwUAKg99AQMFAyoP7gADBQMqEDFAAwUDKhFOgAMFAyoS0QADBQMq EyvAAwUDKhOPADANBgkqhkiG9w0BAQsFAAOCAQEAQDod9lbZ4TJj06MEEr8+NOYF 2TMIwFldKs66FIkWlC3TzvVk0SqZuGcxeUOV1cE2T34vhyX0QjRnM/wGDBiDfSbA 1oNkCkry39Iy1fL3ZQVgvpV/Du/j+aUTPdPkfdCofN70JZj9QFubTGVaQ8uOIjtq mfQU6CiqeNdXsztsMNE101AbSqdCxt+br72X91p8jpP/UIWJ6HoGVZOoHeXHnwKu 18XLMZqDT83W7JpcJkBSledt+PA8mPzJ25w1DKqzDdFA2X2GkMKcHbI+zS+Nh/x4 8dL9kjxCos/en9ceLrwzAm+KJRLEhIy4NzHIj2s1hV4r6aD0io48rbm25jjnig== -----END CERTIFICATE-----Generated at Sat Dec 6 20:51:21 2025 by rpki-client