This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tGAA_DV4_t7y-6yaokyWts07GyQ.roa File: tGAA_DV4_t7y-6yaokyWts07GyQ.roa (raw, json) Hash identifier: rGfTA5S8Yu46CkXtp7IIxgVilvlx2JPelL/klevpQaY= Subject key identifier: B4:60:00:FC:35:78:FE:DE:F2:FB:AC:9A:A2:4C:96:B6:CD:3B:1B:24 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AF9108984BB3602C9C5530219957D459B Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tGAA_DV4_t7y-6yaokyWts07GyQ.roa Signing time: Sun 07 Dec 2025 13:46:41 +0000 ROA not before: Sun 07 Dec 2025 13:46:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19318 IP address blocks: 2a0f:1207::/32 maxlen: 32 2a10:6d00::/29 maxlen: 29 2a11:7440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:10:89:84:bb:36:02:c9:c5:53:02:19:95:7d:45:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 7 13:46:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b46000fc3578fedef2fbac9aa24c96b6cd3b1b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:71:d8:84:09:8a:eb:b7:06:2d:f8:6e:45: 9a:6f:f4:94:dd:7e:47:19:3e:95:46:97:31:d7:cb: 7d:87:d0:60:a6:b9:4c:a4:c8:1a:8c:15:67:fb:e8: 0f:34:e6:06:d9:de:22:f2:32:50:dc:d2:35:00:07: 92:ab:da:2d:b6:96:b6:21:55:0a:09:6d:cd:72:16: e8:df:53:11:5c:c1:36:f1:f3:d4:e0:45:e9:2e:36: 21:c9:3e:1f:2f:10:77:94:0b:55:c4:09:45:50:13: af:04:08:e0:08:50:d4:0d:d7:db:25:9d:64:5c:3b: 87:5c:a1:67:66:ef:ca:90:07:43:f4:69:da:0e:0a: 88:56:55:9a:6e:ff:9e:08:51:11:04:61:f0:4d:f9: 74:8e:27:ef:2a:95:98:57:17:dc:84:57:c6:89:07: c6:2b:51:6b:db:45:77:33:f0:21:3d:43:49:9d:e3: c3:a4:7d:ed:4e:4f:23:0c:9f:90:a8:c4:bf:ac:15: b8:4f:cc:a5:f5:e9:82:a5:3f:61:d0:b1:95:4e:11: c5:e9:c4:4c:a0:f6:40:3d:f5:e1:70:28:f3:0a:83: a4:8b:55:a7:7f:bd:94:f3:27:39:1e:47:ab:f7:90: f4:33:f7:b5:0a:08:a7:98:58:94:12:a1:54:80:0a: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:60:00:FC:35:78:FE:DE:F2:FB:AC:9A:A2:4C:96:B6:CD:3B:1B:24 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tGAA_DV4_t7y-6yaokyWts07GyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1207::/32 2a10:6d00::/29 2a11:7440::/29 Signature Algorithm: sha256WithRSAEncryption 01:cc:10:fe:db:4e:10:2b:79:11:18:e1:84:aa:ff:97:95:75: 0a:ad:b7:44:ae:30:85:96:6d:17:2f:2e:87:9d:02:0b:6e:d9: 16:07:4d:59:08:03:a5:4b:76:01:84:0a:c9:14:cd:5c:96:d6: 4c:c7:c1:d1:db:83:65:b2:d7:98:20:69:9d:b8:e5:ab:bf:ef: 7c:26:a9:ec:b9:0c:f7:ea:52:d7:3c:35:c5:ec:63:2f:ef:b9: 31:a6:f2:f2:e8:77:ef:cd:c3:01:10:25:5e:e0:12:a0:59:b9: 65:7c:50:71:ec:19:d8:79:15:39:7e:1a:f1:83:ce:0a:6e:60: 77:da:10:f3:00:ab:bd:ca:34:9c:e3:e2:fd:19:98:71:e5:45: d2:02:33:9d:49:46:c7:d7:8a:95:73:6f:90:f5:3d:db:df:56: fa:db:c8:2b:5f:35:0a:02:e9:b3:c3:4e:07:9b:27:e0:86:f0: 75:c9:42:5a:a5:a6:03:06:0c:db:83:8d:66:cf:a0:d1:1b:32: ea:64:3a:2c:30:1c:ec:dd:b4:ad:9b:00:34:2d:71:2d:22:cf: 9c:7a:23:9f:8b:bf:51:c9:af:7d:4d:f7:62:1a:dc:32:ed:a1: 89:a8:cc:9a:ca:59:8e:71:bb:8a:8f:18:3b:ac:34:d8:d7:4c: 02:dd:36:be -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZr5EImEuzYCycVTAhmVfUWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjA3MTM0NjQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDYwMDBmYzM1NzhmZWRlZjJmYmFjOWFhMjRjOTZiNmNkM2IxYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYBx2IQJiuu3Bi34bkWab/SU3X5H GT6VRpcx18t9h9BgprlMpMgajBVn++gPNOYG2d4i8jJQ3NI1AAeSq9ottpa2IVUK CW3Nchbo31MRXME28fPU4EXpLjYhyT4fLxB3lAtVxAlFUBOvBAjgCFDUDdfbJZ1k XDuHXKFnZu/KkAdD9GnaDgqIVlWabv+eCFERBGHwTfl0jifvKpWYVxfchFfGiQfG K1Fr20V3M/AhPUNJnePDpH3tTk8jDJ+QqMS/rBW4T8yl9emCpT9h0LGVThHF6cRM oPZAPfXhcCjzCoOki1Wnf72U8yc5Hker95D0M/e1CginmFiUEqFUgAqP7wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLRgAPw1eP7e8vusmqJMlrbNOxskMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvdEdBQV9EVjRfdDd5LTZ5YW9reVd0czA3R3lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKg8SBwMF AyoQbQADBQMqEXRAMA0GCSqGSIb3DQEBCwUAA4IBAQABzBD+204QK3kRGOGEqv+X lXUKrbdErjCFlm0XLy6HnQILbtkWB01ZCAOlS3YBhArJFM1cltZMx8HR24NlsteY IGmduOWrv+98JqnsuQz36lLXPDXF7GMv77kxpvLy6HfvzcMBECVe4BKgWbllfFBx 7BnYeRU5fhrxg84KbmB32hDzAKu9yjSc4+L9GZhx5UXSAjOdSUbH14qVc2+Q9T3b 31b628grXzUKAumzw04HmyfghvB1yUJapaYDBgzbg41mz6DRGzLqZDosMBzs3bSt mwA0LXEtIs+ceiOfi79Rya99TfdiGtwy7aGJqMyaylmOcbuKjxg7rDTY10wC3Ta+ -----END CERTIFICATE-----Generated at Wed Dec 17 20:09:22 2025 by rpki-client