This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uJ-hlaH6L5v_ciIF1koS-NWoQCY.roa File: uJ-hlaH6L5v_ciIF1koS-NWoQCY.roa (raw, json) Hash identifier: Tf4+BnXgIZedKY+Fb9rJkm8H7uayO9zG15W3DglsUvw= Subject key identifier: B8:9F:A1:95:A1:FA:2F:9B:FF:72:22:05:D6:4A:12:F8:D5:A8:40:26 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AEE1FC22B71F062F08CD15DF05453F8DB Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uJ-hlaH6L5v_ciIF1koS-NWoQCY.roa Signing time: Fri 05 Dec 2025 10:47:30 +0000 ROA not before: Fri 05 Dec 2025 10:47:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34665 IP address blocks: 2a0e:1a81::/32 maxlen: 32 2a0f:dec0::/29 maxlen: 29 2a10:3440::/29 maxlen: 29 2a13:1480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:1f:c2:2b:71:f0:62:f0:8c:d1:5d:f0:54:53:f8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 5 10:47:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b89fa195a1fa2f9bff722205d64a12f8d5a84026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:db:1a:a0:6c:cf:3d:78:58:1c:5a:6e:96:7d: 6d:87:9d:60:22:fc:ea:d8:0e:cc:1b:4d:b4:d3:b7: 7d:6f:1e:c8:96:ce:f5:56:25:26:01:35:7c:1c:e4: 8b:d9:f8:3a:da:11:4a:91:f9:b3:3b:76:d9:07:92: 42:bc:07:96:3c:39:86:da:9c:b1:71:e4:aa:cb:e1: 89:48:33:38:b2:31:48:9a:a9:b5:59:3e:ce:20:ce: c5:d7:d7:87:b7:37:73:fb:09:90:a7:45:d5:c0:0e: df:c4:53:32:57:67:dc:7a:69:3c:6d:fd:71:fd:23: 81:41:07:49:e0:3d:a4:40:52:fe:5a:0e:85:35:22: 93:7d:6e:65:e9:52:1b:05:1a:ac:1f:ea:a5:dc:15: c2:06:83:d7:c3:3b:aa:4c:8f:19:c9:a3:cb:55:0c: c5:1a:e9:03:36:3b:26:06:0f:d3:28:31:05:03:b8: b5:40:46:8e:7f:29:97:0b:91:56:20:35:63:6b:b5: 6e:62:76:52:1a:e6:dd:a4:d9:12:19:52:3a:bb:5c: 7e:43:ee:3d:f0:18:d9:f4:6e:3e:c8:d9:80:fc:79: 3c:1c:48:e9:cb:62:73:c5:5d:fb:2b:70:fb:b8:42: 06:08:5c:cc:0e:56:f0:1c:e7:6e:5e:10:8b:8b:e0: 97:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9F:A1:95:A1:FA:2F:9B:FF:72:22:05:D6:4A:12:F8:D5:A8:40:26 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uJ-hlaH6L5v_ciIF1koS-NWoQCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:1a81::/32 2a0f:dec0::/29 2a10:3440::/29 2a13:1480::/29 Signature Algorithm: sha256WithRSAEncryption 4e:ee:12:1e:7c:97:2e:88:b1:1b:5a:3f:c1:9a:77:b7:69:de: 64:e6:b9:1b:c9:5f:d2:ea:fd:30:4e:24:61:61:26:b3:6f:32: 40:88:db:c6:58:12:34:d5:c8:81:7c:d3:d2:83:8e:23:6c:c1: fd:fd:ad:b0:ca:42:9b:35:6c:33:06:0a:72:f4:03:a4:41:bd: fd:e5:65:9a:09:63:c9:37:ba:b7:ba:57:ab:5f:8c:97:e8:5e: 68:7c:c6:f1:a3:03:a8:fa:ca:6b:53:1e:62:db:39:7d:a6:fa: e8:0f:aa:f4:33:ad:e6:dc:84:4f:86:8d:25:25:55:1a:f7:73: 59:70:70:86:ff:da:e8:6c:b3:17:b3:14:70:23:33:41:1a:6a: b4:f4:c8:f9:79:5f:b1:ac:70:1f:64:8c:de:55:9e:19:da:dd: 4f:20:92:ff:a1:47:37:b9:21:9f:40:0b:eb:c5:34:6d:d2:4b: 58:9f:60:74:da:1d:5f:15:58:3a:8a:10:03:20:f8:11:06:a0: 0e:1c:de:cd:a6:34:5d:5d:9f:13:47:c7:bf:4b:a9:89:43:22: 0c:ce:25:da:4a:ae:9e:50:3b:5f:57:ac:47:2b:a6:3b:c4:0b: d2:ea:fa:9b:21:07:66:6e:40:0c:66:37:05:02:ce:f3:32:8c: 95:8e:48:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZruH8IrcfBi8IzRXfBUU/jbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjA1MTA0NzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODlmYTE5NWExZmEyZjliZmY3MjIyMDVkNjRhMTJmOGQ1YTg0MDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdsaoGzPPXhYHFpuln1th51gIvzq 2A7MG02007d9bx7Ils71ViUmATV8HOSL2fg62hFKkfmzO3bZB5JCvAeWPDmG2pyx ceSqy+GJSDM4sjFImqm1WT7OIM7F19eHtzdz+wmQp0XVwA7fxFMyV2fcemk8bf1x /SOBQQdJ4D2kQFL+Wg6FNSKTfW5l6VIbBRqsH+ql3BXCBoPXwzuqTI8ZyaPLVQzF GukDNjsmBg/TKDEFA7i1QEaOfymXC5FWIDVja7VuYnZSGubdpNkSGVI6u1x+Q+49 8BjZ9G4+yNmA/Hk8HEjpy2JzxV37K3D7uEIGCFzMDlbwHOduXhCLi+CXpwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFLifoZWh+i+b/3IiBdZKEvjVqEAmMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvdUotaGxhSDZMNXZfY2lJRjFrb1MtTldvUUNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKg4agQMF AyoP3sADBQMqEDRAAwUDKhMUgDANBgkqhkiG9w0BAQsFAAOCAQEATu4SHnyXLoix G1o/wZp3t2neZOa5G8lf0ur9ME4kYWEms28yQIjbxlgSNNXIgXzT0oOOI2zB/f2t sMpCmzVsMwYKcvQDpEG9/eVlmgljyTe6t7pXq1+Ml+heaHzG8aMDqPrKa1MeYts5 fab66A+q9DOt5tyET4aNJSVVGvdzWXBwhv/a6GyzF7MUcCMzQRpqtPTI+Xlfsaxw H2SM3lWeGdrdTyCS/6FHN7khn0AL68U0bdJLWJ9gdNodXxVYOooQAyD4EQagDhze zaY0XV2fE0fHv0upiUMiDM4l2kqunlA7X1esRyumO8QL0ur6myEHZm5ADGY3BQLO 8zKMlY5INQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:16 2025 by rpki-client