This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v2D9bscX9noZRF-3HriOwSZk9YQ.roa File: v2D9bscX9noZRF-3HriOwSZk9YQ.roa (raw, json) Hash identifier: U3QEwX9jepriiAFsbi/AJqM8ufuZtDwm6QNAS5R0r6Y= Subject key identifier: BF:60:FD:6E:C7:17:F6:7A:19:44:5F:B7:1E:B8:8E:C1:26:64:F5:84 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AE519918410D578C0E5078CC564526DC3 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v2D9bscX9noZRF-3HriOwSZk9YQ.roa Signing time: Wed 03 Dec 2025 16:44:09 +0000 ROA not before: Wed 03 Dec 2025 16:44:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 143000 IP address blocks: 2a0f:6d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:19:91:84:10:d5:78:c0:e5:07:8c:c5:64:52:6d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 3 16:44:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bf60fd6ec717f67a19445fb71eb88ec12664f584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:1f:87:5d:60:4a:d2:df:5e:2d:73:7d:02: 46:31:0d:2e:72:d1:26:b2:8b:80:15:9f:88:9c:ac: 03:c6:3f:6e:6e:c1:7c:f0:e1:8c:16:37:28:84:63: 16:6b:7c:99:7d:e6:3f:3e:50:0a:00:7c:84:55:0a: 4e:f7:a4:c4:9a:e3:f2:11:35:a9:99:cd:f9:a9:d0: b1:90:68:db:5a:fa:9f:de:04:b1:19:23:48:78:8b: 8d:37:00:98:44:0a:e7:fe:b7:f1:94:86:59:ee:15: e9:cd:a0:14:a1:30:92:7f:e5:e8:08:b3:c6:19:b8: 70:bf:c8:7e:e0:66:6e:32:ed:cb:ae:8c:b6:7f:ec: 1f:ef:a4:e1:78:38:d1:ec:2c:02:37:f4:77:bc:82: 7f:2f:65:d7:bd:7e:96:74:35:03:a2:c0:96:ff:fa: 68:02:93:9d:4d:ed:05:79:e4:76:46:8e:15:98:ab: bf:94:e5:18:2f:75:8c:75:65:e9:d9:3d:b0:b1:d1: 6f:69:75:78:0c:79:91:c7:52:5e:96:fe:81:74:da: 5a:93:0d:6d:91:4b:c5:73:53:dd:b1:a0:fb:96:d7: d8:ac:81:c8:3a:d3:eb:90:c9:b9:34:a8:f1:d5:ce: 9c:28:c9:f8:a2:ac:5f:3f:87:d7:39:8b:af:ec:2b: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:60:FD:6E:C7:17:F6:7A:19:44:5F:B7:1E:B8:8E:C1:26:64:F5:84 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v2D9bscX9noZRF-3HriOwSZk9YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6d80::/29 Signature Algorithm: sha256WithRSAEncryption 16:4c:a8:e9:0d:e4:96:a5:6a:91:7b:e2:0b:b8:a7:87:31:ab: a3:0c:f1:86:25:76:f3:61:0a:fd:2d:36:84:fd:39:83:24:8d: 4f:bd:1d:e3:a2:31:8c:0d:84:70:66:0c:9e:63:81:de:a9:7e: 6d:39:4d:e7:2b:2c:cc:06:1a:b4:05:48:fa:4f:3d:f3:97:e6: 86:71:77:26:87:58:f3:c1:17:66:17:10:fc:22:d7:89:eb:ee: 18:dd:2c:ea:83:28:28:b9:eb:ca:6f:a9:81:3f:82:1e:55:0f: 2a:bf:b3:1e:35:ec:a2:24:4e:16:f5:b0:a5:b4:8a:2f:af:ce: 41:13:05:7e:fb:00:36:ba:06:78:28:99:41:72:7a:e1:54:75: 7a:00:55:08:14:2e:ab:b4:e3:6b:32:6f:b8:e0:13:ff:96:03: c1:8a:1e:fc:a9:55:53:bf:b0:ec:c2:27:6b:ca:81:2e:97:5e: 97:4e:2c:c6:b9:bb:1c:7a:a3:26:0e:23:ab:7c:3c:44:50:c7: c0:30:e6:1f:a2:11:1f:90:1d:83:2e:3a:d6:dd:4d:f5:fb:64: ac:d7:29:73:5d:5d:6b:b7:a4:9d:9e:db:fc:35:32:76:2f:68: eb:a7:23:df:b0:3b:fe:22:10:3e:3e:19:3d:02:48:1f:1c:49: d5:62:82:e2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrlGZGEENV4wOUHjMVkUm3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjAzMTY0NDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjYwZmQ2ZWM3MTdmNjdhMTk0NDVmYjcxZWI4OGVjMTI2NjRmNTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXofh11gStLfXi1zfQJGMQ0uctEm souAFZ+InKwDxj9ubsF88OGMFjcohGMWa3yZfeY/PlAKAHyEVQpO96TEmuPyETWp mc35qdCxkGjbWvqf3gSxGSNIeIuNNwCYRArn/rfxlIZZ7hXpzaAUoTCSf+XoCLPG Gbhwv8h+4GZuMu3Lroy2f+wf76TheDjR7CwCN/R3vIJ/L2XXvX6WdDUDosCW//po ApOdTe0FeeR2Ro4VmKu/lOUYL3WMdWXp2T2wsdFvaXV4DHmRx1Jelv6BdNpakw1t kUvFc1PdsaD7ltfYrIHIOtPrkMm5NKjx1c6cKMn4oqxfP4fXOYuv7Cun2wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFL9g/W7HF/Z6GURftx64jsEmZPWEMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvdjJEOWJzY1g5bm9aUkYtM0hyaU93U1prOVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg9tgDAN BgkqhkiG9w0BAQsFAAOCAQEAFkyo6Q3klqVqkXviC7inhzGrowzxhiV282EK/S02 hP05gySNT70d46IxjA2EcGYMnmOB3ql+bTlN5ysszAYatAVI+k8985fmhnF3JodY 88EXZhcQ/CLXievuGN0s6oMoKLnrym+pgT+CHlUPKr+zHjXsoiROFvWwpbSKL6/O QRMFfvsANroGeCiZQXJ64VR1egBVCBQuq7TjazJvuOAT/5YDwYoe/KlVU7+w7MIn a8qBLpdel04sxrm7HHqjJg4jq3w8RFDHwDDmH6IRH5Adgy461t1N9ftkrNcpc11d a7eknZ7b/DUydi9o66cj37A7/iIQPj4ZPQJIHxxJ1WKC4g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:26:42 2025 by rpki-client