This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yuZno00IZCISm2Sf9T7v15SMNZM.roa File: yuZno00IZCISm2Sf9T7v15SMNZM.roa (raw, json) Hash identifier: SoIsSBnET98bpQCAqmWQ0ApPMxiSkJk71MAZa5iLJPk= Subject key identifier: CA:E6:67:A3:4D:08:64:22:12:9B:64:9F:F5:3E:EF:D7:94:8C:35:93 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AE01204ED9CA60E10276481722040ED8B Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yuZno00IZCISm2Sf9T7v15SMNZM.roa Signing time: Tue 02 Dec 2025 17:17:48 +0000 ROA not before: Tue 02 Dec 2025 17:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 11404 IP address blocks: 2a06:5280::/29 maxlen: 32 2a09:4900::/29 maxlen: 32 2a0f:1a40::/29 maxlen: 32 2a0f:28c0::/29 maxlen: 32 2a0f:dac0::/29 maxlen: 32 2a10:33c0::/29 maxlen: 32 2a10:6b00::/29 maxlen: 32 2a10:7f00::/29 maxlen: 32 2a11:89c0::/29 maxlen: 32 2a11:d240::/29 maxlen: 32 2a12:d6c0::/29 maxlen: 32 2a13:200::/29 maxlen: 32 2a13:9680::/29 maxlen: 32 2a13:cf00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:12:04:ed:9c:a6:0e:10:27:64:81:72:20:40:ed:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 2 17:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cae667a34d086422129b649ff53eefd7948c3593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:08:4b:f4:1a:f8:aa:4b:a9:5d:c2:79:74:09: 15:f9:4a:a5:57:6e:6b:75:af:27:80:04:31:67:2c: 9d:1b:9d:47:70:49:b4:2c:4a:ab:2e:59:02:c0:70: ad:01:9d:b8:2e:c8:bf:2d:46:ab:c8:b2:64:ea:a6: fe:d5:bb:d8:59:77:4e:f6:97:88:aa:ab:e9:9d:34: 4f:0f:97:65:6e:d4:57:6c:49:ee:8e:c0:94:7a:c8: 8a:96:fb:b5:9d:98:52:b4:f6:2f:c3:44:f9:70:e8: 6b:0e:2a:45:90:ee:09:57:c7:ea:3d:bb:36:8f:87: d1:bb:b3:8b:90:48:9e:14:4e:bb:96:fe:8a:9f:77: b9:0b:f7:e2:4d:46:20:b0:4f:2b:76:56:1f:32:1a: b7:03:b0:79:23:ee:9a:41:b9:75:00:e8:5a:5a:4a: 85:28:78:a3:bd:8a:f0:82:bb:68:ab:45:2c:4c:a2: de:f0:d5:3e:f7:cf:6b:d9:7e:07:40:92:74:c2:ab: 53:9b:10:e7:a4:52:5c:2a:ac:af:c1:a5:0f:77:67: 1d:2a:99:9a:49:c8:84:70:17:c9:99:3c:97:9d:a1: 42:d6:c2:7f:ca:da:f8:0a:f5:83:87:18:ce:9c:48: 6f:78:e6:8e:06:88:9a:7c:30:df:fb:ed:87:12:92: 45:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E6:67:A3:4D:08:64:22:12:9B:64:9F:F5:3E:EF:D7:94:8C:35:93 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yuZno00IZCISm2Sf9T7v15SMNZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:5280::/29 2a09:4900::/29 2a0f:1a40::/29 2a0f:28c0::/29 2a0f:dac0::/29 2a10:33c0::/29 2a10:6b00::/29 2a10:7f00::/29 2a11:89c0::/29 2a11:d240::/29 2a12:d6c0::/29 2a13:200::/29 2a13:9680::/29 2a13:cf00::/29 Signature Algorithm: sha256WithRSAEncryption 66:b1:c5:c7:fd:77:f6:b8:d8:31:c6:69:27:e4:c5:c0:29:62: a9:ae:37:67:a9:23:d9:94:2a:57:17:e0:a5:28:8f:24:eb:cb: 9d:b7:92:8d:18:a1:65:bb:56:ae:44:5e:9c:26:2f:41:44:42: 24:4f:cd:4e:3b:4b:27:e1:97:a9:0d:b6:c9:ed:e6:10:96:3d: fd:9f:00:e5:d9:69:7d:84:78:7d:77:7c:42:5f:9e:c4:09:16: 33:35:2e:5c:18:cb:4c:71:95:93:9d:02:1a:03:3b:e9:33:d9: 9c:7f:30:39:7d:24:da:de:32:1b:fb:a5:ac:98:59:e2:2d:3a: b1:7c:dc:8b:a0:0d:46:fd:54:2c:9f:b3:dc:9a:87:15:5c:69: 81:cd:01:a2:e7:58:13:3e:ba:a6:26:83:7f:68:c2:26:7f:98: a1:d9:56:4c:2f:0b:8a:51:cf:db:d3:bf:b7:2b:cb:82:f3:0a: a2:1c:ac:60:1e:b3:60:f9:e0:cf:77:45:10:02:06:53:59:07: 4c:1b:77:fa:d0:44:69:75:66:2a:47:39:30:ff:04:28:39:84: 0b:59:a0:07:43:6b:a6:cb:68:2b:3d:2a:39:e7:5e:17:6f:66: 8a:a5:79:32:c0:87:ef:d7:f9:37:1e:ac:16:04:c1:e0:ea:e7: f8:39:1f:cf -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZrgEgTtnKYOECdkgXIgQO2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjAyMTcxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWU2NjdhMzRkMDg2NDIyMTI5YjY0OWZmNTNlZWZkNzk0OGMzNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwhL9Br4qkupXcJ5dAkV+UqlV25r da8ngAQxZyydG51HcEm0LEqrLlkCwHCtAZ24Lsi/LUaryLJk6qb+1bvYWXdO9peI qqvpnTRPD5dlbtRXbEnujsCUesiKlvu1nZhStPYvw0T5cOhrDipFkO4JV8fqPbs2 j4fRu7OLkEieFE67lv6Kn3e5C/fiTUYgsE8rdlYfMhq3A7B5I+6aQbl1AOhaWkqF KHijvYrwgrtoq0UsTKLe8NU+989r2X4HQJJ0wqtTmxDnpFJcKqyvwaUPd2cdKpma SciEcBfJmTyXnaFC1sJ/ytr4CvWDhxjOnEhveOaOBoiafDDf++2HEpJFhQIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFMrmZ6NNCGQiEptkn/U+79eUjDWTMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEveXVabm8wMElaQ0lTbTJTZjlUN3YxNVNNTlpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAAjBiAwUDKgZSgAMF AyoJSQADBQMqDxpAAwUDKg8owAMFAyoP2sADBQMqEDPAAwUDKhBrAAMFAyoQfwAD BQMqEYnAAwUDKhHSQAMFAyoS1sADBQMqEwIAAwUDKhOWgAMFAyoTzwAwDQYJKoZI hvcNAQELBQADggEBAGaxxcf9d/a42DHGaSfkxcApYqmuN2epI9mUKlcX4KUojyTr y523ko0YoWW7Vq5EXpwmL0FEQiRPzU47Syfhl6kNtsnt5hCWPf2fAOXZaX2EeH13 fEJfnsQJFjM1LlwYy0xxlZOdAhoDO+kz2Zx/MDl9JNreMhv7payYWeItOrF83Iug DUb9VCyfs9yahxVcaYHNAaLnWBM+uqYmg39owiZ/mKHZVkwvC4pRz9vTv7cry4Lz CqIcrGAes2D54M93RRACBlNZB0wbd/rQRGl1ZipHOTD/BCg5hAtZoAdDa6bLaCs9 KjnnXhdvZoqleTLAh+/X+TcerBYEweDq5/g5H88= -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:16 2025 by rpki-client