This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/5jqEFe0JTAATamiojNWUeDIShXo.roa File: 5jqEFe0JTAATamiojNWUeDIShXo.roa (raw, json) Hash identifier: AtMeDfc1SVlh3370ApzMA53K6lkC9wmbLdKrheqVybg= Subject key identifier: E6:3A:84:15:ED:09:4C:00:13:6A:68:A8:8C:D5:94:78:32:12:85:7A Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019ABF9FD8EFA381D70CBCACA0CCF083613C Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/5jqEFe0JTAATamiojNWUeDIShXo.roa Signing time: Wed 26 Nov 2025 10:05:15 +0000 ROA not before: Wed 26 Nov 2025 10:05:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214971 IP address blocks: 2a09:9340:1808::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:9f:d8:ef:a3:81:d7:0c:bc:ac:a0:cc:f0:83:61:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Nov 26 10:05:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e63a8415ed094c00136a68a88cd594783212857a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:26:df:07:1c:3d:c7:5f:dc:56:11:c6:78:c0: 22:73:9c:90:20:9f:25:f8:3d:cb:a2:67:86:29:0d: 37:44:1b:95:15:3e:0d:d0:72:5d:e9:4a:d2:d1:e1: 82:7a:b5:e9:a9:37:c3:2d:84:4e:37:22:07:55:73: 11:87:67:02:e6:c9:e5:d4:15:ca:28:1e:25:63:07: b2:d3:f5:7c:09:1e:fd:5c:21:15:81:0f:6b:13:d9: 79:5f:ec:65:a2:4c:b9:ba:b1:f1:d8:32:1c:90:42: 5b:1d:d0:53:e8:bb:0a:1b:a3:8a:f9:7f:e2:96:16: 9b:11:fb:e5:27:9b:b4:cb:da:85:8b:2d:b0:7e:7f: a5:f5:9a:e7:8c:75:5d:2f:fc:85:af:b0:b4:ba:16: 2d:1f:bc:79:61:c3:b2:87:e8:5e:5f:ba:17:e5:fb: 3d:78:ea:79:b6:36:db:3d:09:00:d3:3f:9c:f0:ad: 80:cd:b5:ce:b8:6b:3e:c9:bf:e1:2c:c7:c3:73:da: e1:1a:d4:b2:12:3d:c9:65:a6:83:90:b5:81:2d:1c: 2e:88:3e:44:95:81:f3:65:fe:b2:56:41:ec:23:96: fb:63:d4:51:5e:e1:88:a0:57:12:4a:d4:4a:b4:03: 86:6b:da:0f:22:53:3f:ea:ff:e2:4d:36:c0:f3:86: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3A:84:15:ED:09:4C:00:13:6A:68:A8:8C:D5:94:78:32:12:85:7A X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/5jqEFe0JTAATamiojNWUeDIShXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:9340:1808::/48 Signature Algorithm: sha256WithRSAEncryption 13:fe:20:8e:1b:46:bc:22:02:b1:5b:18:43:41:20:ad:69:30: 03:04:0a:d3:31:a5:d5:61:c2:e2:dd:e4:6d:38:c4:9c:aa:5d: 6a:8b:12:a9:f8:aa:27:b5:d2:b5:7c:aa:23:ce:32:8e:8a:be: a4:01:36:0c:32:d6:96:e5:a6:f4:43:59:75:d5:d6:19:e3:b3: 74:74:82:93:9f:3b:c8:80:50:eb:11:00:f5:b8:c3:09:32:f9: 2c:7a:21:91:af:e4:da:01:c3:c1:30:fc:e1:7e:d2:2a:45:b7: 41:f0:74:94:eb:d0:6e:ab:2a:d3:5b:40:55:fc:45:e3:14:d7: 0f:3f:e2:55:a5:58:0e:f8:7f:81:cf:3b:87:ac:7d:31:95:ee: 7c:62:52:08:1e:bb:a4:a7:32:19:2a:e5:41:dd:39:39:0c:11: 23:61:e1:60:cd:34:76:73:1c:42:5f:26:68:4a:8b:44:3d:ef: 1c:9e:a4:07:cf:c9:e2:c0:35:1a:a5:6d:91:81:91:ac:8b:21: 58:31:27:d1:34:e8:1a:19:63:0f:17:d1:a4:23:c1:7d:13:50: ac:9f:7d:ca:b0:37:2f:3b:74:26:8a:60:2b:dc:3a:40:1f:e0: c7:64:e4:7c:96:b8:07:76:65:06:94:70:b7:cd:22:5a:19:f3: 9d:cf:98:3c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZq/n9jvo4HXDLysoMzwg2E8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjUxMTI2MTAwNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjNhODQxNWVkMDk0YzAwMTM2YTY4YTg4Y2Q1OTQ3ODMyMTI4NTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CbfBxw9x1/cVhHGeMAic5yQIJ8l +D3LomeGKQ03RBuVFT4N0HJd6UrS0eGCerXpqTfDLYRONyIHVXMRh2cC5snl1BXK KB4lYwey0/V8CR79XCEVgQ9rE9l5X+xloky5urHx2DIckEJbHdBT6LsKG6OK+X/i lhabEfvlJ5u0y9qFiy2wfn+l9ZrnjHVdL/yFr7C0uhYtH7x5YcOyh+heX7oX5fs9 eOp5tjbbPQkA0z+c8K2AzbXOuGs+yb/hLMfDc9rhGtSyEj3JZaaDkLWBLRwuiD5E lYHzZf6yVkHsI5b7Y9RRXuGIoFcSStRKtAOGa9oPIlM/6v/iTTbA84aPewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOY6hBXtCUwAE2poqIzVlHgyEoV6MB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvNWpxRUZlMEpUQUFUYW1pb2pOV1VlRElTaFhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgmTQBgI MA0GCSqGSIb3DQEBCwUAA4IBAQAT/iCOG0a8IgKxWxhDQSCtaTADBArTMaXVYcLi 3eRtOMScql1qixKp+KontdK1fKojzjKOir6kATYMMtaW5ab0Q1l11dYZ47N0dIKT nzvIgFDrEQD1uMMJMvkseiGRr+TaAcPBMPzhftIqRbdB8HSU69BuqyrTW0BV/EXj FNcPP+JVpVgO+H+BzzuHrH0xle58YlIIHrukpzIZKuVB3Tk5DBEjYeFgzTR2cxxC XyZoSotEPe8cnqQHz8niwDUapW2RgZGsiyFYMSfRNOgaGWMPF9GkI8F9E1Csn33K sDcvO3QmimAr3DpAH+DHZOR8lrgHdmUGlHC3zSJaGfOdz5g8 -----END CERTIFICATE-----Generated at Sat Dec 6 17:17:37 2025 by rpki-client