This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/WVv2k3TSQJbPsK5iSpOdvStU1fw.roa File: WVv2k3TSQJbPsK5iSpOdvStU1fw.roa (raw, json) Hash identifier: nllHKEsBD6hhWuVOALIXGX0W82p+v661gYIvqMzP3I4= Subject key identifier: 59:5B:F6:93:74:D2:40:96:CF:B0:AE:62:4A:93:9D:BD:2B:54:D5:FC Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019ADF1294D9BAE71AFA947E5FC0C77471E6 Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/WVv2k3TSQJbPsK5iSpOdvStU1fw.roa Signing time: Tue 02 Dec 2025 12:38:48 +0000 ROA not before: Tue 02 Dec 2025 12:38:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213007 IP address blocks: 2a14:ae00:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:12:94:d9:ba:e7:1a:fa:94:7e:5f:c0:c7:74:71:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Dec 2 12:38:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=595bf69374d24096cfb0ae624a939dbd2b54d5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:c1:19:33:8c:b2:35:ba:b6:f7:26:32:ff: d4:4e:41:e0:2f:31:d7:a4:64:28:8d:16:4a:4a:e2: 2b:24:11:df:a4:50:9f:fc:ee:a7:cb:b0:30:25:13: 1b:ed:82:0f:2b:2e:7e:c8:8d:78:4f:26:c7:de:d5: e2:de:4a:12:34:04:c9:5c:26:c2:ee:a1:ba:e0:b9: 90:25:71:75:73:7f:73:95:8d:ba:da:39:af:6c:a6: c7:19:18:b2:d4:61:29:2f:df:6a:25:93:4f:7e:e6: 09:d0:22:f6:c6:10:5e:92:8a:a4:9c:93:3a:5f:aa: ba:97:77:c0:a1:f5:93:40:f1:cb:e8:d6:05:56:63: 3c:1a:0d:12:19:5f:4e:16:7a:ce:06:fa:fb:a5:56: 2f:a7:e4:0c:ac:80:98:17:cf:0b:95:f9:36:40:5b: a5:39:ef:c4:a1:a6:84:d5:df:04:4a:73:b9:a9:0d: c8:0e:9c:40:31:bd:99:fe:47:0d:23:f7:e3:4c:78: 27:75:73:51:1c:2a:94:b2:b1:cc:d5:40:12:f4:84: 08:c3:40:26:15:b3:f5:86:24:f4:3d:9a:c7:f2:b5: c1:50:cb:a4:4b:04:7a:9a:9e:4e:1a:39:26:52:e5: fe:be:5c:7a:22:58:19:8b:50:08:56:84:f5:3c:ab: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5B:F6:93:74:D2:40:96:CF:B0:AE:62:4A:93:9D:BD:2B:54:D5:FC X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/WVv2k3TSQJbPsK5iSpOdvStU1fw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ae00:9::/48 Signature Algorithm: sha256WithRSAEncryption 21:84:eb:f0:86:5b:29:db:7d:a2:2a:6d:a2:68:45:60:eb:24: 28:80:15:ac:4d:2c:49:11:ae:b6:b5:c1:6b:b6:59:3b:dd:e9: 6c:a7:f8:40:cd:79:b7:8b:72:a1:b4:e0:8a:8e:6b:3e:da:6e: c3:19:8f:1c:e8:b6:ad:82:4f:04:ad:bd:9a:e3:fa:de:e0:8a: a4:3f:28:4a:8c:c7:a8:53:ad:94:01:27:ae:75:17:7a:27:04: 17:24:aa:bf:cc:64:d5:e9:3b:c5:13:c0:4f:4c:c5:9b:a6:5c: 2a:a9:06:15:d9:41:69:be:1a:92:5e:d3:a3:92:e5:2f:61:4e: f3:a5:6c:ca:0a:6f:e6:ea:5a:46:c1:96:3e:f6:bb:82:5e:5a: 02:a1:f8:03:16:af:3b:77:55:82:39:db:76:64:c0:d2:e4:e1: c7:5c:58:ff:15:f4:a3:6a:b7:60:7c:7c:35:af:0f:cc:44:15: ff:5e:14:59:bd:ef:78:4f:0e:1f:a8:8e:4d:c8:8b:94:72:62: 5c:99:c3:76:60:5c:31:7e:25:6b:bb:15:e6:0b:e0:04:32:12: 99:68:a9:a9:95:c2:8a:8b:8d:c2:23:0f:67:0d:8b:f4:81:86: 34:98:85:5b:f8:e0:56:d9:3e:8d:62:ea:2c:84:3f:ba:a1:7b: 5b:00:cc:aa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrfEpTZuuca+pR+X8DHdHHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjUxMjAyMTIzODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTViZjY5Mzc0ZDI0MDk2Y2ZiMGFlNjI0YTkzOWRiZDJiNTRkNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG3BGTOMsjW6tvcmMv/UTkHgLzHX pGQojRZKSuIrJBHfpFCf/O6ny7AwJRMb7YIPKy5+yI14TybH3tXi3koSNATJXCbC 7qG64LmQJXF1c39zlY262jmvbKbHGRiy1GEpL99qJZNPfuYJ0CL2xhBekoqknJM6 X6q6l3fAofWTQPHL6NYFVmM8Gg0SGV9OFnrOBvr7pVYvp+QMrICYF88Llfk2QFul Oe/EoaaE1d8ESnO5qQ3IDpxAMb2Z/kcNI/fjTHgndXNRHCqUsrHM1UAS9IQIw0Am FbP1hiT0PZrH8rXBUMukSwR6mp5OGjkmUuX+vlx6IlgZi1AIVoT1PKtqIwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFlb9pN00kCWz7CuYkqTnb0rVNX8MB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvV1Z2MmszVFNRSmJQc0s1aVNwT2R2U3RVMWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSuAAAJ MA0GCSqGSIb3DQEBCwUAA4IBAQAhhOvwhlsp232iKm2iaEVg6yQogBWsTSxJEa62 tcFrtlk73elsp/hAzXm3i3KhtOCKjms+2m7DGY8c6Latgk8Erb2a4/re4IqkPyhK jMeoU62UASeudRd6JwQXJKq/zGTV6TvFE8BPTMWbplwqqQYV2UFpvhqSXtOjkuUv YU7zpWzKCm/m6lpGwZY+9ruCXloCofgDFq87d1WCOdt2ZMDS5OHHXFj/FfSjardg fHw1rw/MRBX/XhRZve94Tw4fqI5NyIuUcmJcmcN2YFwxfiVruxXmC+AEMhKZaKmp lcKKi43CIw9nDYv0gYY0mIVb+OBW2T6NYuoshD+6oXtbAMyq -----END CERTIFICATE-----Generated at Sat Dec 6 20:51:44 2025 by rpki-client