This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/YZ5OkmOZqmOi769FEB0BCefbosM.roa File: YZ5OkmOZqmOi769FEB0BCefbosM.roa (raw, json) Hash identifier: T/9Rx2+z8lpNcTzmX4V/kvT+6IwNCbUFxhSZhaIwQvw= Subject key identifier: 61:9E:4E:92:63:99:AA:63:A2:EF:AF:45:10:1D:01:09:E7:DB:A2:C3 Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019A6D3FEFD1266DE21CD743045AFB183ADF Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/YZ5OkmOZqmOi769FEB0BCefbosM.roa Signing time: Mon 10 Nov 2025 10:11:37 +0000 ROA not before: Mon 10 Nov 2025 10:11:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215286 IP address blocks: 2a14:ae00:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:3f:ef:d1:26:6d:e2:1c:d7:43:04:5a:fb:18:3a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Nov 10 10:11:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=619e4e926399aa63a2efaf45101d0109e7dba2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:60:ba:d5:92:39:ca:8b:96:21:35:5e:82: 6d:61:a4:18:4a:c8:39:1c:5e:2d:92:8b:f3:d9:ee: 29:f6:9c:fb:51:59:f1:f6:2a:35:ae:f6:11:0b:01: dd:ea:a2:f7:0c:e7:b0:45:44:fb:b1:ed:fa:c6:07: 6f:58:2b:81:5f:44:03:a6:d4:f6:9e:18:9b:e0:5d: 79:83:86:02:b4:de:d1:8c:22:c8:72:0f:9e:25:b6: 14:df:6e:25:07:48:11:31:13:26:7f:ed:78:ad:ea: 08:76:b7:3d:79:9f:a6:04:7e:7b:ad:47:42:17:5c: 50:c9:d1:6e:c7:ae:06:de:ca:76:ac:53:59:73:0a: 64:e0:d8:b9:44:91:db:b7:28:52:a8:9f:92:a1:8f: e2:0a:93:08:1b:db:30:d8:33:9f:2f:5f:ef:75:90: 64:1a:5f:ca:5e:4a:36:5d:06:9d:5a:16:8f:eb:42: 64:88:79:e5:60:9c:da:4b:7e:46:85:ec:81:9e:0c: 0a:f3:1a:8a:a5:d7:e0:02:60:cb:49:33:fb:d6:44: 68:55:11:79:9c:11:2a:7c:78:1b:2e:f7:c1:0e:38: 2c:8a:cd:f1:30:77:3b:8f:e7:a6:be:cd:fd:d5:2f: 9e:b7:18:00:8b:44:35:a6:8f:c4:ba:c0:91:3e:28: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9E:4E:92:63:99:AA:63:A2:EF:AF:45:10:1D:01:09:E7:DB:A2:C3 X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/YZ5OkmOZqmOi769FEB0BCefbosM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ae00:6::/48 Signature Algorithm: sha256WithRSAEncryption 8e:1a:00:02:b7:c6:e0:29:62:45:55:c4:72:cd:bc:95:6b:e9: ac:2e:12:3e:7b:13:44:51:9b:a0:be:ca:5e:fa:e1:0d:d4:17: 7e:7c:55:a0:92:2f:f4:81:20:7c:7a:1b:b6:28:72:7f:14:87: 16:79:31:ee:25:1a:0b:1b:65:87:c1:f4:8a:2b:02:87:f5:88: f7:de:5c:c7:e6:2f:f7:13:a9:c1:1d:47:5f:5c:97:e6:d1:b0: 10:70:c1:46:f1:b2:dc:b1:a3:e7:92:c5:1d:05:66:31:f4:7c: f2:14:5a:0a:ad:51:5e:83:4b:a4:28:32:c4:6a:58:45:8e:49: b6:f7:f8:18:90:51:c1:fb:89:68:3c:04:1b:d2:54:6b:80:90: 14:91:64:43:56:4e:f7:e2:b4:63:eb:a3:1b:01:f7:f1:57:7d: da:84:ac:9f:3c:e6:bc:8e:50:99:be:09:88:90:f4:82:66:c1: ec:fa:e9:0b:64:da:29:3e:b5:54:e5:57:12:bb:90:d2:81:84: 93:7a:2b:27:8e:2a:f0:14:0c:41:be:20:f4:fc:b6:db:fc:da: f5:8d:9f:87:ab:98:54:b5:e4:f3:42:3e:d9:9b:8c:97:aa:13: c4:9e:aa:60:0c:fe:d4:3c:14:d3:86:10:6d:64:e6:d7:12:41: 0f:ba:d6:85 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZptP+/RJm3iHNdDBFr7GDrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjUxMTEwMTAxMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTllNGU5MjYzOTlhYTYzYTJlZmFmNDUxMDFkMDEwOWU3ZGJhMmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp59gutWSOcqLliE1XoJtYaQYSsg5 HF4tkovz2e4p9pz7UVnx9io1rvYRCwHd6qL3DOewRUT7se36xgdvWCuBX0QDptT2 nhib4F15g4YCtN7RjCLIcg+eJbYU324lB0gRMRMmf+14reoIdrc9eZ+mBH57rUdC F1xQydFux64G3sp2rFNZcwpk4Ni5RJHbtyhSqJ+SoY/iCpMIG9sw2DOfL1/vdZBk Gl/KXko2XQadWhaP60JkiHnlYJzaS35GheyBngwK8xqKpdfgAmDLSTP71kRoVRF5 nBEqfHgbLvfBDjgsis3xMHc7j+emvs391S+etxgAi0Q1po/EusCRPiiDlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGGeTpJjmapjou+vRRAdAQnn26LDMB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvWVo1T2ttT1pxbU9pNzY5RkVCMEJDZWZib3NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSuAAAG MA0GCSqGSIb3DQEBCwUAA4IBAQCOGgACt8bgKWJFVcRyzbyVa+msLhI+exNEUZug vspe+uEN1Bd+fFWgki/0gSB8ehu2KHJ/FIcWeTHuJRoLG2WHwfSKKwKH9Yj33lzH 5i/3E6nBHUdfXJfm0bAQcMFG8bLcsaPnksUdBWYx9HzyFFoKrVFeg0ukKDLEalhF jkm29/gYkFHB+4loPAQb0lRrgJAUkWRDVk734rRj66MbAffxV33ahKyfPOa8jlCZ vgmIkPSCZsHs+ukLZNopPrVU5VcSu5DSgYSTeisnjirwFAxBviD0/Lbb/Nr1jZ+H q5hUteTzQj7Zm4yXqhPEnqpgDP7UPBTThhBtZObXEkEPutaF -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:34 2025 by rpki-client