This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cV_auznt-du5dBgVBjVAI3wd7bM.roa
File: cV_auznt-du5dBgVBjVAI3wd7bM.roa (raw, json)
Hash identifier: HUnBZoSmc+hhNiqS+VzB57WYSuS6ODYu4cBqMabIK84=
Subject key identifier: 71:5F:DA:BB:39:ED:F9:DB:B9:74:18:15:06:35:40:23:7C:1D:ED:B3
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019AC5A1F1F626E0101B1B78EF9F6763F856
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cV_auznt-du5dBgVBjVAI3wd7bM.roa
Signing time: Thu 27 Nov 2025 14:05:16 +0000
ROA not before: Thu 27 Nov 2025 14:05:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200731
IP address blocks: 2a0f:b240:5e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:c5:a1:f1:f6:26:e0:10:1b:1b:78:ef:9f:67:63:f8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Nov 27 14:05:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=715fdabb39edf9dbb9741815063540237c1dedb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:13:5a:3e:e6:54:94:74:58:4c:95:d6:61:
fe:14:ad:60:51:42:28:ce:04:68:12:15:8b:3e:1c:
11:91:26:2e:4c:bc:b9:c4:4e:26:3d:73:a9:a0:eb:
82:3e:3a:25:33:af:f8:b8:9f:53:6b:6d:9f:2c:d6:
85:c2:8b:8d:c0:eb:46:f4:b7:d9:e9:a9:4a:12:59:
d5:77:92:e5:24:80:7a:03:f7:23:87:d6:5c:af:d3:
e9:cc:57:d8:4c:73:8f:ab:d7:64:b4:0c:34:55:9b:
71:38:c6:63:cd:e6:16:b9:f5:5e:d3:47:99:8c:8f:
72:9a:a3:f0:70:dd:2b:7f:1b:a2:82:83:32:28:9c:
58:d1:fe:30:49:26:10:40:1c:b8:91:29:96:dc:3f:
d3:5a:84:b8:1f:67:20:5c:3d:1c:50:14:18:71:6f:
ed:44:02:4e:e1:fe:9e:d2:67:0e:af:4a:d2:51:e6:
90:f3:d5:55:96:e8:e0:3f:24:e6:fe:9d:0f:6d:42:
fc:33:ba:e1:24:ad:11:4c:73:e5:19:76:b4:1b:db:
3d:5f:10:31:63:30:ef:2f:9c:1b:ed:12:1b:b1:e9:
7a:c8:11:33:e9:5c:80:02:02:9c:74:79:80:77:66:
9d:e3:37:8a:cf:cb:0c:c6:a8:a5:a3:bd:70:6a:48:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5F:DA:BB:39:ED:F9:DB:B9:74:18:15:06:35:40:23:7C:1D:ED:B3
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cV_auznt-du5dBgVBjVAI3wd7bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:5e00::/40
Signature Algorithm: sha256WithRSAEncryption
1e:26:57:24:9b:8c:bf:86:1e:3a:08:d1:2d:09:85:29:1c:ae:
66:b3:69:76:b0:d1:be:a8:67:69:b4:91:b1:a2:67:e4:b5:ee:
49:24:39:15:7d:4d:28:29:b9:59:55:47:9d:12:17:6a:46:7c:
14:01:6f:55:57:65:02:ae:e8:38:44:5f:90:35:6f:de:27:00:
a0:81:a6:99:e4:27:67:b6:0d:10:69:26:d2:12:25:84:e8:ed:
d4:f9:4d:3b:26:69:63:24:e6:39:59:83:5f:fb:4e:57:91:fe:
61:36:df:d7:5f:72:bd:c4:22:e7:e1:ad:8c:28:5b:28:be:2e:
d4:6e:78:f6:45:5a:68:e4:ef:f8:49:dc:6b:15:d2:45:72:21:
82:ab:f1:71:d0:1e:0c:98:55:f5:fe:23:66:ac:b3:58:8c:1c:
94:04:76:d8:ec:a5:b6:ec:18:29:f0:4a:19:b3:d8:a9:c6:38:
87:54:04:3d:0e:ea:7e:9e:64:41:37:33:01:b0:9a:7a:b1:ef:
9e:d7:95:bd:bc:3d:14:29:82:1a:4e:71:b0:db:67:7f:23:5a:
ae:e3:08:d4:80:20:07:bf:7b:95:2f:65:5b:30:e0:82:4e:90:
79:1d:fd:77:89:73:9a:b7:6d:4b:d2:0a:88:9e:90:b8:27:94:
bd:0a:55:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:53:16 2025 by rpki-client