This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/S9SaeWk9nkdoWP64FkIPH12BcyE.roa File: S9SaeWk9nkdoWP64FkIPH12BcyE.roa (raw, json) Hash identifier: ehRbGk3byxJ3AiGY7eFZrHPEbDrx0o4nt9iPQOiTJ6M= Subject key identifier: 4B:D4:9A:79:69:3D:9E:47:68:58:FE:B8:16:42:0F:1F:5D:81:73:21 Certificate issuer: /CN=8faccbac71477b940e5cd4103e3eee61db615915 Certificate serial: 019A5FDB47E0D86DF2E5D51AD47FC8CAF5EB Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/S9SaeWk9nkdoWP64FkIPH12BcyE.roa Signing time: Fri 07 Nov 2025 19:46:37 +0000 ROA not before: Fri 07 Nov 2025 19:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214618 IP address blocks: 2a14:7240:a10::/48 maxlen: 48 2a14:7240:e02::/48 maxlen: 48 2a14:7240:e03::/48 maxlen: 48 2a14:7240:a01c::/48 maxlen: 48 2a14:7240:dead::/48 maxlen: 48 2a14:7240:e01c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5f:db:47:e0:d8:6d:f2:e5:d5:1a:d4:7f:c8:ca:f5:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915 Validity Not Before: Nov 7 19:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4bd49a79693d9e476858feb816420f1f5d817321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:31:9d:9c:6c:17:93:2e:94:fc:06:eb:e5: 70:88:2c:04:93:c5:4f:3e:d7:63:d3:e4:58:da:98: 25:e4:93:ad:e1:2d:0a:2c:f7:bb:ab:47:99:97:d8: db:b4:d4:23:51:60:e3:7f:18:32:a1:b5:77:d3:fd: 0f:6f:45:d4:51:7c:2d:94:4c:0b:a1:98:f5:43:ee: 37:25:8d:46:8e:75:11:9f:ab:9d:5f:0f:29:6f:0d: c5:e9:77:a7:78:eb:80:53:40:48:77:f2:2c:16:47: e4:c3:b3:7e:e3:2b:16:7f:c5:fe:15:a0:07:99:5b: 12:f9:ed:fa:7b:b6:7f:ec:f5:06:6c:83:7c:cf:d5: 77:ae:ed:ac:10:4c:ec:95:67:b7:0f:ad:3e:59:42: 04:43:05:83:96:e6:dc:2d:62:7a:55:41:af:a5:37: 2d:6a:18:fe:95:91:9f:c2:d2:9a:c1:7c:57:4e:e7: aa:06:65:96:b2:6c:bd:f3:89:30:ca:15:3f:6c:b7: 21:dc:bd:a6:08:5e:44:a3:4a:b1:ef:6b:c1:f2:b9: d3:4c:31:69:32:c5:3c:11:6a:ba:aa:7a:6f:f4:ad: 86:2f:5d:e7:28:a7:4b:35:6e:95:4d:d8:52:f0:25: 71:3d:2c:fc:c1:68:95:df:f0:ad:b6:6f:85:af:00: 82:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D4:9A:79:69:3D:9E:47:68:58:FE:B8:16:42:0F:1F:5D:81:73:21 X509v3 Authority Key Identifier: keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/S9SaeWk9nkdoWP64FkIPH12BcyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7240:a10::/48 2a14:7240:e02::/47 2a14:7240:a01c::/48 2a14:7240:dead::/48 2a14:7240:e01c::/48 Signature Algorithm: sha256WithRSAEncryption 19:c2:db:ed:5e:44:ba:b1:5b:61:78:77:95:d8:1e:95:57:08: e6:85:aa:3e:f0:e3:37:4e:5c:4e:ea:56:49:53:e5:2c:1a:eb: 25:f5:b4:94:54:7a:66:3e:d4:75:a4:df:dd:b9:ed:9e:39:a1: 61:a4:79:60:d7:a5:ee:9e:f5:70:1a:b7:75:58:a9:43:ef:e5: 9a:c7:96:29:26:31:fb:55:19:a7:79:9d:bd:6e:52:ef:fe:7c: 84:bc:e6:1c:13:ef:25:34:4c:48:6a:98:ee:3d:20:2b:32:41: fa:33:b9:84:aa:52:0e:2c:f9:10:0b:96:56:80:ae:ac:f0:04: 09:66:fc:a0:40:aa:1f:da:b2:d9:0f:46:9b:83:2f:61:61:a7: 9c:5e:6c:82:1d:ce:74:d6:9a:e1:f4:60:8f:dd:f5:36:56:e3: 30:4e:72:16:4d:31:10:71:a7:1a:92:62:6a:9e:07:aa:d0:e5: 95:74:af:63:ba:5a:db:74:f7:2a:5a:cf:64:da:ba:85:2d:8e: 83:2e:d8:e7:ab:e5:83:5d:c6:df:87:86:a8:c9:9f:93:72:8e: 88:39:b0:2b:9a:5c:48:82:2c:74:80:74:85:2e:67:42:b7:31: c6:a8:98:56:4e:04:99:fe:77:10:24:52:66:63:82:6a:93:b1: b1:de:b2:84 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZpf20fg2G3y5dUa1H/IyvXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYWNjYmFjNzE0NzdiOTQwZTVjZDQxMDNlM2VlZTYxZGI2 MTU5MTUwHhcNMjUxMTA3MTk0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmQ0OWE3OTY5M2Q5ZTQ3Njg1OGZlYjgxNjQyMGYxZjVkODE3MzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLExnZxsF5MulPwG6+VwiCwEk8VP Ptdj0+RY2pgl5JOt4S0KLPe7q0eZl9jbtNQjUWDjfxgyobV30/0Pb0XUUXwtlEwL oZj1Q+43JY1GjnURn6udXw8pbw3F6XeneOuAU0BId/IsFkfkw7N+4ysWf8X+FaAH mVsS+e36e7Z/7PUGbIN8z9V3ru2sEEzslWe3D60+WUIEQwWDlubcLWJ6VUGvpTct ahj+lZGfwtKawXxXTueqBmWWsmy984kwyhU/bLch3L2mCF5Eo0qx72vB8rnTTDFp MsU8EWq6qnpv9K2GL13nKKdLNW6VTdhS8CVxPSz8wWiV3/Cttm+FrwCC3QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFEvUmnlpPZ5HaFj+uBZCDx9dgXMhMB8GA1UdIwQY MBaAFI+sy6xxR3uUDlzUED4+7mHbYVkVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZ6THJIRkhlNVFPWE5RUVBqN3VZZHRoV1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wMTdlZWYtYzQ5ZS00N2E3LTllZDMt MDk4ZGIzYTI0ZmYwLzEvUzlTYWVXazlua2RvV1A2NEZrSVBIMTJCY3lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8wMTdlZWYtYzQ5ZS00N2E3LTllZDMtMDk4ZGIzYTI0ZmYw LzEvajZ6THJIRkhlNVFPWE5RUVBqN3VZZHRoV1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAKhRyQAoQ AwcBKhRyQA4CAwcAKhRyQKAcAwcAKhRyQN6tAwcAKhRyQOAcMA0GCSqGSIb3DQEB CwUAA4IBAQAZwtvtXkS6sVtheHeV2B6VVwjmhao+8OM3TlxO6lZJU+UsGusl9bSU VHpmPtR1pN/due2eOaFhpHlg16XunvVwGrd1WKlD7+Wax5YpJjH7VRmneZ29blLv /nyEvOYcE+8lNExIapjuPSArMkH6M7mEqlIOLPkQC5ZWgK6s8AQJZvygQKof2rLZ D0abgy9hYaecXmyCHc501prh9GCP3fU2VuMwTnIWTTEQcacakmJqngeq0OWVdK9j ulrbdPcqWs9k2rqFLY6DLtjnq+WDXcbfh4aoyZ+Tco6IObArmlxIgix0gHSFLmdC tzHGqJhWTgSZ/ncQJFJmY4Jqk7Gx3rKE -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:48 2025 by rpki-client