This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/1-mKTp_9x4jSxLfMrjZRYWSL2w4Y.roa File: 1-mKTp_9x4jSxLfMrjZRYWSL2w4Y.roa (raw, json) Hash identifier: DC2p78SiJuzIaXxQwV5e0jB7M1ooOawXmJPpEB8RdBQ= Subject key identifier: FA:62:93:A7:FF:71:E2:34:B1:2D:F3:2B:8D:94:58:59:22:F6:C3:86 Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088 Certificate serial: 019AC4AF537410E2F917D88C361E1BC23D05 Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/1-mKTp_9x4jSxLfMrjZRYWSL2w4Y.roa Signing time: Thu 27 Nov 2025 09:40:15 +0000 ROA not before: Thu 27 Nov 2025 09:40:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2a01:f440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:af:53:74:10:e2:f9:17:d8:8c:36:1e:1b:c2:3d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088 Validity Not Before: Nov 27 09:40:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa6293a7ff71e234b12df32b8d94585922f6c386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:1c:f4:15:3d:51:8c:a8:6b:c0:e7:f4:98: b4:ac:87:b4:2a:01:41:73:ee:3b:b0:85:06:39:41: 58:79:6d:57:8c:5c:d9:4c:65:99:9a:dc:fe:4f:80: 1e:6a:dc:39:3c:a0:76:5e:02:0b:71:b5:b7:58:a2: 3b:c6:1b:53:ab:a7:b3:c5:d1:b4:97:a0:3e:ac:85: 96:5d:7c:9a:9f:bd:eb:c3:f9:00:09:52:1d:54:b2: 4f:9f:04:4c:e3:47:f8:0e:ce:ec:81:14:60:f3:f2: ca:c2:0f:0a:c0:68:6d:a7:5c:3e:ac:c5:88:d3:d2: a0:53:77:e0:cf:af:3d:25:9f:e1:32:16:cc:75:9b: 90:51:d3:03:73:04:8d:c9:cc:7a:62:ea:6d:28:e7: d2:a2:78:d6:63:4b:1a:72:65:78:0f:43:06:28:2a: 03:bb:9d:93:61:c3:6a:fb:47:be:58:89:9e:6e:1a: 55:8b:6e:26:5d:8b:d2:e9:6b:d0:48:6d:29:e2:95: 89:7f:b2:a5:f0:e8:58:04:c8:b7:98:67:cc:cd:46: cd:ee:f7:ec:81:4a:09:d5:ad:e0:80:a8:34:05:39: b4:09:b1:67:ad:72:35:42:b5:dd:b2:27:89:7f:5f: 8f:e7:44:2d:9b:ba:23:fe:07:d5:73:66:e4:a1:6f: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:62:93:A7:FF:71:E2:34:B1:2D:F3:2B:8D:94:58:59:22:F6:C3:86 X509v3 Authority Key Identifier: keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/1-mKTp_9x4jSxLfMrjZRYWSL2w4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:f440::/29 Signature Algorithm: sha256WithRSAEncryption 54:a2:45:c9:e2:27:3d:d1:8e:f6:32:29:9d:45:ba:96:d9:61: 6f:b3:ea:a2:87:bd:d9:64:e8:bf:75:61:68:9d:63:03:0c:63: ca:f9:cc:c1:60:69:b0:ee:77:fa:a7:09:3d:65:2f:eb:c2:2f: 01:ff:fc:99:fc:dc:d0:07:a6:ea:1d:59:13:31:45:40:81:05: 97:9d:55:2b:8b:6d:46:18:85:d3:57:0b:9d:c2:11:53:a3:5b: b6:2a:d0:42:ec:af:59:0a:b4:0e:51:ec:e6:f6:dd:14:0a:fe: d3:38:da:37:a7:40:ab:b0:52:f3:98:7f:30:8c:b8:d6:3d:4a: 08:c5:8a:8f:85:bd:fc:c7:a1:3f:4e:ac:db:7e:c6:aa:90:c4: 1c:3a:e1:97:35:55:cc:64:23:53:47:69:f0:af:e6:ec:f3:32: 59:b9:96:ab:fc:2c:6f:f4:80:d0:b4:d0:75:f8:c1:05:bc:60: 24:df:b4:4b:5c:8f:8e:53:99:ab:6d:a7:0a:7f:59:34:56:4e: 87:e1:33:14:95:e3:90:94:fc:d3:20:26:66:17:ca:95:af:c3: 88:51:d9:b1:8b:86:de:5e:7d:5f:9e:37:9c:37:91:d5:81:c8: ce:7e:b4:52:1c:36:e2:97:31:7d:5a:17:a5:b3:9a:49:a1:83: ec:89:5e:b5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZrEr1N0EOL5F9iMNh4bwj0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZWZmZTk4YzI0YzNkNmQ2MDg3YzhkMWQzZjkwMWI4Y2Nk NDAwODgwHhcNMjUxMTI3MDk0MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTYyOTNhN2ZmNzFlMjM0YjEyZGYzMmI4ZDk0NTg1OTIyZjZjMzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti8c9BU9UYyoa8Dn9Ji0rIe0KgFB c+47sIUGOUFYeW1XjFzZTGWZmtz+T4Aeatw5PKB2XgILcbW3WKI7xhtTq6ezxdG0 l6A+rIWWXXyan73rw/kACVIdVLJPnwRM40f4Ds7sgRRg8/LKwg8KwGhtp1w+rMWI 09KgU3fgz689JZ/hMhbMdZuQUdMDcwSNycx6YuptKOfSonjWY0sacmV4D0MGKCoD u52TYcNq+0e+WImebhpVi24mXYvS6WvQSG0p4pWJf7Kl8OhYBMi3mGfMzUbN7vfs gUoJ1a3ggKg0BTm0CbFnrXI1QrXdsieJf1+P50Qtm7oj/gfVc2bkoW/o6QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPpik6f/ceI0sS3zK42UWFki9sOGMB8GA1UdIwQY MBaAFEXv/pjCTD1tYIfI0dP5AbjM1ACIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAt ZGViN2I5MTg5MTY5LzEvMS1tS1RwXzl4NGpTeExmTXJqWlJZV1NMMnc0WS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGEvMWU0YTY0LTdhYTAtNGM5NC05YmIwLWRlYjdiOTE4OTE2 OS8xL1JlXy1tTUpNUFcxZ2g4alIwX2tCdU16VUFJZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoB9EAw DQYJKoZIhvcNAQELBQADggEBAFSiRcniJz3RjvYyKZ1FupbZYW+z6qKHvdlk6L91 YWidYwMMY8r5zMFgabDud/qnCT1lL+vCLwH//Jn83NAHpuodWRMxRUCBBZedVSuL bUYYhdNXC53CEVOjW7Yq0ELsr1kKtA5R7Ob23RQK/tM42jenQKuwUvOYfzCMuNY9 SgjFio+FvfzHoT9OrNt+xqqQxBw64Zc1VcxkI1NHafCv5uzzMlm5lqv8LG/0gNC0 0HX4wQW8YCTftEtcj45Tmattpwp/WTRWTofhMxSV45CU/NMgJmYXypWvw4hR2bGL ht5efV+eN5w3kdWByM5+tFIcNuKXMX1aF6Wzmkmhg+yJXrU= -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:07 2025 by rpki-client