This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/08xZwFBzMyKw2fj33b3OnpzdQe4.roa File: 08xZwFBzMyKw2fj33b3OnpzdQe4.roa (raw, json) Hash identifier: +I7unp7UZt75QPcPL8zRjg6wNwODWaDJ+uiuaz4dcnQ= Subject key identifier: D3:CC:59:C0:50:73:33:22:B0:D9:F8:F7:DD:BD:CE:9E:9C:DD:41:EE Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d Certificate serial: 019A73FA0936BFF578DC5DE1A7F754A1A7C6 Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/08xZwFBzMyKw2fj33b3OnpzdQe4.roa Signing time: Tue 11 Nov 2025 17:32:37 +0000 ROA not before: Tue 11 Nov 2025 17:32:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203909 IP address blocks: 2001:678:d88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:fa:09:36:bf:f5:78:dc:5d:e1:a7:f7:54:a1:a7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d Validity Not Before: Nov 11 17:32:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d3cc59c050733322b0d9f8f7ddbdce9e9cdd41ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:b8:46:4d:75:7f:d4:0b:75:16:1c:b4:55: 94:66:55:fe:16:49:d8:34:3d:d9:4c:81:45:e7:dc: 08:58:81:ec:9d:97:b8:27:77:be:a4:e4:e0:41:26: 7c:37:69:6f:be:96:6e:d8:02:ce:7f:2e:0f:5f:80: 7d:26:6a:b0:32:86:d2:2a:2f:1a:50:c2:88:4c:a8: 47:ab:0e:33:18:30:a8:ae:73:6b:ed:20:a8:68:c5: cc:ec:d4:de:1d:af:cd:c8:6d:44:57:d5:8d:83:09: 16:aa:ac:33:bd:10:e8:3c:e8:57:b7:86:00:a3:a2: 9a:92:f8:58:a4:5d:8f:cf:7d:25:63:9c:2f:69:39: 6c:6d:f0:c6:34:b6:6d:76:6b:47:cf:62:ea:da:7f: a0:b7:f5:71:66:19:b3:8a:ee:cc:a3:58:88:6f:00: 32:a0:e3:95:b1:e6:79:6b:5d:d8:5c:65:16:f3:8a: dc:e2:3f:5f:d1:51:32:31:ef:e3:68:50:37:11:41: 47:0a:87:b9:29:f2:cd:0c:fc:c6:2a:48:a6:96:10: dd:ca:a7:c5:80:dc:08:e9:0c:af:6a:08:89:95:e5: 29:c6:f8:4d:36:f1:de:1f:3d:34:d6:ab:a3:45:a9: 0d:51:57:6c:b8:82:69:7a:c6:3b:87:b0:56:99:35: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CC:59:C0:50:73:33:22:B0:D9:F8:F7:DD:BD:CE:9E:9C:DD:41:EE X509v3 Authority Key Identifier: keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/08xZwFBzMyKw2fj33b3OnpzdQe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d88::/48 Signature Algorithm: sha256WithRSAEncryption 4b:1d:5d:42:cf:b4:61:10:ea:47:21:78:d8:96:b0:4d:55:0a: 0a:e0:c0:3e:45:ad:b1:41:8c:7a:71:31:39:67:bf:d3:e1:04: 19:cd:5d:8e:39:4f:8b:de:92:67:63:d1:21:5a:e3:a1:2e:54: be:be:91:be:7b:34:f0:6b:12:f5:eb:6e:7f:eb:14:c8:d1:cc: 2c:a9:5c:e1:5f:61:7d:48:df:87:f8:91:68:21:07:41:9a:c6: cf:bf:2f:9a:7f:19:96:94:5a:88:3b:d6:0e:65:6f:29:fa:c8: a8:1c:45:96:3e:86:92:af:ff:48:c8:b2:3a:fa:71:8c:1d:ca: c1:21:08:cf:bd:28:f9:dd:b1:7d:85:c3:f7:cc:1a:6c:70:25: 4e:5d:22:96:87:8e:51:dd:d5:57:30:03:f3:67:f6:b7:e2:63: d6:d6:1e:39:4e:ed:d0:9e:9a:0f:2e:1f:08:13:9d:d9:17:8b: 4c:bc:87:86:77:89:52:6f:88:e6:1f:3e:e8:58:d4:b2:2a:42: 56:52:48:68:52:c4:ad:8f:76:d6:0e:c5:1e:1c:13:bd:b3:13: 18:a7:5b:48:2b:c7:1b:39:45:be:28:aa:36:28:ec:15:16:6e: d3:58:f0:c2:45:68:2f:d8:bf:b7:d4:c7:4a:fa:be:9c:10:4a: d5:ce:39:7a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZpz+gk2v/V43F3hp/dUoafGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhODg2ZDU1ODdlYzg1ZjcxMjQyY2Q1N2NlZDQwOTU0NDUy ODE2OGQwHhcNMjUxMTExMTczMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2NjNTljMDUwNzMzMzIyYjBkOWY4ZjdkZGJkY2U5ZTljZGQ0MWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofy4Rk11f9QLdRYctFWUZlX+FknY ND3ZTIFF59wIWIHsnZe4J3e+pOTgQSZ8N2lvvpZu2ALOfy4PX4B9JmqwMobSKi8a UMKITKhHqw4zGDCornNr7SCoaMXM7NTeHa/NyG1EV9WNgwkWqqwzvRDoPOhXt4YA o6KakvhYpF2Pz30lY5wvaTlsbfDGNLZtdmtHz2Lq2n+gt/VxZhmziu7Mo1iIbwAy oOOVseZ5a13YXGUW84rc4j9f0VEyMe/jaFA3EUFHCoe5KfLNDPzGKkimlhDdyqfF gNwI6QyvagiJleUpxvhNNvHeHz001qujRakNUVdsuIJpesY7h7BWmTXSOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNPMWcBQczMisNn49929zp6c3UHuMB8GA1UdIwQY MBaAFMqIbVWH7IX3EkLNV87UCVRFKBaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjIt YzdlMjUyMGM0Y2VhLzEvMDh4WndGQnpNeUt3MmZqMzNiM09ucHpkUWU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjItYzdlMjUyMGM0Y2Vh LzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA2I MA0GCSqGSIb3DQEBCwUAA4IBAQBLHV1Cz7RhEOpHIXjYlrBNVQoK4MA+Ra2xQYx6 cTE5Z7/T4QQZzV2OOU+L3pJnY9EhWuOhLlS+vpG+ezTwaxL1625/6xTI0cwsqVzh X2F9SN+H+JFoIQdBmsbPvy+afxmWlFqIO9YOZW8p+sioHEWWPoaSr/9IyLI6+nGM HcrBIQjPvSj53bF9hcP3zBpscCVOXSKWh45R3dVXMAPzZ/a34mPW1h45Tu3QnpoP Lh8IE53ZF4tMvIeGd4lSb4jmHz7oWNSyKkJWUkhoUsStj3bWDsUeHBO9sxMYp1tI K8cbOUW+KKo2KOwVFm7TWPDCRWgv2L+31MdK+r6cEErVzjl6 -----END CERTIFICATE-----Generated at Sat Dec 6 21:51:50 2025 by rpki-client