This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/8kE0tO9uvlKB37lyd62GPmDaFQI.roa File: 8kE0tO9uvlKB37lyd62GPmDaFQI.roa (raw, json) Hash identifier: D46kiJCVXFUzhMwUZ2ixZDFAlgrG2JSsYU6GUwRkFeY= Subject key identifier: F2:41:34:B4:EF:6E:BE:52:81:DF:B9:72:77:AD:86:3E:60:DA:15:02 Certificate issuer: /CN=b48584effa051f0cbc39c319163e4f2338604982 Certificate serial: 019B0291D20ED15DEFD6349C4FC339F23A50 Authority key identifier: B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/8kE0tO9uvlKB37lyd62GPmDaFQI.roa Signing time: Tue 09 Dec 2025 10:04:29 +0000 ROA not before: Tue 09 Dec 2025 10:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 2a05:bd47:1234::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:91:d2:0e:d1:5d:ef:d6:34:9c:4f:c3:39:f2:3a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48584effa051f0cbc39c319163e4f2338604982 Validity Not Before: Dec 9 10:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f24134b4ef6ebe5281dfb97277ad863e60da1502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:a5:50:f7:e7:53:d3:95:d8:b2:79:a5:79: bb:62:d2:ea:9c:a9:e0:0f:e0:90:66:e2:89:6a:46: 42:2d:fc:06:9f:6d:33:82:6d:8d:4d:3b:b1:93:0d: f9:dc:2c:d4:d3:cf:27:bd:b6:8f:bf:4e:03:f1:c5: 05:f0:5a:4d:b5:61:20:e7:78:47:01:02:24:c2:56: ed:ee:56:29:7b:2f:0f:0f:e5:8b:49:d2:1c:3e:02: 56:b9:99:1d:98:10:b2:8f:37:25:35:e5:68:46:92: f9:ec:0e:ab:83:54:07:2d:86:71:3a:34:57:f8:ba: 1f:80:4c:68:24:8d:ea:8b:f3:fa:10:5a:14:c2:65: fd:cd:11:3e:c8:6d:9f:08:51:c8:fc:83:72:ef:ee: 6b:df:f7:2c:c9:f2:4d:96:e5:94:80:16:0f:8c:74: 33:30:78:91:c0:96:49:75:93:2d:8b:3f:62:5f:3f: ab:75:e1:cc:c0:55:e8:99:d5:85:c7:03:cc:53:aa: c9:c5:53:e8:fb:8a:eb:d1:21:79:a0:3d:8f:08:d6: 2c:c9:f6:15:cb:13:b7:6b:ca:62:fc:cd:bf:80:8c: 82:b6:88:9e:5f:76:d8:a7:6f:96:14:25:18:e3:52: 8f:dc:2e:bb:bb:8c:1a:37:f0:4b:dc:16:0c:4b:1f: 31:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:41:34:B4:EF:6E:BE:52:81:DF:B9:72:77:AD:86:3E:60:DA:15:02 X509v3 Authority Key Identifier: keyid:B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/8kE0tO9uvlKB37lyd62GPmDaFQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:bd47:1234::/48 Signature Algorithm: sha256WithRSAEncryption 30:6d:21:5d:74:ce:7d:4b:4d:1e:d6:80:9a:97:c2:8f:a8:31: 08:1a:dd:79:30:66:08:2a:a0:a3:52:13:25:ef:cd:08:c4:e1: 63:92:38:ed:04:cf:15:cd:9d:87:5a:bf:3e:11:6c:ae:4f:d6: 02:f6:42:92:a5:9b:49:07:41:72:36:42:45:31:56:2e:68:48: d4:36:db:0f:d0:de:d8:53:ef:55:c4:9e:04:c8:09:37:c5:1f: 63:3e:b9:27:2f:26:ff:7e:42:2d:da:8b:ad:29:44:66:f6:fb: 2e:c1:c8:0d:03:96:6f:d3:ed:a4:d6:af:5e:ff:47:24:7c:8e: b6:96:b4:03:d8:be:ae:29:7d:1c:f2:5b:70:d3:cd:1b:76:ac: e6:53:9f:ae:9b:a8:3b:a0:72:e5:ff:92:d2:9b:ba:69:b6:42: b9:6c:48:41:5c:9b:75:b2:67:a0:54:94:e0:cf:7d:ec:51:28: 9e:c2:46:b4:b2:05:28:70:ba:4e:ab:17:27:56:75:c5:66:ec: c5:3a:80:80:4a:c9:b5:9a:5a:f6:b2:16:07:2f:74:14:64:e5: 06:45:f1:fe:25:0b:9b:50:2c:2b:25:96:cd:1d:3f:46:93:e4: a1:54:09:44:d2:93:a1:26:86:c8:e9:45:c2:a2:b6:13:3b:5b: 87:6e:ae:4b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsCkdIO0V3v1jScT8M58jpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODU4NGVmZmEwNTFmMGNiYzM5YzMxOTE2M2U0ZjIzMzg2 MDQ5ODIwHhcNMjUxMjA5MTAwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjQxMzRiNGVmNmViZTUyODFkZmI5NzI3N2FkODYzZTYwZGExNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBOlUPfnU9OV2LJ5pXm7YtLqnKng D+CQZuKJakZCLfwGn20zgm2NTTuxkw353CzU088nvbaPv04D8cUF8FpNtWEg53hH AQIkwlbt7lYpey8PD+WLSdIcPgJWuZkdmBCyjzclNeVoRpL57A6rg1QHLYZxOjRX +LofgExoJI3qi/P6EFoUwmX9zRE+yG2fCFHI/INy7+5r3/csyfJNluWUgBYPjHQz MHiRwJZJdZMtiz9iXz+rdeHMwFXomdWFxwPMU6rJxVPo+4rr0SF5oD2PCNYsyfYV yxO3a8pi/M2/gIyCtoieX3bYp2+WFCUY41KP3C67u4waN/BL3BYMSx8xAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPJBNLTvbr5Sgd+5cnethj5g2hUCMB8GA1UdIwQY MBaAFLSFhO/6BR8MvDnDGRY+TyM4YEmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElXRTdfb0ZId3k4T2NNWkZqNVBJemhnU1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yMWUwMzItMDczZC00MDY4LWFlNDUt YzY2MTNmOWMxNGNhLzEvOGtFMHRPOXV2bEtCMzdseWQ2MkdQbURhRlFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yMWUwMzItMDczZC00MDY4LWFlNDUtYzY2MTNmOWMxNGNh LzEvdElXRTdfb0ZId3k4T2NNWkZqNVBJemhnU1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgW9RxI0 MA0GCSqGSIb3DQEBCwUAA4IBAQAwbSFddM59S00e1oCal8KPqDEIGt15MGYIKqCj UhMl780IxOFjkjjtBM8VzZ2HWr8+EWyuT9YC9kKSpZtJB0FyNkJFMVYuaEjUNtsP 0N7YU+9VxJ4EyAk3xR9jPrknLyb/fkIt2outKURm9vsuwcgNA5Zv0+2k1q9e/0ck fI62lrQD2L6uKX0c8ltw080bdqzmU5+um6g7oHLl/5LSm7pptkK5bEhBXJt1smeg VJTgz33sUSiewka0sgUocLpOqxcnVnXFZuzFOoCASsm1mlr2shYHL3QUZOUGRfH+ JQubUCwrJZbNHT9Gk+ShVAlE0pOhJobI6UXCorYTO1uHbq5L -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:15 2025 by rpki-client