This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/RU0VjHC0Gx5VAZu3sAebN3Eb3B0.roa File: RU0VjHC0Gx5VAZu3sAebN3Eb3B0.roa (raw, json) Hash identifier: sLvdvyaimGAwP9lQDkB5KPqmI4pCn0zMIuqnoropnrk= Subject key identifier: 45:4D:15:8C:70:B4:1B:1E:55:01:9B:B7:B0:07:9B:37:71:1B:DC:1D Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B3602C4AD9BE94B21B3E27F2CB11B042A Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/RU0VjHC0Gx5VAZu3sAebN3Eb3B0.roa Signing time: Fri 19 Dec 2025 09:48:29 +0000 ROA not before: Fri 19 Dec 2025 09:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197962 IP address blocks: 2a06:cac0::/29 maxlen: 48 2a11:f140::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:02:c4:ad:9b:e9:4b:21:b3:e2:7f:2c:b1:1b:04:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Dec 19 09:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=454d158c70b41b1e55019bb7b0079b37711bdc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:b8:cd:26:23:64:86:6f:96:ca:b8:5f:e8: c7:de:a4:d8:57:40:70:36:11:7c:d9:12:cd:b8:e3: 48:e7:b5:ca:94:cd:d3:29:c6:f0:45:bd:93:25:92: d4:3a:29:45:4d:97:e1:3a:48:66:bc:c7:83:ea:40: 99:db:c1:b5:cc:19:0a:bd:dc:83:01:ea:18:62:4c: 0e:ff:b0:3b:62:a6:bc:eb:84:05:93:43:18:35:c4: bc:50:79:8e:0c:b5:55:41:96:0e:70:a2:2d:7f:0f: 2e:77:da:ed:5f:60:ad:39:42:73:1b:50:1a:c5:80: ce:f6:67:11:51:8c:0f:16:01:2f:43:8b:de:40:c5: b4:a4:c9:36:c7:d4:07:ac:95:04:47:0d:95:80:31: f5:c2:9f:0f:81:b1:20:29:b4:cf:7b:3d:0f:a6:c3: 99:af:df:15:93:ca:3a:59:8c:2e:5c:f3:ac:45:3e: 9d:a7:b2:e6:ee:d2:a9:b4:97:25:b9:54:a5:56:11: 1c:6c:89:83:04:3f:1b:cc:d9:2e:51:f6:13:29:f3: d9:bc:e9:84:7e:12:44:c5:0f:1b:ef:52:7b:7f:0b: de:90:fc:35:e3:d8:05:e4:8b:fc:d1:5f:78:8a:9f: 5c:82:5b:37:e9:98:46:97:65:a7:bc:c2:04:c2:26: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4D:15:8C:70:B4:1B:1E:55:01:9B:B7:B0:07:9B:37:71:1B:DC:1D X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/RU0VjHC0Gx5VAZu3sAebN3Eb3B0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:cac0::/29 2a11:f140::/29 Signature Algorithm: sha256WithRSAEncryption 97:0a:ea:a8:96:90:8f:dd:3d:8f:89:15:ae:b8:44:56:51:58: 0a:61:0e:a3:4c:81:24:64:d8:06:f0:fc:86:92:9c:dc:ef:3b: b8:dc:ce:4f:7f:ff:c9:65:61:20:1d:dc:7e:e5:be:c4:7a:87: 8b:c6:b0:5c:fe:b4:44:0e:a5:42:09:2c:7a:32:39:12:ac:b1: 51:f1:c8:ab:c9:3d:94:f0:28:11:d0:11:5a:56:08:90:e0:f9: eb:22:59:f2:27:74:40:38:79:73:f9:32:6a:c9:b6:ee:a6:ae: b8:f6:7d:20:19:e8:74:6d:32:a1:bc:29:6e:47:3d:f7:ba:2c: ff:cf:22:45:1c:28:5c:0f:01:6d:81:45:34:19:09:59:e2:eb: a6:59:a0:dd:28:bb:9f:a7:a6:45:92:b1:ea:68:28:63:42:45: 50:77:52:3e:72:d9:0f:f8:23:b7:7d:bb:2d:52:85:98:af:a3: 3f:7c:54:2c:62:db:0d:32:c1:75:a7:ec:0e:c6:83:b4:f3:d1: de:38:93:f8:82:e3:87:ce:1f:0d:4c:2a:3c:67:09:6e:54:5c: e5:df:b5:78:59:ec:d5:d3:a4:1a:8d:d1:ab:2e:91:43:d2:25: 38:69:be:ae:56:63:b4:80:c1:88:ba:3d:5b:f0:cb:50:54:78: a9:ab:74:7e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZs2AsStm+lLIbPifyyxGwQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjUxMjE5MDk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTRkMTU4YzcwYjQxYjFlNTUwMTliYjdiMDA3OWIzNzcxMWJkYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbS4zSYjZIZvlsq4X+jH3qTYV0Bw NhF82RLNuONI57XKlM3TKcbwRb2TJZLUOilFTZfhOkhmvMeD6kCZ28G1zBkKvdyD AeoYYkwO/7A7Yqa864QFk0MYNcS8UHmODLVVQZYOcKItfw8ud9rtX2CtOUJzG1Aa xYDO9mcRUYwPFgEvQ4veQMW0pMk2x9QHrJUERw2VgDH1wp8PgbEgKbTPez0PpsOZ r98Vk8o6WYwuXPOsRT6dp7Lm7tKptJcluVSlVhEcbImDBD8bzNkuUfYTKfPZvOmE fhJExQ8b71J7fwvekPw149gF5Iv80V94ip9cgls36ZhGl2WnvMIEwibC7QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEVNFYxwtBseVQGbt7AHmzdxG9wdMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvUlUwVmpIQzBHeDVWQVp1M3NBZWJOM0ViM0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgbKwAMF AyoR8UAwDQYJKoZIhvcNAQELBQADggEBAJcK6qiWkI/dPY+JFa64RFZRWAphDqNM gSRk2Abw/IaSnNzvO7jczk9//8llYSAd3H7lvsR6h4vGsFz+tEQOpUIJLHoyORKs sVHxyKvJPZTwKBHQEVpWCJDg+esiWfIndEA4eXP5MmrJtu6mrrj2fSAZ6HRtMqG8 KW5HPfe6LP/PIkUcKFwPAW2BRTQZCVni66ZZoN0ou5+npkWSsepoKGNCRVB3Uj5y 2Q/4I7d9uy1ShZivoz98VCxi2w0ywXWn7A7Gg7Tz0d44k/iC44fOHw1MKjxnCW5U XOXftXhZ7NXTpBqN0asukUPSJThpvq5WY7SAwYi6PVvwy1BUeKmrdH4= -----END CERTIFICATE-----Generated at Fri Dec 19 23:35:11 2025 by rpki-client