This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_tLY2AcAdWRvwdZR8fw9dgC6usY.roa File: _tLY2AcAdWRvwdZR8fw9dgC6usY.roa (raw, json) Hash identifier: 8FbSntAqb1vPRNolvw7xNzFoMIv/5oK0hfXLYY2d6X8= Subject key identifier: FE:D2:D8:D8:07:00:75:64:6F:C1:D6:51:F1:FC:3D:76:00:BA:BA:C6 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B3602C558E2C19A69806C432C5024005D Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_tLY2AcAdWRvwdZR8fw9dgC6usY.roa Signing time: Fri 19 Dec 2025 09:48:29 +0000 ROA not before: Fri 19 Dec 2025 09:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212722 IP address blocks: 2a06:cac0::/29 maxlen: 48 2a11:f140::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:02:c5:58:e2:c1:9a:69:80:6c:43:2c:50:24:00:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Dec 19 09:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fed2d8d8070075646fc1d651f1fc3d7600babac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:32:eb:09:4b:e0:ff:7d:9b:62:ab:04:33: bf:6d:69:23:94:a8:49:df:e5:3d:a7:02:f2:14:24: 40:4f:f2:8c:fa:ad:30:c7:45:54:aa:f2:81:4f:b9: bb:e3:63:19:a8:28:a4:65:e8:1f:0c:e1:06:ef:f9: 67:38:65:62:0d:97:e1:aa:83:e7:b7:da:a7:8f:ea: 4f:2f:5d:54:6b:27:40:e2:ea:01:3a:56:06:89:b1: 0d:25:cd:f2:fb:cb:22:fa:7b:18:1e:85:e9:04:a9: 92:4e:7a:3f:ae:b2:51:e6:56:3d:6d:7c:51:80:e4: 7f:6a:d4:ec:07:52:15:65:5b:ad:ee:2e:ea:fe:56: 01:a6:f6:0c:d1:d6:6c:3f:d5:b2:84:97:3b:fd:08: b5:fe:b5:e1:32:3d:8f:3a:03:ec:54:4d:aa:f1:1e: e5:46:1c:aa:61:db:60:5f:b5:30:8f:53:5a:43:82: fb:82:b2:27:24:40:a9:db:75:60:4d:9d:66:eb:d1: d4:57:b9:b7:67:be:a9:81:11:eb:8f:d2:24:cf:48: ca:8b:77:69:f6:76:4f:0e:c3:9a:58:16:2a:f2:4e: db:f1:0d:95:18:e9:81:fb:87:be:b7:a3:24:5a:b0: fb:cc:ad:59:77:15:96:85:bf:57:6a:29:d9:86:12: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D2:D8:D8:07:00:75:64:6F:C1:D6:51:F1:FC:3D:76:00:BA:BA:C6 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_tLY2AcAdWRvwdZR8fw9dgC6usY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:cac0::/29 2a11:f140::/29 Signature Algorithm: sha256WithRSAEncryption 41:cf:10:bb:cc:31:1f:81:ff:fa:59:db:2c:c5:66:31:54:24: dc:84:49:d0:82:01:d7:c8:ed:b1:b9:fb:20:f6:fe:87:dc:1d: 65:71:14:7c:9b:85:da:ef:9f:62:17:c0:2b:90:9d:c7:eb:77: c6:00:96:66:b3:f3:7d:bf:bc:9a:3b:9b:5f:d4:2f:99:bd:ea: 3a:0c:ed:93:58:9c:d5:80:b5:eb:ae:dd:78:7e:73:0f:f3:9b: d5:ec:78:bc:2c:d9:c2:a2:69:67:09:d9:0b:77:9d:73:44:9d: 61:1f:0d:b7:95:36:06:99:a5:2d:91:e1:a2:df:33:e1:d7:31: eb:11:8d:e2:6b:ad:a6:90:4a:3b:86:8c:4f:4b:96:05:03:53: 4c:04:64:a6:6d:c7:f8:b5:36:67:29:13:0b:01:e5:e4:c7:d5: 9e:2c:90:8e:1f:d9:f4:c3:7d:99:54:ca:8e:8f:ab:40:96:5b: 80:ec:4c:b1:46:71:d8:87:c6:22:db:ef:5c:8c:7b:44:42:02: 3e:1e:6d:dd:5f:4f:3f:b4:24:c1:cc:54:72:90:0e:a4:bd:93: 7e:02:7f:7c:57:70:b7:d9:eb:39:e0:63:72:80:0d:84:6e:05: 2d:45:66:d5:e9:b4:d4:7b:41:5b:85:57:66:32:18:02:96:37: cc:3d:62:d4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZs2AsVY4sGaaYBsQyxQJABdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjUxMjE5MDk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWQyZDhkODA3MDA3NTY0NmZjMWQ2NTFmMWZjM2Q3NjAwYmFiYWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudoy6wlL4P99m2KrBDO/bWkjlKhJ 3+U9pwLyFCRAT/KM+q0wx0VUqvKBT7m742MZqCikZegfDOEG7/lnOGViDZfhqoPn t9qnj+pPL11UaydA4uoBOlYGibENJc3y+8si+nsYHoXpBKmSTno/rrJR5lY9bXxR gOR/atTsB1IVZVut7i7q/lYBpvYM0dZsP9WyhJc7/Qi1/rXhMj2POgPsVE2q8R7l RhyqYdtgX7Uwj1NaQ4L7grInJECp23VgTZ1m69HUV7m3Z76pgRHrj9Ikz0jKi3dp 9nZPDsOaWBYq8k7b8Q2VGOmB+4e+t6MkWrD7zK1ZdxWWhb9XainZhhKIjQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFP7S2NgHAHVkb8HWUfH8PXYAurrGMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvX3RMWTJBY0FkV1J2d2RaUjhmdzlkZ0M2dXNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgbKwAMF AyoR8UAwDQYJKoZIhvcNAQELBQADggEBAEHPELvMMR+B//pZ2yzFZjFUJNyESdCC AdfI7bG5+yD2/ofcHWVxFHybhdrvn2IXwCuQncfrd8YAlmaz832/vJo7m1/UL5m9 6joM7ZNYnNWAteuu3Xh+cw/zm9XseLws2cKiaWcJ2Qt3nXNEnWEfDbeVNgaZpS2R 4aLfM+HXMesRjeJrraaQSjuGjE9LlgUDU0wEZKZtx/i1NmcpEwsB5eTH1Z4skI4f 2fTDfZlUyo6Pq0CWW4DsTLFGcdiHxiLb71yMe0RCAj4ebd1fTz+0JMHMVHKQDqS9 k34Cf3xXcLfZ6zngY3KADYRuBS1FZtXptNR7QVuFV2YyGAKWN8w9YtQ= -----END CERTIFICATE-----Generated at Fri Dec 19 23:36:32 2025 by rpki-client