This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/bKDChfHKcv_yaDrRIzD3dNU3Cxc.roa File: bKDChfHKcv_yaDrRIzD3dNU3Cxc.roa (raw, json) Hash identifier: fa6FPfn/cbRSaVtae0mRof42issCrazZ6Zo41ZC613g= Subject key identifier: 6C:A0:C2:85:F1:CA:72:FF:F2:68:3A:D1:23:30:F7:74:D5:37:0B:17 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019B30723572274EB439A104ECC5FFAD9A3B Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/bKDChfHKcv_yaDrRIzD3dNU3Cxc.roa Signing time: Thu 18 Dec 2025 07:52:29 +0000 ROA not before: Thu 18 Dec 2025 07:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210686 IP address blocks: 2a0d:7d47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:72:35:72:27:4e:b4:39:a1:04:ec:c5:ff:ad:9a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Dec 18 07:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6ca0c285f1ca72fff2683ad12330f774d5370b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:89:f9:fb:7c:d5:40:ef:be:ca:c0:63:89:d0: 05:c4:f9:05:74:0b:10:74:cb:9c:ec:91:26:18:1e: 64:66:69:e7:41:71:d7:24:ed:35:b1:f9:e1:6e:c4: 7d:2e:0a:5c:6c:4d:7d:84:24:b4:ea:d1:93:a0:9a: 3b:13:65:20:dc:2e:44:5d:b3:98:1d:c1:a2:f2:65: 16:d5:5d:54:43:c9:aa:dc:88:49:cb:e4:a9:40:71: c1:1f:4f:d0:2e:59:df:52:db:5f:40:3c:fd:c8:00: c1:eb:98:7c:6f:34:16:a9:7d:80:ae:3a:3b:6e:61: cc:17:b9:b9:e0:91:76:e4:b4:ba:83:f9:3c:c8:42: 66:b4:59:25:81:0b:d2:31:b1:77:46:71:85:93:1b: 77:66:62:7b:8f:57:cb:a6:fc:25:4a:6b:31:ff:2b: 12:49:5c:bb:08:c3:7f:dd:58:bc:8b:6b:80:66:04: d9:03:09:72:23:f7:f3:aa:f9:33:ff:90:fd:a4:97: 9d:35:50:bb:f1:6d:75:e6:09:c5:ee:91:fa:ad:de: ba:d8:27:bb:92:15:99:c4:0e:a0:db:58:b4:4a:76: 33:a2:13:ff:0e:16:8b:0d:98:9c:7d:8d:49:69:3c: 65:00:0d:48:fc:21:61:fb:d2:69:35:f8:42:ff:a9: 09:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A0:C2:85:F1:CA:72:FF:F2:68:3A:D1:23:30:F7:74:D5:37:0B:17 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/bKDChfHKcv_yaDrRIzD3dNU3Cxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:7d47::/32 Signature Algorithm: sha256WithRSAEncryption 06:20:6e:65:6a:7a:b0:4d:f0:4f:82:56:07:92:57:b7:83:4f: e6:f6:19:5d:d3:72:ef:08:74:69:9d:a5:7a:8b:a7:5b:25:a4: 14:dd:89:0e:4a:e6:f9:c1:be:e1:8f:a9:c7:7d:32:7b:3b:81: 5c:cc:a7:20:32:07:55:22:a7:18:90:89:ce:12:7d:f3:5e:3e: fc:fd:02:49:ef:7e:9c:fd:8c:49:3d:11:e5:e4:11:37:51:f6: 81:a7:f9:c6:af:e9:b9:2e:57:9a:e0:1f:50:c4:4d:11:c3:57: 1c:75:c6:e1:50:b2:1e:c4:12:21:79:75:cf:e3:29:ca:77:5f: 88:41:e9:c7:49:d1:85:b5:82:18:ff:f5:d1:ff:88:40:e5:39: 58:f7:ad:8b:53:8f:ef:ec:7f:89:66:86:c9:a2:db:90:54:5e: f8:8b:e1:87:a4:e4:6d:67:36:31:5b:b6:99:ad:51:19:1a:9d: c9:97:f8:d1:04:a5:fc:6a:b6:d8:0d:a9:31:ce:93:32:0a:b2: a9:03:5e:76:87:c1:f9:6e:53:04:c3:50:a3:00:62:f3:8b:fd: 34:2b:a7:b7:db:80:c8:8f:cb:40:14:4d:a9:c1:cb:f7:2f:0b: 7b:a1:fd:30:44:d9:25:b8:a8:46:d9:b4:a4:fe:ff:4b:19:86: 8e:ca:8e:9b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZswcjVyJ060OaEE7MX/rZo7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUxMjE4MDc1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2EwYzI4NWYxY2E3MmZmZjI2ODNhZDEyMzMwZjc3NGQ1MzcwYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIn5+3zVQO++ysBjidAFxPkFdAsQ dMuc7JEmGB5kZmnnQXHXJO01sfnhbsR9LgpcbE19hCS06tGToJo7E2Ug3C5EXbOY HcGi8mUW1V1UQ8mq3IhJy+SpQHHBH0/QLlnfUttfQDz9yADB65h8bzQWqX2Arjo7 bmHMF7m54JF25LS6g/k8yEJmtFklgQvSMbF3RnGFkxt3ZmJ7j1fLpvwlSmsx/ysS SVy7CMN/3Vi8i2uAZgTZAwlyI/fzqvkz/5D9pJedNVC78W115gnF7pH6rd662Ce7 khWZxA6g21i0SnYzohP/DhaLDZicfY1JaTxlAA1I/CFh+9JpNfhC/6kJxwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGygwoXxynL/8mg60SMw93TVNwsXMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvYktEQ2hmSEtjdl95YURyUkl6RDNkTlUzQ3hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg19RzAN BgkqhkiG9w0BAQsFAAOCAQEABiBuZWp6sE3wT4JWB5JXt4NP5vYZXdNy7wh0aZ2l eounWyWkFN2JDkrm+cG+4Y+px30yezuBXMynIDIHVSKnGJCJzhJ9814+/P0CSe9+ nP2MST0R5eQRN1H2gaf5xq/puS5XmuAfUMRNEcNXHHXG4VCyHsQSIXl1z+Mpyndf iEHpx0nRhbWCGP/10f+IQOU5WPeti1OP7+x/iWaGyaLbkFRe+Ivhh6TkbWc2MVu2 ma1RGRqdyZf40QSl/Gq22A2pMc6TMgqyqQNedofB+W5TBMNQowBi84v9NCunt9uA yI/LQBRNqcHL9y8Le6H9METZJbioRtm0pP7/SxmGjsqOmw== -----END CERTIFICATE-----Generated at Sat Dec 20 04:36:34 2025 by rpki-client