This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/RbNrcTwO6cZrr9U6024amIWECQE.roa File: RbNrcTwO6cZrr9U6024amIWECQE.roa (raw, json) Hash identifier: pcsqo9IyJ9w1JqlEv33+wrOwMQHPNalpoPNxBADMaW4= Subject key identifier: 45:B3:6B:71:3C:0E:E9:C6:6B:AF:D5:3A:D3:6E:1A:98:85:84:09:01 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019AFDB4B49F2A86BA288A33DC4DF782FAC0 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/RbNrcTwO6cZrr9U6024amIWECQE.roa Signing time: Mon 08 Dec 2025 11:24:29 +0000 ROA not before: Mon 08 Dec 2025 11:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215685 IP address blocks: 2a14:c380:330::/44 maxlen: 48 2a14:c380:600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:b4:b4:9f:2a:86:ba:28:8a:33:dc:4d:f7:82:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Dec 8 11:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=45b36b713c0ee9c66bafd53ad36e1a9885840901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:47:cc:07:2e:03:80:43:3d:0c:c9:8a:2f: 3c:53:ef:f6:bd:3a:17:50:7c:c7:b6:da:26:31:17: 81:f7:d6:33:17:a1:6c:67:10:82:94:d3:4c:ad:62: 6b:bc:b3:f2:51:5c:78:d2:e5:3a:f8:68:0e:c8:16: 2e:48:5e:f9:50:a9:71:66:78:29:80:d5:b0:9d:b1: 9d:2a:80:c2:e6:36:3e:89:ba:63:88:e6:65:1f:b0: 47:45:47:4a:e1:e4:3e:34:7c:ab:e4:c5:ef:03:c6: e9:8d:53:5e:fe:4f:95:62:8b:f2:f5:61:1d:1b:9e: 9e:85:25:90:7d:aa:1d:4c:04:2c:de:5d:2f:90:22: b5:9b:29:86:5a:19:bf:48:35:60:50:f5:8e:d6:b1: 55:cc:33:ac:61:f4:07:bf:94:7f:e2:4f:02:73:e9: c1:f9:c8:01:34:d5:f3:fc:ae:d7:eb:9d:31:f5:83: 16:90:7a:3f:0b:c3:61:2b:2d:3e:2e:4c:40:4e:d7: 85:b7:0a:19:b7:d9:b3:c4:de:be:5c:ff:14:58:27: 31:01:d7:21:37:bc:0b:ee:4b:70:df:47:af:0e:f1: 52:e2:9f:5a:c5:36:b4:7b:3e:2b:eb:97:0c:38:6f: 3c:dd:b5:fc:95:3c:24:20:2a:d4:de:b7:51:30:be: de:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B3:6B:71:3C:0E:E9:C6:6B:AF:D5:3A:D3:6E:1A:98:85:84:09:01 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/RbNrcTwO6cZrr9U6024amIWECQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:330::/44 2a14:c380:600::/40 Signature Algorithm: sha256WithRSAEncryption 0f:ec:04:e3:20:ef:17:bc:b1:ad:5b:ca:6e:ec:3e:9b:42:3c: a9:ce:a1:27:f6:af:d8:87:ba:f8:0d:9b:49:cc:0e:ef:4a:df: 63:7f:57:c6:9a:ce:9b:44:15:e1:7f:bd:5f:ea:f8:07:a8:d3: 86:43:12:9d:14:cb:51:48:c6:b1:6c:34:92:1f:30:72:fc:85: 2a:0c:90:c3:fc:71:01:81:ac:60:91:3f:fb:62:a9:cf:cb:ea: 10:bf:ca:c9:84:1f:b1:53:9f:32:76:d3:df:f5:df:70:dc:a3: 8f:05:d4:02:e6:71:bb:8c:91:2e:9a:1b:98:6c:6c:f6:4e:51: 5f:c8:42:77:ca:2a:ef:61:ca:fd:27:b2:bd:3e:c9:2a:8c:91: d5:43:40:ec:ff:64:ba:a2:79:c2:da:9e:c8:97:c3:86:db:90: 3d:b8:0f:e8:08:6e:f9:51:bd:4a:b3:b1:b6:1e:70:38:39:2a: 7e:0a:c8:6d:dc:64:6d:c9:7a:dd:0e:7d:ea:6e:33:f6:a5:85: 43:cd:56:32:71:45:07:c4:63:21:7a:2f:94:68:ba:67:a2:fa: 5d:31:af:14:09:58:66:e9:31:c8:92:b7:21:05:40:ff:d7:5f: 61:7a:c2:17:e3:b1:8f:02:48:81:c1:14:96:88:40:17:c6:9a: cf:d7:6d:33 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZr9tLSfKoa6KIoz3E33gvrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjUxMjA4MTEyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWIzNmI3MTNjMGVlOWM2NmJhZmQ1M2FkMzZlMWE5ODg1ODQwOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwlHzAcuA4BDPQzJii88U+/2vToX UHzHttomMReB99YzF6FsZxCClNNMrWJrvLPyUVx40uU6+GgOyBYuSF75UKlxZngp gNWwnbGdKoDC5jY+ibpjiOZlH7BHRUdK4eQ+NHyr5MXvA8bpjVNe/k+VYovy9WEd G56ehSWQfaodTAQs3l0vkCK1mymGWhm/SDVgUPWO1rFVzDOsYfQHv5R/4k8Cc+nB +cgBNNXz/K7X650x9YMWkHo/C8NhKy0+LkxATteFtwoZt9mzxN6+XP8UWCcxAdch N7wL7ktw30evDvFS4p9axTa0ez4r65cMOG883bX8lTwkICrU3rdRML7e3QIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFEWza3E8DunGa6/VOtNuGpiFhAkBMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvUmJOcmNUd082Y1pycjlVNjAyNGFtSVdFQ1FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhTDgAMw AwYAKhTDgAYwDQYJKoZIhvcNAQELBQADggEBAA/sBOMg7xe8sa1bym7sPptCPKnO oSf2r9iHuvgNm0nMDu9K32N/V8aazptEFeF/vV/q+Aeo04ZDEp0Uy1FIxrFsNJIf MHL8hSoMkMP8cQGBrGCRP/tiqc/L6hC/ysmEH7FTnzJ209/133Dco48F1ALmcbuM kS6aG5hsbPZOUV/IQnfKKu9hyv0nsr0+ySqMkdVDQOz/ZLqiecLansiXw4bbkD24 D+gIbvlRvUqzsbYecDg5Kn4KyG3cZG3Jet0OfepuM/alhUPNVjJxRQfEYyF6L5Ro umei+l0xrxQJWGbpMciStyEFQP/XX2F6whfjsY8CSIHBFJaIQBfGms/XbTM= -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:32 2025 by rpki-client