This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1bpI7D59YzaBjCd5VmGIo9nBsk8.roa File: 1bpI7D59YzaBjCd5VmGIo9nBsk8.roa (raw, json) Hash identifier: ZJnWCAViHdx14XM6bViwkfYzoVG4NptYG9my5PFm4Es= Subject key identifier: D5:BA:48:EC:3E:7D:63:36:81:8C:27:79:56:61:88:A3:D9:C1:B2:4F Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B2DB89496B67F654D5FCC31A7578ACA35 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1bpI7D59YzaBjCd5VmGIo9nBsk8.roa Signing time: Wed 17 Dec 2025 19:10:29 +0000 ROA not before: Wed 17 Dec 2025 19:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43641 IP address blocks: 2a13:e104::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b8:94:96:b6:7f:65:4d:5f:cc:31:a7:57:8a:ca:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 17 19:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d5ba48ec3e7d6336818c2779566188a3d9c1b24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0c:1d:15:4d:23:aa:57:96:be:b2:bd:c1:11: 63:c6:0f:15:a9:95:17:47:79:28:8b:5e:43:3f:b0: f7:b5:58:52:b9:0f:b0:12:88:b8:19:da:78:e4:ac: eb:21:37:e1:1d:3b:f9:9e:ac:01:3b:d5:32:b5:93: 51:09:35:ce:e4:57:83:98:67:ee:e0:4d:5e:6e:f4: ce:5c:d0:15:ec:f9:21:41:9b:84:88:c4:35:c8:f2: 3d:0b:20:a7:f5:03:2f:23:61:98:60:f7:23:26:32: a4:c1:dd:0f:f0:63:b0:98:fd:63:d4:7f:aa:6b:f9: 49:74:6d:e9:7a:8d:ff:38:08:61:7c:d7:e4:8a:a1: d2:51:74:83:f9:9f:9f:95:60:22:03:a7:2c:48:62: 3a:ed:f3:52:0a:03:69:0c:43:79:9e:80:c1:f6:be: 8f:cc:a7:38:b2:a8:3a:06:af:af:9d:c1:02:91:2e: 48:88:c4:dc:a8:74:20:2e:3a:49:97:3d:db:41:dc: bd:8a:29:90:5c:c1:d9:31:76:40:eb:ba:98:cf:e1: 06:6c:1a:48:b4:bb:a0:b0:a8:44:5a:05:f5:29:ef: d9:1a:be:2e:4a:17:86:d3:29:d1:6d:92:88:22:c4: 81:4f:72:e8:33:69:bb:25:04:54:a7:03:2b:17:c4: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BA:48:EC:3E:7D:63:36:81:8C:27:79:56:61:88:A3:D9:C1:B2:4F X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1bpI7D59YzaBjCd5VmGIo9nBsk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:e104::/32 Signature Algorithm: sha256WithRSAEncryption 92:d6:6f:df:b7:a9:08:d0:41:85:98:26:b6:ff:ef:8e:a3:56: fa:72:73:45:5d:c4:f2:09:36:30:91:54:13:92:a2:69:86:8d: 09:d3:9a:c9:b5:54:0a:67:38:bc:35:9b:88:0b:c6:9d:0e:fe: 08:61:31:36:a4:9c:dd:10:db:40:a5:ed:d0:4d:5d:e1:59:be: a9:41:a6:9b:a1:fc:5a:ff:90:58:bc:5d:1c:0d:a7:e4:9d:ef: 32:b4:6d:22:b4:95:7e:a1:99:80:97:14:6c:4d:2a:07:ce:2d: 26:22:e2:26:6a:59:39:87:82:b5:b8:6a:b4:5c:16:23:03:1f: e7:ac:2f:72:1e:49:26:60:af:5c:2e:ac:89:86:0e:e9:09:e1: e6:69:6e:96:35:25:86:60:d0:f6:ae:28:81:56:e3:1d:53:16: 68:5e:ab:b9:7c:68:3c:4d:1f:4b:69:dc:61:b7:e8:ab:dc:8d: 06:0a:0e:b7:4f:20:33:c8:23:cd:3d:81:50:7f:88:a5:c1:42: 3e:a6:44:2c:3a:78:bc:9c:b4:c3:15:91:5b:31:da:81:96:03: 0e:63:ea:3f:a6:c8:89:e9:0d:d9:81:bb:de:c6:33:c8:24:ed: 49:77:cd:de:ec:5d:40:d4:5e:46:b3:e2:a6:cb:dc:26:51:dc: b3:5f:a5:29 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZstuJSWtn9lTV/MMadXiso1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjE3MTkxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWJhNDhlYzNlN2Q2MzM2ODE4YzI3Nzk1NjYxODhhM2Q5YzFiMjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gwdFU0jqleWvrK9wRFjxg8VqZUX R3koi15DP7D3tVhSuQ+wEoi4Gdp45KzrITfhHTv5nqwBO9UytZNRCTXO5FeDmGfu 4E1ebvTOXNAV7PkhQZuEiMQ1yPI9CyCn9QMvI2GYYPcjJjKkwd0P8GOwmP1j1H+q a/lJdG3peo3/OAhhfNfkiqHSUXSD+Z+flWAiA6csSGI67fNSCgNpDEN5noDB9r6P zKc4sqg6Bq+vncECkS5IiMTcqHQgLjpJlz3bQdy9iimQXMHZMXZA67qYz+EGbBpI tLugsKhEWgX1Ke/ZGr4uSheG0ynRbZKIIsSBT3LoM2m7JQRUpwMrF8RLFQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNW6SOw+fWM2gYwneVZhiKPZwbJPMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMWJwSTdENTlZemFCakNkNVZtR0lvOW5Cc2s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPhBDAN BgkqhkiG9w0BAQsFAAOCAQEAktZv37epCNBBhZgmtv/vjqNW+nJzRV3E8gk2MJFU E5KiaYaNCdOaybVUCmc4vDWbiAvGnQ7+CGExNqSc3RDbQKXt0E1d4Vm+qUGmm6H8 Wv+QWLxdHA2n5J3vMrRtIrSVfqGZgJcUbE0qB84tJiLiJmpZOYeCtbhqtFwWIwMf 56wvch5JJmCvXC6siYYO6Qnh5mluljUlhmDQ9q4ogVbjHVMWaF6ruXxoPE0fS2nc Ybfoq9yNBgoOt08gM8gjzT2BUH+IpcFCPqZELDp4vJy0wxWRWzHagZYDDmPqP6bI iekN2YG73sYzyCTtSXfN3uxdQNReRrPipsvcJlHcs1+lKQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:24 2025 by rpki-client