This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/58b1HZ17g0Ypkdvbqk5B_BvcDTc.roa File: 58b1HZ17g0Ypkdvbqk5B_BvcDTc.roa (raw, json) Hash identifier: 2+Zwzepv0JYWtp0k1h4OGo+l8kFZ7cqhLfk5vGajt1A= Subject key identifier: E7:C6:F5:1D:9D:7B:83:46:29:91:DB:DB:AA:4E:41:FC:1B:DC:0D:37 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B2BA93DE80E6B085264BA9F74496D99EB Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/58b1HZ17g0Ypkdvbqk5B_BvcDTc.roa Signing time: Wed 17 Dec 2025 09:34:30 +0000 ROA not before: Wed 17 Dec 2025 09:34:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55201 IP address blocks: 2a0f:3041::/32 maxlen: 40 2a12:ac45::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:a9:3d:e8:0e:6b:08:52:64:ba:9f:74:49:6d:99:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 17 09:34:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e7c6f51d9d7b83462991dbdbaa4e41fc1bdc0d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:a3:a2:6f:e0:00:e1:1f:d5:f4:89:ff:dd: 61:ab:11:b7:d0:0e:2e:33:fc:f5:cd:7e:fe:1e:74: 89:65:0b:54:33:30:91:81:5e:ce:d3:de:c3:7f:a8: 7d:94:26:47:4e:0e:83:f4:e0:36:f3:5d:8f:0b:bf: eb:80:3b:18:16:a9:2c:59:30:ec:08:be:36:2f:7c: 98:00:8a:de:d3:0f:5e:a3:81:37:1a:a1:36:e5:68: be:c5:db:a8:c6:11:b5:b0:d8:fe:a4:51:5b:cb:e3: 13:5b:47:f7:00:81:62:ff:c4:ec:65:99:21:8b:eb: a0:f7:99:96:f5:f3:29:df:d8:04:65:f3:27:a1:88: 67:53:dd:e9:dd:a6:b7:b6:71:5e:25:2c:1e:98:50: 86:4c:f8:11:0e:17:fb:38:f8:e2:3a:45:1f:42:b9: ef:d6:5a:55:df:e2:40:89:c4:e2:bd:2b:02:bc:77: a8:38:6e:f9:56:4b:d0:d6:f6:9b:df:62:7e:3f:22: 94:6e:23:c1:ea:30:3c:36:68:46:64:40:cd:9b:f7: ec:fd:0a:fb:04:0e:7f:00:1a:e1:8f:5b:92:c8:69: ee:1e:a8:f5:33:6d:ea:19:00:17:89:07:99:48:b6: b2:4b:a4:6b:e7:43:40:d1:fb:1d:95:3c:04:50:39: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C6:F5:1D:9D:7B:83:46:29:91:DB:DB:AA:4E:41:FC:1B:DC:0D:37 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/58b1HZ17g0Ypkdvbqk5B_BvcDTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:3041::/32 2a12:ac45::/32 Signature Algorithm: sha256WithRSAEncryption 71:8b:97:2d:ad:7b:ed:5b:4f:ae:cb:dc:d7:50:99:44:a5:6c: 09:4d:8b:ee:f2:ff:64:21:8c:cc:ef:46:3f:05:c9:82:ab:d4: 74:5c:3f:ed:03:4a:3b:52:43:82:cc:99:77:7e:bb:01:7d:9b: 20:5e:69:a5:f8:39:4b:7f:b0:44:4a:66:ba:4e:ed:2a:c4:42: ae:f9:7c:16:17:be:0f:e5:34:07:bd:61:5a:99:4b:be:65:8c: 31:fe:17:ef:d3:31:8c:a6:3a:eb:89:0e:66:18:5f:5f:19:97: 69:12:4c:82:df:bf:ce:a9:59:b0:cd:50:ef:f2:36:d0:01:e9: b5:87:ab:9a:67:6f:16:62:e8:0d:55:35:55:fb:f4:c2:0a:63: 6a:e4:10:d9:14:91:6c:9a:17:a5:5a:7a:2d:a7:31:a5:4a:cd: 0c:2c:f9:65:bb:b8:f2:07:91:34:59:cc:e6:9b:5d:24:21:df: eb:c3:5f:65:f8:7a:03:cf:3d:9c:97:0b:a2:04:da:68:31:f4: 6d:e9:72:d2:42:8c:aa:da:10:c1:26:c0:f8:96:54:69:81:b2: 19:5f:7d:1d:d1:fe:72:ff:20:af:b4:a5:a3:d7:a8:1f:e7:10: 4d:be:85:3d:70:4f:39:19:eb:de:6a:86:be:af:98:ee:75:9d: b6:7f:d8:26 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsrqT3oDmsIUmS6n3RJbZnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjE3MDkzNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2M2ZjUxZDlkN2I4MzQ2Mjk5MWRiZGJhYTRlNDFmYzFiZGMwZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytGjom/gAOEf1fSJ/91hqxG30A4u M/z1zX7+HnSJZQtUMzCRgV7O097Df6h9lCZHTg6D9OA2812PC7/rgDsYFqksWTDs CL42L3yYAIre0w9eo4E3GqE25Wi+xduoxhG1sNj+pFFby+MTW0f3AIFi/8TsZZkh i+ug95mW9fMp39gEZfMnoYhnU93p3aa3tnFeJSwemFCGTPgRDhf7OPjiOkUfQrnv 1lpV3+JAicTivSsCvHeoOG75VkvQ1vab32J+PyKUbiPB6jA8NmhGZEDNm/fs/Qr7 BA5/ABrhj1uSyGnuHqj1M23qGQAXiQeZSLayS6Rr50NA0fsdlTwEUDmfJwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOfG9R2de4NGKZHb26pOQfwb3A03MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvNThiMUhaMTdnMFlwa2R2YnFrNUJfQnZjRFRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg8wQQMF ACoSrEUwDQYJKoZIhvcNAQELBQADggEBAHGLly2te+1bT67L3NdQmUSlbAlNi+7y /2QhjMzvRj8FyYKr1HRcP+0DSjtSQ4LMmXd+uwF9myBeaaX4OUt/sERKZrpO7SrE Qq75fBYXvg/lNAe9YVqZS75ljDH+F+/TMYymOuuJDmYYX18Zl2kSTILfv86pWbDN UO/yNtAB6bWHq5pnbxZi6A1VNVX79MIKY2rkENkUkWyaF6Vaei2nMaVKzQws+WW7 uPIHkTRZzOabXSQh3+vDX2X4egPPPZyXC6IE2mgx9G3pctJCjKraEMEmwPiWVGmB shlffR3R/nL/IK+0paPXqB/nEE2+hT1wTzkZ695qhr6vmO51nbZ/2CY= -----END CERTIFICATE-----Generated at Wed Dec 17 21:18:33 2025 by rpki-client