This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5zOZM5HYOAJ01Uuiir4J54-hTXk.roa File: 5zOZM5HYOAJ01Uuiir4J54-hTXk.roa (raw, json) Hash identifier: iDmnmXsEjPRzUnnE5ceEwdL9Mjpbg8Y77vDNweu8Nik= Subject key identifier: E7:33:99:33:91:D8:38:02:74:D5:4B:A2:8A:BE:09:E7:8F:A1:4D:79 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B2632503A1E151006ED14AFABDBA3621A Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5zOZM5HYOAJ01Uuiir4J54-hTXk.roa Signing time: Tue 16 Dec 2025 08:06:30 +0000 ROA not before: Tue 16 Dec 2025 08:06:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 11404 IP address blocks: 2a06:5280::/29 maxlen: 32 2a09:4900::/29 maxlen: 32 2a0f:14c0::/29 maxlen: 32 2a0f:1840::/29 maxlen: 32 2a0f:1a40::/29 maxlen: 32 2a0f:28c0::/29 maxlen: 32 2a0f:dac0::/29 maxlen: 32 2a10:33c0::/29 maxlen: 32 2a10:36c0::/29 maxlen: 32 2a10:6b00::/29 maxlen: 32 2a10:7f00::/29 maxlen: 32 2a11:89c0::/29 maxlen: 32 2a11:d240::/29 maxlen: 32 2a12:d6c0::/29 maxlen: 32 2a13:200::/29 maxlen: 32 2a13:9380::/29 maxlen: 32 2a13:9680::/29 maxlen: 32 2a13:cf00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:32:50:3a:1e:15:10:06:ed:14:af:ab:db:a3:62:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 16 08:06:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e733993391d8380274d54ba28abe09e78fa14d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:d1:5b:e0:40:66:ee:bb:28:e4:20:ef:65: 79:32:c2:59:63:20:ea:f5:b0:04:a0:8a:19:e5:dc: 37:cd:9b:ff:b1:00:0c:02:06:e2:57:ac:36:2e:00: 86:50:04:43:ef:81:a9:31:6d:05:ff:a6:34:e5:25: f6:b2:9d:ba:ef:6a:05:bd:fa:47:d6:3f:19:6d:39: e8:cc:9a:fa:fa:6e:64:db:72:f8:5b:c9:92:77:be: 19:44:bb:8b:dd:00:b2:b1:f6:7f:20:4f:de:12:cc: c3:a6:86:19:d7:e1:51:37:5d:b3:51:7b:2f:77:66: 5d:3b:e6:7a:07:1c:3e:72:90:1e:a3:89:11:59:b6: 54:a1:35:a0:19:41:e5:b3:98:fb:bc:ee:5f:49:d1: 47:b9:ad:2c:0a:4b:26:c7:b9:e2:db:d2:de:64:3d: 80:6e:87:47:5b:5d:be:ed:ac:91:7e:6a:cb:98:d8: 2e:ba:5d:2b:ce:3e:18:b1:9a:87:46:b6:41:8b:f8: fd:37:c6:e1:e3:ec:ac:e1:64:b2:ef:59:b2:9b:f4: f7:7b:ba:41:7b:4d:6f:de:1a:20:6b:33:fb:82:70: b3:b0:ea:64:34:43:50:5b:4e:4c:cc:09:64:0d:1c: 2e:27:c9:b8:ee:25:23:8f:ca:75:fd:dc:3a:bb:81: fb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:33:99:33:91:D8:38:02:74:D5:4B:A2:8A:BE:09:E7:8F:A1:4D:79 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5zOZM5HYOAJ01Uuiir4J54-hTXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:5280::/29 2a09:4900::/29 2a0f:14c0::/29 2a0f:1840::/29 2a0f:1a40::/29 2a0f:28c0::/29 2a0f:dac0::/29 2a10:33c0::/29 2a10:36c0::/29 2a10:6b00::/29 2a10:7f00::/29 2a11:89c0::/29 2a11:d240::/29 2a12:d6c0::/29 2a13:200::/29 2a13:9380::/29 2a13:9680::/29 2a13:cf00::/29 Signature Algorithm: sha256WithRSAEncryption 3e:95:8c:c0:ad:dd:a0:d4:6c:0c:6c:a7:fd:99:fc:9b:4d:16: 0e:3c:c0:54:7d:79:4e:86:ef:4c:07:96:e6:db:73:85:39:72: 0f:eb:ec:b9:c0:25:5a:84:26:b6:f5:31:cc:01:6e:20:80:87: f5:75:87:da:e9:2b:8c:67:96:b9:5f:7f:97:42:92:da:31:c1: 77:0c:8d:52:00:73:a7:d1:0a:aa:86:a0:28:a0:70:35:1e:46: fa:2c:6d:3e:c9:a0:d9:3f:3c:28:60:cc:c8:8f:50:3a:41:80: 66:17:28:51:95:e3:91:c6:88:47:f8:6f:90:6e:3a:0a:cb:86: 57:51:da:56:81:b3:57:cf:ae:ec:f3:bc:a6:0f:3a:b6:1a:28: bf:8c:cf:3a:f7:12:1c:7f:7d:17:63:3b:90:94:d7:d5:87:60: ac:06:bb:3b:60:47:b0:b8:a8:0f:c0:ce:0d:e2:6e:4f:21:f6: 94:47:9a:56:0d:71:34:b4:97:4f:75:c9:8d:91:f7:10:88:78: 52:db:fc:c3:99:54:f8:8d:e2:da:27:82:18:a1:60:c1:54:19: 65:95:3d:35:86:5f:22:5e:47:05:db:bc:38:52:12:92:45:49: 7b:f8:bc:a0:eb:79:0f:ad:71:02:d6:53:ed:73:e5:60:4e:86: 6f:27:09:b0 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZsmMlA6HhUQBu0Ur6vbo2IaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjE2MDgwNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzMzOTkzMzkxZDgzODAyNzRkNTRiYTI4YWJlMDllNzhmYTE0ZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQPRW+BAZu67KOQg72V5MsJZYyDq 9bAEoIoZ5dw3zZv/sQAMAgbiV6w2LgCGUARD74GpMW0F/6Y05SX2sp2672oFvfpH 1j8ZbTnozJr6+m5k23L4W8mSd74ZRLuL3QCysfZ/IE/eEszDpoYZ1+FRN12zUXsv d2ZdO+Z6Bxw+cpAeo4kRWbZUoTWgGUHls5j7vO5fSdFHua0sCksmx7ni29LeZD2A bodHW12+7ayRfmrLmNguul0rzj4YsZqHRrZBi/j9N8bh4+ys4WSy71mym/T3e7pB e01v3hogazP7gnCzsOpkNENQW05MzAlkDRwuJ8m47iUjj8p1/dw6u4H78wIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFOczmTOR2DgCdNVLooq+CeePoU15MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvNXpPWk01SFlPQUowMVV1aWlyNEo1NC1oVFhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAIwfgMFAyoG UoADBQMqCUkAAwUDKg8UwAMFAyoPGEADBQMqDxpAAwUDKg8owAMFAyoP2sADBQMq EDPAAwUDKhA2wAMFAyoQawADBQMqEH8AAwUDKhGJwAMFAyoR0kADBQMqEtbAAwUD KhMCAAMFAyoTk4ADBQMqE5aAAwUDKhPPADANBgkqhkiG9w0BAQsFAAOCAQEAPpWM wK3doNRsDGyn/Zn8m00WDjzAVH15TobvTAeW5ttzhTlyD+vsucAlWoQmtvUxzAFu IICH9XWH2ukrjGeWuV9/l0KS2jHBdwyNUgBzp9EKqoagKKBwNR5G+ixtPsmg2T88 KGDMyI9QOkGAZhcoUZXjkcaIR/hvkG46CsuGV1HaVoGzV8+u7PO8pg86thoov4zP OvcSHH99F2M7kJTX1YdgrAa7O2BHsLioD8DODeJuTyH2lEeaVg1xNLSXT3XJjZH3 EIh4Utv8w5lU+I3i2ieCGKFgwVQZZZU9NYZfIl5HBdu8OFISkkVJe/i8oOt5D61x AtZT7XPlYE6GbycJsA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:22 2025 by rpki-client