This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VjuwGMcifJ2V3ZTGX71XtIDaBo8.roa File: VjuwGMcifJ2V3ZTGX71XtIDaBo8.roa (raw, json) Hash identifier: LqrPt92vSdz3iNpl8jXKXu9b27b3r5xq0Ui9dATzs08= Subject key identifier: 56:3B:B0:18:C7:22:7C:9D:95:DD:94:C6:5F:BD:57:B4:80:DA:06:8F Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B0CF4856B3E990D61F64A1B52ED213714 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VjuwGMcifJ2V3ZTGX71XtIDaBo8.roa Signing time: Thu 11 Dec 2025 10:28:30 +0000 ROA not before: Thu 11 Dec 2025 10:28:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205544 IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48 2a0e:1a83:88::/48 maxlen: 48 2a0f:1206:77::/48 maxlen: 48 2a0f:1540::/29 maxlen: 29 2a0f:1640::/29 maxlen: 29 2a0f:1940::/29 maxlen: 29 2a0f:2840::/29 maxlen: 29 2a0f:2940::/29 maxlen: 29 2a0f:2a40::/29 maxlen: 29 2a0f:2dc0::/29 maxlen: 29 2a0f:2e40::/29 maxlen: 29 2a0f:30c0::/29 maxlen: 29 2a0f:3140::/29 maxlen: 29 2a0f:3540::/29 maxlen: 29 2a0f:3740::/29 maxlen: 29 2a0f:bc02::/32 maxlen: 32 2a0f:e1c0:3::/48 maxlen: 48 2a0f:e1c7:100::/48 maxlen: 48 2a0f:e200:5::/48 maxlen: 48 2a0f:e202:97::/48 maxlen: 48 2a0f:e440::/29 maxlen: 29 2a0f:ea40:8::/48 maxlen: 48 2a0f:ea44:88::/48 maxlen: 48 2a11:3240::/29 maxlen: 29 2a11:4800::/29 maxlen: 29 2a11:8700::/29 maxlen: 29 2a11:e580::/29 maxlen: 29 2a12:3f00::/29 maxlen: 29 2a12:4b00::/29 maxlen: 29 2a12:5900::/29 maxlen: 29 2a12:cd00::/29 maxlen: 29 2a12:ecc0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:f4:85:6b:3e:99:0d:61:f6:4a:1b:52:ed:21:37:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 11 10:28:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=563bb018c7227c9d95dd94c65fbd57b480da068f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:1d:bc:ba:7d:b8:0d:01:f0:42:4d:24:d4: a4:ed:cf:6c:d2:fb:ef:69:59:92:77:dc:be:49:9b: d4:f3:d3:d1:ea:76:4f:75:a9:de:25:b9:82:ff:8b: 00:a2:a7:9c:ad:b5:cc:b1:27:96:92:60:26:7e:25: d8:c2:3c:33:c2:f6:a8:41:92:2f:bb:ab:b8:5f:4a: c1:93:ab:19:db:7a:ea:75:aa:26:9b:c8:6f:4d:63: 11:53:0f:ec:12:6d:3a:db:8e:cf:27:df:59:7f:1e: 0b:73:05:50:93:90:79:1e:d9:85:50:c1:cf:31:ee: 7a:6d:0b:72:09:ed:46:66:4b:c8:8e:43:39:42:61: c5:f5:c7:9b:43:57:9d:d9:59:66:8d:35:7e:21:88: b9:00:80:35:34:59:f2:70:5e:07:6a:f7:03:82:44: 16:34:4a:79:a7:29:56:f6:20:3d:11:d8:e3:21:78: 88:98:d8:89:ae:cd:b7:a9:e6:1c:1a:91:59:65:39: 39:e0:2f:83:45:67:9f:38:2e:cd:09:f8:72:14:98: c5:ea:f1:e8:ac:40:9a:eb:44:b1:34:e2:c7:39:ca: cf:ff:7d:89:b8:23:47:7e:03:a2:60:1e:2d:15:14: 38:63:d5:b6:3b:bd:bc:80:2b:6b:d3:73:2f:d2:79: 86:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3B:B0:18:C7:22:7C:9D:95:DD:94:C6:5F:BD:57:B4:80:DA:06:8F X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VjuwGMcifJ2V3ZTGX71XtIDaBo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:17c0:b19a::/48 2a0e:1a83:88::/48 2a0f:1206:77::/48 2a0f:1540::/29 2a0f:1640::/29 2a0f:1940::/29 2a0f:2840::/29 2a0f:2940::/29 2a0f:2a40::/29 2a0f:2dc0::/29 2a0f:2e40::/29 2a0f:30c0::/29 2a0f:3140::/29 2a0f:3540::/29 2a0f:3740::/29 2a0f:bc02::/32 2a0f:e1c0:3::/48 2a0f:e1c7:100::/48 2a0f:e200:5::/48 2a0f:e202:97::/48 2a0f:e440::/29 2a0f:ea40:8::/48 2a0f:ea44:88::/48 2a11:3240::/29 2a11:4800::/29 2a11:8700::/29 2a11:e580::/29 2a12:3f00::/29 2a12:4b00::/29 2a12:5900::/29 2a12:cd00::/29 2a12:ecc0:3::/48 Signature Algorithm: sha256WithRSAEncryption b2:7c:06:3b:7f:fb:d7:a0:fb:23:62:49:99:2b:49:e2:82:76: e7:1e:09:99:07:d1:84:13:68:c0:27:d9:5f:eb:e2:a9:9f:1f: d4:c3:3f:56:b6:c5:2d:81:72:bd:01:5c:f1:92:94:a6:f3:21: c5:b8:76:cf:b9:25:09:1c:5e:de:ad:a7:f4:65:e4:29:81:63: 2d:db:1f:2d:59:d5:ca:4d:a8:40:ea:af:68:01:b8:07:cd:e8: 9c:a2:e4:f6:6c:87:e8:8d:17:7a:41:1e:41:4c:5e:d0:f6:90: 06:25:a7:1b:5d:54:2b:43:ee:a7:de:2a:aa:2a:62:43:bd:64: 06:43:bc:78:ed:7a:9f:26:05:31:65:b9:ac:f3:45:d8:eb:e5: fe:14:1a:78:23:c8:ef:0f:29:36:ea:aa:b0:2c:9b:44:f9:62: bf:13:c2:58:a6:ae:b4:80:88:4f:c1:2b:cc:af:97:dc:d3:98: c3:3b:ca:d5:bd:24:9e:b7:52:ad:f5:8a:b4:96:b0:08:ed:a5: f1:0a:d1:b7:23:00:ec:ba:56:10:5b:be:7f:1a:61:d7:57:fe: b7:8c:94:d1:1d:c8:54:d7:c9:57:2e:8a:80:87:3d:d4:85:99: 3e:e5:c6:47:eb:37:06:95:b4:4d:6c:e7:70:76:11:51:48:b1: 71:9e:32:d3 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISAZsM9IVrPpkNYfZKG1LtITcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjExMTAyODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjNiYjAxOGM3MjI3YzlkOTVkZDk0YzY1ZmJkNTdiNDgwZGEwNjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOYdvLp9uA0B8EJNJNSk7c9s0vvv aVmSd9y+SZvU89PR6nZPdaneJbmC/4sAoqecrbXMsSeWkmAmfiXYwjwzwvaoQZIv u6u4X0rBk6sZ23rqdaomm8hvTWMRUw/sEm06247PJ99Zfx4LcwVQk5B5HtmFUMHP Me56bQtyCe1GZkvIjkM5QmHF9cebQ1ed2VlmjTV+IYi5AIA1NFnycF4HavcDgkQW NEp5pylW9iA9EdjjIXiImNiJrs23qeYcGpFZZTk54C+DRWefOC7NCfhyFJjF6vHo rECa60SxNOLHOcrP/32JuCNHfgOiYB4tFRQ4Y9W2O728gCtr03Mv0nmGGQIDAQAB o4IC/jCCAvowHQYDVR0OBBYEFFY7sBjHInydld2Uxl+9V7SA2gaPMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvVmp1d0dNY2lmSjJWM1pUR1g3MVh0SURhQm84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIH7BAIAAjCB9AMH ACoJF8CxmgMHACoOGoMAiAMHACoPEgYAdwMFAyoPFUADBQMqDxZAAwUDKg8ZQAMF AyoPKEADBQMqDylAAwUDKg8qQAMFAyoPLcADBQMqDy5AAwUDKg8wwAMFAyoPMUAD BQMqDzVAAwUDKg83QAMFACoPvAIDBwAqD+HAAAMDBwAqD+HHAQADBwAqD+IAAAUD BwAqD+ICAJcDBQMqD+RAAwcAKg/qQAAIAwcAKg/qRACIAwUDKhEyQAMFAyoRSAAD BQMqEYcAAwUDKhHlgAMFAyoSPwADBQMqEksAAwUDKhJZAAMFAyoSzQADBwAqEuzA AAMwDQYJKoZIhvcNAQELBQADggEBALJ8Bjt/+9eg+yNiSZkrSeKCduceCZkH0YQT aMAn2V/r4qmfH9TDP1a2xS2Bcr0BXPGSlKbzIcW4ds+5JQkcXt6tp/Rl5CmBYy3b Hy1Z1cpNqEDqr2gBuAfN6Jyi5PZsh+iNF3pBHkFMXtD2kAYlpxtdVCtD7qfeKqoq YkO9ZAZDvHjtep8mBTFluazzRdjr5f4UGngjyO8PKTbqqrAsm0T5Yr8TwlimrrSA iE/BK8yvl9zTmMM7ytW9JJ63Uq31irSWsAjtpfEK0bcjAOy6VhBbvn8aYddX/reM lNEdyFTXyVcuioCHPdSFmT7lxkfrNwaVtE1s53B2EVFIsXGeMtM= -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:23 2025 by rpki-client