This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ipZrP9WQWCuyPmytr5zypRPcFVQ.roa File: ipZrP9WQWCuyPmytr5zypRPcFVQ.roa (raw, json) Hash identifier: W3yXWTwuUqhNwdpRRRdBbLsx+waa9sbWz8kN7iqh9/4= Subject key identifier: 8A:96:6B:3F:D5:90:58:2B:B2:3E:6C:AD:AF:9C:F2:A5:13:DC:15:54 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B26D2036C4E0B926DE4D789911651A98C Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ipZrP9WQWCuyPmytr5zypRPcFVQ.roa Signing time: Tue 16 Dec 2025 11:00:56 +0000 ROA not before: Tue 16 Dec 2025 11:00:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205486 IP address blocks: 2a0e:c783::/32 maxlen: 32 2a0e:f605::/32 maxlen: 32 2a0e:f606::/32 maxlen: 32 2a0f:1201::/32 maxlen: 32 2a0f:ea45::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:03:6c:4e:0b:92:6d:e4:d7:89:91:16:51:a9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 16 11:00:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8a966b3fd590582bb23e6cadaf9cf2a513dc1554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:00:8e:20:b3:a8:6a:ea:26:54:c6:54:9f:e6: 10:0d:7b:27:00:9f:ee:ab:af:3c:45:c7:4b:97:8a: 75:5d:8e:6a:6f:8d:e5:16:2e:ef:50:80:4f:35:2b: a9:2b:b0:76:11:0d:f7:7f:03:ab:c9:31:6c:68:ae: 86:86:b2:f6:cc:9d:16:76:4e:04:45:a9:31:0e:a9: 0f:65:14:c3:63:e7:90:ee:80:9f:21:ce:6e:31:fa: 0d:c2:82:3d:6c:e2:2b:b3:b6:4d:68:94:e7:8e:9e: 23:22:84:94:0a:ba:35:3b:dc:c7:bb:49:9d:44:1f: 9c:85:e0:97:61:01:16:f7:33:54:77:f1:e0:7d:30: c6:f7:ab:16:c8:eb:ef:7f:d9:69:a3:e5:82:67:a7: 38:39:0b:f6:7c:e3:1c:78:93:11:45:54:6b:b7:c0: c7:5c:0b:9a:8f:85:4f:47:22:54:9a:d6:7e:2d:67: 40:cc:7e:d7:05:95:bc:d3:1e:f5:e9:c0:81:19:4b: 14:e6:99:1f:30:83:a2:23:e2:30:4e:f0:d0:a0:8c: 5c:34:21:95:8c:d2:17:da:63:0a:9c:bd:36:fd:39: 79:7e:04:49:1e:85:e9:86:94:d2:12:f1:15:0e:17: 2a:8d:55:19:ce:6a:d9:54:26:8f:6a:13:88:bd:e2: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:96:6B:3F:D5:90:58:2B:B2:3E:6C:AD:AF:9C:F2:A5:13:DC:15:54 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ipZrP9WQWCuyPmytr5zypRPcFVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:c783::/32 2a0e:f605::-2a0e:f606:ffff:ffff:ffff:ffff:ffff:ffff 2a0f:1201::/32 2a0f:ea45::/32 Signature Algorithm: sha256WithRSAEncryption ca:e3:26:36:41:52:51:85:59:e7:10:37:e3:2c:48:d3:4c:d4: 59:e9:6e:10:08:6c:9f:a0:99:5a:c7:4a:30:c5:c4:59:db:fb: 58:a4:ba:ab:d7:e1:00:d0:80:26:23:f0:24:02:8a:fe:b2:a5: 4d:e0:c0:ab:5d:5c:6c:b1:47:42:5b:f6:59:94:8c:4b:6a:03: c3:4e:63:62:f0:fc:20:26:36:d8:f7:e7:2d:4c:e8:71:05:0e: 0b:9d:d7:39:c1:c6:02:5a:cc:99:8e:44:12:5c:09:86:3b:8a: fd:51:c5:c7:ea:80:5a:bc:53:20:cc:82:f6:de:6a:43:a9:d4: 0d:3a:f1:4b:7c:a3:ee:54:9e:d7:ce:29:2a:48:b8:11:88:c0: 69:a6:64:87:4a:2c:b0:4e:35:9a:28:3a:22:d9:95:34:7d:bb: 86:a9:23:17:7f:12:dd:87:3d:bc:c4:e7:86:f5:b9:60:b1:da: 95:c7:8b:1b:8d:94:b2:39:76:16:c4:c5:18:14:ae:24:f5:fc: ce:35:3d:fd:38:33:f4:2b:bc:c8:b8:af:aa:5c:bb:fe:54:f3: c5:0e:a5:e9:15:60:5c:23:a6:35:f2:d3:88:a0:d8:ec:ee:e1: ba:3d:1b:25:8f:b4:96:46:fc:ac:eb:b6:9d:ae:79:e4:a5:61: 39:47:d9:86 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZsm0gNsTguSbeTXiZEWUamMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjE2MTEwMDU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTk2NmIzZmQ1OTA1ODJiYjIzZTZjYWRhZjljZjJhNTEzZGMxNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApACOILOoauomVMZUn+YQDXsnAJ/u q688RcdLl4p1XY5qb43lFi7vUIBPNSupK7B2EQ33fwOryTFsaK6GhrL2zJ0Wdk4E RakxDqkPZRTDY+eQ7oCfIc5uMfoNwoI9bOIrs7ZNaJTnjp4jIoSUCro1O9zHu0md RB+cheCXYQEW9zNUd/HgfTDG96sWyOvvf9lpo+WCZ6c4OQv2fOMceJMRRVRrt8DH XAuaj4VPRyJUmtZ+LWdAzH7XBZW80x716cCBGUsU5pkfMIOiI+IwTvDQoIxcNCGV jNIX2mMKnL02/Tl5fgRJHoXphpTSEvEVDhcqjVUZzmrZVCaPahOIveIP3QIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFIqWaz/VkFgrsj5sra+c8qUT3BVUMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvaXBaclA5V1FXQ3V5UG15dHI1enlwUlBjRlZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAAjAlAwUAKg7HgzAO AwUAKg72BQMFACoO9gYDBQAqDxIBAwUAKg/qRTANBgkqhkiG9w0BAQsFAAOCAQEA yuMmNkFSUYVZ5xA34yxI00zUWeluEAhsn6CZWsdKMMXEWdv7WKS6q9fhANCAJiPw JAKK/rKlTeDAq11cbLFHQlv2WZSMS2oDw05jYvD8ICY22PfnLUzocQUOC53XOcHG AlrMmY5EElwJhjuK/VHFx+qAWrxTIMyC9t5qQ6nUDTrxS3yj7lSe184pKki4EYjA aaZkh0ossE41mig6ItmVNH27hqkjF38S3Yc9vMTnhvW5YLHalceLG42Usjl2FsTF GBSuJPX8zjU9/Tgz9Cu8yLivqly7/lTzxQ6l6RVgXCOmNfLTiKDY7O7huj0bJY+0 lkb8rOu2na555KVhOUfZhg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:22 2025 by rpki-client