This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sBR1CkXZlcTK72KNrSQwIldDMQE.roa File: sBR1CkXZlcTK72KNrSQwIldDMQE.roa (raw, json) Hash identifier: oZbOUpPloO35s8V2h8AZKBlNE0X/HRuNcWyQYx5Ozec= Subject key identifier: B0:14:75:0A:45:D9:95:C4:CA:EF:62:8D:AD:24:30:22:57:43:31:01 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B1C71AB387D6982F2FE4BD259250F42DD Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sBR1CkXZlcTK72KNrSQwIldDMQE.roa Signing time: Sun 14 Dec 2025 10:39:29 +0000 ROA not before: Sun 14 Dec 2025 10:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214967 IP address blocks: 2a0f:6d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:71:ab:38:7d:69:82:f2:fe:4b:d2:59:25:0f:42:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 14 10:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b014750a45d995c4caef628dad24302257433101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:b2:93:8e:1a:a6:7f:a6:bf:35:cc:2d:67: 93:0d:0c:66:20:d4:59:ed:fa:55:e5:1a:5f:d0:84: 9a:00:85:b5:4c:0c:0b:22:3d:0b:db:f0:83:54:d0: fe:7f:10:42:e3:58:a3:78:e0:cf:01:14:a2:70:29: 97:55:67:95:7a:78:74:a2:47:56:a9:fb:ab:c1:c9: b3:27:f9:28:b1:19:b9:23:0b:0a:51:fd:b2:21:d7: b1:d3:13:a5:f5:fb:f1:a3:e2:f9:ef:0c:15:e1:10: fd:af:7a:93:5d:bc:e1:de:82:2b:96:1e:a0:77:55: 7a:21:30:b2:4f:4c:59:77:03:63:24:1a:2c:33:e6: 17:a3:46:bd:bd:91:ed:b1:65:62:66:18:71:72:a3: 63:32:2b:1c:d9:6d:27:84:9d:3a:d7:77:72:7c:5f: 20:5f:dc:86:8c:66:30:98:b7:0a:52:f6:18:2d:2e: 09:ff:97:43:e9:ad:81:a4:5b:ee:cb:c5:49:73:42: 6d:9b:a6:c2:68:1f:03:43:0f:79:32:9a:32:17:5e: cd:c0:e7:97:09:90:0e:4e:26:98:d9:f5:1f:b3:3d: 95:25:96:01:88:eb:ba:20:30:16:dd:d6:aa:63:01: cb:3e:7a:60:4d:0c:4c:ed:e4:5c:4a:a6:49:03:18: 22:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:14:75:0A:45:D9:95:C4:CA:EF:62:8D:AD:24:30:22:57:43:31:01 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sBR1CkXZlcTK72KNrSQwIldDMQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6d80::/29 Signature Algorithm: sha256WithRSAEncryption 39:c6:00:35:8e:fd:09:ce:62:07:f7:82:68:13:53:73:4b:f9: 75:04:8c:fd:78:e3:1c:65:43:17:3c:4d:48:2a:0d:38:d4:3e: 49:66:32:91:70:e9:bc:ab:85:38:08:fc:39:d6:01:bc:62:1d: df:8e:a8:fb:58:58:a0:50:78:95:57:89:c9:5e:d4:a3:5a:94: 9c:94:9f:b1:88:6c:35:fe:87:6a:86:a2:c8:dd:c8:4c:39:92: d3:eb:8f:c0:f1:6a:79:67:45:eb:9b:b1:6e:d3:2e:ae:e1:bc: 57:73:8e:79:95:c1:14:9a:34:c0:a4:d1:40:f9:53:64:b1:07: 1d:91:31:b9:80:e2:a7:7e:7a:ba:e3:d7:ab:87:44:62:5a:a6: 01:a7:3e:83:ac:af:cf:83:e4:0c:d0:5e:b0:d2:b3:2e:ab:6a: bb:60:57:69:5b:7f:fe:49:a2:54:d7:d1:0d:31:c6:ad:4f:1f: 35:5a:c5:60:27:47:51:8f:0b:88:7d:87:df:63:0a:b3:d7:12: 0a:27:cd:6e:6e:84:6e:89:7f:44:89:dd:3d:7d:63:a8:de:a7: 6e:84:37:e0:62:b0:42:03:ac:c4:f1:dd:27:5c:47:ec:99:dc: 6c:13:2d:b5:0a:59:c7:1f:de:57:fe:79:49:11:61:23:4c:6a: 65:f3:3d:02 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsccas4fWmC8v5L0lklD0LdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjE0MTAzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDE0NzUwYTQ1ZDk5NWM0Y2FlZjYyOGRhZDI0MzAyMjU3NDMzMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGiyk44apn+mvzXMLWeTDQxmINRZ 7fpV5Rpf0ISaAIW1TAwLIj0L2/CDVND+fxBC41ijeODPARSicCmXVWeVenh0okdW qfurwcmzJ/kosRm5IwsKUf2yIdex0xOl9fvxo+L57wwV4RD9r3qTXbzh3oIrlh6g d1V6ITCyT0xZdwNjJBosM+YXo0a9vZHtsWViZhhxcqNjMisc2W0nhJ0613dyfF8g X9yGjGYwmLcKUvYYLS4J/5dD6a2BpFvuy8VJc0Jtm6bCaB8DQw95MpoyF17NwOeX CZAOTiaY2fUfsz2VJZYBiOu6IDAW3daqYwHLPnpgTQxM7eRcSqZJAxgiFwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLAUdQpF2ZXEyu9ija0kMCJXQzEBMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvc0JSMUNrWFpsY1RLNzJLTnJTUXdJbGRETVFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg9tgDAN BgkqhkiG9w0BAQsFAAOCAQEAOcYANY79Cc5iB/eCaBNTc0v5dQSM/XjjHGVDFzxN SCoNONQ+SWYykXDpvKuFOAj8OdYBvGId346o+1hYoFB4lVeJyV7Uo1qUnJSfsYhs Nf6HaoaiyN3ITDmS0+uPwPFqeWdF65uxbtMuruG8V3OOeZXBFJo0wKTRQPlTZLEH HZExuYDip356uuPXq4dEYlqmAac+g6yvz4PkDNBesNKzLqtqu2BXaVt//kmiVNfR DTHGrU8fNVrFYCdHUY8LiH2H32MKs9cSCifNbm6Ebol/RIndPX1jqN6nboQ34GKw QgOsxPHdJ1xH7JncbBMttQpZxx/eV/55SRFhI0xqZfM9Ag== -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:22 2025 by rpki-client