This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/hYJMpj7trmOLg4bYV_XxHfL3U_k.roa File: hYJMpj7trmOLg4bYV_XxHfL3U_k.roa (raw, json) Hash identifier: u6TqYt+M1WsCcprngUMwZTYTIFACRPKMNK9CZTrj8F4= Subject key identifier: 85:82:4C:A6:3E:ED:AE:63:8B:83:86:D8:57:F5:F1:1D:F2:F7:53:F9 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B0C8213CCF7667E0B0E3C7AF6812FCE65 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/hYJMpj7trmOLg4bYV_XxHfL3U_k.roa Signing time: Thu 11 Dec 2025 08:23:29 +0000 ROA not before: Thu 11 Dec 2025 08:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151331 IP address blocks: 2a0f:7802:e000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:82:13:cc:f7:66:7e:0b:0e:3c:7a:f6:81:2f:ce:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Dec 11 08:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=85824ca63eedae638b8386d857f5f11df2f753f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:93:c4:3d:e3:46:1e:2e:a4:41:b9:0a:c7:36: 26:d0:b6:13:ee:46:00:7f:3b:fc:50:3c:30:0d:58: b5:12:89:5b:ef:c5:70:a0:e1:c4:c7:f2:08:90:ec: fe:cd:e6:68:6d:41:e6:f1:a9:7c:5a:df:76:8b:6b: db:a6:71:e7:28:e4:f2:d5:55:01:b4:1d:5f:df:b5: 03:f1:0d:a9:55:6c:d9:fc:66:c8:e7:02:21:cb:ed: 01:c5:0f:f1:5f:ec:bf:14:3b:9f:bc:55:ac:98:27: 03:cd:6b:37:33:70:54:a7:ff:e5:c6:60:dd:a0:94: 53:bc:b7:49:b5:c1:76:c0:17:a8:ee:f2:0f:29:66: 2b:17:13:ab:fd:1a:8c:d6:46:26:e6:55:02:65:99: 9d:81:39:93:fc:ef:66:b4:34:02:04:fc:48:2a:6d: b0:5a:7c:19:35:33:73:8d:2a:49:da:2a:8d:0d:2f: a3:e8:67:0a:74:dc:3e:e0:ba:9a:aa:61:e9:ae:72: 17:5e:2f:ca:49:5b:1f:85:54:7d:c7:da:5b:ff:e4: 44:82:4a:ed:51:c4:66:86:7c:14:a3:94:6a:fd:76: d1:2d:33:0f:e5:51:12:22:eb:17:2a:1e:3c:29:dd: a1:8f:6b:be:cd:e6:1c:b4:36:a1:cd:5c:46:67:6d: e7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:82:4C:A6:3E:ED:AE:63:8B:83:86:D8:57:F5:F1:1D:F2:F7:53:F9 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/hYJMpj7trmOLg4bYV_XxHfL3U_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e000::/39 Signature Algorithm: sha256WithRSAEncryption 81:08:64:06:f1:61:68:4f:e4:2f:85:fd:87:54:8a:ed:40:c9: f6:9f:b9:55:2a:db:d1:f6:0b:b6:6f:af:8d:44:46:23:a2:f4: 17:a4:a1:38:61:0c:8c:16:3b:7d:09:64:f3:b0:77:80:6e:c5: cf:77:54:cf:41:7d:9b:82:7c:e4:69:da:1a:5b:fa:35:47:bb: a4:d8:96:33:81:19:fe:53:15:55:ae:bd:bf:b2:bc:9d:0f:93: b2:87:a6:45:88:1e:c0:99:e7:9d:72:f5:b2:ba:d6:a0:4b:da: 85:0a:5b:3f:0d:ef:ca:97:8d:1c:8e:cd:60:3f:03:be:53:78: 7a:66:40:72:41:d7:39:a3:85:27:77:50:a5:5e:30:e8:38:70: 1a:e9:86:31:7e:b1:9c:78:cf:60:1c:2d:65:62:33:02:fb:83: b6:aa:0b:d9:6f:57:85:eb:bd:20:77:33:56:8c:bd:c2:f9:0a: 7f:29:c8:da:e8:bd:1e:96:85:4c:1f:0b:e0:97:d4:20:c7:7a: 43:18:24:2c:27:e0:4a:1c:fd:7a:c0:56:41:ec:9d:02:af:aa: 43:f2:ad:c7:73:a2:14:c7:58:7a:ff:03:86:1b:d7:82:96:5e: 1a:d8:ab:63:f4:48:c1:2c:e9:c6:52:f4:a2:92:78:03:2b:c2: 39:f3:e7:00 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZsMghPM92Z+Cw48evaBL85lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjUxMjExMDgyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTgyNGNhNjNlZWRhZTYzOGI4Mzg2ZDg1N2Y1ZjExZGYyZjc1M2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZPEPeNGHi6kQbkKxzYm0LYT7kYA fzv8UDwwDVi1Eolb78VwoOHEx/IIkOz+zeZobUHm8al8Wt92i2vbpnHnKOTy1VUB tB1f37UD8Q2pVWzZ/GbI5wIhy+0BxQ/xX+y/FDufvFWsmCcDzWs3M3BUp//lxmDd oJRTvLdJtcF2wBeo7vIPKWYrFxOr/RqM1kYm5lUCZZmdgTmT/O9mtDQCBPxIKm2w WnwZNTNzjSpJ2iqNDS+j6GcKdNw+4LqaqmHprnIXXi/KSVsfhVR9x9pb/+REgkrt UcRmhnwUo5Rq/XbRLTMP5VESIusXKh48Kd2hj2u+zeYctDahzVxGZ23nQwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIWCTKY+7a5ji4OG2Ff18R3y91P5MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvaFlKTXBqN3RybU9MZzRiWVZfWHhIZkwzVV9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKg94AuAw DQYJKoZIhvcNAQELBQADggEBAIEIZAbxYWhP5C+F/YdUiu1AyfafuVUq29H2C7Zv r41ERiOi9BekoThhDIwWO30JZPOwd4Buxc93VM9BfZuCfORp2hpb+jVHu6TYljOB Gf5TFVWuvb+yvJ0Pk7KHpkWIHsCZ551y9bK61qBL2oUKWz8N78qXjRyOzWA/A75T eHpmQHJB1zmjhSd3UKVeMOg4cBrphjF+sZx4z2AcLWViMwL7g7aqC9lvV4XrvSB3 M1aMvcL5Cn8pyNrovR6WhUwfC+CX1CDHekMYJCwn4Eoc/XrAVkHsnQKvqkPyrcdz ohTHWHr/A4Yb14KWXhrYq2P0SMEs6cZS9KKSeAMrwjnz5wA= -----END CERTIFICATE-----Generated at Fri Dec 19 21:20:45 2025 by rpki-client