This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/1boXTnOi8yL5Hll7tfY-9_7bPY4.roa File: 1boXTnOi8yL5Hll7tfY-9_7bPY4.roa (raw, json) Hash identifier: KPR+ZDFPh0t0TA0879PU7vOzqYh+MAaViQePiv4fMCU= Subject key identifier: D5:BA:17:4E:73:A2:F3:22:F9:1E:59:7B:B5:F6:3E:F7:FE:DB:3D:8E Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Certificate serial: 019B37AC7C99BACF1144BD77F13F9DDD86F3 Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/1boXTnOi8yL5Hll7tfY-9_7bPY4.roa Signing time: Fri 19 Dec 2025 17:33:29 +0000 ROA not before: Fri 19 Dec 2025 17:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50190 IP address blocks: 2a06:a880:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:ac:7c:99:ba:cf:11:44:bd:77:f1:3f:9d:dd:86:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Validity Not Before: Dec 19 17:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d5ba174e73a2f322f91e597bb5f63ef7fedb3d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:a6:a5:3d:48:7b:4c:fa:e5:cc:b3:4c:18: 49:c4:b8:5e:ab:ee:54:db:67:81:30:d4:6f:de:34: 9f:6d:a3:3e:30:49:f9:9c:0c:3e:e0:75:ed:b2:95: 5f:c4:1c:96:d4:0b:ae:2e:29:80:fd:b4:ca:61:1c: f1:8b:3f:1a:1d:55:7e:7d:ac:1f:e7:6b:53:51:eb: 0e:2e:9d:30:0d:22:82:b8:e0:6e:c1:d4:81:e4:61: 46:78:68:64:23:b2:6c:5b:02:da:9b:b3:0d:bf:ae: bf:5f:f0:ae:e8:f3:73:35:04:4e:0a:87:ac:29:94: c2:be:99:7a:82:46:b9:78:7a:46:90:bf:df:6b:5d: d7:86:1c:c6:32:b1:58:92:a1:48:bd:d3:bd:50:bf: bb:c2:05:af:3b:ea:35:69:b9:cc:5c:8a:22:da:7b: 06:94:0f:0c:f6:25:7d:4a:c3:55:63:4c:9b:95:67: 25:80:44:78:77:16:7a:5e:9f:9a:bd:1b:16:d3:24: b6:4d:65:25:ca:cf:53:0a:c4:13:af:ba:1e:21:37: a6:71:d9:23:6a:f2:7f:cf:84:0e:09:4e:35:52:6c: 54:35:ea:4c:5f:a6:67:fa:7f:af:f1:cf:58:56:b0: d6:a5:ff:03:45:5e:74:44:49:3d:83:7c:e5:ae:17: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BA:17:4E:73:A2:F3:22:F9:1E:59:7B:B5:F6:3E:F7:FE:DB:3D:8E X509v3 Authority Key Identifier: keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/1boXTnOi8yL5Hll7tfY-9_7bPY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a880:1::/48 Signature Algorithm: sha256WithRSAEncryption 2c:f9:6e:f9:4d:c5:d7:f0:e5:bd:39:a6:b8:37:83:ca:94:e5: d7:11:03:fd:47:ab:83:2e:02:d9:fb:0b:30:c9:d6:47:3f:6a: 95:37:98:34:18:81:c7:e2:4c:c7:7e:0f:7b:3e:6e:3b:3f:2f: 04:c9:12:8b:fe:cc:9d:1c:17:5e:ff:cd:8a:9d:4c:c8:73:bc: 07:c4:12:4d:23:32:ae:8e:e6:fc:69:65:56:9e:46:6b:61:98: 70:c4:19:4c:4c:7e:60:45:ad:a7:72:d5:99:fc:82:82:0d:33: 0f:37:2c:a1:82:92:6b:e1:48:4c:b4:f6:4c:78:c7:64:9d:e5: 73:bb:2d:58:45:d2:6f:81:28:5b:e5:cb:15:16:5d:01:cc:5f: de:61:d3:9f:87:3e:27:1b:5f:2d:8e:fe:cb:8f:83:a4:81:2f: ae:61:2a:63:36:19:30:10:0f:86:ba:49:61:17:fe:f7:cf:ef: bc:0e:cc:e6:19:b0:61:df:17:c1:b5:72:30:f1:74:2d:9c:07: 36:d0:18:2b:f7:9f:f9:5a:e4:e6:d5:87:2e:62:76:93:d4:0a: 4e:a5:6a:a5:fc:83:d2:f5:38:3d:87:54:0c:13:16:8e:87:65: 17:10:04:e8:c8:25:05:dd:4a:92:37:5c:c7:b9:7c:82:5a:bf: ce:dd:05:53 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZs3rHyZus8RRL138T+d3YbzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzA1OTFlMmViNDlkMDU1OWU2ZmNlN2VlMmFhODFmMGY1 OWJhNmYwHhcNMjUxMjE5MTczMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWJhMTc0ZTczYTJmMzIyZjkxZTU5N2JiNWY2M2VmN2ZlZGIzZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ+mpT1Ie0z65cyzTBhJxLheq+5U 22eBMNRv3jSfbaM+MEn5nAw+4HXtspVfxByW1AuuLimA/bTKYRzxiz8aHVV+fawf 52tTUesOLp0wDSKCuOBuwdSB5GFGeGhkI7JsWwLam7MNv66/X/Cu6PNzNQROCoes KZTCvpl6gka5eHpGkL/fa13XhhzGMrFYkqFIvdO9UL+7wgWvO+o1abnMXIoi2nsG lA8M9iV9SsNVY0yblWclgER4dxZ6Xp+avRsW0yS2TWUlys9TCsQTr7oeITemcdkj avJ/z4QOCU41UmxUNepMX6Zn+n+v8c9YVrDWpf8DRV50REk9g3zlrheh1wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNW6F05zovMi+R5Ze7X2Pvf+2z2OMB8GA1UdIwQY MBaAFMPAWR4utJ0FWeb85+4qqB8PWbpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQt ZTM0MDcxNzQ2NjNiLzEvMWJvWFRuT2k4eUw1SGxsN3RmWS05XzdiUFk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQtZTM0MDcxNzQ2NjNi LzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaogAAB MA0GCSqGSIb3DQEBCwUAA4IBAQAs+W75TcXX8OW9Oaa4N4PKlOXXEQP9R6uDLgLZ +wswydZHP2qVN5g0GIHH4kzHfg97Pm47Py8EyRKL/sydHBde/82KnUzIc7wHxBJN IzKujub8aWVWnkZrYZhwxBlMTH5gRa2nctWZ/IKCDTMPNyyhgpJr4UhMtPZMeMdk neVzuy1YRdJvgShb5csVFl0BzF/eYdOfhz4nG18tjv7Lj4OkgS+uYSpjNhkwEA+G uklhF/73z++8DszmGbBh3xfBtXIw8XQtnAc20Bgr95/5WuTm1YcuYnaT1ApOpWql /IPS9Tg9h1QMExaOh2UXEAToyCUF3UqSN1zHuXyCWr/O3QVT -----END CERTIFICATE-----Generated at Sat Dec 20 11:09:48 2025 by rpki-client