This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/IRAM0ss8CumWqlQghzCCrnbYR0o.roa File: IRAM0ss8CumWqlQghzCCrnbYR0o.roa (raw, json) Hash identifier: 576qammTk0HDjz6wueUsHnq4cuEIKfKYX50Rx8zDEjE= Subject key identifier: 21:10:0C:D2:CB:3C:0A:E9:96:AA:54:20:87:30:82:AE:76:D8:47:4A Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B37407606757F7D1120573B74AB6F3773 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/IRAM0ss8CumWqlQghzCCrnbYR0o.roa Signing time: Fri 19 Dec 2025 15:35:29 +0000 ROA not before: Fri 19 Dec 2025 15:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51720 IP address blocks: 2a03:f7c0::/29 maxlen: 29 2a06:ddc0::/29 maxlen: 29 2a0b:e9c0::/29 maxlen: 29 2a0c:5c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:40:76:06:75:7f:7d:11:20:57:3b:74:ab:6f:37:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Dec 19 15:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=21100cd2cb3c0ae996aa5420873082ae76d8474a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8f:d8:8a:75:b2:b2:ce:de:9a:07:59:7f:45: 3a:6f:22:61:77:36:ca:c9:41:7c:ac:88:e9:87:34: d4:c5:4a:b1:a3:0f:f8:ab:77:58:2f:38:84:05:b0: 16:b0:5f:8b:c2:39:23:c4:b9:38:80:58:47:3b:60: 65:d3:59:b4:2d:ed:4d:5c:0d:9f:dd:b2:3f:cf:9a: 7b:d2:c5:ad:d1:46:94:83:98:fe:25:f1:3e:22:fc: f5:b8:2c:1b:ac:62:a7:6a:eb:47:5e:f4:75:67:0d: 24:e7:1b:dc:a0:fb:d0:12:84:71:fc:32:c2:d0:12: 84:d6:22:4e:c6:3f:f5:a0:fe:3d:44:e1:d6:b6:74: 7f:88:9b:ae:ce:d4:02:f2:98:da:f7:26:ce:67:9f: 72:c1:d5:56:c8:ee:2c:b0:bf:90:dd:a3:9c:51:1a: e2:cb:f2:f4:c6:56:d3:97:46:59:99:00:fa:c0:cc: a5:e5:76:f2:8a:db:fc:08:25:b9:3b:8a:57:4d:7a: a5:57:d2:ce:e8:6a:58:00:84:a9:1f:76:dd:02:34: 4d:78:b6:59:bf:63:26:fe:64:ca:a1:03:02:b4:28: b2:91:84:d2:dc:0e:ea:f9:6e:65:6f:0d:f2:f1:60: 52:ce:93:ac:8e:ba:4f:a4:20:58:7e:06:09:80:8f: 6c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:10:0C:D2:CB:3C:0A:E9:96:AA:54:20:87:30:82:AE:76:D8:47:4A X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/IRAM0ss8CumWqlQghzCCrnbYR0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:f7c0::/29 2a06:ddc0::/29 2a0b:e9c0::/29 2a0c:5c0::/29 Signature Algorithm: sha256WithRSAEncryption a3:ce:bc:50:a2:bc:fc:df:fe:1e:92:10:d4:7c:5a:94:05:b8: cc:be:fe:b2:bd:77:a9:4b:c7:04:16:f6:d9:75:ee:bb:21:32: 70:e0:90:23:dc:39:ec:b1:42:69:95:a7:76:fa:b8:e8:af:14: 14:3a:c3:de:96:e8:f3:8f:f4:67:92:7a:fd:28:77:03:96:ea: c7:b2:8a:c7:88:a4:ef:62:da:29:c4:94:5f:f6:85:3f:4d:24: 08:9d:67:76:dd:23:b4:0e:6d:3c:0c:bf:8a:8f:7d:6c:35:ad: 7b:be:95:f1:38:8a:c9:a8:61:61:b2:0e:5a:22:0f:bd:f1:60: 54:d6:a3:53:e0:a6:07:41:89:b0:3c:bd:20:c5:a3:7e:63:fc: a1:a5:bd:b9:e3:fe:51:f2:b1:6a:80:b0:00:5c:2f:b8:5f:d9: 35:67:80:e3:7f:89:03:f2:09:cf:56:a8:cf:00:1d:f5:ef:f1: 07:4c:68:33:0b:c8:2c:0f:45:c6:e1:d2:2a:01:15:39:35:39: 78:00:bc:1e:40:62:56:d4:c8:c1:ae:e1:2e:43:7c:16:ae:dd: 96:a8:57:11:13:b7:a7:8a:85:f8:1a:3f:5f:e0:09:94:1d:ba: 6f:40:14:8e:f9:09:20:72:64:9d:2e:c1:60:58:72:96:c2:43: c0:9a:1f:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZs3QHYGdX99ESBXO3SrbzdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjUxMjE5MTUzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTEwMGNkMmNiM2MwYWU5OTZhYTU0MjA4NzMwODJhZTc2ZDg0NzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY/YinWyss7emgdZf0U6byJhdzbK yUF8rIjphzTUxUqxow/4q3dYLziEBbAWsF+LwjkjxLk4gFhHO2Bl01m0Le1NXA2f 3bI/z5p70sWt0UaUg5j+JfE+Ivz1uCwbrGKnautHXvR1Zw0k5xvcoPvQEoRx/DLC 0BKE1iJOxj/1oP49ROHWtnR/iJuuztQC8pja9ybOZ59ywdVWyO4ssL+Q3aOcURri y/L0xlbTl0ZZmQD6wMyl5Xbyitv8CCW5O4pXTXqlV9LO6GpYAISpH3bdAjRNeLZZ v2Mm/mTKoQMCtCiykYTS3A7q+W5lbw3y8WBSzpOsjrpPpCBYfgYJgI9s8wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFCEQDNLLPArplqpUIIcwgq522EdKMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvSVJBTTBzczhDdW1XcWxRZ2h6Q0NybmJZUjBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKgP3wAMF AyoG3cADBQMqC+nAAwUDKgwFwDANBgkqhkiG9w0BAQsFAAOCAQEAo868UKK8/N/+ HpIQ1HxalAW4zL7+sr13qUvHBBb22XXuuyEycOCQI9w57LFCaZWndvq46K8UFDrD 3pbo84/0Z5J6/Sh3A5bqx7KKx4ik72LaKcSUX/aFP00kCJ1ndt0jtA5tPAy/io99 bDWte76V8TiKyahhYbIOWiIPvfFgVNajU+CmB0GJsDy9IMWjfmP8oaW9ueP+UfKx aoCwAFwvuF/ZNWeA43+JA/IJz1aozwAd9e/xB0xoMwvILA9FxuHSKgEVOTU5eAC8 HkBiVtTIwa7hLkN8Fq7dlqhXERO3p4qF+Bo/X+AJlB26b0AUjvkJIHJknS7BYFhy lsJDwJofKg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:16:46 2025 by rpki-client