This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/arNLaBtahYzSMYJAuzHqKxs2Hgw.roa File: arNLaBtahYzSMYJAuzHqKxs2Hgw.roa (raw, json) Hash identifier: BbVBy5nyfq0Gu2fS199DMSV7v7c8xvvXQRZLHZy+4QA= Subject key identifier: 6A:B3:4B:68:1B:5A:85:8C:D2:31:82:40:BB:31:EA:2B:1B:36:1E:0C Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Certificate serial: 019B07A14BC4D7C1C6243761D0C4C8EA5AAE Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/arNLaBtahYzSMYJAuzHqKxs2Hgw.roa Signing time: Wed 10 Dec 2025 09:39:29 +0000 ROA not before: Wed 10 Dec 2025 09:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15932 IP address blocks: 2a02:2b48::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:a1:4b:c4:d7:c1:c6:24:37:61:d0:c4:c8:ea:5a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Validity Not Before: Dec 10 09:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6ab34b681b5a858cd2318240bb31ea2b1b361e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:96:21:fd:f9:e3:77:b0:95:00:5d:10:57: 28:1c:9a:3a:41:b8:ad:b5:80:71:dc:86:de:2a:26: 38:6e:2f:c2:8a:6e:f3:56:76:32:f6:fb:5b:56:03: 7d:f3:0d:34:c9:80:6f:d6:da:2a:7a:dc:5d:db:8c: d3:ea:32:f9:81:02:e8:c9:1a:1b:39:69:90:f7:db: a2:59:c9:e4:89:8c:50:e6:e8:1b:20:39:f6:3b:05: 7a:b1:22:f6:f0:89:68:a8:38:8a:0a:cc:31:26:33: 9f:83:ec:94:08:33:d8:3b:a0:f7:17:09:f9:82:76: 9c:9f:45:ad:30:b7:93:c0:27:38:dc:eb:04:67:80: fb:a3:1a:37:13:c9:b3:5e:03:b6:57:2d:ca:91:86: 43:b2:91:99:5f:dc:63:4a:b4:01:9e:de:0c:e1:75: 38:75:a2:62:73:de:76:4b:91:f1:72:d3:1a:53:66: 49:ae:a5:87:65:ec:2e:ff:8d:9b:fc:9a:1d:2f:fc: 67:14:b4:92:07:fd:15:8a:4c:a5:28:33:5d:10:d3: 36:96:2e:f7:16:ed:eb:2b:e8:5d:a5:fa:9c:d9:38: e3:24:1f:49:05:f9:d2:14:11:a8:54:18:e0:20:54: e9:86:3e:88:ff:62:e3:f7:d1:5d:c6:eb:77:dd:8b: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B3:4B:68:1B:5A:85:8C:D2:31:82:40:BB:31:EA:2B:1B:36:1E:0C X509v3 Authority Key Identifier: keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/arNLaBtahYzSMYJAuzHqKxs2Hgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2b48::/29 Signature Algorithm: sha256WithRSAEncryption b1:0f:77:3b:1c:87:7f:ea:90:6d:6d:18:46:2e:a2:b5:56:db: 78:af:86:d6:11:ee:5d:61:5f:34:4f:4f:2e:18:be:f2:28:f4: 56:c3:81:bf:c1:6b:11:00:66:f1:58:d5:3b:b2:64:c0:85:eb: f2:57:87:db:83:fc:c3:92:fb:82:09:99:5d:e0:d5:f7:07:fd: 74:1f:e3:9b:07:89:06:ad:ec:f8:f2:50:c0:8a:cc:fe:e5:81: 43:be:5d:e3:c4:cb:44:74:a3:e7:2a:e9:83:53:f8:cf:ff:ad: 28:07:4a:35:1c:0f:ac:20:55:64:08:dc:a9:77:99:46:e1:0d: d0:a1:40:b2:bb:c5:f9:f4:98:2c:78:7e:dc:1e:66:5c:c8:6a: 8e:ad:63:4c:3e:5b:84:9a:d2:9f:60:03:38:44:db:45:db:73: 63:ed:e6:af:a4:13:04:a2:93:49:99:58:ea:b5:2b:87:82:66: d2:ae:50:81:0a:b7:e5:86:6d:a0:d3:71:cf:a8:c2:bf:87:24: 57:ba:a1:8b:e7:0b:fe:8a:e9:cd:7b:f1:43:a9:af:77:68:23: ba:97:c4:93:0c:38:3f:cc:0a:77:cf:ba:00:48:8a:2f:a0:bb: 66:a9:bf:87:83:78:ff:ad:e3:cb:06:a4:8f:59:b2:a3:46:1f: 66:b3:dd:18 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsHoUvE18HGJDdh0MTI6lquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWRiMGExNGU1NWFmNzcyMTFmZmQ3YzhmY2QxN2IyYTMw NjQ5YTAwHhcNMjUxMjEwMDkzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWIzNGI2ODFiNWE4NThjZDIzMTgyNDBiYjMxZWEyYjFiMzYxZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5OWIf3543ewlQBdEFcoHJo6Qbit tYBx3IbeKiY4bi/Cim7zVnYy9vtbVgN98w00yYBv1toqetxd24zT6jL5gQLoyRob OWmQ99uiWcnkiYxQ5ugbIDn2OwV6sSL28IloqDiKCswxJjOfg+yUCDPYO6D3Fwn5 gnacn0WtMLeTwCc43OsEZ4D7oxo3E8mzXgO2Vy3KkYZDspGZX9xjSrQBnt4M4XU4 daJic952S5HxctMaU2ZJrqWHZewu/42b/JodL/xnFLSSB/0VikylKDNdENM2li73 Fu3rK+hdpfqc2TjjJB9JBfnSFBGoVBjgIFTphj6I/2Lj99Fdxut33YtrTwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGqzS2gbWoWM0jGCQLsx6isbNh4MMB8GA1UdIwQY MBaAFAKtsKFOVa93IR/9fI/NF7KjBkmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYt Y2E0MWM3MmNhZjk2LzEvYXJOTGFCdGFoWXpTTVlKQXV6SHFLeHMySGd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYtY2E0MWM3MmNhZjk2 LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgIrSDAN BgkqhkiG9w0BAQsFAAOCAQEAsQ93OxyHf+qQbW0YRi6itVbbeK+G1hHuXWFfNE9P Lhi+8ij0VsOBv8FrEQBm8VjVO7JkwIXr8leH24P8w5L7ggmZXeDV9wf9dB/jmweJ Bq3s+PJQwIrM/uWBQ75d48TLRHSj5yrpg1P4z/+tKAdKNRwPrCBVZAjcqXeZRuEN 0KFAsrvF+fSYLHh+3B5mXMhqjq1jTD5bhJrSn2ADOETbRdtzY+3mr6QTBKKTSZlY 6rUrh4Jm0q5QgQq35YZtoNNxz6jCv4ckV7qhi+cL/orpzXvxQ6mvd2gjupfEkww4 P8wKd8+6AEiKL6C7Zqm/h4N4/63jywakj1myo0YfZrPdGA== -----END CERTIFICATE-----Generated at Sat Dec 20 03:03:05 2025 by rpki-client