This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/JbhtA2eCB5o0B4iWRnk7e5Qr0PU.roa File: JbhtA2eCB5o0B4iWRnk7e5Qr0PU.roa (raw, json) Hash identifier: s7PVAI8KfOAf0I2ckpID6SmGICLP8CZ7vN/7EsNRqIs= Subject key identifier: 25:B8:6D:03:67:82:07:9A:34:07:88:96:46:79:3B:7B:94:2B:D0:F5 Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478 Certificate serial: 019B658DC9794E07C0F5C1ACD08A6AFB1DEF Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/JbhtA2eCB5o0B4iWRnk7e5Qr0PU.roa Signing time: Sun 28 Dec 2025 15:22:29 +0000 ROA not before: Sun 28 Dec 2025 15:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207483 IP address blocks: 2a0e:36c6:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:8d:c9:79:4e:07:c0:f5:c1:ac:d0:8a:6a:fb:1d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6d178f13851306b5634df159716319f4d82478 Validity Not Before: Dec 28 15:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=25b86d036782079a3407889646793b7b942bd0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:98:53:0c:33:1f:37:c6:af:7e:61:2b:99:dd: 6d:27:b8:79:0e:30:be:46:1e:3b:66:56:33:f4:8a: 6a:4f:0b:94:07:f5:cb:18:c6:f8:62:98:6f:f1:1d: 3a:a1:40:9f:7b:97:7e:9b:bf:85:49:bc:12:33:23: aa:cc:8b:ca:89:db:73:f0:54:78:ac:8b:ff:16:d6: 71:fa:4a:5d:fe:42:59:4a:a2:41:2e:cb:b2:d4:1b: a7:0a:55:10:3d:ee:44:0f:ba:ff:d2:ca:22:0a:84: 13:32:c3:81:5b:61:3e:df:f0:fb:ad:53:5f:e0:89: f8:6d:2a:8c:de:3f:74:5a:08:ff:c4:97:a3:0a:56: bc:f7:d2:64:3b:2a:32:fa:f3:86:1e:3d:e3:e5:a8: 57:1c:5b:19:3e:f5:b4:3d:98:b5:31:b1:48:72:d4: 63:ec:46:7f:90:f1:d5:e7:1d:a7:c1:25:9e:48:ad: 64:48:29:72:d5:36:6f:f7:2f:61:a8:ab:84:8a:e1: 40:0a:39:14:ed:c1:2e:2f:c8:7a:9a:e8:c6:9b:9f: ae:a8:d8:45:a3:e8:2a:c7:02:c7:c3:b0:00:8e:98: da:f3:ce:78:87:ca:96:bf:8e:c9:94:2a:28:a8:f9: ae:33:da:34:28:eb:3b:94:09:43:d9:9e:d4:f3:23: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B8:6D:03:67:82:07:9A:34:07:88:96:46:79:3B:7B:94:2B:D0:F5 X509v3 Authority Key Identifier: keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/JbhtA2eCB5o0B4iWRnk7e5Qr0PU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:36c6:1000::/48 Signature Algorithm: sha256WithRSAEncryption 4e:5b:8d:87:82:8c:71:c7:17:af:61:a6:f6:ce:e2:f6:b0:8c: ef:f3:b9:4c:52:90:90:51:e6:be:02:14:5d:32:49:87:74:80: cf:3a:1d:d2:4f:58:e9:ea:92:7d:b1:81:3c:d9:39:f6:48:ff: c3:d3:a2:c0:ab:4c:a1:15:73:31:15:bd:de:32:b6:fd:2e:8e: de:1e:5b:0a:43:74:cf:e1:68:0c:f4:7b:9c:4c:02:6d:fc:fd: a7:d5:af:5e:7a:fd:1b:69:af:c4:ae:e0:25:49:30:85:16:15: f3:c5:2b:cc:97:dc:e3:f2:79:88:04:c1:09:80:66:2c:96:65: f7:69:30:56:8b:c0:02:75:e2:04:3b:5c:91:66:86:77:75:cf: 9b:f9:3b:43:33:68:02:6c:98:20:f6:e3:2a:7f:b4:02:9e:da: b7:1a:6b:fe:18:ae:75:a4:09:6d:e2:d1:f7:3b:e5:73:ec:d1: ef:b7:e1:5e:bb:2f:7c:74:38:80:b9:9f:0d:87:61:7e:ae:fa: e8:f5:6b:49:ab:b2:66:d7:9d:f6:82:7f:19:be:e4:3b:5c:9c: cc:f5:91:40:de:e4:ce:05:8d:42:c1:9a:90:70:7c:a3:1e:7e: 62:92:f9:e5:e5:2f:85:3b:3b:13:e2:57:33:8b:4e:38:14:ed: a4:90:e7:1b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtljcl5TgfA9cGs0Ipq+x3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRk ODI0NzgwHhcNMjUxMjI4MTUyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWI4NmQwMzY3ODIwNzlhMzQwNzg4OTY0Njc5M2I3Yjk0MmJkMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjphTDDMfN8avfmErmd1tJ7h5DjC+ Rh47ZlYz9IpqTwuUB/XLGMb4Yphv8R06oUCfe5d+m7+FSbwSMyOqzIvKidtz8FR4 rIv/FtZx+kpd/kJZSqJBLsuy1BunClUQPe5ED7r/0soiCoQTMsOBW2E+3/D7rVNf 4In4bSqM3j90Wgj/xJejCla899JkOyoy+vOGHj3j5ahXHFsZPvW0PZi1MbFIctRj 7EZ/kPHV5x2nwSWeSK1kSCly1TZv9y9hqKuEiuFACjkU7cEuL8h6mujGm5+uqNhF o+gqxwLHw7AAjpja8854h8qWv47JlCooqPmuM9o0KOs7lAlD2Z7U8yOd0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCW4bQNnggeaNAeIlkZ5O3uUK9D1MB8GA1UdIwQY MBaAFFttF48ThRMGtWNN8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2It NGJiOTRjYmMyZTczLzEvSmJodEEyZUNCNW8wQjRpV1JuazdlNVFyMFBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTcz LzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg42xhAA MA0GCSqGSIb3DQEBCwUAA4IBAQBOW42HgoxxxxevYab2zuL2sIzv87lMUpCQUea+ AhRdMkmHdIDPOh3ST1jp6pJ9sYE82Tn2SP/D06LAq0yhFXMxFb3eMrb9Lo7eHlsK Q3TP4WgM9HucTAJt/P2n1a9eev0baa/EruAlSTCFFhXzxSvMl9zj8nmIBMEJgGYs lmX3aTBWi8ACdeIEO1yRZoZ3dc+b+TtDM2gCbJgg9uMqf7QCntq3Gmv+GK51pAlt 4tH3O+Vz7NHvt+Feuy98dDiAuZ8Nh2F+rvro9WtJq7Jm1532gn8ZvuQ7XJzM9ZFA 3uTOBY1CwZqQcHyjHn5ikvnl5S+FOzsT4lczi044FO2kkOcb -----END CERTIFICATE-----Generated at Mon Dec 29 16:56:46 2025 by rpki-client