This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/B1LqaZUhsUfUDpN-9vYGCP2m0g8.roa File: B1LqaZUhsUfUDpN-9vYGCP2m0g8.roa (raw, json) Hash identifier: QrKbpCe6SJ2ZphzaQI2EN0WS9Q27CgrmTnBcyr8V/oE= Subject key identifier: 07:52:EA:69:95:21:B1:47:D4:0E:93:7E:F6:F6:06:08:FD:A6:D2:0F Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Certificate serial: 019ACD28B3FE39070D92159290E1BDD2AABD Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/B1LqaZUhsUfUDpN-9vYGCP2m0g8.roa Signing time: Sat 29 Nov 2025 01:09:48 +0000 ROA not before: Sat 29 Nov 2025 01:09:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211745 IP address blocks: 2001:678:1168::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cd:28:b3:fe:39:07:0d:92:15:92:90:e1:bd:d2:aa:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Validity Not Before: Nov 29 01:09:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0752ea699521b147d40e937ef6f60608fda6d20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:41:8e:c4:d2:0a:c8:47:85:bc:49:f4:41: ec:2c:a0:68:4a:0a:ad:13:91:8d:c1:28:b6:ec:2e: 6e:74:69:a6:d3:0e:f9:20:e5:e8:7d:16:bc:61:fc: ea:f4:bc:50:7c:e4:be:f4:47:66:95:41:30:67:7a: a8:9b:e1:8d:88:78:a9:95:e6:2e:5d:ed:53:34:ff: 4b:00:5a:a7:93:6a:34:56:a7:46:f2:cf:ac:2c:3d: 6f:97:f7:e5:5c:a5:bd:69:a4:ab:b6:cb:35:d7:14: 86:95:c4:87:c6:5a:c3:61:bb:2e:53:e7:98:79:2c: 98:f3:b8:fa:95:6b:e4:f7:6e:69:2f:d5:f3:d9:1d: 9c:88:7f:a9:61:42:09:9b:b7:99:41:5c:31:84:df: 3e:5d:76:f8:0a:40:bb:43:c2:ee:ab:81:8f:ed:67: 7f:51:a2:e6:57:8d:f3:88:05:d7:4f:8d:ac:07:f1: b4:fa:af:18:77:70:b0:41:97:ec:ab:ef:34:f8:d7: 6d:00:bd:97:6f:20:07:d2:94:57:a3:34:2e:ed:e4: a9:ed:ff:b9:7e:ea:b1:70:62:14:83:4b:17:27:f2: 65:d3:19:7e:c4:fa:82:75:67:bf:b8:7b:0a:51:61: fb:5c:ca:6d:0c:5f:d9:5b:25:7c:70:76:09:cb:31: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:52:EA:69:95:21:B1:47:D4:0E:93:7E:F6:F6:06:08:FD:A6:D2:0F X509v3 Authority Key Identifier: keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/B1LqaZUhsUfUDpN-9vYGCP2m0g8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1168::/48 Signature Algorithm: sha256WithRSAEncryption 2c:b5:7d:7f:89:a8:91:cc:0d:ea:3c:1f:ce:0e:19:f6:a0:a2: 5d:59:4f:b6:6f:77:76:6d:87:11:3c:7d:0d:8e:f1:30:42:18: 45:27:fb:c4:4f:1b:33:da:ae:a6:ec:42:99:ac:48:8c:53:a5: 21:f1:a3:f7:84:00:08:13:17:c3:7c:d7:20:df:00:d8:40:1a: 28:74:3e:73:5a:bb:0c:b1:82:ba:cc:79:41:25:0f:94:f4:96: 8a:e1:8a:d9:68:fc:d3:21:e9:ff:8f:8c:02:f1:39:0d:98:d5: 6c:ac:9c:61:57:2a:f2:f0:d4:76:db:30:02:3c:a1:a9:a0:75: 79:de:1d:ce:76:ce:36:9f:d4:29:92:cb:ad:65:68:24:d3:00: 22:07:4b:e6:10:f6:a8:2b:b5:1d:36:6f:d3:a7:0a:ed:93:32: da:28:3e:8f:ec:f2:f9:0e:60:b3:1e:9f:01:51:a7:a1:50:92: 0f:d8:20:f3:b7:87:ff:c4:0d:58:dc:64:2c:05:1b:67:80:8d: d2:e9:93:42:f3:10:cc:c7:91:60:04:bc:ab:8c:4e:71:5a:a9: d5:fd:70:55:a2:a9:ea:cc:0e:72:05:c0:73:68:c9:22:62:de: 9e:07:70:ad:d9:6d:e9:3d:d1:5c:ef:75:5c:f5:7c:fd:56:c6: 18:15:e6:05 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrNKLP+OQcNkhWSkOG90qq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZGMxZTMzYTUyZGFkZTAxYjUyZDkxNzBiYzI5YjhjMjhk OThiNmMwHhcNMjUxMTI5MDEwOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzUyZWE2OTk1MjFiMTQ3ZDQwZTkzN2VmNmY2MDYwOGZkYTZkMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl9BjsTSCshHhbxJ9EHsLKBoSgqt E5GNwSi27C5udGmm0w75IOXofRa8Yfzq9LxQfOS+9EdmlUEwZ3qom+GNiHipleYu Xe1TNP9LAFqnk2o0VqdG8s+sLD1vl/flXKW9aaSrtss11xSGlcSHxlrDYbsuU+eY eSyY87j6lWvk925pL9Xz2R2ciH+pYUIJm7eZQVwxhN8+XXb4CkC7Q8Luq4GP7Wd/ UaLmV43ziAXXT42sB/G0+q8Yd3CwQZfsq+80+NdtAL2XbyAH0pRXozQu7eSp7f+5 fuqxcGIUg0sXJ/Jl0xl+xPqCdWe/uHsKUWH7XMptDF/ZWyV8cHYJyzECoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAdS6mmVIbFH1A6Tfvb2Bgj9ptIPMB8GA1UdIwQY MBaAFNvcHjOlLa3gG1LZFwvCm4wo2YtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMt ZWVjY2MyMGE4ZDIxLzEvQjFMcWFaVWhzVWZVRHBOLTl2WUdDUDJtMGc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMtZWVjY2MyMGE4ZDIx LzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBFo MA0GCSqGSIb3DQEBCwUAA4IBAQAstX1/iaiRzA3qPB/ODhn2oKJdWU+2b3d2bYcR PH0NjvEwQhhFJ/vETxsz2q6m7EKZrEiMU6Uh8aP3hAAIExfDfNcg3wDYQBoodD5z WrsMsYK6zHlBJQ+U9JaK4YrZaPzTIen/j4wC8TkNmNVsrJxhVyry8NR22zACPKGp oHV53h3Ods42n9QpksutZWgk0wAiB0vmEPaoK7UdNm/TpwrtkzLaKD6P7PL5DmCz Hp8BUaehUJIP2CDzt4f/xA1Y3GQsBRtngI3S6ZNC8xDMx5FgBLyrjE5xWqnV/XBV oqnqzA5yBcBzaMkiYt6eB3Ct2W3pPdFc73Vc9Xz9VsYYFeYF -----END CERTIFICATE-----Generated at Fri Dec 5 18:11:58 2025 by rpki-client