This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/u0n0WzwrqrHUkLMUvcktK7CMhfY.roa File: u0n0WzwrqrHUkLMUvcktK7CMhfY.roa (raw, json) Hash identifier: s6On5p5l9kJoNcJf+a1h15/POZje8XrFfKXVzgRx68M= Subject key identifier: BB:49:F4:5B:3C:2B:AA:B1:D4:90:B3:14:BD:C9:2D:2B:B0:8C:85:F6 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019ABAB8AB3326F31C0E90F59923E993EE02 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/u0n0WzwrqrHUkLMUvcktK7CMhfY.roa Signing time: Tue 25 Nov 2025 11:14:15 +0000 ROA not before: Tue 25 Nov 2025 11:14:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203464 IP address blocks: 2a0c:b641:810::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:b8:ab:33:26:f3:1c:0e:90:f5:99:23:e9:93:ee:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Nov 25 11:14:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb49f45b3c2baab1d490b314bdc92d2bb08c85f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:ae:e8:4e:ad:d2:db:d7:07:fe:23:18:42: f2:2d:d3:48:96:58:9f:ad:77:02:e3:8e:01:e1:94: f3:ab:ea:c1:39:e2:41:26:4a:cf:e2:89:d6:e5:71: c3:60:6e:b8:59:5e:4c:0a:75:89:d6:a3:d6:2a:e9: 75:9e:af:c5:61:d0:0b:96:48:af:67:4f:c8:1a:4c: 8d:dd:37:8a:67:e4:94:39:bf:8f:42:9f:31:95:e3: 41:04:73:67:6e:14:b5:74:0b:f6:e4:17:1a:62:86: 37:c2:2d:42:78:97:6f:f0:a6:a2:10:75:da:e7:46: f1:27:9b:3c:95:2d:04:2c:a4:a1:d3:03:3e:c2:5c: df:e1:22:2c:08:2c:f5:5d:61:8f:10:8e:6e:1e:f7: c1:e6:26:8b:8b:82:2e:1b:ef:75:a9:f0:98:12:8d: 99:83:42:88:98:fa:28:68:e2:a4:1e:4b:9a:d5:c9: 88:c6:0d:08:d0:58:c3:ed:54:e9:5a:b0:03:03:f0: 6c:6b:a8:ac:e5:5d:43:05:de:3f:68:bd:8a:ee:a3: b0:1e:97:e3:10:ae:5f:f3:42:b4:f8:85:df:63:32: ca:d7:12:62:85:f6:aa:28:67:47:9b:be:9d:bf:cd: e1:61:31:13:ec:7d:55:05:59:01:ab:6d:0d:e9:52: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:49:F4:5B:3C:2B:AA:B1:D4:90:B3:14:BD:C9:2D:2B:B0:8C:85:F6 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/u0n0WzwrqrHUkLMUvcktK7CMhfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:810::/44 Signature Algorithm: sha256WithRSAEncryption 0e:e2:15:4d:8d:2c:6e:0f:6b:56:f2:25:9a:63:a5:fb:50:2e: 94:a0:1c:aa:a7:bd:90:ff:ce:59:2f:04:0b:40:b7:3d:1d:1d: 8f:13:13:4b:95:53:b7:2d:fd:09:ad:06:96:ae:d1:c8:fa:45: b6:77:6a:b3:7c:c2:41:5f:d0:9d:d8:53:15:e4:51:b2:5c:ea: 36:0f:07:5d:b9:fd:70:79:3f:5c:64:55:c3:49:6e:af:d8:5a: 0b:42:1b:b2:20:6a:68:ea:c4:c3:96:f7:dd:ca:48:09:ed:06: 45:a6:de:29:9a:7e:fb:f9:ee:42:a3:66:e7:30:27:47:e1:67: 4c:5b:f5:b5:09:97:58:7d:57:39:c4:84:4f:59:ff:7d:85:59: cc:56:44:e7:8c:d2:de:15:83:20:aa:5a:47:b3:2e:df:7e:fd: 29:0d:69:92:c0:d7:dd:f8:0b:7c:eb:96:56:90:b0:45:d8:81: 31:22:95:42:d8:a2:49:cc:34:d0:3f:fe:32:1f:be:ba:af:00: 5a:f9:42:d3:05:39:aa:9d:a2:72:e2:65:a9:06:a3:c4:3f:3d: 6b:e3:45:b3:bd:3a:bd:c8:f9:76:fb:29:c4:6a:24:b4:41:b1: 3c:a9:a1:5a:6d:26:e4:cf:43:27:68:f8:a8:07:41:32:82:83: d1:c8:bf:71 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZq6uKszJvMcDpD1mSPpk+4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjUxMTI1MTExNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjQ5ZjQ1YjNjMmJhYWIxZDQ5MGIzMTRiZGM5MmQyYmIwOGM4NWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqyu6E6t0tvXB/4jGELyLdNIllif rXcC444B4ZTzq+rBOeJBJkrP4onW5XHDYG64WV5MCnWJ1qPWKul1nq/FYdALlkiv Z0/IGkyN3TeKZ+SUOb+PQp8xleNBBHNnbhS1dAv25BcaYoY3wi1CeJdv8KaiEHXa 50bxJ5s8lS0ELKSh0wM+wlzf4SIsCCz1XWGPEI5uHvfB5iaLi4IuG+91qfCYEo2Z g0KImPooaOKkHkua1cmIxg0I0FjD7VTpWrADA/Bsa6is5V1DBd4/aL2K7qOwHpfj EK5f80K0+IXfYzLK1xJihfaqKGdHm76dv83hYTET7H1VBVkBq20N6VLSZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLtJ9Fs8K6qx1JCzFL3JLSuwjIX2MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvdTBuMFd6d3JxckhVa0xNVXZja3RLN0NNaGZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQgQ MA0GCSqGSIb3DQEBCwUAA4IBAQAO4hVNjSxuD2tW8iWaY6X7UC6UoByqp72Q/85Z LwQLQLc9HR2PExNLlVO3Lf0JrQaWrtHI+kW2d2qzfMJBX9Cd2FMV5FGyXOo2Dwdd uf1weT9cZFXDSW6v2FoLQhuyIGpo6sTDlvfdykgJ7QZFpt4pmn77+e5Co2bnMCdH 4WdMW/W1CZdYfVc5xIRPWf99hVnMVkTnjNLeFYMgqlpHsy7ffv0pDWmSwNfd+At8 65ZWkLBF2IExIpVC2KJJzDTQP/4yH766rwBa+ULTBTmqnaJy4mWpBqPEPz1r40Wz vTq9yPl2+ynEaiS0QbE8qaFabSbkz0MnaPioB0EygoPRyL9x -----END CERTIFICATE-----Generated at Wed Nov 26 03:45:49 2025 by rpki-client