This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/d2w6eaQxd36UCs9xM2JnmsMwTwY.roa File: d2w6eaQxd36UCs9xM2JnmsMwTwY.roa (raw, json) Hash identifier: l3ruBISlGB0Od3S3VXyd+1Tt82SYApStASJlJnIUfFs= Subject key identifier: 77:6C:3A:79:A4:31:77:7E:94:0A:CF:71:33:62:67:9A:C3:30:4F:06 Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019AAB6C08D90AB10BFA7B998E3548DCC176 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/d2w6eaQxd36UCs9xM2JnmsMwTwY.roa Signing time: Sat 22 Nov 2025 11:56:15 +0000 ROA not before: Sat 22 Nov 2025 11:56:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 2a04:5b81:2120::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:6c:08:d9:0a:b1:0b:fa:7b:99:8e:35:48:dc:c1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Nov 22 11:56:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=776c3a79a431777e940acf713362679ac3304f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:7f:96:de:7c:c0:28:25:f4:77:99:88:d7: 58:a7:aa:da:96:65:ec:7b:20:d3:e1:20:f3:cc:57: 70:90:3b:21:19:2e:53:27:ea:c2:da:77:17:aa:3d: 7c:c8:c9:85:16:2f:58:89:ac:82:34:64:81:a3:eb: 25:ca:31:89:5b:59:af:b3:db:22:86:ee:84:fa:19: b6:3d:88:cf:10:4f:2e:64:6d:49:52:30:65:a6:f5: 9f:19:ec:cd:2a:11:7f:e4:13:24:91:11:1e:8b:5f: de:de:b0:c7:b5:39:ca:1d:37:b4:5b:36:4c:a5:ae: 48:a5:eb:66:09:61:83:52:0d:81:60:f7:45:e3:59: 52:c1:83:18:30:d0:ff:84:53:f3:ba:16:3b:e4:a5: 9f:12:5e:8e:82:22:88:3e:70:db:c6:b2:1a:7b:89: 54:8f:da:dc:5e:f1:39:49:de:fa:78:d2:24:26:a1: 53:c1:04:82:00:92:1c:9f:04:12:5f:73:41:4d:79: d6:13:2e:28:54:5d:02:04:0c:ce:d1:9b:7d:ab:24: 6e:3a:01:7d:d8:a8:39:ce:b5:b0:a8:c7:73:b1:25: 44:fc:27:da:51:6a:95:c0:5b:fc:e3:33:99:0d:99: d8:4c:60:cd:9e:7c:f7:fa:43:41:70:63:be:96:98: 55:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6C:3A:79:A4:31:77:7E:94:0A:CF:71:33:62:67:9A:C3:30:4F:06 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/d2w6eaQxd36UCs9xM2JnmsMwTwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5b81:2120::/44 Signature Algorithm: sha256WithRSAEncryption 91:32:57:d4:61:dc:45:28:f2:04:df:2e:00:69:1a:0d:40:99: 4b:a7:9b:89:ad:13:16:16:91:a1:67:4c:95:c9:31:0c:bd:a1: 57:51:aa:dc:8a:49:6b:e6:5d:20:ea:8e:d2:84:e0:51:07:17: c5:1e:79:d8:b9:4c:a0:a6:e7:8e:e4:fa:df:0f:8c:0e:3e:d1: 6b:8a:dd:60:2c:35:77:bc:3c:c0:f2:2c:9e:67:b7:8d:2d:67: 75:d6:f1:f3:0c:ba:38:61:e4:39:d0:af:0c:8c:33:52:24:6d: 94:1b:98:55:c6:19:1e:ec:a3:0a:82:63:85:26:a9:ae:95:d3: 30:70:f7:51:d8:ee:e1:01:54:bf:56:e7:3c:63:14:4d:1d:77: 05:4c:bd:ad:48:44:d8:ea:c7:ba:b2:37:08:44:58:22:38:ed: f7:71:48:85:00:6a:c1:b7:9f:53:04:e9:7a:35:d1:92:f9:e8: 2b:ce:b3:31:d1:e6:bd:a8:6d:4e:e9:e2:ea:30:02:13:c6:7d: 78:4f:c5:5c:c2:3f:0a:59:21:dd:ad:84:8c:fb:e4:e1:c8:d4: 18:f0:92:75:27:2a:3b:67:e0:39:86:ff:00:bc:22:f9:19:46: 62:e7:9f:da:e9:5d:df:3d:d8:43:9e:a0:c6:13:b6:69:9e:b1: 21:7a:63:e6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqrbAjZCrEL+nuZjjVI3MF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUxMTIyMTE1NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzZjM2E3OWE0MzE3NzdlOTQwYWNmNzEzMzYyNjc5YWMzMzA0ZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt09/lt58wCgl9HeZiNdYp6ralmXs eyDT4SDzzFdwkDshGS5TJ+rC2ncXqj18yMmFFi9YiayCNGSBo+slyjGJW1mvs9si hu6E+hm2PYjPEE8uZG1JUjBlpvWfGezNKhF/5BMkkREei1/e3rDHtTnKHTe0WzZM pa5IpetmCWGDUg2BYPdF41lSwYMYMND/hFPzuhY75KWfEl6OgiKIPnDbxrIae4lU j9rcXvE5Sd76eNIkJqFTwQSCAJIcnwQSX3NBTXnWEy4oVF0CBAzO0Zt9qyRuOgF9 2Kg5zrWwqMdzsSVE/CfaUWqVwFv84zOZDZnYTGDNnnz3+kNBcGO+lphVGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHdsOnmkMXd+lArPcTNiZ5rDME8GMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvZDJ3NmVhUXhkMzZVQ3M5eE0ySm5tc013VHdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgRbgSEg MA0GCSqGSIb3DQEBCwUAA4IBAQCRMlfUYdxFKPIE3y4AaRoNQJlLp5uJrRMWFpGh Z0yVyTEMvaFXUarciklr5l0g6o7ShOBRBxfFHnnYuUygpueO5PrfD4wOPtFrit1g LDV3vDzA8iyeZ7eNLWd11vHzDLo4YeQ50K8MjDNSJG2UG5hVxhke7KMKgmOFJqmu ldMwcPdR2O7hAVS/Vuc8YxRNHXcFTL2tSETY6se6sjcIRFgiOO33cUiFAGrBt59T BOl6NdGS+egrzrMx0ea9qG1O6eLqMAITxn14T8Vcwj8KWSHdrYSM++ThyNQY8JJ1 Jyo7Z+A5hv8AvCL5GUZi55/a6V3fPdhDnqDGE7ZpnrEhemPm -----END CERTIFICATE-----Generated at Thu Dec 4 07:32:13 2025 by rpki-client