This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fwJJxSAvHdiFgf1-INPjl21Schg.roa File: fwJJxSAvHdiFgf1-INPjl21Schg.roa (raw, json) Hash identifier: i85CLVN4NCgnlbxniWs0EJD2+mHok8eLNvMfLRQRMAU= Subject key identifier: 7F:02:49:C5:20:2F:1D:D8:85:81:FD:7E:20:D3:E3:97:6D:52:72:18 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B4487D4CF4285CA6A9C5CA31C64BAE86F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fwJJxSAvHdiFgf1-INPjl21Schg.roa Signing time: Mon 22 Dec 2025 05:28:31 +0000 ROA not before: Mon 22 Dec 2025 05:28:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 2a0c:3b87:ff00::/40 maxlen: 48 2a0c:3b87:ffff::/48 maxlen: 48 2a0e:97c0:791::/48 maxlen: 48 2a0e:97c0:792::/48 maxlen: 48 2a0e:b107:9f4::/48 maxlen: 48 2a0e:b107:9f6::/48 maxlen: 48 2a0e:b107:df2::/48 maxlen: 48 2a0e:b107:1870::/48 maxlen: 48 2a0e:b107:1b9e::/48 maxlen: 48 2a0e:b107:278b::/48 maxlen: 48 2a10:ccc1:400::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:87:d4:cf:42:85:ca:6a:9c:5c:a3:1c:64:ba:e8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 22 05:28:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7f0249c5202f1dd88581fd7e20d3e3976d527218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:aa:1d:a9:65:1f:07:30:ab:3a:b8:29:45:c4: 2f:22:cf:27:62:c1:29:ee:c1:93:59:26:63:db:2c: 35:fa:27:00:d9:79:a1:8c:66:23:5e:45:4a:54:48: 58:6c:50:42:04:23:04:e8:70:14:3c:b0:76:f1:a1: c4:be:c0:6e:eb:86:2f:5b:b1:6b:2e:08:bb:94:65: e6:03:b0:70:45:6a:c0:68:3d:17:1a:9c:71:0b:1b: b2:f5:71:bc:be:ec:b2:f1:ab:c2:01:58:dd:cf:47: 29:05:4d:fd:20:49:e4:f1:e3:18:78:2a:fd:d0:3e: 7f:e9:50:e6:04:90:20:12:1d:d5:b4:b5:9a:40:00: 2f:fc:6a:76:35:55:19:ee:4b:85:f7:be:be:b3:86: 37:31:43:5a:c6:24:07:54:08:f2:61:28:9d:70:c2: bd:5e:9e:fa:60:ca:79:05:a8:09:db:01:f4:03:61: 12:d1:b7:4f:fd:32:ce:f4:67:38:44:30:53:bd:50: c0:f9:60:20:9b:17:34:ac:40:09:bc:4f:e7:c5:e9: 22:82:c2:00:1a:8c:87:ba:c4:7b:34:9c:2e:f0:54: e0:d7:20:6b:fc:da:e5:5d:e7:eb:4e:2e:f2:a1:8e: 79:1a:c1:b3:c2:7f:33:43:86:e9:3e:74:0b:4c:b9: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:02:49:C5:20:2F:1D:D8:85:81:FD:7E:20:D3:E3:97:6D:52:72:18 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fwJJxSAvHdiFgf1-INPjl21Schg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:3b87:ff00::/40 2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff 2a0e:b107:9f4::/48 2a0e:b107:9f6::/48 2a0e:b107:df2::/48 2a0e:b107:1870::/48 2a0e:b107:1b9e::/48 2a0e:b107:278b::/48 2a10:ccc1:400::/38 Signature Algorithm: sha256WithRSAEncryption 3b:ff:ef:29:e0:80:4d:88:70:99:31:29:e8:3f:d7:31:81:92: 8a:4c:ea:55:34:18:3c:0c:73:bf:0c:59:f5:d0:cc:dd:1c:73: 3f:65:75:bf:b3:d9:c3:46:f3:4b:a2:58:81:1f:90:9b:9f:33: 46:a2:fe:00:14:9b:9c:cd:1c:19:16:75:d1:a6:e2:ac:62:cb: 39:64:71:14:9e:f2:96:f6:a0:46:0c:8c:37:12:39:63:f8:bf: 45:b8:7b:0c:23:53:5d:03:40:45:fa:1a:f0:1a:42:59:5f:57: 0b:72:9a:e8:89:1f:b3:b8:0b:aa:cb:6e:bb:58:5b:9e:0c:16: 4f:74:2a:c1:fc:d6:c1:8f:69:20:61:10:c0:81:7c:b7:bd:60: 26:f5:8a:d7:76:70:10:5b:2f:32:69:9b:8e:5a:6b:97:10:44: 8a:7b:55:85:a6:3f:a8:3b:82:e2:2b:50:9b:10:04:a3:cf:35: 62:33:6f:00:ec:ed:91:db:79:f2:3f:7c:c5:81:e7:70:44:c3: ef:a7:76:66:c6:08:ff:47:a2:c8:01:cf:c8:ea:82:6c:af:50: 7f:e2:59:2b:65:78:5f:79:af:00:32:92:25:9c:2d:de:9b:40: 2c:4b:9e:cd:21:f1:eb:a6:99:65:a2:ea:d4:53:5f:90:16:b2: a1:0c:f8:00 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZtEh9TPQoXKapxcoxxkuuhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjIyMDUyODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjAyNDljNTIwMmYxZGQ4ODU4MWZkN2UyMGQzZTM5NzZkNTI3MjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aodqWUfBzCrOrgpRcQvIs8nYsEp 7sGTWSZj2yw1+icA2XmhjGYjXkVKVEhYbFBCBCME6HAUPLB28aHEvsBu64YvW7Fr Lgi7lGXmA7BwRWrAaD0XGpxxCxuy9XG8vuyy8avCAVjdz0cpBU39IEnk8eMYeCr9 0D5/6VDmBJAgEh3VtLWaQAAv/Gp2NVUZ7kuF976+s4Y3MUNaxiQHVAjyYSidcMK9 Xp76YMp5BagJ2wH0A2ES0bdP/TLO9Gc4RDBTvVDA+WAgmxc0rEAJvE/nxekigsIA GoyHusR7NJwu8FTg1yBr/NrlXefrTi7yoY55GsGzwn8zQ4bpPnQLTLk3fwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFH8CScUgLx3YhYH9fiDT45dtUnIYMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZndKSnhTQXZIZGlGZ2YxLUlOUGpsMjFTY2hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAAjBaAwYAKgw7h/8w EgMHACoOl8AHkQMHACoOl8AHkgMHACoOsQcJ9AMHACoOsQcJ9gMHACoOsQcN8gMH ACoOsQcYcAMHACoOsQcbngMHACoOsQcniwMGAioQzMEEMA0GCSqGSIb3DQEBCwUA A4IBAQA7/+8p4IBNiHCZMSnoP9cxgZKKTOpVNBg8DHO/DFn10MzdHHM/ZXW/s9nD RvNLoliBH5CbnzNGov4AFJuczRwZFnXRpuKsYss5ZHEUnvKW9qBGDIw3Ejlj+L9F uHsMI1NdA0BF+hrwGkJZX1cLcproiR+zuAuqy267WFueDBZPdCrB/NbBj2kgYRDA gXy3vWAm9YrXdnAQWy8yaZuOWmuXEESKe1WFpj+oO4LiK1CbEASjzzViM28A7O2R 23nyP3zFgedwRMPvp3Zmxgj/R6LIAc/I6oJsr1B/4lkrZXhfea8AMpIlnC3em0As S57NIfHrppllourUU1+QFrKhDPgA -----END CERTIFICATE-----Generated at Tue Dec 23 22:03:11 2025 by rpki-client