This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/p5J-mov0f5fWuk8WlbIxF3o1mQQ.roa File: p5J-mov0f5fWuk8WlbIxF3o1mQQ.roa (raw, json) Hash identifier: 71bTq1kgj3BQ7lC/AmaFWL73UN91mT4YYFpfTb8hfMg= Subject key identifier: A7:92:7E:9A:8B:F4:7F:97:D6:BA:4F:16:95:B2:31:17:7A:35:99:04 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019AF7C645A5F65C04C47939AF51BD680C8D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/p5J-mov0f5fWuk8WlbIxF3o1mQQ.roa Signing time: Sun 07 Dec 2025 07:45:57 +0000 ROA not before: Sun 07 Dec 2025 07:45:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214971 IP address blocks: 2a06:de02:1a01::/48 maxlen: 48 2a06:de02:1a02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:c6:45:a5:f6:5c:04:c4:79:39:af:51:bd:68:0c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 7 07:45:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7927e9a8bf47f97d6ba4f1695b231177a359904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:b0:af:75:41:18:75:de:be:0f:2b:48:28: 27:dd:7c:47:c5:17:14:5b:88:12:73:7c:38:fe:be: a4:6c:8c:10:57:84:ed:8d:4f:78:3c:23:69:43:92: 43:09:d2:d4:10:be:5c:1e:1e:1c:08:bb:1a:7a:a3: 8d:70:92:6e:5b:a2:02:2a:79:5e:04:7e:9b:ba:13: 4b:d8:55:b5:8e:8b:ea:30:50:40:3f:0c:d1:7e:10: 05:be:ec:07:1a:67:fc:cc:05:48:d3:e3:67:e7:24: 8a:c1:40:e7:3a:20:7e:21:5e:de:91:e9:fb:fe:2d: c2:af:17:59:e5:4e:31:17:ed:8a:2c:bf:d9:82:71: 87:6a:65:de:6c:cf:57:ab:0f:e7:ca:4a:64:d5:80: d2:8c:b1:e3:aa:a2:62:d9:4e:de:d8:ae:13:24:d6: c9:3b:fa:43:f1:43:59:8e:10:52:1d:b8:fd:75:10: b8:0d:db:7d:22:45:24:31:f6:00:81:3a:d2:5a:b1: da:19:06:cc:33:40:36:db:8d:cc:33:2c:14:e9:31: 52:94:3f:03:a9:51:a7:91:7b:86:22:1f:e0:76:02: b1:e2:a8:44:cc:28:b8:17:15:e2:cf:29:da:96:18: 2c:d9:d6:74:86:03:43:4e:18:f1:90:6b:0d:a2:d0: 86:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:92:7E:9A:8B:F4:7F:97:D6:BA:4F:16:95:B2:31:17:7A:35:99:04 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/p5J-mov0f5fWuk8WlbIxF3o1mQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de02:1a01::-2a06:de02:1a02:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 00:48:be:41:e6:52:b4:d3:e9:68:26:ab:35:41:df:27:22:c2: ab:a7:e6:20:27:0f:f0:c2:50:1a:aa:59:9d:4b:3b:c7:ea:7f: e2:5a:42:9e:db:b6:6d:74:fc:ec:71:d3:02:5d:51:f1:65:f9: 81:72:7d:0e:50:65:d7:7c:e7:ec:e5:b8:67:7b:cb:24:f9:44: b9:87:1d:e9:4c:e0:8b:a3:8a:10:5e:80:c8:f0:90:73:cc:47: 82:6a:18:8f:f1:d7:a3:78:84:71:9e:5d:96:d6:e7:9d:74:f6: cb:b1:4b:ef:0c:25:a7:19:7f:0b:8f:2e:e4:36:ab:fb:46:c7: c2:f9:28:db:34:85:5a:f8:26:2e:64:44:e3:9e:85:c3:a1:6f: be:58:c1:30:25:e5:1e:f6:52:0b:42:bb:fc:8f:62:a3:95:c6: 25:68:48:a0:97:85:f6:05:3a:3a:27:4b:db:db:ef:bf:a1:5f: 93:3d:39:ee:9c:4f:de:c9:1f:ea:1a:92:4b:ff:20:fc:c7:25: 52:a2:f4:b1:a9:4a:b3:4c:72:96:29:8c:f0:11:3c:89:dd:da: 79:13:31:e9:35:5f:02:41:7a:b7:06:3d:82:e3:d1:3b:06:11: 78:58:3a:fa:42:90:93:76:22:07:24:08:7e:6b:4d:9b:d7:09: 3d:68:05:06 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZr3xkWl9lwExHk5r1G9aAyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjA3MDc0NTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzkyN2U5YThiZjQ3Zjk3ZDZiYTRmMTY5NWIyMzExNzdhMzU5OTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf2wr3VBGHXevg8rSCgn3XxHxRcU W4gSc3w4/r6kbIwQV4TtjU94PCNpQ5JDCdLUEL5cHh4cCLsaeqONcJJuW6ICKnle BH6buhNL2FW1jovqMFBAPwzRfhAFvuwHGmf8zAVI0+Nn5ySKwUDnOiB+IV7eken7 /i3CrxdZ5U4xF+2KLL/ZgnGHamXebM9Xqw/nykpk1YDSjLHjqqJi2U7e2K4TJNbJ O/pD8UNZjhBSHbj9dRC4Ddt9IkUkMfYAgTrSWrHaGQbMM0A2243MMywU6TFSlD8D qVGnkXuGIh/gdgKx4qhEzCi4FxXizynalhgs2dZ0hgNDThjxkGsNotCG4wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKeSfpqL9H+X1rpPFpWyMRd6NZkEMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcDVKLW1vdjBmNWZXdWs4V2xiSXhGM28xbVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqBt4C GgEDBwAqBt4CGgIwDQYJKoZIhvcNAQELBQADggEBAABIvkHmUrTT6WgmqzVB3yci wqun5iAnD/DCUBqqWZ1LO8fqf+JaQp7btm10/Oxx0wJdUfFl+YFyfQ5QZdd85+zl uGd7yyT5RLmHHelM4IujihBegMjwkHPMR4JqGI/x16N4hHGeXZbW55109suxS+8M JacZfwuPLuQ2q/tGx8L5KNs0hVr4Ji5kROOehcOhb75YwTAl5R72UgtCu/yPYqOV xiVoSKCXhfYFOjonS9vb77+hX5M9Oe6cT97JH+oakkv/IPzHJVKi9LGpSrNMcpYp jPARPInd2nkTMek1XwJBercGPYLj0TsGEXhYOvpCkJN2IgckCH5rTZvXCT1oBQY= -----END CERTIFICATE-----Generated at Wed Dec 10 01:24:46 2025 by rpki-client