This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/taNv5hIwUydsrlfMNu5J0-P6ucY.roa File: taNv5hIwUydsrlfMNu5J0-P6ucY.roa (raw, json) Hash identifier: lOUHgZ7UjL6Tn5Zk+4AjKPC80rnonl0VpIkmINNcuAU= Subject key identifier: B5:A3:6F:E6:12:30:53:27:6C:AE:57:CC:36:EE:49:D3:E3:FA:B9:C6 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019AD5DC36D75FAFD80166D014611DFE3535 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/taNv5hIwUydsrlfMNu5J0-P6ucY.roa Signing time: Sun 30 Nov 2025 17:42:50 +0000 ROA not before: Sun 30 Nov 2025 17:42:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215738 IP address blocks: 2a06:de00:700::/44 maxlen: 48 2a06:de00:7f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:dc:36:d7:5f:af:d8:01:66:d0:14:61:1d:fe:35:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Nov 30 17:42:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b5a36fe6123053276cae57cc36ee49d3e3fab9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:fb:22:60:30:4a:23:80:90:53:07:96:1f: 24:91:eb:06:ab:ab:69:93:77:7d:7c:90:ae:ae:ed: 86:45:12:ed:2d:56:f2:02:cd:50:4b:5d:03:4c:d8: a2:63:3d:c9:bf:1e:11:76:df:b7:e7:aa:78:b8:92: ad:80:2e:ab:9b:64:f8:d9:8f:67:1a:d9:38:67:2d: 19:e1:db:93:a9:11:5b:6f:99:36:a7:93:59:1e:9c: e9:61:bb:12:3f:bf:22:48:ac:ad:81:43:55:42:cc: 2b:61:c5:58:81:cf:62:c9:9e:2f:43:8d:9e:cf:32: cd:0a:b9:30:8d:e6:67:96:39:62:e7:8c:bf:99:cb: 0b:e6:bc:2c:ac:fa:07:34:ef:cb:9a:00:1a:d6:f5: 21:4b:5f:bd:27:2c:a2:eb:0d:4b:17:a6:56:06:b3: f3:33:20:1a:b8:a5:1c:5d:e8:0c:ab:5a:e4:d1:7f: d6:34:cf:40:7c:ae:09:a4:f2:25:da:e5:5b:24:67: 77:b1:c4:0f:98:22:02:b6:89:0a:21:5d:cd:0e:12: 30:35:4c:aa:f7:2a:9f:69:bf:26:8e:54:00:ba:06: 88:0c:b1:16:35:82:a4:91:90:59:c9:67:da:40:30: 4a:a1:5b:3c:bf:ea:5f:ff:e8:ff:ca:00:35:9b:c2: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A3:6F:E6:12:30:53:27:6C:AE:57:CC:36:EE:49:D3:E3:FA:B9:C6 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/taNv5hIwUydsrlfMNu5J0-P6ucY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:700::/44 2a06:de00:7f1::/48 Signature Algorithm: sha256WithRSAEncryption 54:89:ef:49:0c:7e:84:99:e0:0f:5a:6f:b9:25:48:93:06:1b: 46:85:1d:cc:c8:d9:ba:e8:0b:21:51:13:d2:f6:00:66:d5:f0: 7e:22:11:f5:01:01:5c:42:ab:29:89:46:9b:f6:4b:1d:91:e9: 92:fd:a1:18:4a:57:00:2a:ef:02:7b:9d:f4:b9:ce:34:8f:dd: b7:1f:2c:02:a3:1c:cf:86:12:f1:6c:c2:b6:84:70:c1:fa:83: 48:ac:53:18:d4:96:2a:0e:ff:cc:89:5f:cb:b0:4c:f6:e8:28: 49:20:9a:43:5e:e7:5e:49:e0:20:71:42:48:46:0c:55:18:1b: 3f:29:b0:94:9f:a7:38:0c:32:f3:cd:35:2d:5f:b1:d5:59:4d: fc:67:b3:8e:84:72:b7:fa:60:18:7b:09:26:03:9c:68:59:92: d8:5e:3b:be:71:4a:10:84:38:cf:76:49:c2:09:b5:02:99:5e: 36:69:78:b5:d4:09:02:ec:84:10:88:f4:8f:9a:5e:4f:fe:26: c0:75:3e:84:28:0a:87:73:ec:1d:57:4f:dc:70:c3:2d:cc:dd: 58:dd:c0:e8:0a:1d:2d:19:6e:cb:f6:33:00:18:48:29:66:e7: 7a:56:83:e6:74:dc:ce:dc:42:74:16:37:0d:55:90:a9:c0:a8: 85:52:c4:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrV3DbXX6/YAWbQFGEd/jU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMTMwMTc0MjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWEzNmZlNjEyMzA1MzI3NmNhZTU3Y2MzNmVlNDlkM2UzZmFiOWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMv7ImAwSiOAkFMHlh8kkesGq6tp k3d9fJCuru2GRRLtLVbyAs1QS10DTNiiYz3Jvx4Rdt+356p4uJKtgC6rm2T42Y9n Gtk4Zy0Z4duTqRFbb5k2p5NZHpzpYbsSP78iSKytgUNVQswrYcVYgc9iyZ4vQ42e zzLNCrkwjeZnljli54y/mcsL5rwsrPoHNO/LmgAa1vUhS1+9Jyyi6w1LF6ZWBrPz MyAauKUcXegMq1rk0X/WNM9AfK4JpPIl2uVbJGd3scQPmCICtokKIV3NDhIwNUyq 9yqfab8mjlQAugaIDLEWNYKkkZBZyWfaQDBKoVs8v+pf/+j/ygA1m8LUfwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLWjb+YSMFMnbK5XzDbuSdPj+rnGMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdGFOdjVoSXdVeWRzcmxmTU51NUowLVA2dWNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAAcA AwcAKgbeAAfxMA0GCSqGSIb3DQEBCwUAA4IBAQBUie9JDH6EmeAPWm+5JUiTBhtG hR3MyNm66AshURPS9gBm1fB+IhH1AQFcQqspiUab9ksdkemS/aEYSlcAKu8Ce530 uc40j923HywCoxzPhhLxbMK2hHDB+oNIrFMY1JYqDv/MiV/LsEz26ChJIJpDXude SeAgcUJIRgxVGBs/KbCUn6c4DDLzzTUtX7HVWU38Z7OOhHK3+mAYewkmA5xoWZLY Xju+cUoQhDjPdknCCbUCmV42aXi11AkC7IQQiPSPml5P/ibAdT6EKAqHc+wdV0/c cMMtzN1Y3cDoCh0tGW7L9jMAGEgpZud6VoPmdNzO3EJ0FjcNVZCpwKiFUsTW -----END CERTIFICATE-----Generated at Mon Dec 1 23:05:56 2025 by rpki-client