This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/raoKOGWahkldm9jzk112oIdKh2E.roa File: raoKOGWahkldm9jzk112oIdKh2E.roa (raw, json) Hash identifier: kJqB1EZK0OjSpM3iHVBQ/i4GC+helHmg8/MaFEgCKuw= Subject key identifier: AD:AA:0A:38:65:9A:86:49:5D:9B:D8:F3:93:5D:76:A0:87:4A:87:61 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019AE5BF46622FE5BFD547FF4D35033C1FAD Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/raoKOGWahkldm9jzk112oIdKh2E.roa Signing time: Wed 03 Dec 2025 19:45:09 +0000 ROA not before: Wed 03 Dec 2025 19:45:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203273 IP address blocks: 2a0e:d606::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:bf:46:62:2f:e5:bf:d5:47:ff:4d:35:03:3c:1f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 3 19:45:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=adaa0a38659a86495d9bd8f3935d76a0874a8761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:af:20:80:5a:6a:08:29:ad:29:2b:92:16: 84:02:d6:3e:15:14:3d:fb:de:5a:8d:16:fe:5e:fc: 5b:5b:4e:ed:39:fe:6a:23:d8:b4:f4:98:a7:4c:5d: ef:d5:0c:e3:f5:df:49:1c:76:b6:dd:22:6c:8b:97: 08:a8:bd:81:4a:9d:65:2b:d6:f8:32:9b:9c:e0:84: c7:fa:17:83:a5:60:57:94:a5:83:1b:20:2d:0b:f9: 80:d3:a3:3c:0e:c6:2a:7e:fa:07:61:e8:09:e6:34: 4f:8d:de:4a:4a:9c:1c:d2:2b:fa:e4:3a:31:48:41: 6b:59:ea:9d:92:21:00:cc:f7:7c:f1:2e:00:16:97: 21:d4:a7:b9:d5:25:3e:27:0a:d8:b1:7b:72:cc:9c: e8:f2:13:2e:1c:4f:c6:62:b9:94:3b:f4:fb:2e:02: cb:54:e2:dd:6e:c6:fb:5a:20:53:5c:3f:e9:09:0c: d8:1b:68:97:bc:a5:54:88:b0:b3:d4:97:a6:ce:00: f4:28:a7:d9:2b:f0:34:9e:64:47:bc:f5:32:1e:a2: 13:fc:05:c0:a6:40:4e:70:1f:f0:8e:2a:0a:8f:0d: af:52:b2:6c:72:c1:e2:fd:57:c3:02:2f:d2:9f:04: ba:b9:6a:38:0e:59:a7:9a:1b:91:30:fc:1c:0f:c3: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AA:0A:38:65:9A:86:49:5D:9B:D8:F3:93:5D:76:A0:87:4A:87:61 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/raoKOGWahkldm9jzk112oIdKh2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:d606::/48 Signature Algorithm: sha256WithRSAEncryption ab:9a:63:2c:99:88:83:78:67:62:70:2c:91:e2:52:4b:2f:ca: 53:eb:97:be:4c:18:f8:9a:39:56:9d:30:47:b0:2c:15:76:75: b5:ab:0b:f1:fd:6e:72:9a:a3:48:a5:7b:05:35:aa:34:b2:4f: 3e:aa:19:a8:88:e9:96:6a:85:e1:b5:73:b9:81:8f:fe:56:8d: 07:5b:da:7f:a4:08:4e:ac:66:b7:4b:bc:55:b3:57:f1:03:89: ac:b9:cd:0c:76:af:66:55:58:7c:ab:45:28:86:98:a8:8e:c8: a5:24:c4:1f:20:6b:78:87:b3:44:34:3e:3b:e6:b5:e4:f8:23: 2e:41:ee:86:cc:04:6f:e6:90:4a:00:dd:74:6e:aa:6a:93:9e: 23:51:85:f1:e1:50:30:14:d6:c6:b5:9f:fc:ec:4d:8f:e9:23: c0:f9:e8:f4:4a:c8:fd:5e:85:b5:94:06:b0:6e:06:74:9c:c1: d7:e1:db:24:c3:14:0a:44:64:4a:83:eb:49:47:67:ee:01:fa: 29:5f:bc:c7:f9:f6:06:63:f8:7a:80:4c:1e:d8:81:10:0f:b6: a2:4f:1a:fb:8e:a4:7d:82:29:77:e5:44:18:fb:84:29:85:2e: 5f:35:45:0d:e5:e2:9b:76:23:2c:11:01:f7:46:e8:c4:2d:b2: c4:ef:5d:fa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrlv0ZiL+W/1Uf/TTUDPB+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjAzMTk0NTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGFhMGEzODY1OWE4NjQ5NWQ5YmQ4ZjM5MzVkNzZhMDg3NGE4NzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO2vIIBaaggprSkrkhaEAtY+FRQ9 +95ajRb+XvxbW07tOf5qI9i09JinTF3v1Qzj9d9JHHa23SJsi5cIqL2BSp1lK9b4 Mpuc4ITH+heDpWBXlKWDGyAtC/mA06M8DsYqfvoHYegJ5jRPjd5KSpwc0iv65Dox SEFrWeqdkiEAzPd88S4AFpch1Ke51SU+JwrYsXtyzJzo8hMuHE/GYrmUO/T7LgLL VOLdbsb7WiBTXD/pCQzYG2iXvKVUiLCz1JemzgD0KKfZK/A0nmRHvPUyHqIT/AXA pkBOcB/wjioKjw2vUrJscsHi/VfDAi/SnwS6uWo4DlmnmhuRMPwcD8NxNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK2qCjhlmoZJXZvY85NddqCHSodhMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvcmFvS09HV2Foa2xkbTlqemsxMTJvSWRLaDJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7WBgAA MA0GCSqGSIb3DQEBCwUAA4IBAQCrmmMsmYiDeGdicCyR4lJLL8pT65e+TBj4mjlW nTBHsCwVdnW1qwvx/W5ymqNIpXsFNao0sk8+qhmoiOmWaoXhtXO5gY/+Vo0HW9p/ pAhOrGa3S7xVs1fxA4msuc0Mdq9mVVh8q0UohpiojsilJMQfIGt4h7NEND475rXk +CMuQe6GzARv5pBKAN10bqpqk54jUYXx4VAwFNbGtZ/87E2P6SPA+ej0Ssj9XoW1 lAawbgZ0nMHX4dskwxQKRGRKg+tJR2fuAfopX7zH+fYGY/h6gEwe2IEQD7aiTxr7 jqR9gil35UQY+4QphS5fNUUN5eKbdiMsEQH3RujELbLE7136 -----END CERTIFICATE-----Generated at Fri Dec 5 21:27:06 2025 by rpki-client