This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hXbA1gWu1mPc9PkBg2TwpCPvazY.roa File: hXbA1gWu1mPc9PkBg2TwpCPvazY.roa (raw, json) Hash identifier: ltaLiN4KaAMIjsYxp/pwKil3HVH5kegk2b7RBsAkauw= Subject key identifier: 85:76:C0:D6:05:AE:D6:63:DC:F4:F9:01:83:64:F0:A4:23:EF:6B:36 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019A98981FCA8872EF597396831EA6CA2670 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hXbA1gWu1mPc9PkBg2TwpCPvazY.roa Signing time: Tue 18 Nov 2025 20:11:37 +0000 ROA not before: Tue 18 Nov 2025 20:11:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215290 IP address blocks: 2a0e:19c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:98:1f:ca:88:72:ef:59:73:96:83:1e:a6:ca:26:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Nov 18 20:11:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8576c0d605aed663dcf4f9018364f0a423ef6b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:87:c3:a2:44:b9:41:c2:40:cb:d4:ce:c8: d8:ce:d3:d7:ac:ff:31:8c:1f:64:35:06:57:57:8c: 67:69:53:62:86:37:e6:4c:39:67:d9:96:35:40:62: 97:fd:6d:00:67:76:c5:b9:e2:7b:f4:3c:0a:97:8e: 0c:63:59:db:d8:a4:a4:04:42:f1:b8:b3:6f:12:9a: fe:9a:3c:c5:41:24:0c:f0:e0:f2:7d:5e:08:00:7c: a2:df:19:65:13:10:4d:d0:d0:21:a3:23:dd:ad:3b: aa:df:4b:62:90:b4:9b:8a:d5:76:87:67:08:e5:00: dc:f6:44:b3:ab:16:60:b8:11:44:5e:d0:26:6f:d9: 7b:23:f5:bb:96:1c:b1:41:b7:a9:d2:23:e8:cf:c9: 8b:67:2f:22:18:a6:18:39:0e:b8:41:95:67:9a:ab: 09:23:c1:49:b6:9a:af:a5:94:51:80:77:19:4c:8a: bd:8b:56:b8:45:14:f1:a7:75:ef:b8:34:d3:10:e1: ed:e7:59:0d:27:4f:b1:bc:90:57:e6:67:f9:80:07: 6c:f8:9d:db:b6:59:0e:1d:27:cf:24:19:ba:2a:9b: c7:63:6b:f1:dc:67:6d:15:d4:33:f2:81:3d:85:e6: 3c:e0:c4:a2:a3:c2:da:f6:a7:a6:e9:c5:ac:52:3d: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:76:C0:D6:05:AE:D6:63:DC:F4:F9:01:83:64:F0:A4:23:EF:6B:36 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hXbA1gWu1mPc9PkBg2TwpCPvazY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:19c7::/32 Signature Algorithm: sha256WithRSAEncryption 30:3e:45:7d:09:f3:1e:7e:cf:75:23:a9:80:7b:78:af:1b:4a: 9d:93:c8:ec:59:80:96:91:bf:fc:16:f1:28:56:b3:1d:86:99: 3c:b4:f1:e8:58:ea:b2:62:0a:93:59:da:34:08:c9:ba:0a:f7: ab:9e:92:28:da:9c:8c:18:76:19:2b:6f:a9:15:90:86:86:42: 83:9e:11:97:10:1a:0c:e6:73:54:a1:50:ed:a4:e3:25:73:ce: 55:71:25:fb:c5:ca:55:c9:63:34:2f:bc:ac:7c:68:05:19:ab: da:3d:0c:73:fe:a5:60:64:40:94:17:fa:b4:98:a8:3b:f7:36: 68:5b:44:97:e9:ca:d2:bc:a4:98:77:dd:84:f5:e7:d7:4f:27: 15:8d:cb:ef:64:59:d3:b6:90:c7:59:fb:d4:fa:5d:e7:89:35: ca:15:c9:8c:22:b2:99:49:1d:c4:d6:4d:4c:1b:1a:7e:6b:a3: b7:3c:1c:7d:0e:10:f8:09:63:5e:4f:8f:d5:6c:29:d2:ef:c1: af:e5:83:c7:c2:b3:e2:15:7f:5d:78:6b:cd:fe:6e:d6:f5:c9: af:d0:0e:33:11:a4:3c:77:d3:3c:5d:47:b7:90:1d:50:b9:e2: 14:44:60:07:de:39:c7:65:52:bd:b3:97:40:4c:7b:d3:ce:f7: aa:be:73:6c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqYmB/KiHLvWXOWgx6myiZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMTE4MjAxMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTc2YzBkNjA1YWVkNjYzZGNmNGY5MDE4MzY0ZjBhNDIzZWY2YjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdCHw6JEuUHCQMvUzsjYztPXrP8x jB9kNQZXV4xnaVNihjfmTDln2ZY1QGKX/W0AZ3bFueJ79DwKl44MY1nb2KSkBELx uLNvEpr+mjzFQSQM8ODyfV4IAHyi3xllExBN0NAhoyPdrTuq30tikLSbitV2h2cI 5QDc9kSzqxZguBFEXtAmb9l7I/W7lhyxQbep0iPoz8mLZy8iGKYYOQ64QZVnmqsJ I8FJtpqvpZRRgHcZTIq9i1a4RRTxp3XvuDTTEOHt51kNJ0+xvJBX5mf5gAds+J3b tlkOHSfPJBm6KpvHY2vx3GdtFdQz8oE9heY84MSio8La9qem6cWsUj20HwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIV2wNYFrtZj3PT5AYNk8KQj72s2MB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvaFhiQTFnV3UxbVBjOVBrQmcyVHdwQ1B2YXpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg4ZxzAN BgkqhkiG9w0BAQsFAAOCAQEAMD5FfQnzHn7PdSOpgHt4rxtKnZPI7FmAlpG//Bbx KFazHYaZPLTx6FjqsmIKk1naNAjJugr3q56SKNqcjBh2GStvqRWQhoZCg54RlxAa DOZzVKFQ7aTjJXPOVXEl+8XKVcljNC+8rHxoBRmr2j0Mc/6lYGRAlBf6tJioO/c2 aFtEl+nK0rykmHfdhPXn108nFY3L72RZ07aQx1n71Ppd54k1yhXJjCKymUkdxNZN TBsafmujtzwcfQ4Q+AljXk+P1Wwp0u/Br+WDx8Kz4hV/XXhrzf5u1vXJr9AOMxGk PHfTPF1Ht5AdULniFERgB945x2VSvbOXQEx70873qr5zbA== -----END CERTIFICATE-----Generated at Fri Dec 5 13:23:16 2025 by rpki-client