This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/jHePdwysK6kNDI3bSqmeF8Twv-g.roa File: jHePdwysK6kNDI3bSqmeF8Twv-g.roa (raw, json) Hash identifier: 99KfjDJeuSZw+7rcAWv6j4zVImWkkOPG8GX+d82LmKE= Subject key identifier: 8C:77:8F:77:0C:AC:2B:A9:0D:0C:8D:DB:4A:A9:9E:17:C4:F0:BF:E8 Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Certificate serial: 019A6F03490410FDB63C7AF1B45C12B15187 Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/jHePdwysK6kNDI3bSqmeF8Twv-g.roa Signing time: Mon 10 Nov 2025 18:24:37 +0000 ROA not before: Mon 10 Nov 2025 18:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213488 IP address blocks: 2a14:9401:6000::/36 maxlen: 36 2a14:9401:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6f:03:49:04:10:fd:b6:3c:7a:f1:b4:5c:12:b1:51:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Validity Not Before: Nov 10 18:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8c778f770cac2ba90d0c8ddb4aa99e17c4f0bfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:c4:6d:6c:97:1e:1f:bc:28:71:db:cb:72: 9e:15:fe:1a:04:3f:7a:00:b8:65:e9:d3:c1:38:c9: 87:47:f2:2a:b7:38:ea:ae:97:99:21:c5:16:15:d5: 53:67:03:ea:d4:10:68:fc:6f:06:e5:66:72:23:81: 7c:65:fc:70:58:12:e6:03:2f:25:ca:7d:31:05:80: 77:51:18:a5:6b:d9:e4:f0:53:96:1a:f0:1c:ea:ab: f7:67:81:c2:23:8d:91:b7:1a:ff:03:76:ef:8d:0c: fa:96:1d:da:0a:aa:e5:56:42:60:29:c4:ef:bc:5e: 63:d2:ae:3b:14:9f:ec:c4:51:e9:18:95:f0:ff:eb: 8a:d8:43:8d:3c:ce:33:e0:22:fa:02:b2:01:37:2e: 1e:1c:ee:78:64:bd:d7:73:0d:be:61:38:45:35:67: 7e:99:73:8f:fe:cc:20:e3:d3:ba:5d:d5:e0:f7:a5: c6:d9:7c:ce:e3:e7:be:64:a7:5a:bf:4a:f5:59:a3: f5:07:fa:4f:08:1c:a7:6f:a4:ea:54:f9:31:bc:5b: f2:9a:b8:1d:48:c8:cb:0a:4a:6e:08:5f:d2:6a:e0: e6:8f:35:78:7a:c2:fe:a1:ec:39:c7:9d:c1:47:1d: b0:f0:3e:e4:2d:cb:ea:26:9f:23:47:40:35:3a:7d: 7b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:77:8F:77:0C:AC:2B:A9:0D:0C:8D:DB:4A:A9:9E:17:C4:F0:BF:E8 X509v3 Authority Key Identifier: keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/jHePdwysK6kNDI3bSqmeF8Twv-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:9401:6000::/35 Signature Algorithm: sha256WithRSAEncryption 59:3a:97:11:78:f0:49:bf:7c:19:49:e8:dd:dc:85:e4:43:da: 24:61:b6:e1:10:31:d8:b1:5f:aa:bc:95:d3:8b:e8:95:e4:0d: ff:5f:5a:6f:4d:bf:63:47:65:ab:04:d8:49:e7:2b:04:3c:2d: 52:6c:74:7e:10:1e:66:44:ff:19:bb:17:3f:b4:0f:57:cf:2c: 71:1e:7e:0e:90:f4:b4:6e:01:29:2f:eb:72:f0:8c:48:ed:7b: 46:ae:14:b5:0e:b8:d6:b2:9a:79:41:fb:5c:20:8e:44:94:9e: 11:85:5c:ad:7d:37:fc:c0:4f:a6:d5:cc:81:33:d0:17:0a:0c: 30:32:e9:2e:3e:a6:98:32:08:c1:48:16:6d:14:57:c1:67:51: 7f:c3:f4:8d:13:6a:92:fd:aa:1b:6b:eb:60:5f:72:50:91:a6: 28:91:20:2c:f8:89:03:3b:77:ab:f8:9c:a4:f3:8b:c9:24:78: a1:d5:cc:d2:76:e7:f6:8e:20:4c:23:5a:6e:e5:3a:45:1f:a6: ba:28:37:c4:25:2d:77:79:46:d9:d6:01:a8:9b:e4:a3:b1:cb: 45:9d:39:10:22:14:8a:6d:26:97:86:ec:74:83:2a:aa:36:0b: 24:5a:2c:10:6d:d0:92:fc:8d:b7:f4:64:41:94:a2:46:73:06: e0:08:3d:4f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZpvA0kEEP22PHrxtFwSsVGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTY0YTY0N2JkMmE1NTU3ZjcwZjY3NmFkY2M3NjkwNGZi ODcyYWIwHhcNMjUxMTEwMTgyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yzc3OGY3NzBjYWMyYmE5MGQwYzhkZGI0YWE5OWUxN2M0ZjBiZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwbEbWyXHh+8KHHby3KeFf4aBD96 ALhl6dPBOMmHR/IqtzjqrpeZIcUWFdVTZwPq1BBo/G8G5WZyI4F8ZfxwWBLmAy8l yn0xBYB3URila9nk8FOWGvAc6qv3Z4HCI42Rtxr/A3bvjQz6lh3aCqrlVkJgKcTv vF5j0q47FJ/sxFHpGJXw/+uK2EONPM4z4CL6ArIBNy4eHO54ZL3Xcw2+YThFNWd+ mXOP/swg49O6XdXg96XG2XzO4+e+ZKdav0r1WaP1B/pPCBynb6TqVPkxvFvymrgd SMjLCkpuCF/SauDmjzV4esL+oew5x53BRx2w8D7kLcvqJp8jR0A1On17nQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIx3j3cMrCupDQyN20qpnhfE8L/oMB8GA1UdIwQY MBaAFG+mSmR70qVVf3D2dq3MdpBPuHKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQt ZTkxYjNhYmQxZmU4LzEvakhlUGR3eXNLNmtOREkzYlNxbWVGOFR3di1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQtZTkxYjNhYmQxZmU4 LzEvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKhSUAWAw DQYJKoZIhvcNAQELBQADggEBAFk6lxF48Em/fBlJ6N3cheRD2iRhtuEQMdixX6q8 ldOL6JXkDf9fWm9Nv2NHZasE2EnnKwQ8LVJsdH4QHmZE/xm7Fz+0D1fPLHEefg6Q 9LRuASkv63LwjEjte0auFLUOuNaymnlB+1wgjkSUnhGFXK19N/zAT6bVzIEz0BcK DDAy6S4+ppgyCMFIFm0UV8FnUX/D9I0TapL9qhtr62BfclCRpiiRICz4iQM7d6v4 nKTzi8kkeKHVzNJ25/aOIEwjWm7lOkUfprooN8QlLXd5RtnWAaib5KOxy0WdORAi FIptJpeG7HSDKqo2CyRaLBBt0JL8jbf0ZEGUokZzBuAIPU8= -----END CERTIFICATE-----Generated at Sun Nov 23 13:51:27 2025 by rpki-client