This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/A8ArBciGwq-5SAMSFJnYbZ2-JWY.roa File: A8ArBciGwq-5SAMSFJnYbZ2-JWY.roa (raw, json) Hash identifier: HDtpmH0U3+2UdqQ4PjWVu0hShOjcuNzuZaAwJ8/nDlE= Subject key identifier: 03:C0:2B:05:C8:86:C2:AF:B9:48:03:12:14:99:D8:6D:9D:BE:25:66 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019A780CD2865EC05D444DB7F1B1762A2361 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/A8ArBciGwq-5SAMSFJnYbZ2-JWY.roa Signing time: Wed 12 Nov 2025 12:31:37 +0000 ROA not before: Wed 12 Nov 2025 12:31:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208046 IP address blocks: 2a03:5840:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:0c:d2:86:5e:c0:5d:44:4d:b7:f1:b1:76:2a:23:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Nov 12 12:31:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=03c02b05c886c2afb94803121499d86d9dbe2566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:5e:72:55:a1:4a:a9:b0:1b:2f:59:70:a6: 65:cb:8d:de:5b:e2:bd:57:6a:cd:14:b0:17:20:62: 3b:c3:3c:c4:d2:74:01:f7:3a:2a:7b:98:11:07:7c: 89:8b:be:9c:73:4d:8b:e5:d3:9d:c7:9b:bd:89:bc: 1a:7d:54:05:5d:37:d2:25:5a:a5:72:91:53:bd:4b: 5d:8d:b4:8e:32:80:b3:35:7b:13:b8:97:4c:8c:bb: 47:62:c2:75:69:a9:3a:d7:51:f8:7c:15:80:5d:98: ce:e7:a0:a2:0e:84:71:05:f9:00:cb:bf:72:68:b1: 31:88:fd:bf:95:f0:3d:1f:7f:1d:33:ce:92:2d:1d: 18:44:4d:06:60:a8:46:e2:ac:de:b4:3b:73:95:a4: d3:e4:5d:86:9e:a8:62:05:06:b0:66:5a:1f:6a:56: 31:1d:3d:3e:4d:89:f3:ff:8a:5e:21:b1:d7:e9:b7: e2:e0:1c:9d:08:6a:c0:9a:aa:a9:3a:8d:31:06:81: c2:4d:e0:d4:6b:0d:c0:27:2d:48:ac:aa:a4:f9:9a: 4e:b1:8f:f8:dd:1d:97:e0:51:3b:72:08:86:30:db: d9:c2:4b:16:d2:dd:4d:36:f5:f5:13:d5:a5:78:ba: 54:c3:0a:63:08:04:89:91:ca:ed:5b:67:f2:1a:2d: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C0:2B:05:C8:86:C2:AF:B9:48:03:12:14:99:D8:6D:9D:BE:25:66 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/A8ArBciGwq-5SAMSFJnYbZ2-JWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:134::/48 Signature Algorithm: sha256WithRSAEncryption 3d:5b:7b:a4:3f:ee:20:01:d1:86:bd:7a:dd:f8:b7:9b:71:f1: 8a:5d:9c:3c:2b:d9:3c:c9:ab:bf:9e:36:25:3d:2a:00:97:62: 86:6b:f7:84:3e:ed:a1:e0:a6:e0:8d:f3:4c:c5:38:25:a6:f9: 70:6c:9f:39:d0:8a:4f:8a:a6:35:58:0f:d0:63:a3:d7:99:c2: fa:4d:53:52:12:0e:13:45:16:75:f6:93:a9:58:2d:f3:6d:cc: 02:81:31:32:e1:7a:77:04:49:6b:79:95:10:ab:fd:0e:d4:80: 09:72:0e:cd:8c:31:f2:3d:9b:9a:c4:88:b1:83:6f:12:a0:af: ee:f3:70:89:8d:f7:93:c8:ac:9e:8b:b1:ac:35:be:6e:d9:d6: 81:8d:03:2d:dd:9b:3f:ee:1a:87:aa:e7:11:54:2b:89:49:37: 07:75:17:90:f8:c9:cd:f3:97:ce:16:80:84:3c:8b:19:2f:bd: e4:91:55:c3:13:54:a7:03:17:48:84:72:df:f1:c7:84:04:b0: ee:d9:0f:db:04:de:a2:87:be:0c:90:e9:dd:bb:58:58:9b:64: ed:ac:2c:11:c9:49:43:71:e0:0e:e2:0d:32:95:d1:0e:e7:b0: a7:19:b1:cc:fa:92:70:50:6e:f6:d5:a2:6b:86:f4:0b:07:4f: c3:51:9e:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZp4DNKGXsBdRE238bF2KiNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjUxMTEyMTIzMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2MwMmIwNWM4ODZjMmFmYjk0ODAzMTIxNDk5ZDg2ZDlkYmUyNTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptReclWhSqmwGy9ZcKZly43eW+K9 V2rNFLAXIGI7wzzE0nQB9zoqe5gRB3yJi76cc02L5dOdx5u9ibwafVQFXTfSJVql cpFTvUtdjbSOMoCzNXsTuJdMjLtHYsJ1aak611H4fBWAXZjO56CiDoRxBfkAy79y aLExiP2/lfA9H38dM86SLR0YRE0GYKhG4qzetDtzlaTT5F2GnqhiBQawZlofalYx HT0+TYnz/4peIbHX6bfi4BydCGrAmqqpOo0xBoHCTeDUaw3AJy1IrKqk+ZpOsY/4 3R2X4FE7cgiGMNvZwksW0t1NNvX1E9WleLpUwwpjCASJkcrtW2fyGi1sEwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAPAKwXIhsKvuUgDEhSZ2G2dviVmMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvQThBckJjaUd3cS01U0FNU0ZKblliWjItSldZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAE0 MA0GCSqGSIb3DQEBCwUAA4IBAQA9W3ukP+4gAdGGvXrd+LebcfGKXZw8K9k8yau/ njYlPSoAl2KGa/eEPu2h4KbgjfNMxTglpvlwbJ850IpPiqY1WA/QY6PXmcL6TVNS Eg4TRRZ19pOpWC3zbcwCgTEy4Xp3BElreZUQq/0O1IAJcg7NjDHyPZuaxIixg28S oK/u83CJjfeTyKyei7GsNb5u2daBjQMt3Zs/7hqHqucRVCuJSTcHdReQ+MnN85fO FoCEPIsZL73kkVXDE1SnAxdIhHLf8ceEBLDu2Q/bBN6ih74MkOndu1hYm2TtrCwR yUlDceAO4g0yldEO57CnGbHM+pJwUG721aJrhvQLB0/DUZ7V -----END CERTIFICATE-----Generated at Tue Dec 9 07:36:46 2025 by rpki-client