This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/CwxwFEJsdlinBz-t0B1gPJIEz2Q.roa File: CwxwFEJsdlinBz-t0B1gPJIEz2Q.roa (raw, json) Hash identifier: H5q68nvGZtjHpIN24nq/np1beArmS2f+LIhnUt/l1+E= Subject key identifier: 0B:0C:70:14:42:6C:76:58:A7:07:3F:AD:D0:1D:60:3C:92:04:CF:64 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019AEB26F44DBB7FADE15BE70C42FE2B9EE8 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/CwxwFEJsdlinBz-t0B1gPJIEz2Q.roa Signing time: Thu 04 Dec 2025 20:56:29 +0000 ROA not before: Thu 04 Dec 2025 20:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213520 IP address blocks: 2a12:bec4:1b50::/44 maxlen: 44 2a12:bec4:1bb0::/44 maxlen: 44 2a12:bec4:1d60::/44 maxlen: 44 2a12:bec4:1d70::/44 maxlen: 44 2a12:bec4:1de0::/44 maxlen: 44 2a12:bec4:1e50::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:26:f4:4d:bb:7f:ad:e1:5b:e7:0c:42:fe:2b:9e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Dec 4 20:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b0c7014426c7658a7073fadd01d603c9204cf64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:ff:8c:db:c5:96:35:57:14:c6:c0:e4:c0: 63:52:ab:7a:e2:24:99:4b:1e:2d:c0:7a:37:11:62: 3d:98:18:9d:ab:0a:8a:a5:5c:2b:1a:8d:d3:72:21: 93:0f:38:c0:fa:8d:b5:4a:55:b3:c5:72:96:32:44: da:bd:b8:38:61:99:e7:61:14:1b:fb:98:5b:b3:a6: 06:51:67:dc:72:65:c2:3f:10:29:4e:5c:ae:36:b2: f2:2d:bc:29:ab:d7:13:7c:d6:46:56:93:69:83:9a: 4c:1b:38:05:76:97:b9:f7:f3:4b:dc:cc:fc:a4:12: 9f:78:88:e6:2e:df:1d:76:09:08:9f:74:0d:8f:fe: ab:04:f7:b7:56:67:82:88:e7:f6:97:0a:2a:00:6d: 55:d5:66:f4:2a:e6:f3:60:bd:00:45:f8:1f:a5:d1: 58:44:16:02:9d:69:4d:49:e2:f5:3d:88:31:9b:41: 65:69:ac:95:c4:1b:b2:35:1c:82:4f:73:a1:0a:cf: 95:30:ff:16:78:b8:49:3b:11:2a:1c:8d:9b:17:67: 66:c4:c5:aa:02:1f:4f:3a:20:c5:d0:0f:1f:8a:4b: 00:3a:4f:91:b8:9f:2d:76:27:b6:33:9a:0d:18:30: c5:54:b0:d1:a5:06:40:b8:8e:8c:cf:74:cb:a3:41: c2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0C:70:14:42:6C:76:58:A7:07:3F:AD:D0:1D:60:3C:92:04:CF:64 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/CwxwFEJsdlinBz-t0B1gPJIEz2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1b50::/44 2a12:bec4:1bb0::/44 2a12:bec4:1d60::/43 2a12:bec4:1de0::/44 2a12:bec4:1e50::/44 Signature Algorithm: sha256WithRSAEncryption 58:31:8f:c5:22:a2:f7:cc:14:71:04:c7:a5:db:ca:dc:d9:74: bf:c4:f6:b9:b8:21:56:8b:cc:ed:26:41:c1:84:7f:2f:da:a2: bb:48:5a:9b:ef:9b:cb:45:20:38:4c:52:39:df:e9:04:b8:94: 8c:c5:17:68:a6:df:75:8f:32:93:99:68:84:b3:72:81:d8:e6: 4b:1b:dd:a7:67:06:9b:52:f8:8b:f1:ef:55:f6:bf:d9:fb:bc: 2d:10:1e:33:b6:4b:4d:89:45:86:01:71:b1:d6:d8:9a:c9:c1: e6:b0:de:d6:ab:1a:68:19:e3:c6:8c:22:c6:be:f0:87:9d:c5: 39:22:83:32:97:1d:04:10:17:ea:9f:22:dd:fd:24:78:51:6f: 48:1f:e1:7d:79:9a:66:86:8b:ac:c5:ac:81:6c:30:b0:83:dc: 6f:02:a0:d6:ed:c6:22:ac:16:69:8b:ed:57:ca:8d:76:2f:d5: 57:29:86:ed:ec:b9:80:37:7f:65:2e:f2:11:65:0b:c4:43:d9: fb:d0:1a:7e:68:dd:d2:39:3f:ea:d8:3b:f7:eb:58:27:e5:b9: d7:d1:c3:10:2c:71:a3:25:b9:b3:e5:20:25:ff:3f:5f:f5:13: fa:93:21:fc:9b:70:e3:21:09:34:59:07:59:0b:82:c8:da:ba: 2e:02:fe:56 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZrrJvRNu3+t4VvnDEL+K57oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjUxMjA0MjA1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjBjNzAxNDQyNmM3NjU4YTcwNzNmYWRkMDFkNjAzYzkyMDRjZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscz/jNvFljVXFMbA5MBjUqt64iSZ Sx4twHo3EWI9mBidqwqKpVwrGo3TciGTDzjA+o21SlWzxXKWMkTavbg4YZnnYRQb +5hbs6YGUWfccmXCPxApTlyuNrLyLbwpq9cTfNZGVpNpg5pMGzgFdpe59/NL3Mz8 pBKfeIjmLt8ddgkIn3QNj/6rBPe3VmeCiOf2lwoqAG1V1Wb0KubzYL0ARfgfpdFY RBYCnWlNSeL1PYgxm0FlaayVxBuyNRyCT3OhCs+VMP8WeLhJOxEqHI2bF2dmxMWq Ah9POiDF0A8fiksAOk+RuJ8tdie2M5oNGDDFVLDRpQZAuI6Mz3TLo0HC+wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFAsMcBRCbHZYpwc/rdAdYDySBM9kMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvQ3d4d0ZFSnNkbGluQnotdDBCMWdQSklFejJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcEKhK+xBtQ AwcEKhK+xBuwAwcFKhK+xB1gAwcEKhK+xB3gAwcEKhK+xB5QMA0GCSqGSIb3DQEB CwUAA4IBAQBYMY/FIqL3zBRxBMel28rc2XS/xPa5uCFWi8ztJkHBhH8v2qK7SFqb 75vLRSA4TFI53+kEuJSMxRdopt91jzKTmWiEs3KB2OZLG92nZwabUviL8e9V9r/Z +7wtEB4ztktNiUWGAXGx1tiaycHmsN7WqxpoGePGjCLGvvCHncU5IoMylx0EEBfq nyLd/SR4UW9IH+F9eZpmhousxayBbDCwg9xvAqDW7cYirBZpi+1Xyo12L9VXKYbt 7LmAN39lLvIRZQvEQ9n70Bp+aN3SOT/q2Dv361gn5bnX0cMQLHGjJbmz5SAl/z9f 9RP6kyH8m3DjIQk0WQdZC4LI2rouAv5W -----END CERTIFICATE-----Generated at Fri Dec 5 20:11:33 2025 by rpki-client