This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/djVh9lvCdcg-Eauj9sbgCWAsvuU.roa File: djVh9lvCdcg-Eauj9sbgCWAsvuU.roa (raw, json) Hash identifier: +zo9ReC0NYJFSz523ECFfVtsBgICarRg0E19t+Yb1Og= Subject key identifier: 76:35:61:F6:5B:C2:75:C8:3E:11:AB:A3:F6:C6:E0:09:60:2C:BE:E5 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019A8C30289912DA83E654E0D1F21B046109 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/djVh9lvCdcg-Eauj9sbgCWAsvuU.roa Signing time: Sun 16 Nov 2025 10:22:37 +0000 ROA not before: Sun 16 Nov 2025 10:22:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215916 IP address blocks: 2a14:c380:c60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8c:30:28:99:12:da:83:e6:54:e0:d1:f2:1b:04:61:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Nov 16 10:22:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=763561f65bc275c83e11aba3f6c6e009602cbee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:88:76:df:de:f6:1e:32:59:e7:f7:41:5e:8b: 02:c5:7f:e1:03:78:8a:c1:e9:a1:1a:37:08:27:e1: 01:0b:3b:45:3d:cb:f4:a1:48:0b:0f:63:6c:e7:8c: 39:8d:79:81:1f:75:11:3b:1c:04:77:4c:83:31:ce: 4c:8f:ec:7c:0e:ca:19:9d:84:82:be:cd:4d:02:29: 02:6c:68:c1:1c:3f:1e:fa:7c:82:b5:10:e4:5b:e0: 0f:97:06:49:6e:29:e8:e7:d8:71:ad:8e:3d:6b:bf: e2:04:47:a7:50:16:9e:32:b9:18:36:dd:d3:12:1e: c3:85:dc:57:4a:63:2b:a8:28:a4:a3:39:15:73:e5: c9:82:e2:18:97:e5:ca:21:24:d2:20:16:4a:0b:d9: 66:88:b9:b9:aa:9d:63:e1:07:d4:c3:78:4f:bb:0c: a6:14:d5:a0:51:6f:50:60:e7:d4:71:ae:a9:21:f9: 1b:1a:1d:db:a3:1c:eb:95:63:4b:f5:3a:86:bd:64: 38:8b:e2:b3:3a:87:15:d7:5b:be:ce:44:b8:e6:85: 5a:06:33:dc:a7:cb:c9:7f:d8:e2:63:d9:d3:f6:fd: e4:c8:c8:9d:1a:6a:91:17:00:35:7d:5a:c0:57:fe: 51:ab:a8:f9:2b:58:72:fe:03:c2:ca:04:ed:c1:2e: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:35:61:F6:5B:C2:75:C8:3E:11:AB:A3:F6:C6:E0:09:60:2C:BE:E5 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/djVh9lvCdcg-Eauj9sbgCWAsvuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:c60::/44 Signature Algorithm: sha256WithRSAEncryption 39:dc:81:cf:e4:f0:89:7d:23:ac:b1:ea:28:8d:0b:2d:fa:e1: dc:3d:9c:63:d2:c1:35:77:87:1b:cd:41:5f:b7:6e:21:9e:7d: 94:eb:68:cd:3d:41:2d:00:f7:e7:91:c7:50:dd:4a:57:36:2f: ae:e9:9f:52:ae:c6:fe:38:90:59:1c:e6:9e:a1:41:27:3b:52: 3f:1f:96:67:bc:fa:6e:95:08:7a:de:13:bb:38:8f:0a:9d:1f: 64:23:dc:13:bb:1e:a6:c8:96:95:96:a9:bb:91:de:1c:0d:64: 48:ea:db:55:59:b6:b8:3c:01:30:c6:b3:aa:8a:50:90:ec:13: 7c:0a:85:b6:02:ba:f7:7c:ea:4b:79:3c:cc:cc:e5:10:b9:1f: 38:f6:7a:c2:ca:d6:05:d1:ee:f6:bf:a8:59:d6:b9:c5:cd:c5: 34:8d:31:ec:3d:ad:e6:26:d5:2f:b8:c3:ea:0b:65:36:d6:8d: 54:89:0b:5c:28:3b:53:4c:86:c6:2a:d8:2d:69:79:e9:64:ac: 55:eb:ee:3e:7a:73:01:c5:9b:83:29:8e:b4:88:91:dd:fa:4c: d3:ac:5a:e6:3b:48:8c:25:17:7e:fd:65:db:19:26:a1:cb:65: ab:3d:41:9e:67:b6:c2:d9:1d:d0:99:24:e6:7f:18:10:09:5a: 20:7b:78:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqMMCiZEtqD5lTg0fIbBGEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjUxMTE2MTAyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjM1NjFmNjViYzI3NWM4M2UxMWFiYTNmNmM2ZTAwOTYwMmNiZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84h23972HjJZ5/dBXosCxX/hA3iK wemhGjcIJ+EBCztFPcv0oUgLD2Ns54w5jXmBH3UROxwEd0yDMc5Mj+x8DsoZnYSC vs1NAikCbGjBHD8e+nyCtRDkW+APlwZJbino59hxrY49a7/iBEenUBaeMrkYNt3T Eh7DhdxXSmMrqCikozkVc+XJguIYl+XKISTSIBZKC9lmiLm5qp1j4QfUw3hPuwym FNWgUW9QYOfUca6pIfkbGh3boxzrlWNL9TqGvWQ4i+KzOocV11u+zkS45oVaBjPc p8vJf9jiY9nT9v3kyMidGmqRFwA1fVrAV/5Rq6j5K1hy/gPCygTtwS4GrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHY1YfZbwnXIPhGro/bG4AlgLL7lMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvZGpWaDlsdkNkY2ctRWF1ajlzYmdDV0FzdnVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgAxg MA0GCSqGSIb3DQEBCwUAA4IBAQA53IHP5PCJfSOsseoojQst+uHcPZxj0sE1d4cb zUFft24hnn2U62jNPUEtAPfnkcdQ3UpXNi+u6Z9Srsb+OJBZHOaeoUEnO1I/H5Zn vPpulQh63hO7OI8KnR9kI9wTux6myJaVlqm7kd4cDWRI6ttVWba4PAEwxrOqilCQ 7BN8CoW2Arr3fOpLeTzMzOUQuR849nrCytYF0e72v6hZ1rnFzcU0jTHsPa3mJtUv uMPqC2U21o1UiQtcKDtTTIbGKtgtaXnpZKxV6+4+enMBxZuDKY60iJHd+kzTrFrm O0iMJRd+/WXbGSahy2WrPUGeZ7bC2R3QmSTmfxgQCVoge3gp -----END CERTIFICATE-----Generated at Sat Nov 22 22:14:44 2025 by rpki-client