This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/u4qmxEf6xnyqisVRIL8RtgUjb6U.roa File: u4qmxEf6xnyqisVRIL8RtgUjb6U.roa (raw, json) Hash identifier: IhkTYP7c/yQI3dq18PlMoNcZW/0iTHX4nmvnsV9qddU= Subject key identifier: BB:8A:A6:C4:47:FA:C6:7C:AA:8A:C5:51:20:BF:11:B6:05:23:6F:A5 Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30 Certificate serial: 019A96C35EC88E39FD64E37492687C584E6D Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/u4qmxEf6xnyqisVRIL8RtgUjb6U.roa Signing time: Tue 18 Nov 2025 11:39:37 +0000 ROA not before: Tue 18 Nov 2025 11:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213708 IP address blocks: 2a14:8280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:c3:5e:c8:8e:39:fd:64:e3:74:92:68:7c:58:4e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30 Validity Not Before: Nov 18 11:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb8aa6c447fac67caa8ac55120bf11b605236fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:50:7f:73:41:30:3f:57:01:5d:73:6b:9d: b3:a5:e5:d3:44:bf:dd:ff:b2:e0:5e:5e:32:b0:19: c3:af:57:16:6a:19:cb:16:a0:f7:76:86:35:86:64: cd:bd:ea:06:44:f4:16:82:58:68:82:2a:79:08:21: 00:f1:fc:34:71:ca:86:b4:8d:05:a6:f9:92:61:81: 90:ee:2e:6b:3f:14:10:e8:ff:ab:60:91:44:2a:78: 3b:23:6a:2c:b3:a7:d0:48:d6:a2:de:a2:cf:f7:0d: 40:d5:33:f6:a7:03:68:16:e2:5a:ea:6d:c8:31:c6: 29:02:62:e0:0f:7e:b2:39:76:c4:c0:07:5b:cc:29: cb:df:3b:7e:3c:21:62:ee:9c:07:39:f3:90:3c:3c: a8:a2:df:d5:b8:15:a5:6a:ca:e4:13:fd:2d:09:32: 5b:5e:5a:0b:76:b8:c4:b0:bb:4d:ae:09:09:2b:41: 77:6f:f4:de:05:9a:45:a9:db:fa:ad:68:d0:88:3c: b4:fc:7d:06:b5:87:fb:90:69:92:7c:b3:ee:ed:10: 41:e7:56:3d:eb:cf:b1:0d:36:45:ec:80:01:16:7c: cd:81:b1:36:f2:a2:0a:c5:81:2b:8b:08:9a:de:11: ce:b8:38:0c:ac:87:ec:8e:34:15:3e:22:08:49:20: c3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8A:A6:C4:47:FA:C6:7C:AA:8A:C5:51:20:BF:11:B6:05:23:6F:A5 X509v3 Authority Key Identifier: keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/u4qmxEf6xnyqisVRIL8RtgUjb6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:8280::/29 Signature Algorithm: sha256WithRSAEncryption 73:0e:56:07:49:bb:af:e1:b9:3d:c9:f7:9f:7b:e3:ea:58:e1: 78:72:93:74:5d:92:db:5b:0b:8b:a2:af:00:b0:4e:67:6f:45: 5c:b2:08:a3:84:81:60:12:45:d9:1d:e3:af:a9:bf:2a:c9:16: 78:bc:b9:1c:34:da:88:ba:2f:ab:83:19:5a:69:bd:e0:92:7a: 66:33:8b:c3:f1:1a:a8:fc:bc:a2:80:f1:42:07:e8:b5:b9:18: e6:a6:c9:a6:ee:82:f1:3c:14:5c:5b:17:c1:d9:0e:23:49:11: 32:cd:e3:c1:f1:4d:43:bd:e9:68:ec:cf:00:1e:80:ec:df:68: ea:fe:0b:34:f9:00:87:72:ab:81:16:f3:0e:99:e1:d7:aa:2b: 68:de:7c:c1:0d:a4:45:47:02:41:77:0f:f7:c4:64:12:cf:6d: 2f:65:87:f8:24:cf:11:b1:85:b5:8a:ab:26:21:9c:8a:a6:9d: c6:58:7a:1b:e6:6b:1e:f1:fc:f1:c8:d7:7a:f6:7d:63:02:d4: 74:92:bb:0f:e3:26:84:c0:cd:b6:b2:69:fb:87:67:fc:28:78: 6a:54:91:a4:8f:1c:5c:99:84:7a:5f:c8:b5:76:44:c1:03:8f: 69:d6:52:da:aa:45:f2:d5:ed:c1:bb:89:d7:81:6e:d0:97:32: 3b:ae:2d:ba -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqWw17Ijjn9ZON0kmh8WE5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YTU1MzYxMmQ5NGIwOTFiMzY1OWIyMTIwYmM4ZWZiMjYw ZTdkMzAwHhcNMjUxMTE4MTEzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjhhYTZjNDQ3ZmFjNjdjYWE4YWM1NTEyMGJmMTFiNjA1MjM2ZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDFQf3NBMD9XAV1za52zpeXTRL/d /7LgXl4ysBnDr1cWahnLFqD3doY1hmTNveoGRPQWglhogip5CCEA8fw0ccqGtI0F pvmSYYGQ7i5rPxQQ6P+rYJFEKng7I2oss6fQSNai3qLP9w1A1TP2pwNoFuJa6m3I McYpAmLgD36yOXbEwAdbzCnL3zt+PCFi7pwHOfOQPDyoot/VuBWlasrkE/0tCTJb XloLdrjEsLtNrgkJK0F3b/TeBZpFqdv6rWjQiDy0/H0GtYf7kGmSfLPu7RBB51Y9 68+xDTZF7IABFnzNgbE28qIKxYEriwia3hHOuDgMrIfsjjQVPiIISSDDGQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLuKpsRH+sZ8qorFUSC/EbYFI2+lMB8GA1UdIwQY MBaAFNalU2EtlLCRs2WbISC8jvsmDn0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQt ZTA1OTA2Y2I2OTQ4LzEvdTRxbXhFZjZ4bnlxaXNWUklMOFJ0Z1VqYjZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQtZTA1OTA2Y2I2OTQ4 LzEvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhSCgDAN BgkqhkiG9w0BAQsFAAOCAQEAcw5WB0m7r+G5Pcn3n3vj6ljheHKTdF2S21sLi6Kv ALBOZ29FXLIIo4SBYBJF2R3jr6m/KskWeLy5HDTaiLovq4MZWmm94JJ6ZjOLw/Ea qPy8ooDxQgfotbkY5qbJpu6C8TwUXFsXwdkOI0kRMs3jwfFNQ73paOzPAB6A7N9o 6v4LNPkAh3KrgRbzDpnh16oraN58wQ2kRUcCQXcP98RkEs9tL2WH+CTPEbGFtYqr JiGciqadxlh6G+ZrHvH88cjXevZ9YwLUdJK7D+MmhMDNtrJp+4dn/Ch4alSRpI8c XJmEel/ItXZEwQOPadZS2qpF8tXtwbuJ14Fu0JcyO64tug== -----END CERTIFICATE-----Generated at Sun Nov 23 14:25:34 2025 by rpki-client