This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/0oVk2Y5npWjq5ymtulXUZ2hm3C0.roa File: 0oVk2Y5npWjq5ymtulXUZ2hm3C0.roa (raw, json) Hash identifier: aVpYgqvpTT43IiOkTb/Hlyp6rWMYHx6l92jkV7xammA= Subject key identifier: D2:85:64:D9:8E:67:A5:68:EA:E7:29:AD:BA:55:D4:67:68:66:DC:2D Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39 Certificate serial: 019A7973B5DD962A7165FB54D5F8908D0EFF Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/0oVk2Y5npWjq5ymtulXUZ2hm3C0.roa Signing time: Wed 12 Nov 2025 19:03:37 +0000 ROA not before: Wed 12 Nov 2025 19:03:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:3580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:73:b5:dd:96:2a:71:65:fb:54:d5:f8:90:8d:0e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39 Validity Not Before: Nov 12 19:03:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d28564d98e67a568eae729adba55d4676866dc2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:41:06:d7:60:93:54:98:93:ea:b8:31:88: 5f:d9:54:40:b6:df:08:d3:29:59:73:c9:b0:64:c0: 04:86:55:3c:10:b7:12:4a:84:40:df:8b:01:8a:8e: 72:8b:d8:cb:f2:c7:fa:6c:33:38:55:09:0e:9f:6d: dc:b7:50:dc:ca:38:51:6e:15:b6:c8:d0:4c:30:62: 91:83:89:08:2e:fb:13:00:17:af:57:b5:0b:e2:1a: 9a:73:8a:b4:98:1a:39:fd:31:5b:7c:90:5e:bf:a7: 75:8c:8d:7b:44:bb:98:7e:41:6c:5d:60:8f:45:27: 80:4d:66:74:cb:24:83:9b:16:e4:af:33:1f:45:bb: f5:ef:03:ef:b0:92:bd:58:36:fe:c8:17:67:75:75: f6:2f:2a:d8:a9:74:e1:cb:5b:b2:34:99:26:bf:ff: 2b:cf:15:75:11:7b:60:f3:5b:ea:8c:67:15:cd:5d: 73:9e:74:48:01:87:4f:a1:7d:58:3b:35:82:2f:54: 15:01:ee:b7:2c:a2:c2:65:c6:47:a3:70:1b:a8:7e: d4:04:c8:de:58:e8:58:d3:8d:d5:45:22:c5:50:94: 76:ab:8e:7c:49:21:58:c0:0a:00:3b:d9:9d:2a:40: 7d:06:0f:93:00:1b:9d:3b:10:cd:4c:58:2c:26:b0: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:85:64:D9:8E:67:A5:68:EA:E7:29:AD:BA:55:D4:67:68:66:DC:2D X509v3 Authority Key Identifier: keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/0oVk2Y5npWjq5ymtulXUZ2hm3C0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3580::/29 Signature Algorithm: sha256WithRSAEncryption 3d:da:e9:04:48:8b:12:b4:9c:63:7d:08:07:2f:b5:ac:f7:60: 75:35:04:04:32:28:47:d2:2d:42:8e:97:11:4e:ad:b8:02:ec: bd:97:ca:14:21:5f:92:62:75:33:6a:a6:4f:06:d8:ff:90:7a: 9a:17:5f:12:24:b8:b1:0a:9a:5b:5a:bc:c9:fd:d5:dd:53:c4: 37:9c:fd:96:1e:d9:e0:87:03:26:b8:5c:9d:64:d1:f4:85:6e: 75:41:ac:b5:76:3f:d6:9c:e3:9b:ac:01:6e:7f:a6:c5:ea:1a: 53:89:7b:9f:9c:5d:a5:ae:5a:2d:27:af:96:fe:1f:90:65:f3: a3:79:95:a4:1a:82:a2:3e:cb:77:e3:e1:fd:79:b0:88:30:d1: fc:b3:0c:9c:eb:37:2b:3a:90:9b:08:80:44:49:0b:d1:74:45: f6:09:6e:90:12:33:2b:ce:43:6d:14:8d:e9:d2:a3:63:87:73: f5:df:f1:ed:53:f4:6d:c5:be:58:2f:30:75:b8:57:7a:52:54: 71:42:07:58:57:58:23:ce:c8:99:68:d6:50:8f:21:8e:60:7b: 24:77:0c:fd:1b:7a:a6:f9:b1:53:c6:5d:50:2d:0f:59:70:e1: 12:ee:19:f4:13:8a:0e:bd:66:1c:51:e7:60:21:24:99:81:a4: df:bb:ee:fb -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZp5c7XdlipxZftU1fiQjQ7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTI5ZDA0OGRlYjJlMGJmNjIyNzEzOTlhMDkwYjkwMTAx NjBiMzkwHhcNMjUxMTEyMTkwMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjg1NjRkOThlNjdhNTY4ZWFlNzI5YWRiYTU1ZDQ2NzY4NjZkYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAritBBtdgk1SYk+q4MYhf2VRAtt8I 0ylZc8mwZMAEhlU8ELcSSoRA34sBio5yi9jL8sf6bDM4VQkOn23ct1DcyjhRbhW2 yNBMMGKRg4kILvsTABevV7UL4hqac4q0mBo5/TFbfJBev6d1jI17RLuYfkFsXWCP RSeATWZ0yySDmxbkrzMfRbv17wPvsJK9WDb+yBdndXX2LyrYqXThy1uyNJkmv/8r zxV1EXtg81vqjGcVzV1znnRIAYdPoX1YOzWCL1QVAe63LKLCZcZHo3AbqH7UBMje WOhY043VRSLFUJR2q458SSFYwAoAO9mdKkB9Bg+TABudOxDNTFgsJrC6/wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNKFZNmOZ6Vo6ucprbpV1GdoZtwtMB8GA1UdIwQY MBaAFFMSnQSN6y4L9iJxOZoJC5AQFgs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMt N2FlNjM1OWQzMTEwLzEvMG9WazJZNW5wV2pxNXltdHVsWFVaMmhtM0MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMtN2FlNjM1OWQzMTEw LzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAE1gDAN BgkqhkiG9w0BAQsFAAOCAQEAPdrpBEiLErScY30IBy+1rPdgdTUEBDIoR9ItQo6X EU6tuALsvZfKFCFfkmJ1M2qmTwbY/5B6mhdfEiS4sQqaW1q8yf3V3VPEN5z9lh7Z 4IcDJrhcnWTR9IVudUGstXY/1pzjm6wBbn+mxeoaU4l7n5xdpa5aLSevlv4fkGXz o3mVpBqCoj7Ld+Ph/XmwiDDR/LMMnOs3KzqQmwiAREkL0XRF9glukBIzK85DbRSN 6dKjY4dz9d/x7VP0bcW+WC8wdbhXelJUcUIHWFdYI87ImWjWUI8hjmB7JHcM/Rt6 pvmxU8ZdUC0PWXDhEu4Z9BOKDr1mHFHnYCEkmYGk37vu+w== -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:41 2025 by rpki-client