This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/_5IP-K7NLdg4zlAiXVE7qEc9tpQ.roa File: _5IP-K7NLdg4zlAiXVE7qEc9tpQ.roa (raw, json) Hash identifier: 9z+05PvqBxhzEng4DVEfnu6DnqaPn7djZVzZaL7x0i4= Subject key identifier: FF:92:0F:F8:AE:CD:2D:D8:38:CE:50:22:5D:51:3B:A8:47:3D:B6:94 Certificate issuer: /CN=caedbbae709d3ca64688257bbba36f96a0999df2 Certificate serial: 019B47FFDE540F146D3785FA18D46251085A Authority key identifier: CA:ED:BB:AE:70:9D:3C:A6:46:88:25:7B:BB:A3:6F:96:A0:99:9D:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/_5IP-K7NLdg4zlAiXVE7qEc9tpQ.roa Signing time: Mon 22 Dec 2025 21:38:29 +0000 ROA not before: Mon 22 Dec 2025 21:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202545 IP address blocks: 2001:678:1190::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.mft rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:ff:de:54:0f:14:6d:37:85:fa:18:d4:62:51:08:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caedbbae709d3ca64688257bbba36f96a0999df2 Validity Not Before: Dec 22 21:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ff920ff8aecd2dd838ce50225d513ba8473db694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:dc:03:8a:3f:aa:53:07:9b:87:17:38:39: 4f:7d:c2:19:2a:b3:42:84:ae:23:ba:eb:fa:43:62: 9f:3e:18:51:22:6e:02:8a:2c:9f:1b:13:57:31:5d: 4b:0d:cf:c3:81:74:5f:ee:da:6e:ba:4f:9c:fa:25: ee:52:84:6d:34:d7:cb:55:31:58:61:e2:c5:a4:30: 75:4b:36:8c:84:64:d8:9e:91:2f:9c:4f:3b:e7:7f: c8:d9:e6:8a:68:b5:d7:b1:54:45:ae:6b:74:cd:96: d0:bc:c1:ac:7e:7b:01:1f:23:0f:8c:15:9a:72:e9: f3:bc:d0:bb:9a:21:f1:59:25:d2:e0:b0:7a:1c:86: 48:0f:43:16:1f:f2:91:cb:e3:d7:f8:7f:d7:db:8f: 7b:c3:08:f9:2f:10:57:2a:b6:31:bb:97:fc:ab:83: 35:1f:5a:8a:1d:f4:e8:e5:2f:e8:07:41:e1:af:6a: 59:3f:24:6a:f9:3a:b8:1c:8a:e6:66:8b:2d:a0:e2: a1:dd:dc:9a:db:4b:40:2c:65:27:c7:ea:1b:6e:cb: 3e:20:f6:1a:fe:35:c2:c3:93:3a:16:50:87:b9:54: 1f:4c:c1:f7:a5:41:a0:c8:a1:cd:03:3a:ee:7a:6c: 94:2e:fd:24:97:0f:e2:6a:5f:e6:dd:3e:8f:75:af: 26:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:92:0F:F8:AE:CD:2D:D8:38:CE:50:22:5D:51:3B:A8:47:3D:B6:94 X509v3 Authority Key Identifier: keyid:CA:ED:BB:AE:70:9D:3C:A6:46:88:25:7B:BB:A3:6F:96:A0:99:9D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu27rnCdPKZGiCV7u6NvlqCZnfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/_5IP-K7NLdg4zlAiXVE7qEc9tpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/29dc37-be82-4207-a5e2-ce9c96211858/1/yu27rnCdPKZGiCV7u6NvlqCZnfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1190::/48 Signature Algorithm: sha256WithRSAEncryption 4c:d5:99:28:4b:ff:d7:d7:a2:1f:88:9f:2c:8c:00:4a:0b:71: f8:ac:73:e4:b2:aa:76:99:8e:b5:2d:5a:ec:6f:b4:1d:96:ab: 38:e6:35:05:13:74:13:79:70:f4:d2:17:1f:3d:69:34:5f:4a: e2:95:49:90:03:2b:37:f6:71:40:61:5e:a9:c7:d7:fd:e3:8a: c2:4c:53:f5:22:36:c3:3f:d9:85:81:dc:aa:d3:4c:43:1f:ca: 04:71:04:de:f3:26:0f:67:d3:79:4b:27:d2:2a:a8:d0:fe:c0: 60:b6:1a:ef:76:97:3d:50:23:71:6e:bb:20:04:06:6b:e0:f5: 90:37:cd:0a:dc:a0:34:c0:30:d7:b6:b8:0b:a3:e7:1c:f0:2c: de:e0:51:4b:d5:ed:c8:ac:fe:24:22:51:47:0b:55:12:78:4d: 31:f6:85:51:30:af:62:57:63:d2:0f:83:45:08:fd:ab:fe:f3: fa:99:78:9d:fe:f2:85:c9:7f:8e:0c:7e:42:de:a8:10:e9:0c: 6f:dc:df:f6:fc:c1:ac:84:ae:6a:ba:2e:29:36:0d:5e:e7:f6: d7:4d:0b:89:62:7b:6c:6d:fa:84:bf:b7:a4:b2:ee:a8:9b:51: 14:97:fc:55:3e:c5:14:a5:78:fa:fa:f3:8c:2f:a3:e8:98:f7: c2:de:71:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtH/95UDxRtN4X6GNRiUQhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWRiYmFlNzA5ZDNjYTY0Njg4MjU3YmJiYTM2Zjk2YTA5 OTlkZjIwHhcNMjUxMjIyMjEzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjkyMGZmOGFlY2QyZGQ4MzhjZTUwMjI1ZDUxM2JhODQ3M2RiNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHncA4o/qlMHm4cXODlPfcIZKrNC hK4juuv6Q2KfPhhRIm4CiiyfGxNXMV1LDc/DgXRf7tpuuk+c+iXuUoRtNNfLVTFY YeLFpDB1SzaMhGTYnpEvnE8753/I2eaKaLXXsVRFrmt0zZbQvMGsfnsBHyMPjBWa cunzvNC7miHxWSXS4LB6HIZID0MWH/KRy+PX+H/X2497wwj5LxBXKrYxu5f8q4M1 H1qKHfTo5S/oB0Hhr2pZPyRq+Tq4HIrmZostoOKh3dya20tALGUnx+obbss+IPYa /jXCw5M6FlCHuVQfTMH3pUGgyKHNAzruemyULv0klw/ial/m3T6Pda8mBQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP+SD/iuzS3YOM5QIl1RO6hHPbaUMB8GA1UdIwQY MBaAFMrtu65wnTymRogle7ujb5agmZ3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXUyN3JuQ2RQS1pHaUNWN3U2TnZscUNabmZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yOWRjMzctYmU4Mi00MjA3LWE1ZTIt Y2U5Yzk2MjExODU4LzEvXzVJUC1LN05MZGc0emxBaVhWRTdxRWM5dHBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yOWRjMzctYmU4Mi00MjA3LWE1ZTItY2U5Yzk2MjExODU4 LzEveXUyN3JuQ2RQS1pHaUNWN3U2TnZscUNabmZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBGQ MA0GCSqGSIb3DQEBCwUAA4IBAQBM1ZkoS//X16IfiJ8sjABKC3H4rHPksqp2mY61 LVrsb7Qdlqs45jUFE3QTeXD00hcfPWk0X0rilUmQAys39nFAYV6px9f944rCTFP1 IjbDP9mFgdyq00xDH8oEcQTe8yYPZ9N5SyfSKqjQ/sBgthrvdpc9UCNxbrsgBAZr 4PWQN80K3KA0wDDXtrgLo+cc8Cze4FFL1e3IrP4kIlFHC1USeE0x9oVRMK9iV2PS D4NFCP2r/vP6mXid/vKFyX+ODH5C3qgQ6Qxv3N/2/MGshK5qui4pNg1e5/bXTQuJ YntsbfqEv7eksu6om1EUl/xVPsUUpXj6+vOML6PomPfC3nHV -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:38 2025 by rpki-client