This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/joY5CsIYEyMcozVZTWmYrHc7OT0.roa File: joY5CsIYEyMcozVZTWmYrHc7OT0.roa (raw, json) Hash identifier: vg4E06T36uPUCW84ei0wvbNrdV4VJy6JNaGAZaILXZs= Subject key identifier: 8E:86:39:0A:C2:18:13:23:1C:A3:35:59:4D:69:98:AC:77:3B:39:3D Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Certificate serial: 019A54B1650194934F274E4A4FBC1B8E032D Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/joY5CsIYEyMcozVZTWmYrHc7OT0.roa Signing time: Wed 05 Nov 2025 15:45:03 +0000 ROA not before: Wed 05 Nov 2025 15:45:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211373 IP address blocks: 64.190.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:b1:65:01:94:93:4f:27:4e:4a:4f:bc:1b:8e:03:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Validity Not Before: Nov 5 15:45:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e86390ac21813231ca335594d6998ac773b393d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:df:c3:b7:1b:08:a5:4f:c0:78:74:96:f0:da: a4:91:5f:79:80:56:ef:09:22:3e:e3:1e:21:77:ae: f7:5a:58:82:26:93:5f:89:c6:47:ec:93:11:28:eb: 9c:9e:41:8e:2f:95:f0:b3:2e:43:8c:ea:90:be:b1: 14:05:fe:cc:da:ef:22:da:33:f8:10:35:fc:4f:4b: 42:3c:7a:b6:00:ea:60:29:e4:ab:f9:9f:f1:c5:4b: cd:52:0d:df:75:b2:dc:8a:14:39:81:39:bd:89:03: 0e:32:c5:b3:36:d1:93:6c:92:b8:a9:0a:19:cb:4d: e5:78:d9:53:0d:e2:2b:8b:61:c7:47:17:60:00:33: e3:e3:4f:c3:b5:3e:54:d1:81:54:f1:15:08:ce:82: 48:d4:b9:8e:95:c8:79:4b:22:67:c8:5b:66:05:92: 1a:11:56:01:e3:0b:9e:75:be:5d:5d:e0:1f:b2:54: cf:e3:f6:50:32:88:77:e9:63:b0:3e:bf:e2:ab:46: 99:e6:a2:3d:75:c3:69:a1:cf:0b:a2:b5:f2:84:f7: f4:3e:70:39:c1:38:f2:6f:72:44:05:de:d5:bd:08: eb:91:60:e2:08:b0:ea:26:a3:31:4e:bb:a8:29:34: 73:9f:4d:3c:e7:1e:40:96:65:1f:de:12:bb:07:ef: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:86:39:0A:C2:18:13:23:1C:A3:35:59:4D:69:98:AC:77:3B:39:3D X509v3 Authority Key Identifier: keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/joY5CsIYEyMcozVZTWmYrHc7OT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.139.0/24 Signature Algorithm: sha256WithRSAEncryption 50:54:5c:d5:85:58:84:a8:bf:54:b4:d0:45:1e:f5:1e:f7:e1: 39:36:f0:c5:25:63:2a:07:6d:9b:71:4a:ee:55:af:c6:1d:b5: 0f:a3:42:bc:2e:67:5b:bb:3a:72:f2:66:67:31:cb:bf:a3:a8: 13:d7:fc:0e:b6:f8:04:a2:b8:1e:f8:ee:6b:4e:c4:ee:fb:7a: f5:49:5d:1c:d8:0b:16:3e:f4:33:11:9a:56:21:65:9c:94:4d: 95:00:6f:44:f9:9f:fa:c4:c2:b3:fa:99:e7:5b:8c:9a:86:c7: 84:57:04:2b:5a:f0:38:f2:a1:e7:f0:5d:fd:4f:e3:2e:b6:33: 73:ae:7a:fc:0b:d1:e0:61:d0:db:fd:78:e4:a4:77:a9:15:0b: 18:e0:09:13:df:1b:ab:13:07:3d:ea:1b:17:c9:82:1b:52:a7: 0b:f8:1a:6d:68:68:11:82:b0:c3:12:76:f3:34:c4:9a:75:66: 3e:67:6c:ab:81:97:4f:63:f9:f4:31:ab:03:51:dd:44:8d:b4: aa:16:a4:5d:b1:62:25:93:0f:1e:c0:5d:c6:8c:80:10:82:ca: 2c:82:e1:b5:48:4b:16:21:f4:1d:37:d7:d2:e1:42:6c:cb:f9: 41:b2:e9:fd:ac:bb:d6:66:9a:7c:44:16:2f:67:b2:11:67:ea: ce:e2:f9:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpUsWUBlJNPJ05KT7wbjgMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1 NGZhNDYwHhcNMjUxMTA1MTU0NTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTg2MzkwYWMyMTgxMzIzMWNhMzM1NTk0ZDY5OThhYzc3M2IzOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd/DtxsIpU/AeHSW8NqkkV95gFbv CSI+4x4hd673WliCJpNficZH7JMRKOucnkGOL5Xwsy5DjOqQvrEUBf7M2u8i2jP4 EDX8T0tCPHq2AOpgKeSr+Z/xxUvNUg3fdbLcihQ5gTm9iQMOMsWzNtGTbJK4qQoZ y03leNlTDeIri2HHRxdgADPj40/DtT5U0YFU8RUIzoJI1LmOlch5SyJnyFtmBZIa EVYB4wuedb5dXeAfslTP4/ZQMoh36WOwPr/iq0aZ5qI9dcNpoc8LorXyhPf0PnA5 wTjyb3JEBd7VvQjrkWDiCLDqJqMxTruoKTRzn0085x5AlmUf3hK7B++jZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6GOQrCGBMjHKM1WU1pmKx3Ozk9MB8GA1UdIwQY MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt YzBjZWIwMzdhZDQyLzEvam9ZNUNzSVlFeU1jb3pWWlRXbVlySGM3T1QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL6LMA0G CSqGSIb3DQEBCwUAA4IBAQBQVFzVhViEqL9UtNBFHvUe9+E5NvDFJWMqB22bcUru Va/GHbUPo0K8Lmdbuzpy8mZnMcu/o6gT1/wOtvgEorge+O5rTsTu+3r1SV0c2AsW PvQzEZpWIWWclE2VAG9E+Z/6xMKz+pnnW4yahseEVwQrWvA48qHn8F39T+MutjNz rnr8C9HgYdDb/XjkpHepFQsY4AkT3xurEwc96hsXyYIbUqcL+BptaGgRgrDDEnbz NMSadWY+Z2yrgZdPY/n0MasDUd1EjbSqFqRdsWIlkw8ewF3GjIAQgsosguG1SEsW IfQdN9fS4UJsy/lBsun9rLvWZpp8RBYvZ7IRZ+rO4vlW -----END CERTIFICATE-----Generated at Fri Dec 5 07:01:32 2025 by rpki-client