This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/5v-xs4SjsBX3F7o5sCHUUhLEVaI.roa File: 5v-xs4SjsBX3F7o5sCHUUhLEVaI.roa (raw, json) Hash identifier: F3y4xuefLk6xYOCwbOg7ZZSbHpsb0d0yzbiAbMyYOZw= Subject key identifier: E6:FF:B1:B3:84:A3:B0:15:F7:17:BA:39:B0:21:D4:52:12:C4:55:A2 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019AB69BCF6F24309A65DDFE221EE3295F82 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/5v-xs4SjsBX3F7o5sCHUUhLEVaI.roa Signing time: Mon 24 Nov 2025 16:04:15 +0000 ROA not before: Mon 24 Nov 2025 16:04:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36743 IP address blocks: 2a05:b0c7:1803::/48 maxlen: 48 2a05:b0c7:1820::/44 maxlen: 44 2a05:b0c7:19c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:9b:cf:6f:24:30:9a:65:dd:fe:22:1e:e3:29:5f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Nov 24 16:04:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e6ffb1b384a3b015f717ba39b021d45212c455a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:52:20:ca:f1:6e:33:f0:d7:14:80:94:97: 98:09:77:9d:2c:37:4c:49:41:b3:1a:14:a0:31:5b: ca:03:fd:9b:35:14:c6:6b:36:10:e5:03:99:ad:f7: 5d:27:33:02:66:32:15:b8:e6:e5:40:40:79:ab:86: 54:26:d3:41:20:69:c6:4a:f5:bf:ef:fe:22:b5:7b: 50:71:1e:1e:ae:e0:d9:9f:25:3d:65:da:af:33:a6: bb:31:6d:9f:05:8a:3a:46:b3:0b:56:14:32:f6:2d: 9d:35:a4:b1:d7:c3:89:37:a4:1c:dc:b8:ec:dd:cb: 21:88:a9:96:a1:dd:7a:df:72:2c:3c:4c:54:0c:5f: 34:e2:53:92:cc:f6:1e:01:46:a0:b2:57:59:a5:85: 01:8b:cd:9d:22:27:65:89:2c:87:38:0b:a0:f7:56: c9:3f:83:78:3f:68:83:07:15:04:16:f5:03:d8:2c: 0a:bf:dc:12:ca:63:4d:5b:4e:4d:fa:6e:b3:b2:d1: 8f:37:9e:4f:a2:5e:9a:c4:9c:8e:32:59:e1:89:20: 74:e9:c6:64:c8:c0:32:76:ff:f5:a8:05:20:1c:b7: ff:1a:3d:23:8b:a1:60:ca:21:d4:ad:6b:91:be:26: 23:39:0f:8c:e6:71:e3:97:36:56:60:e2:e2:ff:ca: 0a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FF:B1:B3:84:A3:B0:15:F7:17:BA:39:B0:21:D4:52:12:C4:55:A2 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/5v-xs4SjsBX3F7o5sCHUUhLEVaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b0c7:1803::/48 2a05:b0c7:1820::/44 2a05:b0c7:19c0::/48 Signature Algorithm: sha256WithRSAEncryption 31:6e:46:ff:29:3e:dc:fa:75:10:60:02:fe:27:e9:5c:ec:f7: 3f:ae:4a:8e:98:f5:7d:33:e1:91:8e:d2:89:df:d7:1d:62:20: 1b:66:04:e5:85:5e:1b:99:a5:8d:0c:aa:3b:56:7f:2b:da:3c: f0:db:aa:ff:5b:f9:a6:4b:3f:82:1f:24:cf:12:0a:e0:bb:83: 65:1a:94:8b:8e:4d:fb:35:5e:4b:23:f0:a0:b0:e7:96:09:47: 50:f0:58:c1:71:bb:dd:4a:c1:1c:f8:70:ab:08:08:e2:2e:54: c9:ff:22:b3:05:43:dc:9f:de:db:12:07:3b:d9:77:b1:47:61: 78:ed:37:fb:32:d8:1d:64:cd:ce:d2:1c:8d:15:26:f8:28:a5: b0:98:19:e8:7b:53:e8:be:cd:61:b2:6a:51:7b:7b:11:1d:e1: 17:1f:d9:04:c8:c3:59:d5:6a:88:c0:06:8a:80:e5:f9:21:fd: 89:ce:59:db:fd:2d:53:98:eb:69:9f:8a:69:3f:01:e2:0c:24: a0:23:87:a2:ea:74:97:cc:89:2d:33:8e:55:6e:5b:56:68:df: ec:94:1e:ac:5a:6e:f8:e3:22:b7:2d:e5:87:cd:cc:aa:c1:b3: a9:d8:5f:e0:d3:ce:ee:b3:d1:e6:86:12:76:a2:72:e0:86:25: 80:7e:7b:10 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZq2m89vJDCaZd3+Ih7jKV+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjUxMTI0MTYwNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmZmYjFiMzg0YTNiMDE1ZjcxN2JhMzliMDIxZDQ1MjEyYzQ1NWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJBSIMrxbjPw1xSAlJeYCXedLDdM SUGzGhSgMVvKA/2bNRTGazYQ5QOZrfddJzMCZjIVuOblQEB5q4ZUJtNBIGnGSvW/ 7/4itXtQcR4eruDZnyU9ZdqvM6a7MW2fBYo6RrMLVhQy9i2dNaSx18OJN6Qc3Ljs 3cshiKmWod1633IsPExUDF804lOSzPYeAUagsldZpYUBi82dIidliSyHOAug91bJ P4N4P2iDBxUEFvUD2CwKv9wSymNNW05N+m6zstGPN55Pol6axJyOMlnhiSB06cZk yMAydv/1qAUgHLf/Gj0ji6FgyiHUrWuRviYjOQ+M5nHjlzZWYOLi/8oKdwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOb/sbOEo7AV9xe6ObAh1FISxFWiMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvNXYteHM0U2pzQlgzRjdvNXNDSFVVaExFVmFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgWwxxgD AwcEKgWwxxggAwcAKgWwxxnAMA0GCSqGSIb3DQEBCwUAA4IBAQAxbkb/KT7c+nUQ YAL+J+lc7Pc/rkqOmPV9M+GRjtKJ39cdYiAbZgTlhV4bmaWNDKo7Vn8r2jzw26r/ W/mmSz+CHyTPEgrgu4NlGpSLjk37NV5LI/CgsOeWCUdQ8FjBcbvdSsEc+HCrCAji LlTJ/yKzBUPcn97bEgc72XexR2F47Tf7MtgdZM3O0hyNFSb4KKWwmBnoe1Povs1h smpRe3sRHeEXH9kEyMNZ1WqIwAaKgOX5If2Jzlnb/S1TmOtpn4ppPwHiDCSgI4ei 6nSXzIktM45VbltWaN/slB6sWm744yK3LeWHzcyqwbOp2F/g087us9HmhhJ2onLg hiWAfnsQ -----END CERTIFICATE-----Generated at Fri Nov 28 08:34:47 2025 by rpki-client