This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/cMI9aaoe5XEx76TGXVunHrV4vwY.roa File: cMI9aaoe5XEx76TGXVunHrV4vwY.roa (raw, json) Hash identifier: JDNCzzOpLYcvgpwGrkn4GpN69CUvTkONneBGxsB4W8o= Subject key identifier: 70:C2:3D:69:AA:1E:E5:71:31:EF:A4:C6:5D:5B:A7:1E:B5:78:BF:06 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019AB69BCFE58FB62E71FF27C77B4D731F94 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/cMI9aaoe5XEx76TGXVunHrV4vwY.roa Signing time: Mon 24 Nov 2025 16:04:15 +0000 ROA not before: Mon 24 Nov 2025 16:04:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47152 IP address blocks: 2a05:b0c7:5000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:9b:cf:e5:8f:b6:2e:71:ff:27:c7:7b:4d:73:1f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Nov 24 16:04:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=70c23d69aa1ee57131efa4c65d5ba71eb578bf06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:e2:5a:70:cf:66:d0:d5:06:bf:6d:71:94: 7c:e9:16:09:70:06:c0:da:f6:09:25:a7:da:0a:bf: 32:79:90:e6:af:5d:9d:dc:d2:77:65:b3:fe:33:5e: 2a:93:4d:56:71:be:13:7d:4e:fd:1c:fb:7c:6d:48: 20:b1:64:f5:1e:b7:c0:65:5d:50:0b:04:59:38:8a: de:5d:df:92:f0:e1:df:fe:b7:b6:72:7b:f7:ab:00: 77:f4:b5:a8:9c:f3:8a:4c:60:39:ed:70:ee:54:c8: 10:95:5d:28:48:07:f2:9b:28:b1:f0:89:ad:0f:03: 11:c0:22:63:e8:e4:97:52:f1:c8:80:e7:a9:50:87: 5c:85:9c:1c:02:e6:b5:40:84:74:85:67:30:f7:87: b3:6d:23:73:7d:36:c5:21:da:0d:c3:eb:69:05:70: c5:a7:d3:11:f5:9b:d1:37:6a:5c:1f:87:77:f1:42: 58:ed:f8:53:bd:b1:d5:b2:7b:5a:93:91:98:50:0a: 3e:0a:cb:1c:85:5b:a3:7d:80:e8:9e:be:22:82:d0: ce:71:28:87:17:d9:fc:11:46:60:42:1e:4c:e1:ec: ce:e3:b8:24:a7:b5:84:c5:62:9c:5d:ba:22:06:07: cc:45:41:18:36:01:38:da:94:87:39:13:75:43:1b: 32:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C2:3D:69:AA:1E:E5:71:31:EF:A4:C6:5D:5B:A7:1E:B5:78:BF:06 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/cMI9aaoe5XEx76TGXVunHrV4vwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b0c7:5000::/37 Signature Algorithm: sha256WithRSAEncryption bb:ae:6f:c2:b6:1d:4d:bc:09:b9:05:48:96:79:ba:d9:7e:c1: 3b:0d:08:cd:d1:fd:8a:f1:02:92:b3:c3:01:90:3d:65:f6:f2: 94:ff:4e:44:f8:c0:71:81:c3:1c:e7:f7:0d:a6:9b:4e:c6:db: ba:39:84:47:df:56:b1:99:e1:6e:59:75:1f:c3:00:4e:42:18: 24:02:84:6e:5d:d3:d1:2d:77:39:eb:58:65:4a:c8:5f:30:74: f3:6e:e6:d0:3a:9c:89:cf:73:7b:0d:64:6e:ba:61:44:a6:15: 70:9e:9e:b4:41:ba:2d:10:5b:e3:ae:47:ad:17:c5:7f:bd:01: 02:4f:64:74:bf:7c:7e:84:bf:c6:02:26:43:fb:f3:27:f8:57: 33:89:58:f9:a2:1e:67:d3:e5:6b:a2:f8:7b:10:00:c8:78:93: b6:9b:8f:dc:2a:2b:74:23:5e:0a:15:7e:94:08:3c:60:ef:ba: f8:4f:cf:bb:21:7e:ed:4b:94:a3:32:44:cf:f4:76:a4:3a:f1: b9:2c:12:d7:66:55:0c:ef:80:1d:ac:dd:ee:fd:b5:30:63:82: ab:87:1d:fe:e2:77:96:e2:d3:17:6c:bd:3b:a5:aa:d4:36:bf: ac:34:41:39:56:01:49:83:13:e0:75:d7:d2:9f:94:7a:d8:e7: 0e:9c:5c:49 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZq2m8/lj7Yucf8nx3tNcx+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjUxMTI0MTYwNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGMyM2Q2OWFhMWVlNTcxMzFlZmE0YzY1ZDViYTcxZWI1NzhiZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+7iWnDPZtDVBr9tcZR86RYJcAbA 2vYJJafaCr8yeZDmr12d3NJ3ZbP+M14qk01Wcb4TfU79HPt8bUggsWT1HrfAZV1Q CwRZOIreXd+S8OHf/re2cnv3qwB39LWonPOKTGA57XDuVMgQlV0oSAfymyix8Imt DwMRwCJj6OSXUvHIgOepUIdchZwcAua1QIR0hWcw94ezbSNzfTbFIdoNw+tpBXDF p9MR9ZvRN2pcH4d38UJY7fhTvbHVsntak5GYUAo+CsschVujfYDonr4igtDOcSiH F9n8EUZgQh5M4ezO47gkp7WExWKcXboiBgfMRUEYNgE42pSHORN1QxsyWwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHDCPWmqHuVxMe+kxl1bpx61eL8GMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvY01JOWFhb2U1WEV4NzZUR1hWdW5IclY0dndZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDKgWwx1Aw DQYJKoZIhvcNAQELBQADggEBALuub8K2HU28CbkFSJZ5utl+wTsNCM3R/YrxApKz wwGQPWX28pT/TkT4wHGBwxzn9w2mm07G27o5hEffVrGZ4W5ZdR/DAE5CGCQChG5d 09EtdznrWGVKyF8wdPNu5tA6nInPc3sNZG66YUSmFXCenrRBui0QW+OuR60XxX+9 AQJPZHS/fH6Ev8YCJkP78yf4VzOJWPmiHmfT5Wui+HsQAMh4k7abj9wqK3QjXgoV fpQIPGDvuvhPz7shfu1LlKMyRM/0dqQ68bksEtdmVQzvgB2s3e79tTBjgquHHf7i d5bi0xdsvTulqtQ2v6w0QTlWAUmDE+B119KflHrY5w6cXEk= -----END CERTIFICATE-----Generated at Fri Nov 28 08:34:47 2025 by rpki-client