This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/kVUBj-jv3JPb-hlgSX4k_viNe9U.roa File: kVUBj-jv3JPb-hlgSX4k_viNe9U.roa (raw, json) Hash identifier: PEIXpoFZM+hlxNARLic2jW38vF6SQe4FptG7axrWOn0= Subject key identifier: 91:55:01:8F:E8:EF:DC:93:DB:FA:19:60:49:7E:24:FE:F8:8D:7B:D5 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019AB69BD387BFA80DF6CE51CB34C4A41F2D Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/kVUBj-jv3JPb-hlgSX4k_viNe9U.roa Signing time: Mon 24 Nov 2025 16:04:16 +0000 ROA not before: Mon 24 Nov 2025 16:04:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211358 IP address blocks: 2a05:b0c6:5001::/48 maxlen: 48 2a05:b0c6:5006::/48 maxlen: 48 2a05:b0c6:5008::/48 maxlen: 48 2a05:b0c6:5009::/48 maxlen: 48 2a05:b0c6:500f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:9b:d3:87:bf:a8:0d:f6:ce:51:cb:34:c4:a4:1f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Nov 24 16:04:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9155018fe8efdc93dbfa1960497e24fef88d7bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:71:83:e4:6d:5b:40:e4:cd:2c:03:ab:3c:66: 4c:f0:69:2c:8b:ac:0a:df:38:fc:d9:c5:51:ce:24: d0:7b:d6:84:10:ea:19:8f:2e:1f:b6:9b:04:1b:52: 93:3a:63:a2:c9:cb:9c:0d:04:ac:73:76:d0:f0:4e: 9a:de:20:a8:d2:5d:fc:9a:29:be:76:7c:a2:8a:c8: e8:8b:89:c3:a5:9c:cd:a1:32:03:91:ee:1c:39:3a: 50:69:3d:6c:c4:ff:6b:01:e1:0d:18:08:7b:95:db: 01:84:1a:c4:2d:1c:62:4b:19:b4:d6:db:d2:6d:8a: 60:76:ab:77:d1:42:71:b2:57:04:13:1f:5a:10:c3: aa:1b:39:2e:7e:98:5c:05:b5:95:18:1d:de:ce:10: e3:45:fa:cc:5b:8a:96:a9:7c:00:74:c1:0a:53:d3: 55:cb:52:e1:2c:7f:02:da:b8:d6:0c:c3:f0:a2:6e: 40:bf:4d:1a:5a:e5:8c:00:62:3b:0c:ff:68:ed:45: 50:dd:e6:25:e2:f4:b8:17:e2:a8:c4:0f:ab:df:bc: a1:7c:f3:e6:46:53:51:04:7e:5e:32:89:f6:45:3c: 5b:48:9c:5c:e3:4a:7a:35:64:4e:3d:2c:37:36:ca: e1:34:40:e0:c6:d4:d4:c4:a1:57:4a:6e:34:eb:fd: 83:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:55:01:8F:E8:EF:DC:93:DB:FA:19:60:49:7E:24:FE:F8:8D:7B:D5 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/kVUBj-jv3JPb-hlgSX4k_viNe9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b0c6:5001::/48 2a05:b0c6:5006::/48 2a05:b0c6:5008::/47 2a05:b0c6:500f::/48 Signature Algorithm: sha256WithRSAEncryption a7:1d:71:74:3a:e7:2b:fb:84:56:93:cc:c7:dc:63:67:de:d1: 61:66:e9:30:1a:05:47:c3:61:b8:5a:0e:38:8b:a3:1f:39:15: 2b:a3:66:59:8f:2c:19:b7:ce:73:32:2a:96:5a:a1:94:6c:5d: b8:40:a0:75:ff:a8:eb:27:60:6d:15:82:22:71:f6:3a:db:f8: e5:a2:32:43:78:5b:fe:a0:62:21:65:54:e2:fe:fe:52:0d:eb: 1b:ca:bb:53:62:ca:69:89:57:d5:0b:b8:52:cf:08:b0:ad:7e: 32:a9:20:ff:97:ef:5c:5a:78:e9:7f:16:ee:40:8c:b0:55:90: 69:fd:73:d9:9e:2e:e7:bc:50:03:1d:1d:77:83:ea:78:41:2c: 6b:82:5c:e3:46:70:8c:08:2f:ae:5f:ff:66:a4:ab:f0:99:c3: 55:d2:10:64:65:e6:dc:a6:2b:6f:6f:ba:56:9c:00:af:20:52: 8a:9f:db:ba:cb:1f:af:f5:57:bb:4c:ae:ae:4d:36:99:53:7b: e3:f9:90:ef:c2:b2:5f:2d:20:54:3e:14:4c:c0:4c:6f:52:3a: 99:03:79:4c:a3:0a:c4:29:f8:b7:b0:84:26:73:49:45:c8:99: bc:39:39:ae:6b:66:ee:0f:da:ed:75:01:21:d2:f7:10:f9:17: 52:03:d3:97 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZq2m9OHv6gN9s5RyzTEpB8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjUxMTI0MTYwNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTU1MDE4ZmU4ZWZkYzkzZGJmYTE5NjA0OTdlMjRmZWY4OGQ3YmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HGD5G1bQOTNLAOrPGZM8Gksi6wK 3zj82cVRziTQe9aEEOoZjy4ftpsEG1KTOmOiycucDQSsc3bQ8E6a3iCo0l38mim+ dnyiisjoi4nDpZzNoTIDke4cOTpQaT1sxP9rAeENGAh7ldsBhBrELRxiSxm01tvS bYpgdqt30UJxslcEEx9aEMOqGzkufphcBbWVGB3ezhDjRfrMW4qWqXwAdMEKU9NV y1LhLH8C2rjWDMPwom5Av00aWuWMAGI7DP9o7UVQ3eYl4vS4F+KoxA+r37yhfPPm RlNRBH5eMon2RTxbSJxc40p6NWROPSw3NsrhNEDgxtTUxKFXSm406/2DZwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJFVAY/o79yT2/oZYEl+JP74jXvVMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEva1ZVQmotanYzSlBiLWhsZ1NYNGtfdmlOZTlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKgWwxlAB AwcAKgWwxlAGAwcBKgWwxlAIAwcAKgWwxlAPMA0GCSqGSIb3DQEBCwUAA4IBAQCn HXF0Oucr+4RWk8zH3GNn3tFhZukwGgVHw2G4Wg44i6MfORUro2ZZjywZt85zMiqW WqGUbF24QKB1/6jrJ2BtFYIicfY62/jlojJDeFv+oGIhZVTi/v5SDesbyrtTYspp iVfVC7hSzwiwrX4yqSD/l+9cWnjpfxbuQIywVZBp/XPZni7nvFADHR13g+p4QSxr glzjRnCMCC+uX/9mpKvwmcNV0hBkZebcpitvb7pWnACvIFKKn9u6yx+v9Ve7TK6u TTaZU3vj+ZDvwrJfLSBUPhRMwExvUjqZA3lMowrEKfi3sIQmc0lFyJm8OTmua2bu D9rtdQEh0vcQ+RdSA9OX -----END CERTIFICATE-----Generated at Fri Nov 28 08:34:40 2025 by rpki-client