This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/jOYswe4qhStabsuqsnSP3SZqcrs.roa File: jOYswe4qhStabsuqsnSP3SZqcrs.roa (raw, json) Hash identifier: BMGec4hMG/rYQr+01Ths87WyLIFcZ15QkJmgYOd/Vd8= Subject key identifier: 8C:E6:2C:C1:EE:2A:85:2B:5A:6E:CB:AA:B2:74:8F:DD:26:6A:72:BB Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019B362A22E88F69D75796499DF7871A36B5 Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/jOYswe4qhStabsuqsnSP3SZqcrs.roa Signing time: Fri 19 Dec 2025 10:31:29 +0000 ROA not before: Fri 19 Dec 2025 10:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211281 IP address blocks: 2a10:fa82:c000::/40 maxlen: 40 2a10:fa82:c100::/40 maxlen: 40 2a10:fa82:c200::/40 maxlen: 40 2a10:fa82:c300::/40 maxlen: 40 2a10:fa82:c400::/40 maxlen: 40 2a10:fa82:c500::/40 maxlen: 40 2a10:fa82:c600::/40 maxlen: 40 2a10:fa82:c700::/40 maxlen: 40 2a10:fa82:c800::/40 maxlen: 40 2a10:fa82:c900::/40 maxlen: 40 2a10:fa82:ca00::/40 maxlen: 40 2a10:fa82:cb00::/40 maxlen: 40 2a10:fa82:cc00::/40 maxlen: 40 2a10:fa82:cd00::/40 maxlen: 40 2a10:fa82:ce00::/40 maxlen: 40 2a10:fa82:cf00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:2a:22:e8:8f:69:d7:57:96:49:9d:f7:87:1a:36:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Dec 19 10:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8ce62cc1ee2a852b5a6ecbaab2748fdd266a72bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:4b:ea:13:54:c1:79:63:ae:fa:5d:39:ed: 24:4f:c9:39:5d:a9:e1:91:4a:5d:8b:d4:95:0e:c2: d9:3b:1a:26:ee:29:ce:3a:0e:e0:fe:48:2f:98:9e: ad:cb:45:09:55:1a:36:ca:99:f5:98:1d:fa:cf:3b: 8c:a8:ed:33:74:40:32:60:d9:a3:94:31:f4:6f:7d: d5:5c:f4:6d:74:15:c8:83:bd:29:0d:d3:63:26:ca: 42:0f:e3:3f:58:6c:13:54:94:d6:ce:75:13:f3:e2: a4:b8:08:38:b1:0a:ef:9a:6c:85:0b:3a:68:a2:bd: fd:9f:d3:c3:cd:9e:92:e7:36:44:04:e4:90:02:bd: e1:00:c6:e0:03:66:c9:26:d7:53:e8:cb:f4:33:2e: 73:a2:a4:29:d0:43:e5:0d:f9:fe:6e:b1:58:51:66: a7:5b:33:f6:24:7f:f7:04:99:c7:0d:17:90:a5:87: e2:5b:88:84:5c:aa:72:97:85:41:98:6f:ea:be:93: 39:98:e9:4b:c1:57:ac:e8:5c:5f:d6:8b:fe:eb:0f: 98:1d:c2:21:3c:b2:f4:77:cf:75:fb:5f:5d:70:23: 9c:04:23:86:07:29:1e:76:32:b9:4b:fc:ee:4c:94: 7a:33:4b:eb:fd:b3:8d:fb:ff:5e:93:41:69:28:cc: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E6:2C:C1:EE:2A:85:2B:5A:6E:CB:AA:B2:74:8F:DD:26:6A:72:BB X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/jOYswe4qhStabsuqsnSP3SZqcrs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:fa82:c000::/36 Signature Algorithm: sha256WithRSAEncryption 75:1b:f6:b5:a7:8f:d3:97:56:8b:7b:7e:15:58:d4:8b:c9:f4: 7e:c3:95:02:8a:a6:c9:a6:31:d7:5c:98:ba:25:86:55:e6:96: 92:93:7d:d5:03:59:25:b8:d6:c3:04:ba:b5:52:0e:97:26:95: dc:0b:c3:d1:8d:23:e2:c3:3b:0e:7a:19:a4:42:7f:7f:67:42: 2e:59:3f:32:c9:96:ab:af:5b:a5:34:88:01:7c:fd:7f:55:2a: 8c:9c:ac:9d:a4:7d:6b:06:4d:15:a2:ef:98:e9:07:2e:be:69: d6:a0:3e:21:6c:2e:2f:3e:d7:b2:34:60:ee:e1:78:85:04:39: 68:f4:25:ab:ec:50:f7:91:25:2c:03:16:9b:3f:75:9d:76:74: 61:79:ca:73:fa:da:1b:1f:4c:6d:f4:17:49:16:02:c8:51:a3: 55:c9:7d:bd:eb:98:f0:95:89:4e:a9:ad:6c:06:7f:46:c3:5b: 6f:ed:6b:4e:7e:66:cc:f5:d3:e4:9e:77:0d:7c:38:45:93:50: 48:b0:42:b9:21:17:c7:bf:c2:d9:92:81:fd:2e:0f:5b:31:91: 40:54:b8:d6:5b:44:51:42:50:03:35:a3:c0:78:57:29:e8:56: 5f:6f:7c:41:6f:1f:85:a6:98:de:37:e9:26:ed:90:35:40:da: 1e:01:92:f8 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZs2KiLoj2nXV5ZJnfeHGja1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjUxMjE5MTAzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2U2MmNjMWVlMmE4NTJiNWE2ZWNiYWFiMjc0OGZkZDI2NmE3MmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrJL6hNUwXljrvpdOe0kT8k5Xanh kUpdi9SVDsLZOxom7inOOg7g/kgvmJ6ty0UJVRo2ypn1mB36zzuMqO0zdEAyYNmj lDH0b33VXPRtdBXIg70pDdNjJspCD+M/WGwTVJTWznUT8+KkuAg4sQrvmmyFCzpo or39n9PDzZ6S5zZEBOSQAr3hAMbgA2bJJtdT6Mv0My5zoqQp0EPlDfn+brFYUWan WzP2JH/3BJnHDReQpYfiW4iEXKpyl4VBmG/qvpM5mOlLwVes6Fxf1ov+6w+YHcIh PLL0d891+19dcCOcBCOGBykedjK5S/zuTJR6M0vr/bON+/9ek0FpKMyAWQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIzmLMHuKoUrWm7LqrJ0j90manK7MB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvak9Zc3dlNHFoU3RhYnN1cXNuU1AzU1pxY3JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhD6gsAw DQYJKoZIhvcNAQELBQADggEBAHUb9rWnj9OXVot7fhVY1IvJ9H7DlQKKpsmmMddc mLolhlXmlpKTfdUDWSW41sMEurVSDpcmldwLw9GNI+LDOw56GaRCf39nQi5ZPzLJ lquvW6U0iAF8/X9VKoycrJ2kfWsGTRWi75jpBy6+adagPiFsLi8+17I0YO7heIUE OWj0JavsUPeRJSwDFps/dZ12dGF5ynP62hsfTG30F0kWAshRo1XJfb3rmPCViU6p rWwGf0bDW2/ta05+Zsz10+Sedw18OEWTUEiwQrkhF8e/wtmSgf0uD1sxkUBUuNZb RFFCUAM1o8B4VynoVl9vfEFvH4WmmN436SbtkDVA2h4Bkvg= -----END CERTIFICATE-----Generated at Sat Dec 20 12:32:40 2025 by rpki-client