This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/5mio1ajLw-tS7XgQP9oqa-mUdGw.roa File: 5mio1ajLw-tS7XgQP9oqa-mUdGw.roa (raw, json) Hash identifier: rc8Oh5sP4syl67QRNGDros7CDOOG+uK5Sqe6YBh3o04= Subject key identifier: E6:68:A8:D5:A8:CB:C3:EB:52:ED:78:10:3F:DA:2A:6B:E9:94:74:6C Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019AE935D2098FFAE02B15570CB76C1511C4 Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/5mio1ajLw-tS7XgQP9oqa-mUdGw.roa Signing time: Thu 04 Dec 2025 11:53:29 +0000 ROA not before: Thu 04 Dec 2025 11:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211507 IP address blocks: 2a07:f240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:35:d2:09:8f:fa:e0:2b:15:57:0c:b7:6c:15:11:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Dec 4 11:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e668a8d5a8cbc3eb52ed78103fda2a6be994746c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:46:9e:cc:22:32:16:90:90:57:44:bd:ab: 14:e6:fc:1d:6a:82:fd:3e:23:8f:9f:42:65:a0:f7: 49:07:a0:8b:5a:49:e0:69:3c:ab:67:19:49:90:5d: 73:46:ed:f4:4d:c1:d8:8e:fd:00:7a:0b:ed:ff:fe: ef:59:55:4e:3e:1f:8c:6b:56:5f:ae:52:f5:9b:8c: 6f:25:11:b4:65:26:b8:4b:88:d8:bc:73:db:92:63: 1a:2f:b6:95:0c:d7:2b:2b:42:aa:ad:a5:10:35:af: dc:89:d3:c0:49:b2:3d:5d:77:17:f1:5c:85:e5:4b: a9:e6:7b:b2:0e:b5:c4:3f:11:63:e3:90:dd:ff:37: db:f5:d5:1a:aa:6e:79:c4:b9:76:12:c8:85:14:3f: d8:c9:cc:bb:84:3b:30:7d:4c:27:a4:0d:d0:ce:ee: d5:c4:09:f9:34:1b:50:ad:68:bf:3a:fc:13:b3:a2: d0:35:89:c4:8a:d9:7f:fb:c7:1d:86:bd:e5:b8:9e: b7:15:54:67:68:2c:6d:69:0d:18:56:f6:ab:f6:1d: a6:77:54:8f:4f:96:81:f5:ae:af:89:e5:5b:2c:99: 6b:2b:26:a6:74:df:2f:2c:99:7a:f8:fe:02:6b:5c: 0c:3b:40:78:5c:29:7f:73:e2:bb:4e:1f:87:b4:8c: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:68:A8:D5:A8:CB:C3:EB:52:ED:78:10:3F:DA:2A:6B:E9:94:74:6C X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/5mio1ajLw-tS7XgQP9oqa-mUdGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:f240::/29 Signature Algorithm: sha256WithRSAEncryption 48:f1:5c:3c:e6:16:8e:68:47:48:b9:78:22:21:e9:98:7c:7c: 7c:c5:4a:5c:fd:21:47:c8:e9:2a:aa:66:ad:70:3c:83:a9:d0: b6:6c:89:aa:e8:ca:a8:57:3a:37:d0:34:c9:db:22:ba:d3:f0: e9:57:a7:d1:3c:14:c6:f9:cd:c8:26:16:b9:04:67:d5:4e:10: 9a:18:d7:31:7e:a0:3e:48:ca:50:75:f6:ba:8a:24:98:1d:bc: 70:a5:2f:0c:bc:bf:93:80:b9:f1:4b:2a:ca:80:99:77:6d:20: 4e:d3:dd:1d:5d:5e:2a:0b:ff:8f:6d:09:0d:c9:de:76:27:c3: 73:a2:b3:df:1b:b1:65:1c:25:29:8c:4b:60:84:14:57:3e:4b: e1:ec:f9:ad:ca:9a:52:26:f0:1c:c3:e2:ae:d7:c3:0d:29:85: 28:af:d8:f2:ed:12:f7:be:45:5a:29:30:9d:c9:c5:a9:46:ec: d6:1a:27:1a:d7:f2:60:69:17:0e:e5:07:46:89:a6:a8:f9:6e: 2b:0b:db:62:2b:82:3e:75:2f:5e:8c:1e:d5:e2:8c:32:be:94: ae:45:64:78:92:0c:04:11:f8:9a:07:d7:a8:44:bf:41:ec:8a: 47:60:36:4c:d5:85:32:43:f2:27:eb:32:e8:12:1b:f5:3f:72: a4:34:74:f8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrpNdIJj/rgKxVXDLdsFRHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjUxMjA0MTE1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjY4YThkNWE4Y2JjM2ViNTJlZDc4MTAzZmRhMmE2YmU5OTQ3NDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX5GnswiMhaQkFdEvasU5vwdaoL9 PiOPn0JloPdJB6CLWkngaTyrZxlJkF1zRu30TcHYjv0Aegvt//7vWVVOPh+Ma1Zf rlL1m4xvJRG0ZSa4S4jYvHPbkmMaL7aVDNcrK0KqraUQNa/cidPASbI9XXcX8VyF 5Uup5nuyDrXEPxFj45Dd/zfb9dUaqm55xLl2EsiFFD/Yycy7hDswfUwnpA3Qzu7V xAn5NBtQrWi/OvwTs6LQNYnEitl/+8cdhr3luJ63FVRnaCxtaQ0YVvar9h2md1SP T5aB9a6vieVbLJlrKyamdN8vLJl6+P4Ca1wMO0B4XCl/c+K7Th+HtIxb0wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOZoqNWoy8PrUu14ED/aKmvplHRsMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvNW1pbzFhakx3LXRTN1hnUVA5b3FhLW1VZEd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgfyQDAN BgkqhkiG9w0BAQsFAAOCAQEASPFcPOYWjmhHSLl4IiHpmHx8fMVKXP0hR8jpKqpm rXA8g6nQtmyJqujKqFc6N9A0ydsiutPw6Ven0TwUxvnNyCYWuQRn1U4QmhjXMX6g PkjKUHX2uookmB28cKUvDLy/k4C58UsqyoCZd20gTtPdHV1eKgv/j20JDcnedifD c6Kz3xuxZRwlKYxLYIQUVz5L4ez5rcqaUibwHMPirtfDDSmFKK/Y8u0S975FWikw ncnFqUbs1honGtfyYGkXDuUHRommqPluKwvbYiuCPnUvXowe1eKMMr6UrkVkeJIM BBH4mgfXqES/QeyKR2A2TNWFMkPyJ+sy6BIb9T9ypDR0+A== -----END CERTIFICATE-----Generated at Fri Dec 5 17:40:13 2025 by rpki-client