This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6amE3y2tjDtYEUwjQF6sl04fpU8.roa File: 6amE3y2tjDtYEUwjQF6sl04fpU8.roa (raw, json) Hash identifier: +FdqSljzEIKEEdgoFqdtMck8FQMP94BX5RWHqX7zaUE= Subject key identifier: E9:A9:84:DF:2D:AD:8C:3B:58:11:4C:23:40:5E:AC:97:4E:1F:A5:4F Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019ADF288EA1099E13706587F589B0A74176 Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6amE3y2tjDtYEUwjQF6sl04fpU8.roa Signing time: Tue 02 Dec 2025 13:02:48 +0000 ROA not before: Tue 02 Dec 2025 13:02:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 2a13:d0c0::/32 maxlen: 32 2a13:d0c1::/32 maxlen: 32 2a13:d0c2::/32 maxlen: 32 2a13:d0c3::/32 maxlen: 32 2a13:d0c4::/32 maxlen: 32 2a13:d0c5::/32 maxlen: 32 2a13:d0c6::/32 maxlen: 32 2a13:d0c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:28:8e:a1:09:9e:13:70:65:87:f5:89:b0:a7:41:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Dec 2 13:02:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e9a984df2dad8c3b58114c23405eac974e1fa54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:61:7c:8c:c7:64:c6:b9:54:1a:1a:99:c6: 2c:fb:0a:f6:da:80:45:38:2b:f9:0f:66:52:c3:60: fc:a7:78:5b:6b:ba:a2:47:45:54:96:f5:a7:5c:7f: f9:e9:23:3e:01:45:43:d9:db:b7:59:39:28:09:ad: 3d:a6:ef:f2:e3:6e:e0:c8:3c:a7:65:de:98:ba:43: eb:8d:0d:5d:08:2c:32:c4:0e:9f:a5:78:91:c6:f4: 99:1a:77:93:ee:e8:b7:87:75:6e:d5:2f:c2:05:54: 89:e1:d6:bf:67:b7:57:52:e9:7d:05:71:17:ee:a2: 24:4e:36:dc:37:0e:d6:40:47:53:1d:f6:a2:c7:c6: 28:30:58:fc:62:a8:bf:c4:a5:20:81:cc:63:62:fe: 33:2f:20:1d:43:43:04:c6:63:53:e5:fc:77:72:7a: 5d:36:b6:b2:b9:95:da:03:41:3d:32:ae:fa:39:9d: 59:3b:4d:3a:c0:90:0c:92:f0:02:c8:57:2b:1c:df: 33:eb:46:8d:d6:50:b9:39:3c:48:2d:a1:70:ff:61: 81:53:c6:a3:c6:80:7f:ea:c1:ac:ad:96:06:ef:0d: e8:8b:aa:c4:2f:9b:6c:68:6c:ab:2b:aa:ca:66:27: 2e:7e:34:76:9c:86:67:cf:64:55:c2:55:d7:e3:12: 65:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A9:84:DF:2D:AD:8C:3B:58:11:4C:23:40:5E:AC:97:4E:1F:A5:4F X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6amE3y2tjDtYEUwjQF6sl04fpU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:d0c0::/29 Signature Algorithm: sha256WithRSAEncryption 86:16:b5:bf:0a:41:8f:5f:7c:b4:34:03:7b:1f:d3:a4:40:d2: 96:0a:7a:a3:45:70:95:2b:71:1d:05:3f:a5:59:9d:1d:3c:a4: 00:89:2c:28:86:77:a5:77:89:84:42:43:18:51:f9:02:db:cc: 46:7c:52:02:9f:ae:ee:80:9f:08:a1:c8:5a:2c:f5:f7:4a:b3: 0c:76:b8:48:d4:10:c6:8e:30:33:33:bc:2f:f9:b0:ca:f0:1a: 5f:41:11:b5:2a:74:5e:96:97:3c:40:f0:7a:42:92:ab:5c:fb: 9d:24:db:b3:db:49:c0:01:1c:4a:b8:d9:c3:72:28:8e:3c:1a: 44:00:4d:f0:cd:9d:b1:32:c2:de:6a:cd:a7:94:f2:a5:a7:c4: 49:a6:06:6d:25:b1:23:7a:24:3c:8a:ef:37:65:40:71:04:2e: 60:4f:19:01:35:0e:fe:46:32:23:ef:5d:ec:e5:52:87:91:c0: 1f:2b:4d:09:2d:d5:e3:10:32:55:5d:f2:4d:06:c5:39:c8:7a: 5e:b2:7b:20:25:82:ec:c8:b0:82:17:eb:6c:f7:35:4d:de:42: b2:04:fb:bc:4c:81:c3:fb:8b:a7:ba:54:68:b0:84:3d:70:70: 97:6f:93:b7:50:b5:f5:0d:9a:8f:54:3d:3a:35:cb:9d:ba:83: 52:e9:ae:06 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrfKI6hCZ4TcGWH9Ymwp0F2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjUxMjAyMTMwMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWE5ODRkZjJkYWQ4YzNiNTgxMTRjMjM0MDVlYWM5NzRlMWZhNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrhhfIzHZMa5VBoamcYs+wr22oBF OCv5D2ZSw2D8p3hba7qiR0VUlvWnXH/56SM+AUVD2du3WTkoCa09pu/y427gyDyn Zd6YukPrjQ1dCCwyxA6fpXiRxvSZGneT7ui3h3Vu1S/CBVSJ4da/Z7dXUul9BXEX 7qIkTjbcNw7WQEdTHfaix8YoMFj8Yqi/xKUggcxjYv4zLyAdQ0MExmNT5fx3cnpd NrayuZXaA0E9Mq76OZ1ZO006wJAMkvACyFcrHN8z60aN1lC5OTxILaFw/2GBU8aj xoB/6sGsrZYG7w3oi6rEL5tsaGyrK6rKZicufjR2nIZnz2RVwlXX4xJldwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOmphN8trYw7WBFMI0BerJdOH6VPMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvNmFtRTN5MnRqRHRZRVV3alFGNnNsMDRmcFU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPQwDAN BgkqhkiG9w0BAQsFAAOCAQEAhha1vwpBj198tDQDex/TpEDSlgp6o0VwlStxHQU/ pVmdHTykAIksKIZ3pXeJhEJDGFH5AtvMRnxSAp+u7oCfCKHIWiz190qzDHa4SNQQ xo4wMzO8L/mwyvAaX0ERtSp0XpaXPEDwekKSq1z7nSTbs9tJwAEcSrjZw3Iojjwa RABN8M2dsTLC3mrNp5TypafESaYGbSWxI3okPIrvN2VAcQQuYE8ZATUO/kYyI+9d 7OVSh5HAHytNCS3V4xAyVV3yTQbFOch6XrJ7ICWC7MiwghfrbPc1Td5CsgT7vEyB w/uLp7pUaLCEPXBwl2+Tt1C19Q2aj1Q9OjXLnbqDUumuBg== -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:53 2025 by rpki-client