This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/uk6hH9Dzzgnima7moKdlChvbIco.roa File: uk6hH9Dzzgnima7moKdlChvbIco.roa (raw, json) Hash identifier: Ow8Zi7vnC95cw7Q9hThm4tV+bwQ4iwBNuOeb1FUz8n8= Subject key identifier: BA:4E:A1:1F:D0:F3:CE:09:E2:99:AE:E6:A0:A7:65:0A:1B:DB:21:CA Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019AED67BBE3B0F8EA5764B1FCD2F679AA57 Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/uk6hH9Dzzgnima7moKdlChvbIco.roa Signing time: Fri 05 Dec 2025 07:26:29 +0000 ROA not before: Fri 05 Dec 2025 07:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2a0b:8440::/29 maxlen: 29 2a0b:a4c0::/29 maxlen: 29 2a0b:b480::/29 maxlen: 29 2a0f:63c0::/29 maxlen: 29 2a0f:89c0::/29 maxlen: 29 2a10:7ac0::/29 maxlen: 29 2a10:a9c0::/29 maxlen: 29 2a13:5040::/29 maxlen: 29 2a13:bd40::/29 maxlen: 29 2a13:bec0::/29 maxlen: 29 2a13:cdc0::/29 maxlen: 29 2a13:d140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:67:bb:e3:b0:f8:ea:57:64:b1:fc:d2:f6:79:aa:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Dec 5 07:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba4ea11fd0f3ce09e299aee6a0a7650a1bdb21ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:93:e5:a9:31:69:73:75:31:40:44:b6:aa: 9d:7e:ac:6b:a3:ed:0e:f7:a6:d9:2c:8c:0f:58:e6: 5e:29:c2:83:32:e7:14:d2:19:6b:75:d9:a3:8d:44: af:d5:1a:9a:1c:3d:19:8e:b7:a8:9b:5a:ef:af:02: e5:55:23:95:09:13:96:41:ea:a3:3e:c3:8f:fc:63: 82:c7:c4:bb:bd:96:54:ab:51:74:b3:5b:43:5e:b4: 03:b1:08:a5:45:b9:8c:1f:9a:17:c6:e1:8f:d1:b6: f4:e4:ed:5c:41:a6:8b:30:3c:f5:5c:e0:ae:a6:c7: 07:55:18:8b:15:42:d5:bb:a8:21:62:32:c1:bd:55: 98:10:ce:cf:95:28:eb:9e:c0:2c:47:55:c8:10:d7: 4f:fb:97:c7:b0:e6:30:e1:dd:a7:3b:7b:26:31:1a: 23:42:2d:0b:de:e6:51:b3:d6:97:97:8d:ba:79:fc: a1:25:fe:2d:1c:53:01:79:2a:71:0f:74:ac:4a:19: 44:ed:57:73:21:53:35:fd:01:1a:38:b9:34:89:d0: eb:61:f4:13:14:aa:19:3e:d0:bc:a6:79:2c:75:7b: f2:39:04:61:b2:d1:46:ee:b4:66:31:21:10:6a:bf: 57:33:2f:e7:ae:a7:6b:b1:50:35:e1:ed:e7:3d:d4: 3d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4E:A1:1F:D0:F3:CE:09:E2:99:AE:E6:A0:A7:65:0A:1B:DB:21:CA X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/uk6hH9Dzzgnima7moKdlChvbIco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:8440::/29 2a0b:a4c0::/29 2a0b:b480::/29 2a0f:63c0::/29 2a0f:89c0::/29 2a10:7ac0::/29 2a10:a9c0::/29 2a13:5040::/29 2a13:bd40::/29 2a13:bec0::/29 2a13:cdc0::/29 2a13:d140::/29 Signature Algorithm: sha256WithRSAEncryption 1f:00:8e:b6:de:82:23:95:91:62:53:51:2f:9c:d3:26:86:77: 6d:f5:cd:3f:00:82:ce:27:74:cd:91:a3:fe:db:1e:94:04:96: f4:60:c8:e8:f2:e3:de:0e:89:c3:3a:bb:02:77:18:95:d3:f5: 27:7d:47:55:b7:49:3d:68:f9:39:56:ef:63:1b:50:06:fb:1e: f9:c0:75:41:8f:9b:8d:8d:ac:a7:a5:7a:1d:22:ec:04:3e:a4: 3e:d2:29:7a:a4:f0:81:9c:5f:6d:d8:3e:75:f9:93:15:2f:1a: 5e:37:bd:f4:db:94:41:07:b3:f1:ca:92:0d:77:45:ca:26:bd: 45:9c:72:7f:5a:00:3c:bc:96:2e:70:90:bb:38:e9:0a:c4:b4: c0:dc:2c:83:49:3b:16:0a:e9:ff:08:b3:59:56:cb:f9:53:b9: 49:67:cb:8e:fe:33:28:f7:7f:98:e6:b4:94:bb:bd:6a:f0:11: c4:2f:86:55:c8:0c:76:ba:ef:0d:8b:a8:b6:e6:a7:90:b7:ab: 1f:2c:0c:13:3b:d8:e6:8e:3b:a8:ec:1a:ab:18:dd:e0:ba:dc: d1:86:aa:80:2b:2e:19:cf:aa:42:fa:0f:ec:e2:fc:d9:d4:9e: 89:a8:0c:c3:84:80:a8:01:34:39:56:aa:d9:e0:b3:2b:2c:6c: 45:7d:48:37 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZrtZ7vjsPjqV2Sx/NL2eapXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjUxMjA1MDcyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTRlYTExZmQwZjNjZTA5ZTI5OWFlZTZhMGE3NjUwYTFiZGIyMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8mT5akxaXN1MUBEtqqdfqxro+0O 96bZLIwPWOZeKcKDMucU0hlrddmjjUSv1RqaHD0Zjreom1rvrwLlVSOVCROWQeqj PsOP/GOCx8S7vZZUq1F0s1tDXrQDsQilRbmMH5oXxuGP0bb05O1cQaaLMDz1XOCu pscHVRiLFULVu6ghYjLBvVWYEM7PlSjrnsAsR1XIENdP+5fHsOYw4d2nO3smMRoj Qi0L3uZRs9aXl426efyhJf4tHFMBeSpxD3SsShlE7VdzIVM1/QEaOLk0idDrYfQT FKoZPtC8pnksdXvyOQRhstFG7rRmMSEQar9XMy/nrqdrsVA14e3nPdQ9RwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFLpOoR/Q884J4pmu5qCnZQob2yHKMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvdWs2aEg5RHp6Z25pbWE3bW9LZGxDaHZiSWNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAAjBUAwUDKguEQAMF AyoLpMADBQMqC7SAAwUDKg9jwAMFAyoPicADBQMqEHrAAwUDKhCpwAMFAyoTUEAD BQMqE71AAwUDKhO+wAMFAyoTzcADBQMqE9FAMA0GCSqGSIb3DQEBCwUAA4IBAQAf AI623oIjlZFiU1EvnNMmhndt9c0/AILOJ3TNkaP+2x6UBJb0YMjo8uPeDonDOrsC dxiV0/UnfUdVt0k9aPk5Vu9jG1AG+x75wHVBj5uNjaynpXodIuwEPqQ+0il6pPCB nF9t2D51+ZMVLxpeN73025RBB7PxypINd0XKJr1FnHJ/WgA8vJYucJC7OOkKxLTA 3CyDSTsWCun/CLNZVsv5U7lJZ8uO/jMo93+Y5rSUu71q8BHEL4ZVyAx2uu8Ni6i2 5qeQt6sfLAwTO9jmjjuo7BqrGN3gutzRhqqAKy4Zz6pC+g/s4vzZ1J6JqAzDhICo ATQ5VqrZ4LMrLGxFfUg3 -----END CERTIFICATE-----Generated at Fri Dec 5 17:40:13 2025 by rpki-client