This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J0N4i4gINusS-eLzKL9BDiHWOKo.roa File: J0N4i4gINusS-eLzKL9BDiHWOKo.roa (raw, json) Hash identifier: ShjvB9xOPtD+x35QABg/FK0B1nOfu/vtUZk3D2nCoUs= Subject key identifier: 27:43:78:8B:88:08:36:EB:12:F9:E2:F3:28:BF:41:0E:21:D6:38:AA Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019ABC567C159EBD0193B2E3030D102F39B7 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J0N4i4gINusS-eLzKL9BDiHWOKo.roa Signing time: Tue 25 Nov 2025 18:46:15 +0000 ROA not before: Tue 25 Nov 2025 18:46:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49505 IP address blocks: 2a10:3240::/29 maxlen: 29 2a11:3f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:56:7c:15:9e:bd:01:93:b2:e3:03:0d:10:2f:39:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 25 18:46:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2743788b880836eb12f9e2f328bf410e21d638aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:1e:10:18:39:3c:29:87:c5:bc:cc:4b:a3: 62:56:72:55:73:83:63:54:9a:cd:d9:65:3e:6f:24: aa:c2:5c:16:66:00:a0:55:f9:84:e2:6b:60:ae:f7: 0c:20:56:d7:00:37:b5:a9:4a:26:bc:d4:70:81:fd: 9f:f1:93:7d:d9:df:f8:5a:08:b1:ab:22:f3:36:74: 9b:a1:6e:22:8d:88:69:1a:e1:b2:32:16:a0:f1:3e: cd:8c:39:4c:ca:a8:69:4c:ed:a6:b5:88:a3:75:12: 59:f9:ea:88:29:5b:b0:47:9f:78:c3:de:df:ea:d7: f0:86:dd:e4:71:4b:1d:84:55:08:75:6e:ee:5f:b5: 0a:3d:c1:77:93:fe:20:66:33:c6:1b:ea:e8:f6:8d: 10:8c:3f:8e:70:1b:63:67:13:06:0f:63:6e:06:27: 51:19:19:0f:cd:b5:04:de:39:8b:9b:bf:68:f5:10: 12:66:3c:92:0c:6d:35:d6:e1:68:11:c4:af:fe:64: 3d:57:7d:03:39:d3:40:b7:a3:76:12:f5:3b:0b:d3: 4c:4f:e3:45:dc:aa:18:c4:e5:48:a2:99:37:85:38: 7e:78:9b:a7:91:18:61:2a:fd:03:f5:88:56:65:7b: 82:98:fe:04:ce:55:ad:d6:ee:b1:1b:97:4b:58:31: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:43:78:8B:88:08:36:EB:12:F9:E2:F3:28:BF:41:0E:21:D6:38:AA X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J0N4i4gINusS-eLzKL9BDiHWOKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:3240::/29 2a11:3f80::/29 Signature Algorithm: sha256WithRSAEncryption 77:e7:dc:1f:bc:ed:eb:52:97:94:8d:1c:a0:26:e4:c3:32:0f: 98:bc:38:ad:4a:3f:c1:0c:1b:88:68:0f:30:d8:bc:db:92:fa: b3:1e:7c:31:72:2c:6f:0d:66:e8:10:c8:b2:2f:9e:08:9b:9c: 68:f0:3d:a2:fa:a1:f3:0e:00:24:76:7e:f1:e2:37:49:1c:55: fb:2e:8c:04:a2:54:9a:3b:71:fa:20:63:2d:b8:8a:c1:d7:3d: f3:96:bf:7e:54:31:83:03:7e:63:74:3b:96:1f:af:4f:10:0c: e0:bf:d0:e9:58:a6:78:93:2f:04:14:1b:08:38:30:32:fc:f8: 3b:4b:28:5c:da:6b:09:41:10:1f:64:66:85:0d:9b:01:2b:15: 2a:40:71:f1:83:cb:38:b2:22:50:05:0b:8e:9c:2e:6b:72:39: 83:01:4a:be:91:a6:30:fe:30:29:dd:f8:a4:b3:0e:63:89:11: 8f:9d:f7:b5:29:c8:d9:8f:1a:bd:e0:c1:d8:72:c8:a0:a8:99: f1:11:b0:14:97:9a:0c:f9:23:dd:3d:ac:a0:0e:be:e2:ec:2c: fe:cf:0f:ea:ee:7d:68:78:59:b3:ff:15:c1:7b:b2:5e:a2:1b: fc:27:55:3e:7f:27:87:da:63:e5:4c:83:cf:b0:2a:40:5c:b5: ed:07:23:4c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZq8VnwVnr0Bk7LjAw0QLzm3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTI1MTg0NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQzNzg4Yjg4MDgzNmViMTJmOWUyZjMyOGJmNDEwZTIxZDYzOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraMeEBg5PCmHxbzMS6NiVnJVc4Nj VJrN2WU+bySqwlwWZgCgVfmE4mtgrvcMIFbXADe1qUomvNRwgf2f8ZN92d/4Wgix qyLzNnSboW4ijYhpGuGyMhag8T7NjDlMyqhpTO2mtYijdRJZ+eqIKVuwR594w97f 6tfwht3kcUsdhFUIdW7uX7UKPcF3k/4gZjPGG+ro9o0QjD+OcBtjZxMGD2NuBidR GRkPzbUE3jmLm79o9RASZjySDG011uFoEcSv/mQ9V30DOdNAt6N2EvU7C9NMT+NF 3KoYxOVIopk3hTh+eJunkRhhKv0D9YhWZXuCmP4EzlWt1u6xG5dLWDGXiwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCdDeIuICDbrEvni8yi/QQ4h1jiqMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvSjBONGk0Z0lOdXNTLWVMektMOUJEaUhXT0tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhAyQAMF AyoRP4AwDQYJKoZIhvcNAQELBQADggEBAHfn3B+87etSl5SNHKAm5MMyD5i8OK1K P8EMG4hoDzDYvNuS+rMefDFyLG8NZugQyLIvngibnGjwPaL6ofMOACR2fvHiN0kc VfsujASiVJo7cfogYy24isHXPfOWv35UMYMDfmN0O5Yfr08QDOC/0OlYpniTLwQU Gwg4MDL8+DtLKFzaawlBEB9kZoUNmwErFSpAcfGDyziyIlAFC46cLmtyOYMBSr6R pjD+MCnd+KSzDmOJEY+d97UpyNmPGr3gwdhyyKComfERsBSXmgz5I909rKAOvuLs LP7PD+rufWh4WbP/FcF7sl6iG/wnVT5/J4faY+VMg8+wKkBcte0HI0w= -----END CERTIFICATE-----Generated at Sat Dec 6 03:15:21 2025 by rpki-client