This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/K-qTA9NP8m_rYNa0EN3efa4Ih-g.roa File: K-qTA9NP8m_rYNa0EN3efa4Ih-g.roa (raw, json) Hash identifier: cIRmnvRXRRNp8S3cZnVlYwUGSCKxpucncIUm5c8RtZc= Subject key identifier: 2B:EA:93:03:D3:4F:F2:6F:EB:60:D6:B4:10:DD:DE:7D:AE:08:87:E8 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019A970AC9814FA1E74CEEBED8C0DF203812 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/K-qTA9NP8m_rYNa0EN3efa4Ih-g.roa Signing time: Tue 18 Nov 2025 12:57:37 +0000 ROA not before: Tue 18 Nov 2025 12:57:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205486 IP address blocks: 2a0e:f605::/32 maxlen: 32 2a0f:1201::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:0a:c9:81:4f:a1:e7:4c:ee:be:d8:c0:df:20:38:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 18 12:57:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2bea9303d34ff26feb60d6b410ddde7dae0887e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:81:56:93:7e:d4:88:38:3a:3c:22:06:0c: 59:cf:d9:de:35:27:3d:36:bc:e5:40:b6:56:d5:40: 89:be:84:f6:01:32:15:ee:29:c0:ba:6a:d4:0c:6c: 07:36:59:af:64:21:01:90:f1:85:51:ea:34:2c:bd: 3b:16:73:3e:9e:37:8c:0c:33:64:a8:18:7b:a2:a4: 49:1a:f7:71:af:3c:a1:44:a0:a0:80:5a:de:61:46: 09:54:2a:89:79:2c:ae:41:13:86:ed:c7:65:e9:7e: f4:3f:83:bc:31:65:d1:16:37:fb:1d:37:fb:7a:4d: bd:d7:14:d2:1d:c5:c9:11:4a:88:cc:11:79:3f:ee: 28:68:9e:5c:b1:2d:c0:ce:21:e6:f3:6f:cf:8c:6b: 01:e8:cb:db:45:fc:64:90:c9:1e:52:90:82:5c:fc: 2a:3c:00:81:d6:0b:9e:22:07:9d:6d:ad:98:66:d2: 59:d0:8e:8b:43:ca:27:3d:0d:94:84:0c:5c:f1:41: 97:d8:b7:cb:d4:4a:27:6b:f1:b7:48:22:58:38:ac: 40:f0:e8:d1:32:d4:5a:ea:54:29:72:e4:89:b4:5b: a3:52:aa:5a:04:28:d7:f9:4a:6a:2c:f1:20:42:3b: 19:64:74:cd:a9:32:70:54:3d:1c:38:8a:31:e0:0a: 88:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EA:93:03:D3:4F:F2:6F:EB:60:D6:B4:10:DD:DE:7D:AE:08:87:E8 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/K-qTA9NP8m_rYNa0EN3efa4Ih-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:f605::/32 2a0f:1201::/32 Signature Algorithm: sha256WithRSAEncryption 2b:30:44:ed:41:7b:69:99:55:36:59:4b:4f:6e:63:65:d6:25: f8:77:9a:07:c3:83:dc:a4:33:0f:26:c3:57:6e:aa:7a:93:06: 16:f3:58:b8:9d:a2:3b:dd:b7:9b:46:42:cd:6a:e9:d7:8a:54: 5e:2f:cf:95:f8:62:63:49:05:f5:67:e3:7e:d7:1a:a3:e9:92: d4:f4:f3:84:43:ec:4b:e5:1d:37:43:27:8b:6d:eb:c4:4d:14: 70:c5:a1:d2:12:b0:06:8d:39:b4:f9:72:a6:29:32:e2:35:40: 50:8b:03:46:f6:f6:80:c5:c3:75:45:02:28:18:ef:ae:42:43: 31:b6:34:64:f5:f9:08:d5:08:ae:72:3e:f5:f5:db:20:8e:a4: 68:60:bf:91:62:b3:6f:b8:37:51:b9:39:5b:39:42:8e:53:80: 1d:7c:71:40:03:cf:71:af:3a:2c:6c:ec:d6:d4:c1:b7:00:a8: 37:89:35:d0:f4:ca:e4:22:57:88:f1:fd:de:39:6b:09:d5:56: 3b:c4:a5:dd:f9:a2:f1:95:f5:2b:de:2d:9c:81:f6:af:a9:98: e8:16:ac:85:f5:df:c9:d8:3c:d8:a4:1d:9f:7d:5d:07:cc:ee: 28:36:35:a1:cf:55:b6:74:35:1e:28:66:97:92:2a:d1:20:36: de:61:00:47 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZqXCsmBT6HnTO6+2MDfIDgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTE4MTI1NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmVhOTMwM2QzNGZmMjZmZWI2MGQ2YjQxMGRkZGU3ZGFlMDg4N2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ+BVpN+1Ig4OjwiBgxZz9neNSc9 NrzlQLZW1UCJvoT2ATIV7inAumrUDGwHNlmvZCEBkPGFUeo0LL07FnM+njeMDDNk qBh7oqRJGvdxrzyhRKCggFreYUYJVCqJeSyuQROG7cdl6X70P4O8MWXRFjf7HTf7 ek291xTSHcXJEUqIzBF5P+4oaJ5csS3AziHm82/PjGsB6MvbRfxkkMkeUpCCXPwq PACB1gueIgedba2YZtJZ0I6LQ8onPQ2UhAxc8UGX2LfL1Eona/G3SCJYOKxA8OjR MtRa6lQpcuSJtFujUqpaBCjX+UpqLPEgQjsZZHTNqTJwVD0cOIox4AqIzQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCvqkwPTT/Jv62DWtBDd3n2uCIfoMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvSy1xVEE5TlA4bV9yWU5hMEVOM2VmYTRJaC1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg72BQMF ACoPEgEwDQYJKoZIhvcNAQELBQADggEBACswRO1Be2mZVTZZS09uY2XWJfh3mgfD g9ykMw8mw1duqnqTBhbzWLidojvdt5tGQs1q6deKVF4vz5X4YmNJBfVn437XGqPp ktT084RD7EvlHTdDJ4tt68RNFHDFodISsAaNObT5cqYpMuI1QFCLA0b29oDFw3VF AigY765CQzG2NGT1+QjVCK5yPvX12yCOpGhgv5Fis2+4N1G5OVs5Qo5TgB18cUAD z3GvOixs7NbUwbcAqDeJNdD0yuQiV4jx/d45awnVVjvEpd35ovGV9SveLZyB9q+p mOgWrIX138nYPNikHZ99XQfM7ig2NaHPVbZ0NR4oZpeSKtEgNt5hAEc= -----END CERTIFICATE-----Generated at Fri Dec 5 10:07:00 2025 by rpki-client