This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mTzEhkTu4fT0gm5W_PiTx5hj074.roa File: mTzEhkTu4fT0gm5W_PiTx5hj074.roa (raw, json) Hash identifier: AOR3OpysOOD7PMKvijSJSDKTnLgMTEwKcEx9htTH79I= Subject key identifier: 99:3C:C4:86:44:EE:E1:F4:F4:82:6E:56:FC:F8:93:C7:98:63:D3:BE Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AC0ED1E0E63203E8660CFC5C3A4F550F3 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mTzEhkTu4fT0gm5W_PiTx5hj074.roa Signing time: Wed 26 Nov 2025 16:09:16 +0000 ROA not before: Wed 26 Nov 2025 16:09:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 835 IP address blocks: 2a06:1180:1c5::/48 maxlen: 48 2a06:1181:100::/48 maxlen: 48 2a06:1183:9999::/48 maxlen: 48 2a06:1184:99::/48 maxlen: 48 2a09:17c1:ad::/48 maxlen: 48 2a0a:2d06:acab::/48 maxlen: 48 2a0c:7886:7b8a::/48 maxlen: 48 2a0e:15c0:100::/48 maxlen: 48 2a0e:15c7:e8::/48 maxlen: 48 2a0e:f601:bf89::/48 maxlen: 48 2a0e:f603:11::/48 maxlen: 48 2a0f:1206:1312::/48 maxlen: 48 2a0f:1584:1312::/48 maxlen: 48 2a0f:1e80:100::/48 maxlen: 48 2a0f:3d80:acab::/48 maxlen: 48 2a0f:3d86:101::/48 maxlen: 48 2a0f:7d04:2::/48 maxlen: 48 2a0f:7d06:11::/48 maxlen: 48 2a0f:e1c7:99::/48 maxlen: 48 2a0f:e200:5641::/48 maxlen: 48 2a0f:e202:44::/48 maxlen: 48 2a0f:e6c6:101::/48 maxlen: 48 2a0f:e7c6:55::/48 maxlen: 48 2a0f:e7c7:189::/48 maxlen: 48 2a12:ac44:b5a9::/48 maxlen: 48 2a12:ecc0:316::/48 maxlen: 48 2a12:ecc3:acab::/48 maxlen: 48 2a13:c900:9876::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 16:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:ed:1e:0e:63:20:3e:86:60:cf:c5:c3:a4:f5:50:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 26 16:09:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=993cc48644eee1f4f4826e56fcf893c79863d3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:65:8e:9a:e7:a3:13:1c:79:ea:6b:8c:06:dc: 87:88:ce:04:10:95:8d:72:86:ed:48:6f:16:de:80: 08:12:57:b4:58:e6:7d:87:84:55:00:62:7f:ab:28: f3:56:2c:82:68:7b:0f:94:77:30:ef:de:17:82:bf: b1:c3:0c:cb:92:a0:17:f4:46:f2:83:1d:dc:35:db: ef:7d:96:ab:10:05:ed:ea:1e:09:94:68:11:18:ab: 85:a9:57:4f:b2:b5:4e:90:b3:02:3f:ff:76:4b:84: ca:51:4a:48:eb:50:cb:8e:4b:e6:1a:d2:c5:d6:6d: de:b5:59:8d:60:fb:9d:83:ea:22:b8:f4:2a:88:e5: 39:57:8a:11:e9:67:71:31:f0:b4:41:8d:ec:40:10: 23:fd:92:63:b7:b6:93:d5:55:a8:19:e3:f2:5c:5e: c8:c3:e1:a1:5f:5f:5e:63:fa:4d:e1:38:49:38:6b: 3b:f3:6a:cd:2d:c6:48:2d:3a:8a:4e:34:a6:09:35: 9b:fc:8f:cc:be:85:20:53:ab:a2:66:97:f0:bf:b9: d8:a3:59:81:3c:c8:54:a8:83:bb:e4:10:7f:3e:6a: e2:9d:b6:b7:b2:14:0e:a5:7f:a0:ce:45:b9:b1:81: 02:e0:96:74:9e:a0:26:4e:5a:e4:c5:20:9a:64:a2: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3C:C4:86:44:EE:E1:F4:F4:82:6E:56:FC:F8:93:C7:98:63:D3:BE X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mTzEhkTu4fT0gm5W_PiTx5hj074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1180:1c5::/48 2a06:1181:100::/48 2a06:1183:9999::/48 2a06:1184:99::/48 2a09:17c1:ad::/48 2a0a:2d06:acab::/48 2a0c:7886:7b8a::/48 2a0e:15c0:100::/48 2a0e:15c7:e8::/48 2a0e:f601:bf89::/48 2a0e:f603:11::/48 2a0f:1206:1312::/48 2a0f:1584:1312::/48 2a0f:1e80:100::/48 2a0f:3d80:acab::/48 2a0f:3d86:101::/48 2a0f:7d04:2::/48 2a0f:7d06:11::/48 2a0f:e1c7:99::/48 2a0f:e200:5641::/48 2a0f:e202:44::/48 2a0f:e6c6:101::/48 2a0f:e7c6:55::/48 2a0f:e7c7:189::/48 2a12:ac44:b5a9::/48 2a12:ecc0:316::/48 2a12:ecc3:acab::/48 2a13:c900:9876::/48 Signature Algorithm: sha256WithRSAEncryption 11:4b:41:66:26:79:96:8b:05:7a:27:9e:49:7f:07:6c:57:84: f5:94:71:ed:09:27:61:52:eb:2c:58:de:af:c5:e2:7d:e6:25: 08:3c:b8:b1:db:66:93:72:08:3c:89:6a:8c:2d:be:4b:f7:c7: ec:a0:bd:22:30:dc:f3:12:92:68:3a:51:60:89:52:75:5e:06: c5:a0:e8:22:11:30:c9:81:d7:fa:07:a1:c2:bd:30:46:d3:9c: 0e:7c:d2:89:44:e9:58:d1:2d:b6:68:75:1d:18:e9:b8:6e:98: 21:c2:a8:d7:58:ae:24:1e:3d:f6:e8:ab:8f:c3:7a:67:d0:dd: 79:4e:eb:54:dc:ad:57:1b:78:61:ba:3f:b1:3c:d5:a2:08:89: a9:76:1c:b8:5f:a4:2b:9c:40:5b:7c:62:17:20:01:89:4d:3b: 82:55:f4:06:6d:f9:b8:ee:73:32:96:37:f1:2b:be:67:5e:9b: ac:68:29:c9:8f:5f:aa:48:8a:bc:41:16:d8:9c:a5:c4:c9:50: 27:26:f3:5e:ba:9a:12:e1:e5:7b:00:d9:a4:dd:2e:24:45:0b: 24:f4:3f:63:de:ae:76:42:2a:5e:fd:65:d6:48:6c:78:28:be: 6f:56:78:07:54:bb:96:d4:69:d3:ad:46:c3:38:c0:04:eb:84: f1:99:8f:b7 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISAZrA7R4OYyA+hmDPxcOk9VDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTI2MTYwOTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTNjYzQ4NjQ0ZWVlMWY0ZjQ4MjZlNTZmY2Y4OTNjNzk4NjNkM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2WOmuejExx56muMBtyHiM4EEJWN cobtSG8W3oAIEle0WOZ9h4RVAGJ/qyjzViyCaHsPlHcw794Xgr+xwwzLkqAX9Eby gx3cNdvvfZarEAXt6h4JlGgRGKuFqVdPsrVOkLMCP/92S4TKUUpI61DLjkvmGtLF 1m3etVmNYPudg+oiuPQqiOU5V4oR6WdxMfC0QY3sQBAj/ZJjt7aT1VWoGePyXF7I w+GhX19eY/pN4ThJOGs782rNLcZILTqKTjSmCTWb/I/MvoUgU6uiZpfwv7nYo1mB PMhUqIO75BB/Pmrinba3shQOpX+gzkW5sYEC4JZ0nqAmTlrkxSCaZKKUHwIDAQAB o4IDCDCCAwQwHQYDVR0OBBYEFJk8xIZE7uH09IJuVvz4k8eYY9O+MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvbVR6RWhrVHU0ZlQwZ201V19QaVR4NWhqMDc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCCAQMEAgACMIH8 AwcAKgYRgAHFAwcAKgYRgQEAAwcAKgYRg5mZAwcAKgYRhACZAwcAKgkXwQCtAwcA KgotBqyrAwcAKgx4hnuKAwcAKg4VwAEAAwcAKg4VxwDoAwcAKg72Ab+JAwcAKg72 AwARAwcAKg8SBhMSAwcAKg8VhBMSAwcAKg8egAEAAwcAKg89gKyrAwcAKg89hgEB AwcAKg99BAACAwcAKg99BgARAwcAKg/hxwCZAwcAKg/iAFZBAwcAKg/iAgBEAwcA Kg/mxgEBAwcAKg/nxgBVAwcAKg/nxwGJAwcAKhKsRLWpAwcAKhLswAMWAwcAKhLs w6yrAwcAKhPJAJh2MA0GCSqGSIb3DQEBCwUAA4IBAQARS0FmJnmWiwV6J55Jfwds V4T1lHHtCSdhUussWN6vxeJ95iUIPLix22aTcgg8iWqMLb5L98fsoL0iMNzzEpJo OlFgiVJ1XgbFoOgiETDJgdf6B6HCvTBG05wOfNKJROlY0S22aHUdGOm4bpghwqjX WK4kHj326KuPw3pn0N15TutU3K1XG3hhuj+xPNWiCImpdhy4X6QrnEBbfGIXIAGJ TTuCVfQGbfm47nMyljfxK75nXpusaCnJj1+qSIq8QRbYnKXEyVAnJvNeupoS4eV7 ANmk3S4kRQsk9D9j3q52Qipe/WXWSGx4KL5vVngHVLuW1GnTrUbDOMAE64TxmY+3 -----END CERTIFICATE-----Generated at Wed Nov 26 20:44:29 2025 by rpki-client