This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qIjlFpuTujf_tRE_D2YO5erv4ZI.roa File: qIjlFpuTujf_tRE_D2YO5erv4ZI.roa (raw, json) Hash identifier: z10vC9Wy1Fo9fn4Z57V+zK5I5WsaWXS+9x84suyPhRk= Subject key identifier: A8:88:E5:16:9B:93:BA:37:FF:B5:11:3F:0F:66:0E:E5:EA:EF:E1:92 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019A2F681B6620597E0F497ADB98393D4EEF Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qIjlFpuTujf_tRE_D2YO5erv4ZI.roa Signing time: Wed 29 Oct 2025 09:59:03 +0000 ROA not before: Wed 29 Oct 2025 09:59:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50340 IP address blocks: 2a10:3840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2f:68:1b:66:20:59:7e:0f:49:7a:db:98:39:3d:4e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Oct 29 09:59:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a888e5169b93ba37ffb5113f0f660ee5eaefe192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:8b:cb:ee:32:e1:08:c0:95:e2:03:1d:fa: 74:6c:30:ac:95:4b:60:6e:db:70:8f:e2:c3:21:54: 92:86:cb:24:68:37:b8:71:6b:05:01:89:f4:2b:3f: 3c:44:14:e7:ad:2d:89:1f:ef:42:5f:95:44:85:37: 18:a1:97:f3:51:a9:d0:03:04:57:86:e3:9a:5f:b0: ed:b3:7a:d1:4b:f1:ac:dd:54:e8:05:a8:6f:f3:7f: 1d:f1:ff:9b:3a:8b:36:d2:b8:9c:9c:c5:2c:74:23: 32:e6:76:28:e4:a9:aa:ba:14:6a:b9:6f:65:d9:75: 97:1b:55:68:79:24:0c:72:ff:1e:e2:4d:96:db:2b: ae:e9:26:45:14:70:8d:88:4a:04:64:05:b9:b6:98: 16:b2:4f:64:ae:06:37:75:a8:a8:81:4b:cf:af:8d: 0c:99:90:c4:4d:97:9c:cb:b2:26:6f:62:82:c0:35: 1b:9a:89:98:7f:ae:79:24:6d:2d:90:96:cc:27:6c: 42:20:37:fc:16:a7:0e:1c:b7:69:c1:a7:48:23:3f: ef:c8:8b:75:e2:ed:cf:88:98:c0:a3:98:c2:26:cd: aa:87:d3:b3:d9:e7:e4:69:89:fb:da:11:d6:88:bb: be:ed:40:7d:c7:1d:d3:dd:15:ec:94:68:33:96:c6: 0f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:88:E5:16:9B:93:BA:37:FF:B5:11:3F:0F:66:0E:E5:EA:EF:E1:92 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qIjlFpuTujf_tRE_D2YO5erv4ZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:3840::/29 Signature Algorithm: sha256WithRSAEncryption 38:50:9e:49:df:47:25:56:5b:a9:97:ae:aa:09:74:8b:6a:1b: 83:8b:41:95:e4:3e:6b:81:ed:a2:b7:f5:00:c4:74:b3:8a:41: 25:a4:e7:80:c0:b8:b1:7a:03:31:f8:32:aa:77:55:23:51:f0: 7e:aa:d6:2a:ef:d6:00:e2:ae:bf:e4:b9:87:73:e0:e8:3b:dd: 40:d0:95:e2:ed:54:50:24:0b:4a:73:0f:8f:22:de:3f:a0:17: 63:db:80:67:85:c2:3c:2f:a4:3a:20:0c:f1:e1:85:bf:a5:5d: 49:a7:da:96:a2:f8:07:59:b8:af:e7:4b:d0:26:14:1a:70:9e: c8:71:45:a5:87:3f:e6:14:ee:84:c9:84:3d:ce:f0:b9:3c:a1: bc:f5:f9:65:93:90:e7:65:23:ad:0c:ed:70:72:1a:9a:02:e7: 30:b6:ca:ac:c2:dc:b9:92:1d:0f:0b:a7:58:71:e4:b0:41:67: fc:ca:d7:a4:88:8a:11:9a:83:65:6e:0b:bc:1a:22:9d:d8:e6: 41:7b:cc:50:ab:a9:b9:a8:cd:6a:66:a4:34:cd:5e:e2:79:f6: aa:c9:e1:25:6d:4a:e0:99:3b:d9:de:ba:8f:99:79:0b:0e:de: 44:01:b6:3c:64:bd:f5:c7:48:d8:4c:a8:66:ea:08:91:d4:28: 5f:2d:e9:fa -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZovaBtmIFl+D0l625g5PU7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMDI5MDk1OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODg4ZTUxNjliOTNiYTM3ZmZiNTExM2YwZjY2MGVlNWVhZWZlMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2feLy+4y4QjAleIDHfp0bDCslUtg bttwj+LDIVSShsskaDe4cWsFAYn0Kz88RBTnrS2JH+9CX5VEhTcYoZfzUanQAwRX huOaX7Dts3rRS/Gs3VToBahv838d8f+bOos20ricnMUsdCMy5nYo5KmquhRquW9l 2XWXG1VoeSQMcv8e4k2W2yuu6SZFFHCNiEoEZAW5tpgWsk9krgY3daiogUvPr40M mZDETZecy7Imb2KCwDUbmomYf655JG0tkJbMJ2xCIDf8FqcOHLdpwadIIz/vyIt1 4u3PiJjAo5jCJs2qh9Oz2efkaYn72hHWiLu+7UB9xx3T3RXslGgzlsYPvwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKiI5Rabk7o3/7URPw9mDuXq7+GSMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvcUlqbEZwdVR1amZfdFJFX0QyWU81ZXJ2NFpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhA4QDAN BgkqhkiG9w0BAQsFAAOCAQEAOFCeSd9HJVZbqZeuqgl0i2obg4tBleQ+a4Htorf1 AMR0s4pBJaTngMC4sXoDMfgyqndVI1HwfqrWKu/WAOKuv+S5h3Pg6DvdQNCV4u1U UCQLSnMPjyLeP6AXY9uAZ4XCPC+kOiAM8eGFv6VdSafalqL4B1m4r+dL0CYUGnCe yHFFpYc/5hTuhMmEPc7wuTyhvPX5ZZOQ52UjrQztcHIamgLnMLbKrMLcuZIdDwun WHHksEFn/MrXpIiKEZqDZW4LvBoindjmQXvMUKupuajNamakNM1e4nn2qsnhJW1K 4Jk72d66j5l5Cw7eRAG2PGS99cdI2EyoZuoIkdQoXy3p+g== -----END CERTIFICATE-----Generated at Sat Dec 6 03:13:00 2025 by rpki-client