This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tmrf6lj9Ww6XV0xWIoWCUCvF68U.roa File: tmrf6lj9Ww6XV0xWIoWCUCvF68U.roa (raw, json) Hash identifier: k8Y4KcmOk6YpwoEb/6/Tj21y+s5BCqXN2g1i8amU6QM= Subject key identifier: B6:6A:DF:EA:58:FD:5B:0E:97:57:4C:56:22:85:82:50:2B:C5:EB:C5 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019A5E4FC716CE5F25B4EDEB05FEC6C0B377 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tmrf6lj9Ww6XV0xWIoWCUCvF68U.roa Signing time: Fri 07 Nov 2025 12:34:37 +0000 ROA not before: Fri 07 Nov 2025 12:34:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213505 IP address blocks: 2a13:540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5e:4f:c7:16:ce:5f:25:b4:ed:eb:05:fe:c6:c0:b3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 7 12:34:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b66adfea58fd5b0e97574c56228582502bc5ebc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:ac:5e:0f:b9:b5:43:24:cb:8f:38:5e:12: a8:92:e7:84:20:3b:fd:09:f2:8e:80:28:d2:94:90: e7:e8:49:9f:3a:7f:8b:fd:0e:a7:01:6a:8a:d6:4e: c6:b1:88:d3:ce:80:4a:eb:f0:7b:38:05:66:2a:98: 16:e1:b2:cf:af:9e:fe:4f:a9:ea:9b:08:12:c2:33: ae:8a:46:4a:ea:3a:26:d7:ae:44:d1:8f:5d:9a:d0: 5c:35:a0:1e:41:dd:8c:cd:8c:ef:5b:1a:3f:24:f0: 22:fb:a7:73:18:f2:c4:99:2e:d0:7c:eb:e5:e6:0e: 60:e1:7a:a1:1c:14:3c:e3:89:77:5b:64:70:bb:1a: 4a:8f:e2:e8:21:51:e2:71:d9:8f:e1:71:52:fc:d4: 3f:24:e6:af:56:9a:6e:7e:3a:43:a2:3e:3a:33:8b: 68:d8:d7:97:7a:bb:2b:a4:35:39:09:26:94:b1:83: 2b:dc:e9:d9:77:99:84:31:86:7c:6f:c1:74:27:69: 1b:04:3d:d0:e1:61:31:0e:3e:fd:2c:f0:51:98:2d: a1:8c:e2:41:2c:3c:0b:cf:bd:45:9d:f7:8d:e4:0e: e8:1a:da:c4:f4:13:cc:b4:2b:84:30:18:8d:dc:34: 18:c6:61:c7:6c:d4:e2:ca:69:04:ee:a5:fa:0c:80: f1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6A:DF:EA:58:FD:5B:0E:97:57:4C:56:22:85:82:50:2B:C5:EB:C5 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tmrf6lj9Ww6XV0xWIoWCUCvF68U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:540::/29 Signature Algorithm: sha256WithRSAEncryption 89:f3:1a:d4:ee:e7:63:43:79:02:f8:36:42:cb:03:34:f2:57: 18:9d:32:21:bf:e4:44:48:6f:81:08:eb:e1:6c:48:a2:3a:4d: 30:58:1f:18:ee:f8:45:c2:cc:06:9b:2a:5e:20:af:1f:7e:b9: 58:0e:25:57:5d:04:c5:a5:36:28:e4:14:0d:e9:7b:21:06:33: b9:53:ab:1f:1d:ca:76:eb:ee:16:b7:46:39:68:44:7a:bd:d0: 76:a1:e0:d5:5e:6c:0f:e8:f9:a7:2d:73:d8:d9:82:eb:4a:c2: 13:e7:f8:30:72:8d:fe:df:09:d3:a2:97:84:97:c1:de:17:ab: 54:1e:32:2f:03:60:b7:da:f7:e4:60:65:7b:3e:ed:89:53:4d: cf:34:cb:ad:a0:c5:a0:7c:91:10:2e:b4:c4:4b:61:eb:70:80: 00:ff:7d:dd:82:b7:44:ee:cc:fd:43:12:a0:72:3b:69:79:c7: 91:72:da:d2:dc:18:f3:bd:aa:1e:78:b6:55:fa:43:61:63:c1: f3:dd:ba:de:8b:24:dc:35:e5:77:73:e8:c7:64:92:1d:b6:ef: d1:8b:4a:55:7b:cf:47:57:9f:06:61:52:cd:b8:66:7e:de:58: 5f:96:f1:e9:8a:bb:ec:40:a4:6b:3d:f3:ed:55:77:5c:db:ac: 09:4e:ab:cc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZpeT8cWzl8ltO3rBf7GwLN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTA3MTIzNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjZhZGZlYTU4ZmQ1YjBlOTc1NzRjNTYyMjg1ODI1MDJiYzVlYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt72sXg+5tUMky484XhKokueEIDv9 CfKOgCjSlJDn6EmfOn+L/Q6nAWqK1k7GsYjTzoBK6/B7OAVmKpgW4bLPr57+T6nq mwgSwjOuikZK6jom165E0Y9dmtBcNaAeQd2MzYzvWxo/JPAi+6dzGPLEmS7QfOvl 5g5g4XqhHBQ844l3W2RwuxpKj+LoIVHicdmP4XFS/NQ/JOavVppufjpDoj46M4to 2NeXersrpDU5CSaUsYMr3OnZd5mEMYZ8b8F0J2kbBD3Q4WExDj79LPBRmC2hjOJB LDwLz71FnfeN5A7oGtrE9BPMtCuEMBiN3DQYxmHHbNTiymkE7qX6DIDxQQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLZq3+pY/VsOl1dMViKFglArxevFMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvdG1yZjZsajlXdzZYVjB4V0lvV0NVQ3ZGNjhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhMFQDAN BgkqhkiG9w0BAQsFAAOCAQEAifMa1O7nY0N5Avg2QssDNPJXGJ0yIb/kREhvgQjr 4WxIojpNMFgfGO74RcLMBpsqXiCvH365WA4lV10ExaU2KOQUDel7IQYzuVOrHx3K duvuFrdGOWhEer3QdqHg1V5sD+j5py1z2NmC60rCE+f4MHKN/t8J06KXhJfB3her VB4yLwNgt9r35GBlez7tiVNNzzTLraDFoHyREC60xEth63CAAP993YK3RO7M/UMS oHI7aXnHkXLa0twY872qHni2VfpDYWPB89263osk3DXld3Pox2SSHbbv0YtKVXvP R1efBmFSzbhmft5YX5bx6Yq77ECkaz3z7VV3XNusCU6rzA== -----END CERTIFICATE-----Generated at Sat Dec 6 03:14:38 2025 by rpki-client