This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/VwGWvDQ1yZ1m9qd6Qjq6ZmEis2Q.roa File: VwGWvDQ1yZ1m9qd6Qjq6ZmEis2Q.roa (raw, json) Hash identifier: NXsj+T/BQfpZjDU55fDpRASUPCV40ml/FEaUgz3NxTI= Subject key identifier: 57:01:96:BC:34:35:C9:9D:66:F6:A7:7A:42:3A:BA:66:61:22:B3:64 Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Certificate serial: 019AA1DD3D362717CA4BB9BE1FF212C2A22D Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/VwGWvDQ1yZ1m9qd6Qjq6ZmEis2Q.roa Signing time: Thu 20 Nov 2025 15:23:42 +0000 ROA not before: Thu 20 Nov 2025 15:23:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 2a12:1780::/29 maxlen: 29 2a12:8440::/29 maxlen: 29 2a12:8dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:dd:3d:36:27:17:ca:4b:b9:be:1f:f2:12:c2:a2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Validity Not Before: Nov 20 15:23:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=570196bc3435c99d66f6a77a423aba666122b364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:ec:62:20:68:d6:04:9f:c9:12:0a:7d:8f: 59:75:82:2f:65:89:c6:fd:22:52:68:30:84:c2:8a: 7c:8d:ca:53:60:87:93:db:2c:40:ac:88:6b:ee:63: f1:78:8a:e6:4d:c9:3a:29:f2:96:34:d7:6c:53:c6: e2:7b:28:11:66:d0:b6:90:7c:1d:e8:38:26:b0:52: 0e:ce:78:41:aa:da:cb:fb:7c:c9:7a:6f:1e:2a:73: ca:08:4c:ce:8b:e9:57:8e:33:bb:6a:de:8c:fe:3e: de:78:af:3c:e6:a4:2b:29:da:8e:4a:33:51:a3:d6: 8e:9e:c5:47:8d:51:71:e5:a0:15:16:0b:ee:55:93: 92:23:a2:a6:fb:44:22:1c:d2:7d:eb:78:aa:83:75: cd:79:b6:e7:9c:46:83:f8:de:6d:43:6b:65:0f:3a: 4e:bf:96:77:d9:f4:59:63:c7:56:a9:41:36:ba:98: 0a:d0:88:2b:fc:37:a5:98:1d:4b:0b:c1:3c:db:52: 64:9f:bc:8f:1f:a5:e3:5a:3f:1d:eb:d1:ae:ac:74: 0e:40:87:ae:90:5d:b5:9d:e6:a7:6d:3a:36:be:4a: 92:40:9a:04:e9:da:cf:3c:96:48:34:b7:87:f2:23: 51:98:3b:f2:c4:9a:4c:dc:be:2c:d1:14:b9:2b:1b: 39:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:01:96:BC:34:35:C9:9D:66:F6:A7:7A:42:3A:BA:66:61:22:B3:64 X509v3 Authority Key Identifier: keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/VwGWvDQ1yZ1m9qd6Qjq6ZmEis2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:1780::/29 2a12:8440::/29 2a12:8dc0::/29 Signature Algorithm: sha256WithRSAEncryption 2a:ad:dd:cc:ea:da:65:1d:92:95:ad:86:1b:fd:4c:fa:e6:a6: fc:f0:d6:0c:1c:51:9e:e4:68:f1:14:4a:35:0d:01:53:4d:3f: ec:12:3a:ca:b8:92:a6:e3:2d:60:5c:12:90:af:4b:89:11:af: df:f0:3e:1a:52:7f:00:a8:9c:0b:95:26:1d:a9:a7:d2:b0:5d: 53:7d:61:5a:be:46:1d:74:cf:ab:9d:97:6a:b5:c4:0c:f8:27: cb:49:eb:19:a2:e9:03:c3:ad:ff:ff:e5:b8:1b:41:11:8e:94: 02:b0:ad:85:34:97:32:77:5e:fc:47:24:78:7d:c5:d2:78:28: 29:c0:08:6f:11:c4:35:88:57:d7:40:36:8a:4c:78:28:a6:1a: c2:39:da:c4:86:06:76:a8:4c:87:cb:0f:d8:2e:48:06:dc:89: 2a:f6:9a:64:1c:7b:2c:0d:dd:94:76:ec:94:1f:a5:5d:46:fa: 1a:f2:65:fb:66:ea:e6:1a:c9:2b:37:4f:0a:99:ce:2a:07:fd: 1a:9b:34:78:3d:e0:d2:75:a3:a1:1d:13:ab:88:4f:ee:17:43: 99:3a:18:8f:4b:1a:df:3a:2e:54:68:ef:3d:10:60:50:16:6e: ca:d0:f6:00:70:aa:ef:65:77:e0:8d:91:ab:6f:71:53:43:a9: 5d:80:6f:86 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZqh3T02JxfKS7m+H/ISwqItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl ZWE2NzAwHhcNMjUxMTIwMTUyMzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzAxOTZiYzM0MzVjOTlkNjZmNmE3N2E0MjNhYmE2NjYxMjJiMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDzsYiBo1gSfyRIKfY9ZdYIvZYnG /SJSaDCEwop8jcpTYIeT2yxArIhr7mPxeIrmTck6KfKWNNdsU8bieygRZtC2kHwd 6DgmsFIOznhBqtrL+3zJem8eKnPKCEzOi+lXjjO7at6M/j7eeK885qQrKdqOSjNR o9aOnsVHjVFx5aAVFgvuVZOSI6Km+0QiHNJ963iqg3XNebbnnEaD+N5tQ2tlDzpO v5Z32fRZY8dWqUE2upgK0Igr/DelmB1LC8E821Jkn7yPH6XjWj8d69GurHQOQIeu kF21neanbTo2vkqSQJoE6drPPJZINLeH8iNRmDvyxJpM3L4s0RS5Kxs5CQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFcBlrw0NcmdZvanekI6umZhIrNkMB8GA1UdIwQY MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt NDQyNDFmZWMxYTlmLzEvVndHV3ZEUTF5WjFtOXFkNlFqcTZabUVpczJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKhIXgAMF AyoShEADBQMqEo3AMA0GCSqGSIb3DQEBCwUAA4IBAQAqrd3M6tplHZKVrYYb/Uz6 5qb88NYMHFGe5GjxFEo1DQFTTT/sEjrKuJKm4y1gXBKQr0uJEa/f8D4aUn8AqJwL lSYdqafSsF1TfWFavkYddM+rnZdqtcQM+CfLSesZoukDw63//+W4G0ERjpQCsK2F NJcyd178RyR4fcXSeCgpwAhvEcQ1iFfXQDaKTHgophrCOdrEhgZ2qEyHyw/YLkgG 3Ikq9ppkHHssDd2UduyUH6VdRvoa8mX7ZurmGskrN08Kmc4qB/0amzR4PeDSdaOh HROriE/uF0OZOhiPSxrfOi5UaO89EGBQFm7K0PYAcKrvZXfgjZGrb3FTQ6ldgG+G -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:54 2025 by rpki-client