This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/Mmq2k4rDZVQ6_RZ6xEg6s_CKyQI.roa File: Mmq2k4rDZVQ6_RZ6xEg6s_CKyQI.roa (raw, json) Hash identifier: QoV5X7trUXhZYeLInnoKWzjWSqN0CR1PU587z2IB9wY= Subject key identifier: 32:6A:B6:93:8A:C3:65:54:3A:FD:16:7A:C4:48:3A:B3:F0:8A:C9:02 Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019B0CD2A3CB0FDA28D4C2D3EAFB30207A8B Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/Mmq2k4rDZVQ6_RZ6xEg6s_CKyQI.roa Signing time: Thu 11 Dec 2025 09:51:29 +0000 ROA not before: Thu 11 Dec 2025 09:51:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216283 IP address blocks: 2a14:ae00:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:d2:a3:cb:0f:da:28:d4:c2:d3:ea:fb:30:20:7a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Dec 11 09:51:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=326ab6938ac365543afd167ac4483ab3f08ac902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:81:9a:62:92:d1:68:3b:bb:a6:a9:24:e9: cf:d9:70:56:72:f2:44:31:68:99:c9:09:78:92:d1: 09:5f:ff:a1:57:3b:2b:07:61:a4:bb:d9:d8:00:54: 8d:ea:aa:fc:3c:93:f7:bc:4a:20:1c:be:a6:47:2b: 9e:cf:9e:91:0d:1c:a7:e3:d5:3e:c0:df:40:f1:88: 7d:2d:15:bf:16:f5:7f:4b:f3:bd:a2:88:97:1e:69: 22:df:c7:93:6f:de:2d:87:39:b7:bd:cc:32:88:fb: f5:71:40:5f:c0:3f:2b:1e:d1:86:01:aa:72:3d:d6: 21:c8:19:c7:a3:06:17:33:31:9e:96:e9:81:12:f5: 71:bf:99:11:e8:f8:22:98:42:3c:83:08:41:ca:61: b2:e4:6b:01:a6:bc:82:1e:6a:5c:2d:9a:69:e2:6d: d3:4d:97:63:5c:db:2a:80:c4:6a:33:95:93:70:b3: 2e:bc:ff:6d:be:78:b9:65:5f:e8:72:9d:b3:e4:3a: 3e:90:0e:f0:45:f4:e8:26:17:75:aa:6f:c5:32:d4: ac:25:c8:aa:ae:e4:80:2d:c7:fb:82:a8:97:4a:79: c5:f9:b7:66:11:4b:1e:c0:7f:1e:ae:b7:df:76:c1: a9:c3:9e:2d:b9:52:92:ac:53:be:8e:35:eb:09:18: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6A:B6:93:8A:C3:65:54:3A:FD:16:7A:C4:48:3A:B3:F0:8A:C9:02 X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/Mmq2k4rDZVQ6_RZ6xEg6s_CKyQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ae00:a::/48 Signature Algorithm: sha256WithRSAEncryption 4d:5f:f1:94:13:0f:ef:bc:4e:0e:ca:85:b0:bf:97:67:21:d4: 2c:c1:bc:d2:c4:b7:30:82:05:2b:37:ff:28:c1:e4:2c:f1:e5: cc:e8:8d:71:ac:81:64:1a:c0:03:e7:75:1a:98:20:bb:0e:73: 1a:47:d8:11:45:74:8d:fa:4d:0a:b3:78:f4:98:3f:f6:e9:7d: 6b:50:0d:14:d5:c0:4b:e8:26:21:e4:a1:91:e1:65:f4:3f:ad: d8:62:62:55:57:29:db:cf:82:9c:0c:56:de:c0:c9:e6:1c:3a: 82:24:ae:22:86:35:0b:25:fc:f3:5c:f8:5e:92:6a:c0:4f:4e: c7:90:f9:e6:45:09:de:51:7c:d2:17:d3:42:ca:12:67:9b:5c: 4b:86:48:7b:19:c1:de:d8:d1:5b:e6:8a:4d:5c:c4:6b:ac:b7: 54:ba:85:62:e4:bf:94:73:a3:cc:df:93:8f:2c:c5:99:e2:7a: 66:54:88:3d:2e:ca:1e:b6:5a:0b:2e:9a:86:a4:06:a5:2e:84: 9f:bc:ca:3b:65:a7:92:70:07:72:11:62:ac:32:14:d6:83:50: 08:55:49:eb:40:f3:0f:62:cd:ce:f5:fa:6a:5c:0e:f8:74:49: e4:58:4c:39:ed:0b:46:94:18:46:d4:8b:f6:5a:de:92:35:24: f4:df:cb:ec -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsM0qPLD9oo1MLT6vswIHqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjUxMjExMDk1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjZhYjY5MzhhYzM2NTU0M2FmZDE2N2FjNDQ4M2FiM2YwOGFjOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1WBmmKS0Wg7u6apJOnP2XBWcvJE MWiZyQl4ktEJX/+hVzsrB2Gku9nYAFSN6qr8PJP3vEogHL6mRyuez56RDRyn49U+ wN9A8Yh9LRW/FvV/S/O9ooiXHmki38eTb94thzm3vcwyiPv1cUBfwD8rHtGGAapy PdYhyBnHowYXMzGelumBEvVxv5kR6PgimEI8gwhBymGy5GsBpryCHmpcLZpp4m3T TZdjXNsqgMRqM5WTcLMuvP9tvni5ZV/ocp2z5Do+kA7wRfToJhd1qm/FMtSsJciq ruSALcf7gqiXSnnF+bdmEUsewH8errffdsGpw54tuVKSrFO+jjXrCRhNJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDJqtpOKw2VUOv0WesRIOrPwiskCMB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvTW1xMms0ckRaVlE2X1JaNnhFZzZzX0NLeVFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSuAAAK MA0GCSqGSIb3DQEBCwUAA4IBAQBNX/GUEw/vvE4OyoWwv5dnIdQswbzSxLcwggUr N/8oweQs8eXM6I1xrIFkGsAD53UamCC7DnMaR9gRRXSN+k0Ks3j0mD/26X1rUA0U 1cBL6CYh5KGR4WX0P63YYmJVVynbz4KcDFbewMnmHDqCJK4ihjULJfzzXPhekmrA T07HkPnmRQneUXzSF9NCyhJnm1xLhkh7GcHe2NFb5opNXMRrrLdUuoVi5L+Uc6PM 35OPLMWZ4npmVIg9LsoetloLLpqGpAalLoSfvMo7ZaeScAdyEWKsMhTWg1AIVUnr QPMPYs3O9fpqXA74dEnkWEw57QtGlBhG1Iv2Wt6SNST038vs -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:23 2025 by rpki-client