This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Rbj9Fq66bk1clPeh-5OWtPLV7hQ.roa File: Rbj9Fq66bk1clPeh-5OWtPLV7hQ.roa (raw, json) Hash identifier: P/yAzEA+B3t5ieOaVvkmnFL9ioFgYBNjeAr2czWZQYY= Subject key identifier: 45:B8:FD:16:AE:BA:6E:4D:5C:94:F7:A1:FB:93:96:B4:F2:D5:EE:14 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019A78E97920D592C048D36013C9CED63E7E Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Rbj9Fq66bk1clPeh-5OWtPLV7hQ.roa Signing time: Wed 12 Nov 2025 16:32:38 +0000 ROA not before: Wed 12 Nov 2025 16:32:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203923 IP address blocks: 2a0f:7802:e300::/40 maxlen: 48 2a0f:7803:fb30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:e9:79:20:d5:92:c0:48:d3:60:13:c9:ce:d6:3e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Nov 12 16:32:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=45b8fd16aeba6e4d5c94f7a1fb9396b4f2d5ee14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:b5:d4:e0:14:e9:40:ed:50:93:91:c2:bf: 71:77:81:9e:55:7b:96:7f:54:e9:6c:e8:6f:84:f4: 23:7d:63:fa:e6:4a:75:9e:2a:5c:a5:07:07:c5:54: 71:64:15:40:f4:47:7f:8c:9e:c3:57:ad:a4:90:48: 1c:39:c7:1d:1e:4f:64:eb:1f:db:59:9c:59:93:f2: 2b:51:bb:d0:f6:92:a7:cc:e1:0f:ce:e4:5d:39:70: 60:fe:f9:fe:4a:54:80:67:f6:19:28:c7:30:7b:82: f5:81:a6:45:49:b7:d4:05:f2:82:b6:5b:a4:03:8b: 94:75:cd:45:33:55:e2:29:53:88:30:ca:1b:7b:6f: a1:23:ad:4e:02:c4:10:40:33:35:25:5e:ee:bd:16: 78:19:b8:2d:a6:99:0d:29:37:18:5b:51:ea:b2:06: c2:32:f6:e9:80:bc:78:74:eb:b9:eb:c5:94:4f:3b: 0c:1f:e1:bc:8b:fb:11:0d:f3:7d:a6:33:89:60:29: 2a:21:71:82:94:28:c7:9e:1f:8e:79:bf:17:3b:8c: 06:dd:74:2c:46:2d:9d:b1:cd:ff:45:22:a0:82:7e: 45:14:94:9e:25:7e:6a:dd:3f:e0:69:fa:bf:06:dd: 48:e4:21:22:ab:dc:0d:1d:ab:62:1b:f0:f4:21:a5: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B8:FD:16:AE:BA:6E:4D:5C:94:F7:A1:FB:93:96:B4:F2:D5:EE:14 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Rbj9Fq66bk1clPeh-5OWtPLV7hQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e300::/40 2a0f:7803:fb30::/44 Signature Algorithm: sha256WithRSAEncryption ae:3d:35:fe:31:ae:09:a7:5e:64:7e:41:99:48:cd:16:d4:68: 5b:3b:f9:f5:45:62:56:d4:76:c0:bf:db:f5:c5:01:53:67:9f: 17:bc:52:40:91:2a:1f:62:5e:67:f8:8b:9e:f5:c6:be:63:e4: 36:e9:86:2a:15:56:e4:2b:79:6f:1a:d8:c8:6a:01:e1:6e:10: 04:3b:a8:18:1b:47:37:f1:84:76:63:5b:47:02:88:07:bf:06: d8:51:ed:41:12:cb:e8:e8:1a:e6:0c:02:e9:32:e5:bb:d3:88: 97:af:84:5a:00:f1:89:98:58:d3:c2:bc:16:6d:99:a5:08:4c: ce:42:70:65:b2:c7:73:41:db:9a:bc:45:b0:f1:58:1b:cd:fa: ca:57:83:1f:56:87:e4:fb:c2:d5:35:9e:23:57:73:ca:35:ba: 57:f1:f8:72:73:2e:d2:62:99:f8:1c:a3:25:de:84:e9:24:aa: 4b:cd:75:97:b6:53:75:4f:7c:58:44:50:fd:d4:a4:2f:e9:7e: df:2e:da:4e:66:ca:7a:59:a3:e9:4f:09:7f:ff:7b:04:a5:1b: 0b:63:80:5d:0f:14:c6:0b:4b:3c:e8:ff:ef:58:6a:6e:33:33: da:c0:0e:ae:51:91:39:f8:cb:71:ba:62:8f:93:1a:8e:d1:b3: 87:61:c8:07 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZp46Xkg1ZLASNNgE8nO1j5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjUxMTEyMTYzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWI4ZmQxNmFlYmE2ZTRkNWM5NGY3YTFmYjkzOTZiNGYyZDVlZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcO11OAU6UDtUJORwr9xd4GeVXuW f1TpbOhvhPQjfWP65kp1nipcpQcHxVRxZBVA9Ed/jJ7DV62kkEgcOccdHk9k6x/b WZxZk/IrUbvQ9pKnzOEPzuRdOXBg/vn+SlSAZ/YZKMcwe4L1gaZFSbfUBfKCtluk A4uUdc1FM1XiKVOIMMobe2+hI61OAsQQQDM1JV7uvRZ4GbgtppkNKTcYW1HqsgbC MvbpgLx4dOu568WUTzsMH+G8i/sRDfN9pjOJYCkqIXGClCjHnh+Oeb8XO4wG3XQs Ri2dsc3/RSKggn5FFJSeJX5q3T/gafq/Bt1I5CEiq9wNHatiG/D0IaW2QwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFEW4/Rauum5NXJT3ofuTlrTy1e4UMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvUmJqOUZxNjZiazFjbFBlaC01T1d0UExWN2hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKg94AuMD BwQqD3gD+zAwDQYJKoZIhvcNAQELBQADggEBAK49Nf4xrgmnXmR+QZlIzRbUaFs7 +fVFYlbUdsC/2/XFAVNnnxe8UkCRKh9iXmf4i571xr5j5DbphioVVuQreW8a2Mhq AeFuEAQ7qBgbRzfxhHZjW0cCiAe/BthR7UESy+joGuYMAuky5bvTiJevhFoA8YmY WNPCvBZtmaUITM5CcGWyx3NB25q8RbDxWBvN+spXgx9Wh+T7wtU1niNXc8o1ulfx +HJzLtJimfgcoyXehOkkqkvNdZe2U3VPfFhEUP3UpC/pft8u2k5mynpZo+lPCX// ewSlGwtjgF0PFMYLSzzo/+9Yam4zM9rADq5RkTn4y3G6Yo+TGo7Rs4dhyAc= -----END CERTIFICATE-----Generated at Sun Dec 7 17:37:09 2025 by rpki-client