This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rogFicyhoBXI9VUpVUKB16WJwho.roa File: rogFicyhoBXI9VUpVUKB16WJwho.roa (raw, json) Hash identifier: T+S1YPTIwHbMvO5LV4HQPTMZ96emOBltgjk8ZZieRyQ= Subject key identifier: AE:88:05:89:CC:A1:A0:15:C8:F5:55:29:55:42:81:D7:A5:89:C2:1A Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019A641659BBBD328054E98A852F0AC2030A Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rogFicyhoBXI9VUpVUKB16WJwho.roa Signing time: Sat 08 Nov 2025 15:29:37 +0000 ROA not before: Sat 08 Nov 2025 15:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204071 IP address blocks: 2a0f:7803:f6c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:64:16:59:bb:bd:32:80:54:e9:8a:85:2f:0a:c2:03:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Nov 8 15:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ae880589cca1a015c8f55529554281d7a589c21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:3d:c0:74:16:e0:fa:4f:c8:22:87:f5:e0: 10:de:9d:28:9d:9b:44:c8:2f:2c:79:55:83:8b:84: e0:e4:cd:80:51:8f:12:0e:89:6a:7e:86:d0:af:09: be:b8:e0:ad:7d:85:62:69:8d:d5:4d:a6:31:43:20: c7:ce:61:74:6e:87:7c:26:ac:5d:fa:02:cc:99:d5: 8f:da:0c:72:16:79:e0:73:6a:20:07:eb:7f:4b:3b: a6:cf:af:f7:9e:a9:de:ad:a5:d6:06:87:2e:7b:58: 51:89:a7:c3:bc:e6:a3:f1:f4:ca:19:ac:bd:ec:92: 44:62:dc:af:6b:0a:e2:a9:51:72:f8:c9:6d:9d:81: 36:01:68:1f:93:6f:2b:a2:13:92:44:e4:56:ef:75: c9:40:07:c2:f4:08:90:90:f1:54:28:89:1f:46:00: 45:55:51:f5:dd:12:86:08:e9:d3:1d:a9:f8:e5:fb: 14:3f:0a:e8:46:e7:2d:b5:92:a2:e9:01:2d:c6:3e: d8:6a:26:27:08:f3:0e:16:9e:9b:16:ac:79:51:f6: 34:a2:22:10:af:c3:3c:4b:ce:3c:cd:d1:7b:69:f4: 37:95:11:40:1b:7a:37:d4:90:c7:95:71:34:12:d8: 9f:79:1c:15:bc:1f:d1:cc:ba:c3:54:6c:7c:80:af: 59:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:88:05:89:CC:A1:A0:15:C8:F5:55:29:55:42:81:D7:A5:89:C2:1A X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rogFicyhoBXI9VUpVUKB16WJwho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:f6c0::/44 Signature Algorithm: sha256WithRSAEncryption a4:0b:31:eb:2c:d6:4c:11:a9:fd:1a:f6:90:91:69:2f:16:43: a8:a6:04:87:b3:32:a8:ef:86:5b:f8:48:a3:29:5e:84:ed:19: a6:a1:38:58:1a:91:81:51:79:d2:70:81:cd:96:d1:bd:55:f2: d0:83:33:7e:ef:38:7c:6a:12:6d:29:31:84:63:60:79:cf:e0: ab:64:b4:a6:ad:9a:10:1f:ea:a0:5c:94:aa:8f:fc:e0:97:6e: 8a:29:ec:e3:e2:e5:d0:43:be:3c:4d:cd:85:71:ae:79:50:b6: 1a:a6:16:96:e5:71:a8:3c:ed:8a:0b:3f:19:e8:76:38:25:37: 18:bd:02:f9:1b:0e:c7:81:5f:94:90:8b:d4:1b:ce:87:3d:20: 35:ec:25:d5:81:2d:1c:fc:db:f9:64:99:68:ce:80:9e:29:0a: f1:73:14:1c:b7:9a:47:a6:d0:85:82:97:b8:ca:c9:b2:ea:00: 13:6a:b7:39:aa:86:df:e2:08:37:ea:81:7e:c9:88:fd:84:fe: 29:c0:ff:24:ff:be:be:fc:b3:c1:47:23:60:77:56:3a:d1:c7: c1:02:82:d4:dd:0d:18:52:f1:51:19:fb:b0:ea:94:27:22:05: 8a:ab:cf:71:d4:d1:f0:73:cc:98:05:4e:12:c8:8b:03:b1:a3: 67:37:6f:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZpkFlm7vTKAVOmKhS8KwgMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjUxMTA4MTUyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTg4MDU4OWNjYTFhMDE1YzhmNTU1Mjk1NTQyODFkN2E1ODljMjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJI9wHQW4PpPyCKH9eAQ3p0onZtE yC8seVWDi4Tg5M2AUY8SDolqfobQrwm+uOCtfYViaY3VTaYxQyDHzmF0bod8Jqxd +gLMmdWP2gxyFnngc2ogB+t/Szumz6/3nqneraXWBocue1hRiafDvOaj8fTKGay9 7JJEYtyvawriqVFy+MltnYE2AWgfk28rohOSRORW73XJQAfC9AiQkPFUKIkfRgBF VVH13RKGCOnTHan45fsUPwroRucttZKi6QEtxj7YaiYnCPMOFp6bFqx5UfY0oiIQ r8M8S848zdF7afQ3lRFAG3o31JDHlXE0EtifeRwVvB/RzLrDVGx8gK9Z9QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK6IBYnMoaAVyPVVKVVCgdelicIaMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvcm9nRmljeWhvQlhJOVZVcFZVS0IxNldKd2hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/bA MA0GCSqGSIb3DQEBCwUAA4IBAQCkCzHrLNZMEan9GvaQkWkvFkOopgSHszKo74Zb +EijKV6E7RmmoThYGpGBUXnScIHNltG9VfLQgzN+7zh8ahJtKTGEY2B5z+CrZLSm rZoQH+qgXJSqj/zgl26KKezj4uXQQ748Tc2Fca55ULYaphaW5XGoPO2KCz8Z6HY4 JTcYvQL5Gw7HgV+UkIvUG86HPSA17CXVgS0c/Nv5ZJlozoCeKQrxcxQct5pHptCF gpe4ysmy6gATarc5qobf4gg36oF+yYj9hP4pwP8k/76+/LPBRyNgd1Y60cfBAoLU 3Q0YUvFRGfuw6pQnIgWKq89x1NHwc8yYBU4SyIsDsaNnN2++ -----END CERTIFICATE-----Generated at Thu Dec 4 07:22:21 2025 by rpki-client