This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/hsrZ6XM9PioaE4l9jyYmDx5X-FQ.roa File: hsrZ6XM9PioaE4l9jyYmDx5X-FQ.roa (raw, json) Hash identifier: RWJfQSB8A4sKYXUgvundNKGRQh2z3Jr8ELEdZVhSgCY= Subject key identifier: 86:CA:D9:E9:73:3D:3E:2A:1A:13:89:7D:8F:26:26:0F:1E:57:F8:54 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019A6F37786CD5B5822DA7505CB462EB9618 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/hsrZ6XM9PioaE4l9jyYmDx5X-FQ.roa Signing time: Mon 10 Nov 2025 19:21:37 +0000 ROA not before: Mon 10 Nov 2025 19:21:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50113 IP address blocks: 2a0c:5d00:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6f:37:78:6c:d5:b5:82:2d:a7:50:5c:b4:62:eb:96:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Nov 10 19:21:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=86cad9e9733d3e2a1a13897d8f26260f1e57f854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:29:ae:a0:a8:eb:ea:3f:5a:7c:b2:8c:10: 82:ef:2a:43:b8:ec:d0:b1:c7:3c:6c:54:71:33:5c: 2e:3c:fa:70:cc:c5:52:62:6f:dc:af:f8:ae:13:e5: fe:9e:59:2b:e8:59:ba:3f:0b:8e:7e:69:0d:83:e3: 57:34:6a:a6:25:80:d6:f8:78:8e:c3:8e:d8:4f:73: df:3b:ca:9a:34:49:37:27:48:85:c5:23:7d:08:72: f6:a3:28:d5:8f:f7:c6:e0:3b:df:f9:0a:d1:14:22: 71:f5:2b:ea:1f:0c:c6:30:92:c7:2c:16:c0:33:d1: de:8f:30:3e:a2:82:06:1a:58:fd:25:b1:88:97:ae: 43:96:cd:1e:2e:95:fb:25:a9:04:6f:7d:94:ce:2a: a4:df:e2:f7:f6:bd:4d:85:87:8d:96:fa:47:cc:2a: f8:25:ae:7d:70:35:ea:c2:86:74:6f:f7:7f:0e:eb: 2a:12:20:08:54:10:fe:56:de:3b:f0:b5:3c:9b:cd: 04:37:6e:81:c8:38:d2:16:d3:0a:03:63:67:14:cf: ff:bb:20:d1:75:3a:12:d0:4f:ce:80:bf:b6:7c:9a: d0:e4:b2:7b:94:2a:36:d1:46:5b:12:28:f6:f2:60: 48:8d:e5:30:bc:20:49:f8:3e:7d:f0:d6:b1:3a:96: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CA:D9:E9:73:3D:3E:2A:1A:13:89:7D:8F:26:26:0F:1E:57:F8:54 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/hsrZ6XM9PioaE4l9jyYmDx5X-FQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:5d00:1001::/48 Signature Algorithm: sha256WithRSAEncryption 6b:1f:84:26:d8:6d:0f:59:92:6c:e1:85:54:98:95:84:31:3f: 4d:4c:90:0f:e0:4f:ce:ba:a5:99:d0:33:f1:b7:52:bd:a1:4d: c1:b9:15:bf:50:f6:28:02:e4:96:ce:93:f2:ae:c6:a5:aa:d1: 89:6c:dd:b9:53:3e:6b:e6:99:ec:54:ed:00:c1:b8:0c:7d:a6: fc:07:36:3f:36:91:8a:88:2a:7d:a1:2e:93:6a:bf:d4:22:1d: b7:17:3c:ae:e6:ca:4c:48:0f:22:1d:0d:e6:80:8c:47:ba:91: 7e:12:54:18:90:a4:8f:a9:65:78:d5:81:f1:d4:5d:92:93:8e: 36:92:26:e9:7e:61:6e:f5:ea:89:92:f9:19:b1:69:54:9c:f8: bf:ab:06:ae:05:88:53:ba:1b:9f:3c:3d:31:c1:f9:7b:46:e6: 49:00:b0:36:e5:e4:57:b6:65:aa:85:c7:fb:9f:d6:fe:d5:38: f6:00:79:c2:ae:c2:04:a2:37:ce:49:fc:0f:ba:21:76:2b:6e: e3:15:be:a3:eb:aa:18:74:69:bc:8a:94:0e:1d:60:39:3f:fc: 4f:c3:da:19:3d:9c:79:bb:66:dc:d7:f1:d3:87:71:d0:4c:88: c1:cb:4c:cf:78:9f:14:00:20:75:5a:f1:18:4b:72:b9:02:bb: 60:d5:77:ba -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZpvN3hs1bWCLadQXLRi65YYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjUxMTEwMTkyMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmNhZDllOTczM2QzZTJhMWExMzg5N2Q4ZjI2MjYwZjFlNTdmODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV4prqCo6+o/WnyyjBCC7ypDuOzQ scc8bFRxM1wuPPpwzMVSYm/cr/iuE+X+nlkr6Fm6PwuOfmkNg+NXNGqmJYDW+HiO w47YT3PfO8qaNEk3J0iFxSN9CHL2oyjVj/fG4Dvf+QrRFCJx9SvqHwzGMJLHLBbA M9HejzA+ooIGGlj9JbGIl65Dls0eLpX7JakEb32Uziqk3+L39r1NhYeNlvpHzCr4 Ja59cDXqwoZ0b/d/DusqEiAIVBD+Vt478LU8m80EN26ByDjSFtMKA2NnFM//uyDR dToS0E/OgL+2fJrQ5LJ7lCo20UZbEij28mBIjeUwvCBJ+D598NaxOpb+6wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIbK2elzPT4qGhOJfY8mJg8eV/hUMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvaHNyWjZYTTlQaW9hRTRsOWp5WW1EeDVYLUZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxdABAB MA0GCSqGSIb3DQEBCwUAA4IBAQBrH4Qm2G0PWZJs4YVUmJWEMT9NTJAP4E/OuqWZ 0DPxt1K9oU3BuRW/UPYoAuSWzpPyrsalqtGJbN25Uz5r5pnsVO0AwbgMfab8BzY/ NpGKiCp9oS6Tar/UIh23Fzyu5spMSA8iHQ3mgIxHupF+ElQYkKSPqWV41YHx1F2S k442kibpfmFu9eqJkvkZsWlUnPi/qwauBYhTuhufPD0xwfl7RuZJALA25eRXtmWq hcf7n9b+1Tj2AHnCrsIEojfOSfwPuiF2K27jFb6j66oYdGm8ipQOHWA5P/xPw9oZ PZx5u2bc1/HTh3HQTIjBy0zPeJ8UACB1WvEYS3K5Artg1Xe6 -----END CERTIFICATE-----Generated at Fri Dec 5 23:20:10 2025 by rpki-client