This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5u0bJBwb1IFw32NidAmolWIhFaI.roa File: 5u0bJBwb1IFw32NidAmolWIhFaI.roa (raw, json) Hash identifier: dJEiHHd9I3F9OEiEg7idS0VieEQNIhk5BxiOm8SgeYI= Subject key identifier: E6:ED:1B:24:1C:1B:D4:81:70:DF:63:62:74:09:A8:95:62:21:15:A2 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019AE925F112C034D0639C41BFDF5C1420AF Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5u0bJBwb1IFw32NidAmolWIhFaI.roa Signing time: Thu 04 Dec 2025 11:36:09 +0000 ROA not before: Thu 04 Dec 2025 11:36:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213505 IP address blocks: 2a09:6281::/32 maxlen: 32 2a10:4106::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:25:f1:12:c0:34:d0:63:9c:41:bf:df:5c:14:20:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Dec 4 11:36:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e6ed1b241c1bd48170df63627409a895622115a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:66:0f:c8:71:e5:4a:43:97:74:4c:2a:b7: 84:ee:16:17:c8:10:44:c1:03:cb:db:78:91:39:84: 8d:d4:01:58:67:1b:eb:92:da:b3:29:62:d8:ab:e2: ee:72:fb:72:4f:77:7b:25:19:3c:48:1e:05:64:5e: 83:92:b5:84:13:e8:76:1e:c7:42:7f:87:28:8c:d5: 89:6c:bb:3e:a1:0c:eb:90:6c:39:2b:e0:16:f8:c1: 5f:e4:36:04:53:68:28:4d:d9:ac:c0:ef:3f:ec:f9: 8f:02:ee:08:68:93:18:a5:66:7a:15:23:37:2f:69: d4:09:55:cd:40:05:97:ba:6e:02:53:3b:e1:9d:b8: f8:f2:76:e4:ec:22:47:f5:49:39:12:ee:4b:d3:61: 0f:c0:09:3f:1f:82:16:76:d0:f6:22:97:c4:8a:34: 79:92:bc:a3:fc:4d:e2:26:25:be:d6:55:7c:fb:31: 94:38:1c:55:af:0f:2f:c0:72:db:cd:c2:a7:39:30: 9d:ba:a2:45:c8:73:94:d4:37:11:ca:7e:99:9a:54: 12:61:88:5f:23:10:c0:c5:87:56:24:0c:fd:d4:99: 7a:3b:a4:4b:1c:cb:35:54:db:31:d4:0d:f8:46:fd: 01:dd:92:c1:c8:a7:f7:84:76:39:8c:44:23:5b:ba: 46:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:ED:1B:24:1C:1B:D4:81:70:DF:63:62:74:09:A8:95:62:21:15:A2 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5u0bJBwb1IFw32NidAmolWIhFaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:6281::/32 2a10:4106::/32 Signature Algorithm: sha256WithRSAEncryption 26:84:52:f5:ac:ba:5c:1f:32:f0:4d:40:0b:4a:18:9b:3b:08: 6d:66:3d:a8:5d:29:17:0b:50:05:ca:55:16:ac:a9:69:b9:7b: 20:26:e3:54:e9:d8:58:49:5c:25:6e:62:fd:38:38:b7:0a:c5: c9:06:49:05:a2:61:a0:d0:53:36:4c:e0:8d:86:40:ff:c5:a7: a4:33:2c:c5:6d:f4:4a:13:62:05:e8:4a:4b:e8:ed:ae:df:1a: 1c:53:e4:ef:85:92:6d:b4:e9:60:6b:49:29:71:11:e6:b6:e8: c9:58:56:57:f9:46:32:ee:35:3e:6c:72:dc:b8:7f:52:2e:8e: 72:b3:46:1f:08:ac:1e:7b:72:dd:79:00:55:fc:99:c6:63:b8: ea:52:3f:6d:d2:d0:ff:58:d9:0b:98:2b:e6:27:33:8b:75:1e: 55:e3:82:6d:70:e3:c2:61:3d:44:21:6f:11:8f:44:80:02:c8: 6a:a4:11:cc:e9:08:9d:d4:88:04:d2:c6:f5:de:a8:d4:c0:63: fd:a1:05:93:27:4b:e3:a4:28:39:b0:02:5f:5d:20:7c:cc:2d: 1d:10:f6:e9:08:73:8a:d9:2b:ee:ff:94:9e:f5:fa:48:55:c5: 4d:3b:8e:69:a0:4a:b2:02:c2:f4:34:cf:90:75:53:b5:f0:22: 94:02:7d:46 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZrpJfESwDTQY5xBv99cFCCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjUxMjA0MTEzNjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmVkMWIyNDFjMWJkNDgxNzBkZjYzNjI3NDA5YTg5NTYyMjExNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTlmD8hx5UpDl3RMKreE7hYXyBBE wQPL23iROYSN1AFYZxvrktqzKWLYq+LucvtyT3d7JRk8SB4FZF6DkrWEE+h2HsdC f4cojNWJbLs+oQzrkGw5K+AW+MFf5DYEU2goTdmswO8/7PmPAu4IaJMYpWZ6FSM3 L2nUCVXNQAWXum4CUzvhnbj48nbk7CJH9Uk5Eu5L02EPwAk/H4IWdtD2IpfEijR5 kryj/E3iJiW+1lV8+zGUOBxVrw8vwHLbzcKnOTCduqJFyHOU1DcRyn6ZmlQSYYhf IxDAxYdWJAz91Jl6O6RLHMs1VNsx1A34Rv0B3ZLByKf3hHY5jEQjW7pGSwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFObtGyQcG9SBcN9jYnQJqJViIRWiMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvNXUwYkpCd2IxSUZ3MzJOaWRBbW9sV0loRmFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgligQMF ACoQQQYwDQYJKoZIhvcNAQELBQADggEBACaEUvWsulwfMvBNQAtKGJs7CG1mPahd KRcLUAXKVRasqWm5eyAm41Tp2FhJXCVuYv04OLcKxckGSQWiYaDQUzZM4I2GQP/F p6QzLMVt9EoTYgXoSkvo7a7fGhxT5O+Fkm206WBrSSlxEea26MlYVlf5RjLuNT5s cty4f1IujnKzRh8IrB57ct15AFX8mcZjuOpSP23S0P9Y2QuYK+YnM4t1HlXjgm1w 48JhPUQhbxGPRIACyGqkEczpCJ3UiATSxvXeqNTAY/2hBZMnS+OkKDmwAl9dIHzM LR0Q9ukIc4rZK+7/lJ71+khVxU07jmmgSrICwvQ0z5B1U7XwIpQCfUY= -----END CERTIFICATE-----Generated at Fri Dec 5 08:38:07 2025 by rpki-client