This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/a2fnNZYaC7tSvST6yxN7zVnr8rk.roa File: a2fnNZYaC7tSvST6yxN7zVnr8rk.roa (raw, json) Hash identifier: B9FNmdbIQmgv4vbLGVGZQBmqWpabl1hGlyBuKo/Sams= Subject key identifier: 6B:67:E7:35:96:1A:0B:BB:52:BD:24:FA:CB:13:7B:CD:59:EB:F2:B9 Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Certificate serial: 019AD9D296CD89914D329D39A4E9336072B8 Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/a2fnNZYaC7tSvST6yxN7zVnr8rk.roa Signing time: Mon 01 Dec 2025 12:10:48 +0000 ROA not before: Mon 01 Dec 2025 12:10:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207471 IP address blocks: 150.40.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:d2:96:cd:89:91:4d:32:9d:39:a4:e9:33:60:72:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Validity Not Before: Dec 1 12:10:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6b67e735961a0bbb52bd24facb137bcd59ebf2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:12:71:78:c7:ab:7f:d3:44:1c:e8:bc:59: c0:c1:fa:30:c6:23:21:89:76:1f:95:13:0f:2a:07: 28:71:c1:df:76:93:af:c6:17:6f:f9:97:d1:61:23: 53:e0:06:48:30:e1:96:6b:2b:91:7b:2f:de:20:4e: fd:0e:63:ad:84:16:4e:84:94:e8:c1:b1:cd:25:7d: e4:b0:bb:b0:88:71:60:9e:8c:ed:0d:d3:a4:81:2a: c8:8c:31:9d:1a:57:a3:f2:72:32:16:33:3b:fd:a6: 19:83:24:ba:95:2e:98:4d:8a:b2:da:04:09:60:10: 9e:57:16:1f:b9:fb:b3:21:a9:47:ff:4a:95:bd:a3: f5:e0:64:32:0c:7b:a0:55:6c:66:26:fe:d5:5a:6f: e5:9d:25:75:b1:4a:cb:d6:cc:09:82:d5:ad:71:62: 86:95:ef:5b:25:15:37:61:5f:0b:ec:24:dd:30:21: 27:83:4f:56:a3:19:3d:65:33:f6:0d:70:94:70:9a: 44:f9:16:a5:5a:db:7b:c2:97:29:4d:d2:17:92:4d: 0c:6d:2f:31:1f:15:77:e4:8b:76:05:e1:5f:d1:dd: 37:ed:79:ef:12:f0:f9:f5:fe:c1:bd:78:dd:66:a9: 6c:2a:d5:69:15:e9:9c:06:84:a2:3d:2d:ab:49:e5: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:67:E7:35:96:1A:0B:BB:52:BD:24:FA:CB:13:7B:CD:59:EB:F2:B9 X509v3 Authority Key Identifier: keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/a2fnNZYaC7tSvST6yxN7zVnr8rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.40.100.0/24 Signature Algorithm: sha256WithRSAEncryption 48:1f:6d:50:85:93:67:55:ec:29:e2:54:13:df:8c:ce:6f:a5: fb:60:d9:f4:80:d4:17:c1:1b:71:f1:04:0a:96:9f:58:e1:2a: 7a:1e:b5:b5:12:f7:98:76:f3:26:d9:9d:38:ce:e5:9d:41:36: 64:dc:98:e5:7f:f5:ec:27:6d:4c:dd:23:1f:f8:a7:24:de:12: 49:4e:27:58:1a:50:34:b5:f7:8a:ac:72:48:ce:85:67:fa:44: 07:34:1f:00:86:91:dc:a6:ef:1f:81:18:7c:9c:75:fd:47:2b: 7e:b8:28:a2:5c:6c:df:e4:d4:5a:cc:bd:ab:7d:59:97:f6:d0: 3c:4e:54:6c:7e:7b:94:86:4d:6f:71:cf:9a:9b:bb:8b:ec:04: a9:43:3b:7c:1b:08:3b:b5:89:52:3b:63:e8:2f:6f:9b:2e:8a: 1a:3b:45:26:e9:86:ef:92:ec:63:78:64:2b:8f:19:00:c4:8d: bc:64:6b:06:3e:d7:c2:77:4f:a8:3f:cd:96:3e:d2:af:a2:da: 9a:fb:aa:83:fe:99:20:15:9e:6c:f1:dc:c0:fd:9a:72:89:d2: 8e:d6:35:97:09:4e:42:0d:ea:56:ce:fa:1d:5a:87:b4:c8:cb: 2a:c8:15:23:36:56:74:12:82:0c:8d:22:a7:d5:6e:ca:c9:8b: 24:be:60:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZ0pbNiZFNMp05pOkzYHK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh NDYzZDQwHhcNMjUxMjAxMTIxMDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjY3ZTczNTk2MWEwYmJiNTJiZDI0ZmFjYjEzN2JjZDU5ZWJmMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SwScXjHq3/TRBzovFnAwfowxiMh iXYflRMPKgcoccHfdpOvxhdv+ZfRYSNT4AZIMOGWayuRey/eIE79DmOthBZOhJTo wbHNJX3ksLuwiHFgnoztDdOkgSrIjDGdGlej8nIyFjM7/aYZgyS6lS6YTYqy2gQJ YBCeVxYfufuzIalH/0qVvaP14GQyDHugVWxmJv7VWm/lnSV1sUrL1swJgtWtcWKG le9bJRU3YV8L7CTdMCEng09Woxk9ZTP2DXCUcJpE+RalWtt7wpcpTdIXkk0MbS8x HxV35It2BeFf0d037XnvEvD59f7BvXjdZqlsKtVpFemcBoSiPS2rSeUBUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGtn5zWWGgu7Ur0k+ssTe81Z6/K5MB8GA1UdIwQY MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt N2QxMzQ5ODBjNWJlLzEvYTJmbk5aWWFDN3RTdlNUNnl4Tjd6Vm5yOHJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlihkMA0G CSqGSIb3DQEBCwUAA4IBAQBIH21QhZNnVewp4lQT34zOb6X7YNn0gNQXwRtx8QQK lp9Y4Sp6HrW1EveYdvMm2Z04zuWdQTZk3Jjlf/XsJ21M3SMf+Kck3hJJTidYGlA0 tfeKrHJIzoVn+kQHNB8AhpHcpu8fgRh8nHX9Ryt+uCiiXGzf5NRazL2rfVmX9tA8 TlRsfnuUhk1vcc+am7uL7ASpQzt8Gwg7tYlSO2PoL2+bLooaO0Um6YbvkuxjeGQr jxkAxI28ZGsGPtfCd0+oP82WPtKvotqa+6qD/pkgFZ5s8dzA/ZpyidKO1jWXCU5C DepWzvodWoe0yMsqyBUjNlZ0EoIMjSKn1W7KyYskvmAw -----END CERTIFICATE-----Generated at Sun Dec 7 04:11:20 2025 by rpki-client