This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/lJRQBm04jY6yBjiiCxUAbvgEZG8.roa File: lJRQBm04jY6yBjiiCxUAbvgEZG8.roa (raw, json) Hash identifier: uVoHiMNBMj4VPGZUtqH2rFuPgD0XXut+4TN81s9cnjM= Subject key identifier: 94:94:50:06:6D:38:8D:8E:B2:06:38:A2:0B:15:00:6E:F8:04:64:6F Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136 Certificate serial: 019B0E5C519CC682B22AED600FC67E2ABC3A Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/lJRQBm04jY6yBjiiCxUAbvgEZG8.roa Signing time: Thu 11 Dec 2025 17:01:29 +0000 ROA not before: Thu 11 Dec 2025 17:01:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214915 IP address blocks: 2a06:8ac0:200::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:51:9c:c6:82:b2:2a:ed:60:0f:c6:7e:2a:bc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136 Validity Not Before: Dec 11 17:01:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=949450066d388d8eb20638a20b15006ef804646f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:b0:9e:b1:be:5b:f4:54:42:e5:ca:3b:a8: 93:3b:46:6b:c9:25:ba:cf:ca:8f:24:ae:a5:88:16: c9:53:9a:8d:f4:a5:1d:ef:fe:98:b9:ae:da:f3:1b: f3:27:bb:69:55:78:a2:81:28:2f:49:11:8a:a2:df: 11:62:18:50:3a:4c:f2:c4:b8:24:de:3d:cf:45:5d: d8:75:85:bd:2b:07:1f:7c:4c:14:ed:df:e5:c2:74: 0f:78:b4:b1:4e:31:18:44:c8:f4:53:8a:5c:75:14: 5f:52:a9:3c:a4:95:68:c5:e3:10:de:4b:58:67:7c: 17:85:93:6f:57:3a:6a:71:44:d8:ef:b8:8d:c0:4d: be:39:fa:c9:a9:2e:e9:f7:82:ac:80:c7:27:be:62: e6:65:9a:a4:e8:ec:76:62:b4:f8:32:5a:80:79:ff: f0:38:ed:c0:b2:65:8b:03:6b:03:e6:83:ea:16:54: 4a:9d:11:72:be:8f:92:74:0b:0d:d7:40:ba:2a:59: b1:50:49:73:c2:7a:4b:a4:ea:db:e9:2a:77:57:79: 52:54:0e:cc:21:11:c3:60:47:d9:0c:61:a7:e5:76: 23:8f:55:e0:dd:1f:9d:20:75:0c:2e:01:08:60:8d: df:06:b1:32:1e:0a:39:55:1a:27:be:56:73:2f:2c: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:94:50:06:6D:38:8D:8E:B2:06:38:A2:0B:15:00:6E:F8:04:64:6F X509v3 Authority Key Identifier: keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/lJRQBm04jY6yBjiiCxUAbvgEZG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:8ac0:200::/44 Signature Algorithm: sha256WithRSAEncryption 79:a0:17:e0:da:28:7a:10:47:b0:a3:5a:50:13:ef:49:13:43: 69:4f:31:0f:34:7a:81:84:b5:cd:de:5f:be:b9:44:8f:09:4e: 0e:3b:e7:fa:3a:f4:50:c2:e4:56:16:24:ba:af:83:af:6c:61: 76:c9:06:a5:a8:50:2e:0c:ec:3b:b2:20:6b:bb:02:a1:41:2f: dc:6e:2a:25:65:39:bb:06:8e:6d:00:8a:4a:e7:57:5c:fe:14: 62:d9:cb:37:cb:25:42:76:d3:11:a1:1d:2c:d5:79:0f:8a:39: b4:3b:6b:46:76:61:aa:29:91:d9:32:e7:c9:93:3a:8c:9a:eb: ec:92:b2:9e:a2:41:3b:9b:a1:88:79:65:2b:b4:40:17:f1:7d: 3a:ad:9a:aa:97:3c:73:72:68:e3:dd:e8:1b:b3:5e:09:b6:32: 62:7f:22:67:84:2c:14:96:7a:ff:a7:b0:8d:80:b1:64:ff:61: ab:15:dc:27:2d:03:98:db:da:21:31:f9:97:95:63:72:a6:12: d4:e7:85:ed:e8:3c:5c:7d:2f:25:b0:9b:b2:52:02:07:86:55: 08:5c:b0:cb:0d:d7:45:69:ff:1f:22:1a:0f:5a:d5:49:da:69: af:ad:49:98:77:5e:69:d0:33:db:4a:a2:3b:02:c1:e6:64:e7: 31:b8:eb:44 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsOXFGcxoKyKu1gD8Z+Krw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhODQ2MDA2Y2Y4YjllMzg4ZjMxNDUxMzU4MDkyNTAyY2Vj YzExMzYwHhcNMjUxMjExMTcwMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDk0NTAwNjZkMzg4ZDhlYjIwNjM4YTIwYjE1MDA2ZWY4MDQ2NDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFWwnrG+W/RUQuXKO6iTO0ZrySW6 z8qPJK6liBbJU5qN9KUd7/6Yua7a8xvzJ7tpVXiigSgvSRGKot8RYhhQOkzyxLgk 3j3PRV3YdYW9KwcffEwU7d/lwnQPeLSxTjEYRMj0U4pcdRRfUqk8pJVoxeMQ3ktY Z3wXhZNvVzpqcUTY77iNwE2+OfrJqS7p94KsgMcnvmLmZZqk6Ox2YrT4MlqAef/w OO3AsmWLA2sD5oPqFlRKnRFyvo+SdAsN10C6KlmxUElzwnpLpOrb6Sp3V3lSVA7M IRHDYEfZDGGn5XYjj1Xg3R+dIHUMLgEIYI3fBrEyHgo5VRonvlZzLyy2pwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJSUUAZtOI2OsgY4ogsVAG74BGRvMB8GA1UdIwQY MBaAFOqEYAbPi544jzFFE1gJJQLOzBE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEt Zjc0Y2NjYzRlMGExLzEvbEpSUUJtMDRqWTZ5QmppaUN4VUFidmdFWkc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEtZjc0Y2NjYzRlMGEx LzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgaKwAIA MA0GCSqGSIb3DQEBCwUAA4IBAQB5oBfg2ih6EEewo1pQE+9JE0NpTzEPNHqBhLXN 3l++uUSPCU4OO+f6OvRQwuRWFiS6r4OvbGF2yQalqFAuDOw7siBruwKhQS/cbiol ZTm7Bo5tAIpK51dc/hRi2cs3yyVCdtMRoR0s1XkPijm0O2tGdmGqKZHZMufJkzqM muvskrKeokE7m6GIeWUrtEAX8X06rZqqlzxzcmjj3egbs14JtjJifyJnhCwUlnr/ p7CNgLFk/2GrFdwnLQOY29ohMfmXlWNyphLU54Xt6DxcfS8lsJuyUgIHhlUIXLDL DddFaf8fIhoPWtVJ2mmvrUmYd15p0DPbSqI7AsHmZOcxuOtE -----END CERTIFICATE-----Generated at Tue Dec 16 09:20:56 2025 by rpki-client