This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GeNKTC7JCr6EEqz--ywBw-x7KqU.roa File: GeNKTC7JCr6EEqz--ywBw-x7KqU.roa (raw, json) Hash identifier: P5nm2cZOFFalktAt8+oj3wNrv5k5ojBNagCsFHi5bQM= Subject key identifier: 19:E3:4A:4C:2E:C9:0A:BE:84:12:AC:FE:FB:2C:01:C3:EC:7B:2A:A5 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019AC9F725DC3D1572A535EDAB3CACCFE440 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GeNKTC7JCr6EEqz--ywBw-x7KqU.roa Signing time: Fri 28 Nov 2025 10:16:48 +0000 ROA not before: Fri 28 Nov 2025 10:16:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215715 IP address blocks: 2a0c:9a40:8adc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:f7:25:dc:3d:15:72:a5:35:ed:ab:3c:ac:cf:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Nov 28 10:16:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=19e34a4c2ec90abe8412acfefb2c01c3ec7b2aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e8:e0:45:a9:e3:0e:2a:a2:3a:11:fe:55:d4: bd:d3:b4:6c:d1:16:55:16:a0:ba:ab:80:fa:c0:0a: 96:6f:0a:45:fe:32:d6:8f:da:57:42:e8:7e:18:04: ea:80:d4:4b:6e:c3:e6:99:16:1d:48:81:9d:e9:e0: 32:63:3c:eb:ae:e4:c3:1c:59:33:02:7b:ff:3f:32: a4:74:1c:ef:4b:90:13:14:32:23:d1:c0:1d:cc:00: 08:8a:e3:48:95:4f:59:a7:4f:7e:e3:6c:1a:92:7f: c9:40:26:6e:27:77:52:d5:47:16:46:5f:6a:3d:49: 18:41:00:a3:b0:85:7d:7e:79:da:88:29:c1:01:43: 6f:0c:55:14:61:7f:38:85:83:62:1d:32:2e:fb:b1: 1a:bf:8d:04:e9:63:8a:30:f4:c9:01:7a:3d:f6:65: ef:f1:92:d1:1b:35:ce:6d:20:1b:c7:98:97:58:a3: 7f:27:94:4d:28:ef:48:a5:15:d2:ae:58:3c:a9:75: 95:34:74:c5:1a:84:af:44:a9:d5:ee:83:a3:51:23: 45:f7:bc:f5:27:97:0b:55:36:b4:c8:c2:0f:5b:94: 43:97:16:2e:d2:fa:ad:71:65:88:47:b5:29:59:25: 17:af:50:84:6f:4f:6a:0f:4b:45:18:87:ee:78:7d: 3d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E3:4A:4C:2E:C9:0A:BE:84:12:AC:FE:FB:2C:01:C3:EC:7B:2A:A5 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GeNKTC7JCr6EEqz--ywBw-x7KqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8adc::/48 Signature Algorithm: sha256WithRSAEncryption 3d:8b:dc:cd:eb:e5:c2:b6:f1:24:9e:34:52:e5:4b:d6:f6:ff: 38:a5:a1:19:3e:41:a3:29:4e:fc:05:82:59:93:4a:9a:a6:fa: 5f:c5:7a:a9:99:38:80:60:38:54:07:dd:52:c4:d5:29:c7:72: 3c:b0:8f:4d:74:b2:3c:2b:c1:b6:dc:00:e0:a6:07:3b:02:cd: e7:7a:b7:bc:3d:27:4b:19:0a:30:6f:03:c5:b0:a2:97:b9:2b: e9:89:b5:48:0f:5a:1a:29:5c:15:e6:7a:f0:bc:d6:c8:03:2e: 03:11:e4:7c:4d:62:a0:f2:95:e1:00:a1:a8:d2:1b:0c:db:42: e4:8c:74:9d:b1:a2:d6:48:30:55:73:a4:72:66:fa:73:14:af: 71:b2:98:d0:dc:d4:0f:2c:e0:8a:c4:23:a1:15:79:f0:ed:c8: ff:23:16:20:e7:58:20:55:dc:b0:db:be:23:f2:c2:b6:58:67: 4c:a6:66:4d:30:6c:cf:fe:3a:23:01:a8:2b:c2:54:b2:37:7d: 72:88:d5:3b:fe:f7:e4:5b:4b:0d:12:f6:3b:87:c4:0b:7b:ea: 89:21:95:41:62:98:70:61:c0:20:37:8c:a9:52:e7:91:98:c3: ac:27:f9:c0:6d:f2:da:2f:78:1d:9b:c6:e7:9d:e5:77:39:dd: e3:55:0d:b4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrJ9yXcPRVypTXtqzysz+RAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMTI4MTAxNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWUzNGE0YzJlYzkwYWJlODQxMmFjZmVmYjJjMDFjM2VjN2IyYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OjgRanjDiqiOhH+VdS907Rs0RZV FqC6q4D6wAqWbwpF/jLWj9pXQuh+GATqgNRLbsPmmRYdSIGd6eAyYzzrruTDHFkz Anv/PzKkdBzvS5ATFDIj0cAdzAAIiuNIlU9Zp09+42wakn/JQCZuJ3dS1UcWRl9q PUkYQQCjsIV9fnnaiCnBAUNvDFUUYX84hYNiHTIu+7Eav40E6WOKMPTJAXo99mXv 8ZLRGzXObSAbx5iXWKN/J5RNKO9IpRXSrlg8qXWVNHTFGoSvRKnV7oOjUSNF97z1 J5cLVTa0yMIPW5RDlxYu0vqtcWWIR7UpWSUXr1CEb09qD0tFGIfueH09GQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBnjSkwuyQq+hBKs/vssAcPseyqlMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvR2VOS1RDN0pDcjZFRXF6LS15d0J3LXg3S3FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIrc MA0GCSqGSIb3DQEBCwUAA4IBAQA9i9zN6+XCtvEknjRS5UvW9v84paEZPkGjKU78 BYJZk0qapvpfxXqpmTiAYDhUB91SxNUpx3I8sI9NdLI8K8G23ADgpgc7As3nere8 PSdLGQowbwPFsKKXuSvpibVID1oaKVwV5nrwvNbIAy4DEeR8TWKg8pXhAKGo0hsM 20LkjHSdsaLWSDBVc6RyZvpzFK9xspjQ3NQPLOCKxCOhFXnw7cj/IxYg51ggVdyw 274j8sK2WGdMpmZNMGzP/jojAagrwlSyN31yiNU7/vfkW0sNEvY7h8QLe+qJIZVB YphwYcAgN4ypUueRmMOsJ/nAbfLaL3gdm8bnneV3Od3jVQ20 -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:19 2025 by rpki-client