This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RPzd8ymefbYZuFy9hu8RQwS_JU8.roa File: RPzd8ymefbYZuFy9hu8RQwS_JU8.roa (raw, json) Hash identifier: bPW29vnMpGHOMMjggZLRAcFoUTzEkryKQYVp5P6bBV0= Subject key identifier: 44:FC:DD:F3:29:9E:7D:B6:19:B8:5C:BD:86:EF:11:43:04:BF:25:4F Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019A9708F4988B020DF57227992EC154F0C1 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RPzd8ymefbYZuFy9hu8RQwS_JU8.roa Signing time: Tue 18 Nov 2025 12:55:37 +0000 ROA not before: Tue 18 Nov 2025 12:55:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213617 IP address blocks: 2a0c:9a40:8720::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:08:f4:98:8b:02:0d:f5:72:27:99:2e:c1:54:f0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Nov 18 12:55:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=44fcddf3299e7db619b85cbd86ef114304bf254f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:43:a2:e1:ad:77:c9:71:cc:75:a7:52:e3: e2:a2:67:03:9e:1e:45:7b:eb:b7:ad:68:2c:30:17: 4f:5d:54:2e:81:e2:4d:96:ac:da:59:4e:48:0b:68: 7e:fc:4a:8a:8f:94:eb:0e:50:61:c3:c5:e4:26:70: b9:23:f3:c7:74:3f:56:6d:3d:8a:66:17:a7:62:59: 37:25:14:b8:65:20:b7:69:aa:50:78:a4:c9:81:65: 45:1e:88:b7:4b:52:4d:9f:4c:3a:af:a2:79:ad:3a: 5c:05:4d:d0:32:61:5d:ab:cb:13:64:bb:11:23:f7: 7a:22:62:e5:3e:c8:44:d3:09:c5:b1:92:4d:39:c6: 5e:4c:52:43:c2:e1:87:ee:18:e8:80:7c:81:74:20: f1:44:4c:e0:10:9f:32:0f:b4:f5:1a:1c:cb:74:1b: 40:1a:a3:dc:d1:72:99:d5:66:e7:83:43:67:08:06: 3f:d7:c8:18:aa:b8:45:ab:41:9a:91:22:c0:01:37: d3:1f:1d:21:c1:3c:19:77:4f:14:49:6c:8e:65:b4: 07:5f:75:db:22:82:e7:d2:fb:11:3f:57:9c:6c:5d: 02:21:9f:3d:6e:52:cb:e7:76:87:8e:78:14:07:19: 0d:bb:8b:86:39:df:7d:c3:c1:d3:44:1f:f4:1f:77: c0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FC:DD:F3:29:9E:7D:B6:19:B8:5C:BD:86:EF:11:43:04:BF:25:4F X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/RPzd8ymefbYZuFy9hu8RQwS_JU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8720::/48 Signature Algorithm: sha256WithRSAEncryption 74:2c:7a:a9:21:e0:fa:b4:32:45:b4:bc:29:c7:56:13:02:b4: 54:71:fb:aa:f1:ad:34:f9:ff:5a:ed:01:f6:e4:6d:56:86:a5: 47:4a:3b:f3:d5:5e:e4:17:f9:84:9c:ed:45:b5:e5:12:79:96: 08:5b:f4:ab:11:c5:52:50:25:49:e3:b9:e5:d5:f3:e2:44:90: 21:73:6e:68:a0:1c:0d:38:bd:19:b6:9d:2e:2f:ef:a1:eb:a0: c4:a2:e9:98:a2:c8:1a:eb:ff:1b:64:46:2d:cf:12:27:d6:7f: 7c:c0:e6:8c:4b:3f:4a:a4:49:d8:26:4a:86:83:18:be:24:e0: 4b:58:be:f8:9f:43:db:25:c8:3b:a8:6e:50:ad:79:49:b7:e7: bb:10:a1:17:b8:5a:e2:d4:20:3f:4d:db:3a:b0:8f:7a:3d:79: 7c:6a:0c:f9:ba:ac:76:90:3c:80:b3:82:df:d7:be:df:1f:2a: 98:23:d0:ee:70:5f:69:f6:59:08:f5:e8:57:66:96:38:12:56: 19:4b:1e:99:4e:8a:88:41:2a:9c:a9:11:f5:de:b4:f7:71:08: 58:a5:cb:ca:f4:0d:6f:89:8e:91:df:a9:32:d7:4d:89:ed:be: 5f:53:aa:c3:51:a2:0c:9d:88:b3:1d:74:f7:51:13:7a:49:cb: 83:60:8e:52 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqXCPSYiwIN9XInmS7BVPDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMTE4MTI1NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGZjZGRmMzI5OWU3ZGI2MTliODVjYmQ4NmVmMTE0MzA0YmYyNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmZDouGtd8lxzHWnUuPiomcDnh5F e+u3rWgsMBdPXVQugeJNlqzaWU5IC2h+/EqKj5TrDlBhw8XkJnC5I/PHdD9WbT2K ZhenYlk3JRS4ZSC3aapQeKTJgWVFHoi3S1JNn0w6r6J5rTpcBU3QMmFdq8sTZLsR I/d6ImLlPshE0wnFsZJNOcZeTFJDwuGH7hjogHyBdCDxREzgEJ8yD7T1GhzLdBtA GqPc0XKZ1Wbng0NnCAY/18gYqrhFq0GakSLAATfTHx0hwTwZd08USWyOZbQHX3Xb IoLn0vsRP1ecbF0CIZ89blLL53aHjngUBxkNu4uGOd99w8HTRB/0H3fAGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFET83fMpnn22GbhcvYbvEUMEvyVPMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvUlB6ZDh5bWVmYlladUZ5OWh1OFJRd1NfSlU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIcg MA0GCSqGSIb3DQEBCwUAA4IBAQB0LHqpIeD6tDJFtLwpx1YTArRUcfuq8a00+f9a 7QH25G1WhqVHSjvz1V7kF/mEnO1FteUSeZYIW/SrEcVSUCVJ47nl1fPiRJAhc25o oBwNOL0Ztp0uL++h66DEoumYosga6/8bZEYtzxIn1n98wOaMSz9KpEnYJkqGgxi+ JOBLWL74n0PbJcg7qG5QrXlJt+e7EKEXuFri1CA/Tds6sI96PXl8agz5uqx2kDyA s4Lf177fHyqYI9DucF9p9lkI9ehXZpY4ElYZSx6ZToqIQSqcqRH13rT3cQhYpcvK 9A1viY6R36ky102J7b5fU6rDUaIMnYizHXT3URN6ScuDYI5S -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:03 2025 by rpki-client