This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cS4s4LR93XPOBURCdJ7imuZirVc.roa File: cS4s4LR93XPOBURCdJ7imuZirVc.roa (raw, json) Hash identifier: CHZlK0tC0+/vq+sShuN8yo5oFD1BVaz+Af9BQoPeG6g= Subject key identifier: 71:2E:2C:E0:B4:7D:DD:73:CE:05:44:42:74:9E:E2:9A:E6:62:AD:57 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019AF0299DB6FCFFCACD3B2417DC6C616A1A Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cS4s4LR93XPOBURCdJ7imuZirVc.roa Signing time: Fri 05 Dec 2025 20:17:30 +0000 ROA not before: Fri 05 Dec 2025 20:17:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203286 IP address blocks: 2a0c:9a40:8e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:29:9d:b6:fc:ff:ca:cd:3b:24:17:dc:6c:61:6a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Dec 5 20:17:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=712e2ce0b47ddd73ce054442749ee29ae662ad57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8e:4d:ec:db:4f:f5:4c:39:bb:3a:a6:fc:6b: c3:8c:e6:20:f8:91:7d:a2:eb:97:81:07:1f:e7:b7: 54:e1:50:c8:cf:aa:10:1c:63:08:d0:d0:43:32:d9: 09:ed:55:1f:76:15:69:37:85:02:4e:0a:ac:23:0f: 36:9c:45:78:a1:d3:c6:c2:d8:11:99:86:be:92:41: c7:d5:bc:5c:e5:80:0d:3f:82:b9:3f:ab:7b:1b:0c: da:77:e4:dd:ea:10:9b:65:60:c1:8c:11:b4:e0:73: 51:ab:4a:3b:d3:bf:dd:ae:f7:45:45:1c:a2:0c:69: 07:1c:c5:a4:e5:2c:0b:16:9f:f4:ea:04:06:49:6b: 0f:59:4e:76:c4:f4:b1:db:a5:80:bf:ee:35:04:8f: dc:0f:7a:8e:ae:23:16:b7:f6:f7:f1:31:a9:1f:cb: f1:7d:fe:ae:38:f9:46:bd:ea:2b:f5:5e:7d:ad:62: ba:c8:45:f7:36:d1:16:d5:4c:76:3e:09:65:9c:2a: 07:40:92:fc:a2:17:d0:15:0e:30:55:89:ff:9e:59: e9:ba:e7:8c:b3:eb:46:93:3a:76:b3:08:3c:89:7e: 62:c9:44:48:3b:e3:c8:d0:18:d3:2a:b3:29:50:f9: 0b:90:c6:68:b6:39:bc:be:16:41:7d:a7:5b:01:ea: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2E:2C:E0:B4:7D:DD:73:CE:05:44:42:74:9E:E2:9A:E6:62:AD:57 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cS4s4LR93XPOBURCdJ7imuZirVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8e00::/48 Signature Algorithm: sha256WithRSAEncryption ca:dc:23:e9:8d:3c:a9:63:48:12:c3:de:1b:37:69:40:4e:a9: d6:f6:01:40:04:32:2c:5f:96:97:13:d1:c6:27:d0:b0:50:17: 1a:ef:6b:7e:a8:c6:67:49:d4:72:5e:d7:8d:e1:9b:79:81:44: a0:a6:c0:f2:32:3a:d5:ba:1b:cc:be:60:83:0c:26:44:1e:ab: 1a:5c:10:dd:b1:ca:62:db:02:3c:9e:f3:0e:d6:92:5a:75:e0: 20:db:e5:30:41:73:50:09:84:b6:f6:19:75:39:04:62:6f:5d: 1c:2d:c4:96:1e:79:db:08:db:c6:0c:a8:68:5a:b8:8a:c7:21: ee:00:6b:fa:d4:23:6e:a3:e6:df:8d:b5:48:56:f8:2e:d6:b9: 16:b0:34:42:ab:17:83:c1:b7:3c:cd:1c:d8:18:d0:6a:8a:40: 85:db:23:7d:20:a1:3d:16:75:13:80:86:99:df:bd:71:c2:c4: 78:89:b7:84:22:3f:3c:d8:b9:f7:51:37:b0:21:9d:96:ff:13: c5:b0:c6:61:60:21:82:99:fd:4a:d9:82:5b:8c:b7:b5:a2:ac: 41:2b:6f:65:72:19:f5:10:27:cf:bc:98:e1:83:1d:e9:44:ba: 0a:a0:40:33:fc:ad:66:29:d0:98:ee:db:c7:f9:ff:38:24:6d: 5e:b6:28:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrwKZ22/P/KzTskF9xsYWoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMjA1MjAxNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTJlMmNlMGI0N2RkZDczY2UwNTQ0NDI3NDllZTI5YWU2NjJhZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo5N7NtP9Uw5uzqm/GvDjOYg+JF9 ouuXgQcf57dU4VDIz6oQHGMI0NBDMtkJ7VUfdhVpN4UCTgqsIw82nEV4odPGwtgR mYa+kkHH1bxc5YANP4K5P6t7Gwzad+Td6hCbZWDBjBG04HNRq0o707/drvdFRRyi DGkHHMWk5SwLFp/06gQGSWsPWU52xPSx26WAv+41BI/cD3qOriMWt/b38TGpH8vx ff6uOPlGveor9V59rWK6yEX3NtEW1Ux2PgllnCoHQJL8ohfQFQ4wVYn/nlnpuueM s+tGkzp2swg8iX5iyURIO+PI0BjTKrMpUPkLkMZotjm8vhZBfadbAepWQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHEuLOC0fd1zzgVEQnSe4prmYq1XMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvY1M0czRMUjkzWFBPQlVSQ2RKN2ltdVppclZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI4A MA0GCSqGSIb3DQEBCwUAA4IBAQDK3CPpjTypY0gSw94bN2lATqnW9gFABDIsX5aX E9HGJ9CwUBca72t+qMZnSdRyXteN4Zt5gUSgpsDyMjrVuhvMvmCDDCZEHqsaXBDd scpi2wI8nvMO1pJadeAg2+UwQXNQCYS29hl1OQRib10cLcSWHnnbCNvGDKhoWriK xyHuAGv61CNuo+bfjbVIVvgu1rkWsDRCqxeDwbc8zRzYGNBqikCF2yN9IKE9FnUT gIaZ371xwsR4ibeEIj882Ln3UTewIZ2W/xPFsMZhYCGCmf1K2YJbjLe1oqxBK29l chn1ECfPvJjhgx3pRLoKoEAz/K1mKdCY7tvH+f84JG1etii+ -----END CERTIFICATE-----Generated at Sat Dec 6 09:55:08 2025 by rpki-client