This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lfU2nL_AycPHSaat48CxCKesbdQ.roa File: lfU2nL_AycPHSaat48CxCKesbdQ.roa (raw, json) Hash identifier: g7Y8o7tLRGBp7ktc2+QFXtjwl/85x9zGyDsI0BLgows= Subject key identifier: 95:F5:36:9C:BF:C0:C9:C3:C7:49:A6:AD:E3:C0:B1:08:A7:AC:6D:D4 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019AB7845B4D36D0AD2A33540D58472D9AC0 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lfU2nL_AycPHSaat48CxCKesbdQ.roa Signing time: Mon 24 Nov 2025 20:18:15 +0000 ROA not before: Mon 24 Nov 2025 20:18:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203504 IP address blocks: 2a0c:9a40:89f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:84:5b:4d:36:d0:ad:2a:33:54:0d:58:47:2d:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Nov 24 20:18:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=95f5369cbfc0c9c3c749a6ade3c0b108a7ac6dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:28:ba:55:20:a2:da:f6:29:e5:f0:8a:89: cf:0d:8f:58:34:a7:d1:a9:67:1b:af:47:48:9d:ee: eb:e6:3e:ea:8a:93:20:d6:d1:f4:81:58:6f:8d:a4: 3f:85:21:2b:02:df:e1:8f:80:4e:0b:c8:66:a7:55: 36:e4:ca:90:22:b7:7c:42:cb:56:f8:67:51:1b:ed: cd:c5:b1:40:6b:b8:6e:af:2e:35:9b:5d:54:cc:52: e0:26:3c:29:a9:61:c8:d7:25:c9:c5:f0:75:79:9c: 6a:6a:c7:f0:4a:30:34:c1:de:51:35:74:4b:4d:1b: 13:bf:31:1f:6a:f1:5d:74:07:5d:36:a9:03:7e:90: 68:2d:85:7a:2f:0f:f6:c8:19:e7:5c:e1:74:f2:51: 19:4a:20:70:3a:ff:0b:fd:fb:50:a1:a0:c7:03:aa: 9d:c0:5c:d1:7f:1d:c3:1a:24:2a:24:68:83:e3:1f: 14:60:b5:9c:bc:7f:e7:6d:9e:87:54:6f:21:4e:ce: 0d:37:44:4d:7b:0e:dc:ad:b0:93:0e:0b:3d:d4:39: c5:8e:03:1a:e9:58:54:69:18:26:e3:e7:eb:f8:a7: ea:33:08:f5:27:9e:73:f6:b8:07:e2:70:6d:5d:82: 2a:ff:86:7a:ea:60:ac:c2:37:ec:b8:e7:67:82:47: ab:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F5:36:9C:BF:C0:C9:C3:C7:49:A6:AD:E3:C0:B1:08:A7:AC:6D:D4 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lfU2nL_AycPHSaat48CxCKesbdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:89f0::/48 Signature Algorithm: sha256WithRSAEncryption 04:b0:6f:ab:28:31:13:b2:4e:da:b9:5b:75:b6:2b:4f:05:c1: 83:af:1a:02:aa:5e:8f:31:6f:9c:b3:2e:7c:41:2e:25:a0:59: 90:b5:e1:7e:ea:65:f4:41:44:84:a3:30:a1:4c:d4:7d:e0:2e: b0:fc:bd:56:e5:37:ed:61:6c:dd:f3:d5:d1:c9:1d:48:aa:2a: 98:ce:4c:e2:95:ee:66:51:eb:1b:77:b9:e9:a5:ef:76:90:29: d3:70:b6:5e:db:f5:23:f4:05:9d:53:09:ab:ef:cd:dc:a1:f3: 3e:d5:24:49:72:49:ce:49:84:ce:df:ec:c0:28:9c:fb:a2:9f: 4b:02:f7:3a:7a:a1:a4:82:05:2e:98:e7:23:9a:64:73:13:88: 62:69:fa:69:8d:91:7d:17:dc:e4:b9:78:f6:cf:b0:88:08:cd: ee:e6:40:65:d8:93:c5:83:72:5b:9d:4f:4b:7b:1e:34:8c:a4: 5d:67:48:2f:fe:58:33:8d:b1:a8:3c:8e:64:7c:5e:57:23:04: 98:3b:1b:3d:d2:09:f9:93:0c:85:6a:b9:da:87:12:10:d1:12: ce:e1:cf:93:da:78:fa:54:ea:64:b1:31:9e:b4:94:52:5e:d9: 75:90:4a:14:d4:79:2c:16:46:06:9b:ed:ba:e9:d2:86:7b:e4: dc:6a:2d:02 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZq3hFtNNtCtKjNUDVhHLZrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMTI0MjAxODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWY1MzY5Y2JmYzBjOWMzYzc0OWE2YWRlM2MwYjEwOGE3YWM2ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLYoulUgotr2KeXwionPDY9YNKfR qWcbr0dIne7r5j7qipMg1tH0gVhvjaQ/hSErAt/hj4BOC8hmp1U25MqQIrd8QstW +GdRG+3NxbFAa7hury41m11UzFLgJjwpqWHI1yXJxfB1eZxqasfwSjA0wd5RNXRL TRsTvzEfavFddAddNqkDfpBoLYV6Lw/2yBnnXOF08lEZSiBwOv8L/ftQoaDHA6qd wFzRfx3DGiQqJGiD4x8UYLWcvH/nbZ6HVG8hTs4NN0RNew7crbCTDgs91DnFjgMa 6VhUaRgm4+fr+KfqMwj1J55z9rgH4nBtXYIq/4Z66mCswjfsuOdngkergQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJX1Npy/wMnDx0mmrePAsQinrG3UMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvbGZVMm5MX0F5Y1BIU2FhdDQ4Q3hDS2VzYmRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQInw MA0GCSqGSIb3DQEBCwUAA4IBAQAEsG+rKDETsk7auVt1titPBcGDrxoCql6PMW+c sy58QS4loFmQteF+6mX0QUSEozChTNR94C6w/L1W5TftYWzd89XRyR1IqiqYzkzi le5mUesbd7nppe92kCnTcLZe2/Uj9AWdUwmr783cofM+1SRJcknOSYTO3+zAKJz7 op9LAvc6eqGkggUumOcjmmRzE4hiafppjZF9F9zkuXj2z7CICM3u5kBl2JPFg3Jb nU9Lex40jKRdZ0gv/lgzjbGoPI5kfF5XIwSYOxs90gn5kwyFarnahxIQ0RLO4c+T 2nj6VOpksTGetJRSXtl1kEoU1HksFkYGm+266dKGe+Tcai0C -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:17 2025 by rpki-client