This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/nlYKwNWYe0AxvZmWesqfgW9J-eI.roa File: nlYKwNWYe0AxvZmWesqfgW9J-eI.roa (raw, json) Hash identifier: 6dqi8zr/JroaVGP2XQ9om9nm/Yt7tgoI29t58C3lKEw= Subject key identifier: 9E:56:0A:C0:D5:98:7B:40:31:BD:99:96:7A:CA:9F:81:6F:49:F9:E2 Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Certificate serial: 019AF2BDB2916A464B446287E5A1F0A5527B Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/nlYKwNWYe0AxvZmWesqfgW9J-eI.roa Signing time: Sat 06 Dec 2025 08:18:29 +0000 ROA not before: Sat 06 Dec 2025 08:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209263 IP address blocks: 2a02:ef40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:bd:b2:91:6a:46:4b:44:62:87:e5:a1:f0:a5:52:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Validity Not Before: Dec 6 08:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9e560ac0d5987b4031bd99967aca9f816f49f9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ea:31:d2:94:08:18:88:16:fb:7e:bd:fb:3f: 13:85:95:89:54:0a:b9:65:6d:4b:ba:e9:98:b1:dd: 3c:d9:bd:0b:ba:37:91:50:2a:d2:6b:63:73:b8:de: 32:3c:ea:22:fd:3c:af:d4:ad:02:44:a1:60:0f:69: f1:48:ac:fc:66:a0:f4:81:f9:86:2e:cc:b0:4f:3e: 82:23:6f:5e:cf:6b:ab:26:eb:32:fb:9e:ab:02:31: 07:bc:9e:79:10:bb:1f:f8:17:3d:03:71:d3:2f:b4: 4d:ff:ed:53:3b:26:c8:a3:9c:5c:e7:fe:b2:92:ee: 15:55:c3:38:7c:17:a6:f8:09:09:1e:12:3d:e5:df: 1c:bb:2a:5c:f9:a3:fb:00:62:16:6c:8f:73:4a:31: 7a:27:b2:3f:26:b4:46:fa:79:eb:f4:e9:3e:0a:83: c8:2c:78:5c:ae:5e:32:c0:bc:9a:0b:93:47:38:22: ad:e4:93:30:53:f0:e6:ad:eb:5f:3e:c5:6c:93:43: d8:66:49:5e:ab:3a:b5:b4:90:32:ba:f5:9e:70:3e: 57:84:17:fe:c3:75:d2:d2:0a:b0:76:33:8c:1f:89: ae:a2:4f:82:3c:a1:74:ea:12:43:56:33:bc:28:c5: 55:61:42:70:8c:4f:38:f2:6c:c9:dd:d9:b0:3c:ed: 55:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:56:0A:C0:D5:98:7B:40:31:BD:99:96:7A:CA:9F:81:6F:49:F9:E2 X509v3 Authority Key Identifier: keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/nlYKwNWYe0AxvZmWesqfgW9J-eI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:ef40::/29 Signature Algorithm: sha256WithRSAEncryption 01:91:7a:c4:e2:85:ba:b9:57:b3:b5:e3:f7:04:0b:dd:3b:28: dc:af:e1:39:ce:c9:dd:0d:dc:1c:18:18:b0:78:1c:90:33:d1: 23:b2:6c:97:f9:39:d3:cb:a7:29:f5:59:54:43:c5:f5:cf:e1: 8e:d7:35:ef:67:dd:a1:11:db:76:79:69:14:b2:54:b5:c6:ee: 61:4a:56:d4:d2:aa:3b:93:03:a8:73:a8:89:af:7a:01:0b:7d: ca:06:30:b7:b2:db:7b:42:38:f6:25:f3:66:d9:c4:3d:ae:4c: 7f:d8:25:6b:4b:8f:d1:79:3b:71:89:2e:bd:d7:64:00:1a:08: da:86:87:09:cc:6f:4f:b7:cc:76:3c:dd:b2:ba:fb:50:f0:2a: ec:3d:41:a9:88:9f:e3:82:3e:72:95:86:f3:76:fd:14:78:cd: be:ab:76:32:4c:6c:3f:af:80:e6:b4:f4:17:e9:35:07:e9:de: 0e:61:6b:9a:b4:a7:c6:5a:f0:bc:3c:a0:b7:3e:6d:2a:ac:d8: 89:a8:6f:97:da:16:f8:04:53:7a:52:cf:80:ad:38:9f:be:91: d6:6f:d4:a2:aa:87:f2:b9:b6:4d:91:d1:96:41:21:9d:7a:0e: 1c:c9:bc:2c:4c:e1:a9:34:e9:f6:e7:5a:5a:23:e4:5c:03:a9: d9:bb:91:d5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZryvbKRakZLRGKH5aHwpVJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj YzcwYTkwHhcNMjUxMjA2MDgxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTU2MGFjMGQ1OTg3YjQwMzFiZDk5OTY3YWNhOWY4MTZmNDlmOWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uox0pQIGIgW+369+z8ThZWJVAq5 ZW1LuumYsd082b0LujeRUCrSa2NzuN4yPOoi/Tyv1K0CRKFgD2nxSKz8ZqD0gfmG LsywTz6CI29ez2urJusy+56rAjEHvJ55ELsf+Bc9A3HTL7RN/+1TOybIo5xc5/6y ku4VVcM4fBem+AkJHhI95d8cuypc+aP7AGIWbI9zSjF6J7I/JrRG+nnr9Ok+CoPI LHhcrl4ywLyaC5NHOCKt5JMwU/DmretfPsVsk0PYZkleqzq1tJAyuvWecD5XhBf+ w3XS0gqwdjOMH4muok+CPKF06hJDVjO8KMVVYUJwjE848mzJ3dmwPO1VQQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJ5WCsDVmHtAMb2ZlnrKn4FvSfniMB8GA1UdIwQY MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt ODk3YTRjYzkyOTIyLzEvbmxZS3dOV1llMEF4dlptV2VzcWZnVzlKLWVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgLvQDAN BgkqhkiG9w0BAQsFAAOCAQEAAZF6xOKFurlXs7Xj9wQL3Tso3K/hOc7J3Q3cHBgY sHgckDPRI7Jsl/k508unKfVZVEPF9c/hjtc172fdoRHbdnlpFLJUtcbuYUpW1NKq O5MDqHOoia96AQt9ygYwt7Lbe0I49iXzZtnEPa5Mf9gla0uP0Xk7cYkuvddkABoI 2oaHCcxvT7fMdjzdsrr7UPAq7D1BqYif44I+cpWG83b9FHjNvqt2MkxsP6+A5rT0 F+k1B+neDmFrmrSnxlrwvDygtz5tKqzYiahvl9oW+ARTelLPgK04n76R1m/UoqqH 8rm2TZHRlkEhnXoOHMm8LEzhqTTp9udaWiPkXAOp2buR1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:39 2025 by rpki-client