This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CxdvJgaBCDsMJJ7rmp_FkjyGGBc.roa File: CxdvJgaBCDsMJJ7rmp_FkjyGGBc.roa (raw, json) Hash identifier: kGWbGJP+QaDIG7japCWL0D50y3BN0c80v2/YEyl6DZ4= Subject key identifier: 0B:17:6F:26:06:81:08:3B:0C:24:9E:EB:9A:9F:C5:92:3C:86:18:17 Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd Certificate serial: 019AA650B70744DC40006D9B955A0FD5979F Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CxdvJgaBCDsMJJ7rmp_FkjyGGBc.roa Signing time: Fri 21 Nov 2025 12:08:18 +0000 ROA not before: Fri 21 Nov 2025 12:08:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197116 IP address blocks: 2a11:f400::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:50:b7:07:44:dc:40:00:6d:9b:95:5a:0f:d5:97:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd Validity Not Before: Nov 21 12:08:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b176f260681083b0c249eeb9a9fc5923c861817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:91:63:8e:2f:b2:cc:9f:73:f3:ee:78:3e: 1b:1a:2e:7a:dd:c6:fc:92:5d:6b:91:52:a5:a7:2e: d4:1e:23:1b:78:57:b9:72:92:b3:60:e7:53:e6:9d: 17:17:31:75:38:da:f0:4a:a0:58:6c:20:ff:02:52: 3d:c1:f5:a3:6e:af:1b:e3:a2:b6:b6:8f:d3:9e:43: 41:3c:1d:60:71:21:69:11:29:d0:18:28:d0:87:6a: 18:d7:79:e6:70:29:59:4c:1e:a3:f5:b9:f3:40:fa: 6c:c3:9c:8a:a6:ea:2e:ea:c8:38:3d:e1:dc:c8:50: 3d:68:9a:81:90:27:fc:f7:83:52:f0:85:c6:bd:a2: ef:7e:16:ac:e9:fa:4c:af:1e:9c:e5:91:c1:c6:9e: 14:f1:14:19:ff:6c:9b:af:5b:4a:1a:9d:8b:ae:2b: 6e:3a:5c:6d:58:b3:52:d3:66:5a:ae:12:f7:a2:d8: 76:84:91:65:9b:dd:c9:aa:87:2e:cf:3c:cf:fd:b0: 9a:b9:e3:15:a4:37:a1:ea:43:34:d2:cc:9f:7f:f2: 82:8a:f9:eb:98:12:9d:cb:26:52:c8:98:0a:84:4f: df:d0:b0:24:ab:ce:c0:f8:33:fb:30:db:8e:9e:fb: 9b:42:dc:33:7a:d4:a1:db:e7:6d:de:fa:96:21:99: 9f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:17:6F:26:06:81:08:3B:0C:24:9E:EB:9A:9F:C5:92:3C:86:18:17 X509v3 Authority Key Identifier: keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CxdvJgaBCDsMJJ7rmp_FkjyGGBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f400::/32 Signature Algorithm: sha256WithRSAEncryption 2d:34:fa:ca:b7:b3:2d:79:99:c6:43:65:cf:a2:be:71:86:6e: 8b:ef:6b:cd:7f:98:fa:80:cf:f4:f0:cb:6f:96:c7:76:fb:2f: db:42:6b:78:2f:e0:40:82:80:98:04:f9:9c:89:19:16:be:9f: 2b:a6:8c:7a:df:75:89:75:8c:97:3b:c9:b5:23:d5:4a:85:ec: 65:32:dd:45:47:51:8b:c6:d6:16:1a:b5:de:18:29:e7:2d:73: 34:e4:94:a9:e6:f8:42:1f:bc:d0:bd:63:d8:3b:a8:04:f4:d6: a2:cd:8c:e8:18:02:e7:f2:6c:92:68:94:9f:6a:4f:c6:dc:ba: 76:dd:d9:1c:e3:d6:14:71:78:ca:36:8b:2a:fd:a2:b2:4d:0f: 5e:bf:3e:3f:cb:2a:df:c3:a1:15:1f:ae:dd:e8:da:88:87:9c: b3:a6:23:4c:bc:9c:8a:10:35:78:c5:f0:5b:6f:68:ef:1a:0f: 2c:9b:f1:c6:31:3c:3b:f2:4a:5d:74:87:1e:6e:53:c9:7f:40: e7:0a:ad:3f:73:7e:23:54:54:74:e9:35:70:e6:53:41:da:13: 1e:3a:5b:55:5f:9a:c7:79:ae:de:50:45:28:29:b8:2d:9e:e0: e5:f1:3e:1e:0d:e7:31:0f:54:cf:1b:d1:50:5c:7e:7e:8d:68: 25:62:cb:1f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqmULcHRNxAAG2blVoP1ZefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NWRmZjFmNmJkODgxM2RlNWZmOWFmMTY3MjQ3Zjc4Yjg4 NDM5YmQwHhcNMjUxMTIxMTIwODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjE3NmYyNjA2ODEwODNiMGMyNDllZWI5YTlmYzU5MjNjODYxODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTWRY44vssyfc/PueD4bGi563cb8 kl1rkVKlpy7UHiMbeFe5cpKzYOdT5p0XFzF1ONrwSqBYbCD/AlI9wfWjbq8b46K2 to/TnkNBPB1gcSFpESnQGCjQh2oY13nmcClZTB6j9bnzQPpsw5yKpuou6sg4PeHc yFA9aJqBkCf894NS8IXGvaLvfhas6fpMrx6c5ZHBxp4U8RQZ/2ybr1tKGp2Lritu OlxtWLNS02ZarhL3oth2hJFlm93JqocuzzzP/bCaueMVpDeh6kM00syff/KCivnr mBKdyyZSyJgKhE/f0LAkq87A+DP7MNuOnvubQtwzetSh2+dt3vqWIZmfQQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAsXbyYGgQg7DCSe65qfxZI8hhgXMB8GA1UdIwQY MBaAFAld/x9r2IE95f+a8Wckf3i4hDm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODct MTliM2QxNTQ0YzM5LzEvQ3hkdkpnYUJDRHNNSko3cm1wX0ZranlHR0JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODctMTliM2QxNTQ0YzM5 LzEvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhH0ADAN BgkqhkiG9w0BAQsFAAOCAQEALTT6yrezLXmZxkNlz6K+cYZui+9rzX+Y+oDP9PDL b5bHdvsv20JreC/gQIKAmAT5nIkZFr6fK6aMet91iXWMlzvJtSPVSoXsZTLdRUdR i8bWFhq13hgp5y1zNOSUqeb4Qh+80L1j2DuoBPTWos2M6BgC5/JskmiUn2pPxty6 dt3ZHOPWFHF4yjaLKv2isk0PXr8+P8sq38OhFR+u3ejaiIecs6YjTLycihA1eMXw W29o7xoPLJvxxjE8O/JKXXSHHm5TyX9A5wqtP3N+I1RUdOk1cOZTQdoTHjpbVV+a x3mu3lBFKCm4LZ7g5fE+Hg3nMQ9UzxvRUFx+fo1oJWLLHw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:35:50 2025 by rpki-client