This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/NxLvMYol0olJ_a7M2jOjxwotMgE.roa File: NxLvMYol0olJ_a7M2jOjxwotMgE.roa (raw, json) Hash identifier: gZMQTh5QGYR6z+uiDzdpi1iLsmG+EUbRWqft6dnE/nk= Subject key identifier: 37:12:EF:31:8A:25:D2:89:49:FD:AE:CC:DA:33:A3:C7:0A:2D:32:01 Certificate issuer: /CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844 Certificate serial: 019AE98351FC71BE5D1EC4E83F229FC02788 Authority key identifier: 0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/NxLvMYol0olJ_a7M2jOjxwotMgE.roa Signing time: Thu 04 Dec 2025 13:18:08 +0000 ROA not before: Thu 04 Dec 2025 13:18:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211535 IP address blocks: 148.222.248.0/22 maxlen: 22 2a14:8400::/32 maxlen: 32 2a14:8400:3e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:83:51:fc:71:be:5d:1e:c4:e8:3f:22:9f:c0:27:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844 Validity Not Before: Dec 4 13:18:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3712ef318a25d28949fdaeccda33a3c70a2d3201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:ab:93:d8:ff:a1:79:13:ac:40:88:31:8e: bc:3f:17:cb:d5:be:3f:89:2f:ca:02:f3:58:4f:af: 9f:ef:79:76:58:0d:c1:64:d8:34:9f:92:c6:9b:ed: 9f:e1:02:30:eb:75:38:48:1a:97:c9:a1:0a:af:3d: 2b:bf:c1:8e:53:67:67:2e:f6:19:af:2a:1a:aa:96: 6c:90:8e:ce:8b:04:d3:49:9e:e8:7e:4b:27:f5:d4: 6b:76:a4:24:b0:a3:8d:6d:7a:82:cc:7f:8f:13:03: a3:c6:19:a0:ca:66:3a:c6:5b:56:d2:65:2e:6c:b1: 4d:01:df:2f:a0:0b:da:6f:f6:a6:f1:2b:5d:e1:5f: df:6b:a1:8b:eb:91:c2:8f:67:e9:b7:62:f7:67:e7: eb:bb:f2:57:3b:d3:0c:64:c1:0b:d9:03:93:11:39: 24:f0:4e:4f:e6:08:2a:dd:7c:4e:4d:0c:0f:77:b3: a3:de:b3:e0:d8:88:cc:e7:4e:bc:a4:ce:2d:8c:dd: 6b:d0:70:6b:fb:ec:76:18:00:3d:af:f7:17:fc:ce: cf:44:a3:c6:10:5d:0e:2b:bb:74:65:4a:ea:09:46: 40:14:36:41:12:d8:b4:73:05:25:18:f5:40:97:a5: 62:a3:fd:44:97:7d:56:f3:76:ca:06:9f:35:2a:96: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:12:EF:31:8A:25:D2:89:49:FD:AE:CC:DA:33:A3:C7:0A:2D:32:01 X509v3 Authority Key Identifier: keyid:0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/NxLvMYol0olJ_a7M2jOjxwotMgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.222.248.0/22 IPv6: 2a14:8400::/32 Signature Algorithm: sha256WithRSAEncryption 27:80:51:5c:a1:36:ac:ae:e8:90:92:b1:6b:62:25:91:5b:a9: e9:36:25:9a:cd:92:0d:7a:1a:27:1c:fe:c0:ee:77:87:a1:fe: 4d:6f:02:87:31:f4:c1:74:ee:a9:db:c3:f8:0b:52:c3:36:4a: 68:c3:c6:7a:d0:ef:35:f5:bc:c0:df:c6:28:62:89:c5:6f:86: 02:c7:87:12:f3:19:f8:0b:68:b6:39:1e:73:be:53:8e:9c:df: f2:b8:39:4c:e3:4b:68:bf:da:da:60:c8:4a:57:65:6d:78:07: fa:1c:bd:e5:1e:a5:63:3f:14:97:33:5e:a5:49:83:4f:57:37: 78:63:14:6d:b5:be:07:eb:6f:fe:52:44:93:7d:ca:25:97:e1: 5f:93:39:53:bb:6f:bb:7a:36:a3:7c:20:84:26:1c:da:12:28: c6:13:8a:d9:21:74:4d:46:8e:2e:a0:0c:69:a2:ee:b3:ff:20: 91:e8:50:ad:37:f1:c0:cb:ff:73:bd:de:20:cd:94:3a:02:7c: 86:48:51:2c:52:a4:39:a6:20:5d:2d:a8:ea:f7:9d:0e:e7:76: 36:f8:b3:2a:c6:a5:d5:3a:c7:98:b3:e6:4b:a2:c0:b7:92:7b: 1c:c7:08:e4:97:ba:6f:f5:77:39:35:01:7e:20:cd:59:21:4d: c2:27:64:28 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrpg1H8cb5dHsToPyKfwCeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWZjMDExYjVlODg2M2JjZjNiYjcyYWQ3Njk1ZDMxOTc0 MmI4NDQwHhcNMjUxMjA0MTMxODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzEyZWYzMThhMjVkMjg5NDlmZGFlY2NkYTMzYTNjNzBhMmQzMjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYqrk9j/oXkTrECIMY68PxfL1b4/ iS/KAvNYT6+f73l2WA3BZNg0n5LGm+2f4QIw63U4SBqXyaEKrz0rv8GOU2dnLvYZ ryoaqpZskI7OiwTTSZ7ofksn9dRrdqQksKONbXqCzH+PEwOjxhmgymY6xltW0mUu bLFNAd8voAvab/am8Std4V/fa6GL65HCj2fpt2L3Z+fru/JXO9MMZMEL2QOTETkk 8E5P5ggq3XxOTQwPd7Oj3rPg2IjM5068pM4tjN1r0HBr++x2GAA9r/cX/M7PRKPG EF0OK7t0ZUrqCUZAFDZBEti0cwUlGPVAl6Vio/1El31W83bKBp81KpZDKQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDcS7zGKJdKJSf2uzNozo8cKLTIBMB8GA1UdIwQY MBaAFA+fwBG16IY7zzu3KtdpXTGXQrhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQt NzBjNTg5ZGQyMTcxLzEvTnhMdk1Zb2wwb2xKX2E3TTJqT2p4d290TWdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQtNzBjNTg5ZGQyMTcx LzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQClN74MA0E AgACMAcDBQAqFIQAMA0GCSqGSIb3DQEBCwUAA4IBAQAngFFcoTasruiQkrFrYiWR W6npNiWazZINehonHP7A7neHof5NbwKHMfTBdO6p28P4C1LDNkpow8Z60O819bzA 38YoYonFb4YCx4cS8xn4C2i2OR5zvlOOnN/yuDlM40tov9raYMhKV2VteAf6HL3l HqVjPxSXM16lSYNPVzd4YxRttb4H62/+UkSTfcoll+FfkzlTu2+7ejajfCCEJhza EijGE4rZIXRNRo4uoAxpou6z/yCR6FCtN/HAy/9zvd4gzZQ6AnyGSFEsUqQ5piBd Lajq950O53Y2+LMqxqXVOseYs+ZLosC3knscxwjkl7pv9Xc5NQF+IM1ZIU3CJ2Qo -----END CERTIFICATE-----Generated at Sat Dec 6 13:42:44 2025 by rpki-client