This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/tN0AkyDmJol15awQRnADN-oZ3RQ.roa File: tN0AkyDmJol15awQRnADN-oZ3RQ.roa (raw, json) Hash identifier: oL5gEaRGqyu6ppca7mFNT7h3bplkQYna6bciNHlaqZs= Subject key identifier: B4:DD:00:93:20:E6:26:89:75:E5:AC:10:46:70:03:37:EA:19:DD:14 Certificate issuer: /CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15 Certificate serial: 019AD8DA7AF29BA45C4FDE254226FA9EB02B Authority key identifier: FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/tN0AkyDmJol15awQRnADN-oZ3RQ.roa Signing time: Mon 01 Dec 2025 07:39:48 +0000 ROA not before: Mon 01 Dec 2025 07:39:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25548 IP address blocks: 2a11:12c0::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:da:7a:f2:9b:a4:5c:4f:de:25:42:26:fa:9e:b0:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15 Validity Not Before: Dec 1 07:39:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b4dd009320e6268975e5ac1046700337ea19dd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:fd:38:ba:a1:a2:b3:a9:64:f9:a1:97:91: 92:a5:68:f1:da:e0:f4:c3:69:31:08:28:99:5d:2d: 33:de:7c:03:3f:05:88:2c:47:d7:02:e4:95:93:e6: 51:a8:fe:99:13:de:b1:c7:01:05:01:22:6c:fc:c8: 0b:e5:e9:6c:a4:4b:0e:03:ce:69:b1:37:8a:ea:ba: 45:4c:40:3f:6d:b2:8d:f6:38:79:c7:80:81:b8:5b: 7e:3f:2d:c0:a2:9f:93:c3:ca:cd:92:e8:6b:50:72: 34:80:15:b7:d5:ba:d7:06:90:4b:2b:6d:17:27:79: 21:9b:18:60:00:8c:11:c8:22:34:15:ba:4e:24:aa: e0:2c:b7:51:fd:70:51:87:01:cd:80:6c:5d:0f:d7: a0:b4:7d:0e:83:16:51:5f:38:1f:a2:35:86:b0:d3: 5e:9f:63:52:55:54:fe:87:5a:76:21:ff:af:33:73: be:1c:f9:4b:f8:dd:d7:9b:72:ef:8f:ac:aa:99:96: 31:15:76:7e:44:59:e3:7b:c9:34:94:ba:58:0c:88: 44:fd:da:28:54:4f:2a:de:c1:65:1c:b3:2e:91:a7: eb:74:26:59:2b:6b:4e:73:da:fb:31:27:f0:4b:f4: fa:9c:f7:d6:83:31:f8:16:e2:11:80:7b:70:e8:89: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DD:00:93:20:E6:26:89:75:E5:AC:10:46:70:03:37:EA:19:DD:14 X509v3 Authority Key Identifier: keyid:FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/tN0AkyDmJol15awQRnADN-oZ3RQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:12c0::/29 Signature Algorithm: sha256WithRSAEncryption 5a:9e:19:7a:64:37:1c:9e:2f:67:24:ae:02:bd:21:d5:e0:eb: a5:de:e8:a0:8d:e3:e1:b1:a4:fc:f4:06:8e:17:4b:51:e7:c9: 35:af:22:06:a9:30:8e:04:f3:0d:c1:cb:37:70:a0:cc:6d:fd: 3a:1e:c9:86:e5:2b:a0:f8:4f:4c:42:1e:52:b8:71:dd:00:f4: 29:18:f9:cd:92:54:cc:5f:61:23:40:d0:5e:b7:97:8f:ca:26: d1:7e:cf:0b:aa:fd:b0:b4:88:85:31:5e:b7:cd:29:97:5d:36: 17:52:26:06:09:01:df:83:50:ca:f2:87:08:7b:df:42:80:67: e1:70:ae:5a:5d:0e:da:9d:23:35:18:68:12:a0:ca:c6:bb:06: db:df:76:d8:10:99:1c:14:95:bc:2e:ac:f3:d9:0b:bb:15:dd: 1f:e0:fd:69:af:cd:79:76:c7:33:52:19:0f:26:4c:1f:a0:01: 54:7a:95:8a:13:c3:df:5c:14:01:49:63:f4:5f:87:f3:07:47: ab:67:a2:6c:6d:e2:d2:d3:c0:a7:df:98:78:63:86:48:60:f9: 37:fe:44:90:da:66:e4:ec:1a:b5:ee:5e:78:ea:85:7c:84:f1: 9d:41:48:c1:c9:e5:f3:33:31:66:20:fc:d7:fe:b6:ed:8c:a9: ed:e9:08:10 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrY2nrym6RcT94lQib6nrArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjIwNDJkNzY4YjEzZmZkYTgyOWNiM2YxZDdkMmNmM2Zi ZThhMTUwHhcNMjUxMjAxMDczOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGRkMDA5MzIwZTYyNjg5NzVlNWFjMTA0NjcwMDMzN2VhMTlkZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskf9OLqhorOpZPmhl5GSpWjx2uD0 w2kxCCiZXS0z3nwDPwWILEfXAuSVk+ZRqP6ZE96xxwEFASJs/MgL5elspEsOA85p sTeK6rpFTEA/bbKN9jh5x4CBuFt+Py3Aop+Tw8rNkuhrUHI0gBW31brXBpBLK20X J3khmxhgAIwRyCI0FbpOJKrgLLdR/XBRhwHNgGxdD9egtH0OgxZRXzgfojWGsNNe n2NSVVT+h1p2If+vM3O+HPlL+N3Xm3Lvj6yqmZYxFXZ+RFnje8k0lLpYDIhE/doo VE8q3sFlHLMukafrdCZZK2tOc9r7MSfwS/T6nPfWgzH4FuIRgHtw6InLMQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLTdAJMg5iaJdeWsEEZwAzfqGd0UMB8GA1UdIwQY MBaAFPwiBC12ixP/2oKcs/HX0s8/vooVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jMzBkY2UtMTU2YS00YWYwLWJiMzgt YTFjYzFmN2M4OTdmLzEvdE4wQWt5RG1Kb2wxNWF3UVJuQUROLW9aM1JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jMzBkY2UtMTU2YS00YWYwLWJiMzgtYTFjYzFmN2M4OTdm LzEvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhESwDAN BgkqhkiG9w0BAQsFAAOCAQEAWp4ZemQ3HJ4vZySuAr0h1eDrpd7ooI3j4bGk/PQG jhdLUefJNa8iBqkwjgTzDcHLN3CgzG39Oh7JhuUroPhPTEIeUrhx3QD0KRj5zZJU zF9hI0DQXreXj8om0X7PC6r9sLSIhTFet80pl102F1ImBgkB34NQyvKHCHvfQoBn 4XCuWl0O2p0jNRhoEqDKxrsG29922BCZHBSVvC6s89kLuxXdH+D9aa/NeXbHM1IZ DyZMH6ABVHqVihPD31wUAUlj9F+H8wdHq2eibG3i0tPAp9+YeGOGSGD5N/5EkNpm 5Owate5eeOqFfITxnUFIwcnl8zMxZiD81/627Yyp7ekIEA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:08 2025 by rpki-client