This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/nJ0AhkIAYhs6kgmeWNk0eh88IlU.roa File: nJ0AhkIAYhs6kgmeWNk0eh88IlU.roa (raw, json) Hash identifier: cH4HPEM9cZKNpHMHjaKhXAEvP0Kxctiu8x8yjGmy1pQ= Subject key identifier: 9C:9D:00:86:42:00:62:1B:3A:92:09:9E:58:D9:34:7A:1F:3C:22:55 Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Certificate serial: 019AE3C7BAEE1CC82575C84A30DAC42490BF Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/nJ0AhkIAYhs6kgmeWNk0eh88IlU.roa Signing time: Wed 03 Dec 2025 10:35:08 +0000 ROA not before: Wed 03 Dec 2025 10:35:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 80.88.236.0/22 maxlen: 24 2a12:5141::/32 maxlen: 48 2a12:5142::/32 maxlen: 48 2a12:5143::/32 maxlen: 48 2a12:5144::/32 maxlen: 48 2a12:5145::/32 maxlen: 48 2a12:5146::/32 maxlen: 48 2a12:5147::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:c7:ba:ee:1c:c8:25:75:c8:4a:30:da:c4:24:90:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Validity Not Before: Dec 3 10:35:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9c9d00864200621b3a92099e58d9347a1f3c2255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:ab:b3:d4:d4:38:4a:d6:fa:cf:79:57:91: e7:23:be:d9:a2:50:b1:a8:05:8e:70:3f:18:48:e5: 2a:d2:0f:aa:05:89:ab:dc:d9:69:f0:28:0b:26:4e: 60:7f:aa:ff:6b:7a:68:2c:f4:96:23:8e:d0:5f:fe: 5a:e7:77:35:a5:f3:31:43:58:44:75:1c:eb:37:e0: 2f:a1:2a:2a:93:b5:a5:4d:67:07:10:10:bc:12:ea: 62:47:fd:8d:d8:56:bc:da:af:a0:cd:c4:82:c4:4f: 4b:08:d3:99:2f:ea:eb:06:20:83:d1:b7:c3:3c:be: f7:44:5d:ac:eb:9a:13:3e:d7:a2:4b:60:07:f4:ca: 81:8f:f8:cc:4b:40:9f:8b:26:7b:03:a1:80:76:01: ab:e2:62:72:1e:eb:f1:3b:ca:eb:e0:1e:20:09:97: b8:35:6f:5b:3e:dd:58:78:e3:3b:bf:29:92:1f:b7: f8:f9:9f:66:77:3f:b4:18:77:4c:c2:99:9d:4b:f3: 93:a4:33:77:6e:26:d8:65:9d:86:50:92:fb:02:0d: b0:b8:24:c9:30:5d:48:f3:c6:28:df:08:78:96:00: 11:1d:fe:48:b1:6b:75:dc:4c:1f:a1:44:6b:64:48: 5d:b4:c6:99:6d:e2:1e:10:53:d4:01:7a:09:f8:e1: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9D:00:86:42:00:62:1B:3A:92:09:9E:58:D9:34:7A:1F:3C:22:55 X509v3 Authority Key Identifier: keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/nJ0AhkIAYhs6kgmeWNk0eh88IlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.88.236.0/22 IPv6: 2a12:5141::-2a12:5147:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 34:aa:75:a5:ec:f3:ed:fc:f4:b1:2e:10:34:eb:db:61:57:f2: 8d:0a:42:17:64:c0:3c:d9:81:80:96:74:ab:5d:0b:f6:d6:e7: 31:16:fa:f1:fc:cc:43:d4:71:ae:ed:28:57:43:54:3b:48:76: 2a:e5:01:e4:dd:a9:9b:42:25:09:fb:41:ea:09:db:ca:b2:b0: 65:a2:3e:27:4a:70:1c:97:c6:a1:f6:7f:69:ac:e6:3d:76:b5: 08:57:47:13:fd:3b:dc:74:d1:91:39:b5:8c:57:db:68:76:e2: cf:a4:57:da:9b:51:d3:37:25:e5:bd:c2:0d:a9:b0:b5:a0:66: 04:82:37:a4:67:ac:e3:1f:2f:83:5d:78:98:6e:23:a7:1f:ea: 8d:70:35:b8:54:a2:a3:95:08:08:ad:1a:36:e3:d9:6c:40:20: 4a:2a:d1:d3:8f:4b:69:32:d9:ce:69:4b:46:d7:72:fc:ed:66: b4:d1:36:7a:d8:56:70:4e:ab:db:bd:50:ce:b8:0d:b7:84:93: ef:dd:2b:19:c1:66:d7:cc:6a:b4:a3:6e:70:99:0f:77:17:33: 21:90:08:88:fe:82:9e:42:10:65:5a:7b:90:d7:e9:aa:95:79: 86:13:0d:7b:41:79:57:02:42:66:ee:f2:c7:0a:00:a6:50:c5: 06:ce:8e:e8 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrjx7ruHMgldchKMNrEJJC/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDQwNzY1ZTQ3NDYwMGUxYmM3NjIyYTQzNjYzZGQ4ZDlm YWRjODcwHhcNMjUxMjAzMTAzNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzlkMDA4NjQyMDA2MjFiM2E5MjA5OWU1OGQ5MzQ3YTFmM2MyMjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4ers9TUOErW+s95V5HnI77ZolCx qAWOcD8YSOUq0g+qBYmr3Nlp8CgLJk5gf6r/a3poLPSWI47QX/5a53c1pfMxQ1hE dRzrN+AvoSoqk7WlTWcHEBC8EupiR/2N2Fa82q+gzcSCxE9LCNOZL+rrBiCD0bfD PL73RF2s65oTPteiS2AH9MqBj/jMS0CfiyZ7A6GAdgGr4mJyHuvxO8rr4B4gCZe4 NW9bPt1YeOM7vymSH7f4+Z9mdz+0GHdMwpmdS/OTpDN3bibYZZ2GUJL7Ag2wuCTJ MF1I88Yo3wh4lgARHf5IsWt13EwfoURrZEhdtMaZbeIeEFPUAXoJ+OEDZQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJydAIZCAGIbOpIJnljZNHofPCJVMB8GA1UdIwQY MBaAFNAEB2XkdGAOG8diKkNmPdjZ+tyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDIt NDdkMzA4NzEzN2Y0LzEvbkowQWhrSUFZaHM2a2dtZVdOazBlaDg4SWxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDItNDdkMzA4NzEzN2Y0 LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCUFjsMBYE AgACMBAwDgMFACoSUUEDBQMqElFAMA0GCSqGSIb3DQEBCwUAA4IBAQA0qnWl7PPt /PSxLhA069thV/KNCkIXZMA82YGAlnSrXQv21ucxFvrx/MxD1HGu7ShXQ1Q7SHYq 5QHk3ambQiUJ+0HqCdvKsrBloj4nSnAcl8ah9n9prOY9drUIV0cT/TvcdNGRObWM V9toduLPpFfam1HTNyXlvcINqbC1oGYEgjekZ6zjHy+DXXiYbiOnH+qNcDW4VKKj lQgIrRo249lsQCBKKtHTj0tpMtnOaUtG13L87Wa00TZ62FZwTqvbvVDOuA23hJPv 3SsZwWbXzGq0o25wmQ93FzMhkAiI/oKeQhBlWnuQ1+mqlXmGEw17QXlXAkJm7vLH CgCmUMUGzo7o -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:28 2025 by rpki-client