This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lCicvJgsG0ogUpEfKw4bNZ1xilM.roa File: lCicvJgsG0ogUpEfKw4bNZ1xilM.roa (raw, json) Hash identifier: kVNzwUFQe1OlntPPNnu2Y09Xuu16bYHLfnV6rwNMJe4= Subject key identifier: 94:28:9C:BC:98:2C:1B:4A:20:52:91:1F:2B:0E:1B:35:9D:71:8A:53 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019ABF185B34D8F30C647DBF28EC07B4B019 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lCicvJgsG0ogUpEfKw4bNZ1xilM.roa Signing time: Wed 26 Nov 2025 07:37:15 +0000 ROA not before: Wed 26 Nov 2025 07:37:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209618 IP address blocks: 2a0a:e9c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:18:5b:34:d8:f3:0c:64:7d:bf:28:ec:07:b4:b0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Nov 26 07:37:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=94289cbc982c1b4a2052911f2b0e1b359d718a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:dc:f1:ba:5d:72:83:ae:60:b1:74:cd:23: e7:de:bd:66:ce:1c:39:cf:cf:b6:7d:47:a2:89:9e: fd:f3:64:17:02:59:7a:01:40:92:8b:24:a7:2b:4d: 68:ad:c3:7a:71:25:3c:ef:56:cc:2b:a6:a1:3e:2b: 9d:1e:26:53:1c:9e:95:b1:2a:fe:8e:56:16:89:a9: 74:e2:30:8a:4d:ae:67:33:b0:84:67:7d:ab:47:29: 00:a2:87:cd:35:bd:87:29:8e:db:fe:cb:04:da:6d: 37:c2:63:5f:cf:e2:dc:39:b9:5f:17:df:91:13:20: 51:26:be:92:3e:1f:54:e3:24:c6:6e:29:e1:b2:dc: c5:a8:e7:a2:72:cb:de:e7:e5:6f:8e:3a:50:37:be: ed:b6:4b:bd:83:1c:1a:a8:c0:aa:3d:18:7e:ae:e8: da:d2:f5:ac:95:84:b2:f1:7c:18:de:d2:ad:53:08: 32:ca:e6:c9:00:f4:1c:34:12:6c:69:29:a0:37:d6: 43:18:ef:d4:8f:9e:ce:b8:2b:0d:b7:7d:4a:aa:64: 09:e8:f6:62:52:63:fa:bd:bb:3e:b8:6f:6f:f8:42: 5b:b9:df:45:be:63:62:ad:4c:c3:c9:0a:b2:ec:be: a0:26:87:ac:a9:00:c4:f1:9b:ed:55:97:fa:93:05: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:28:9C:BC:98:2C:1B:4A:20:52:91:1F:2B:0E:1B:35:9D:71:8A:53 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lCicvJgsG0ogUpEfKw4bNZ1xilM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:e9c2::/32 Signature Algorithm: sha256WithRSAEncryption 12:1c:c9:01:14:97:0c:e4:2c:6e:78:f7:c3:d6:03:c5:ba:89: db:14:45:3b:c8:e3:bc:8e:ec:63:21:31:6e:62:91:39:f9:4a: 6e:8b:30:3a:54:bc:bb:d4:6f:c2:5e:6d:aa:9b:66:b9:ab:a1: 42:7d:76:94:d1:ec:b5:a9:e6:d9:75:94:fd:ee:05:2c:45:9d: 54:6f:06:89:c8:6d:1b:ff:e4:09:f1:da:3e:f4:ae:3d:5d:d7: fe:54:16:fc:6e:f3:34:79:c1:ac:a8:f2:de:b9:97:b1:bc:06: c1:f7:6d:f9:c9:09:cb:0b:f0:14:d8:a7:ed:eb:db:f2:05:57: 2e:a5:23:22:ab:26:b1:cc:29:f0:78:fd:aa:a2:ab:0c:c1:d9: dd:3b:a3:35:c6:3d:db:22:a5:17:ba:41:78:3a:84:7e:cc:d3: 1e:4f:16:bf:c9:de:16:28:32:77:c1:d7:82:9f:4e:91:e8:0f: 15:08:13:0c:02:14:0a:41:f1:a0:e5:d4:46:95:db:4f:1e:bc: d7:28:6c:77:5d:6b:21:1f:4f:55:dd:4c:c8:a6:1c:b2:81:63: b7:db:58:a4:2d:91:65:fd:c8:56:b4:08:d7:b1:59:cc:5d:2e: 36:a8:dd:f4:96:7a:4e:bb:fa:01:88:df:04:49:7e:e1:54:f5: b7:fc:92:b2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZq/GFs02PMMZH2/KOwHtLAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjUxMTI2MDczNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDI4OWNiYzk4MmMxYjRhMjA1MjkxMWYyYjBlMWIzNTlkNzE4YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGjc8bpdcoOuYLF0zSPn3r1mzhw5 z8+2fUeiiZ7982QXAll6AUCSiySnK01orcN6cSU871bMK6ahPiudHiZTHJ6VsSr+ jlYWial04jCKTa5nM7CEZ32rRykAoofNNb2HKY7b/ssE2m03wmNfz+LcOblfF9+R EyBRJr6SPh9U4yTGbinhstzFqOeicsve5+VvjjpQN77ttku9gxwaqMCqPRh+ruja 0vWslYSy8XwY3tKtUwgyyubJAPQcNBJsaSmgN9ZDGO/Uj57OuCsNt31KqmQJ6PZi UmP6vbs+uG9v+EJbud9FvmNirUzDyQqy7L6gJoesqQDE8ZvtVZf6kwXnAwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJQonLyYLBtKIFKRHysOGzWdcYpTMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvbENpY3ZKZ3NHMG9nVXBFZkt3NGJOWjF4aWxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgrpwjAN BgkqhkiG9w0BAQsFAAOCAQEAEhzJARSXDOQsbnj3w9YDxbqJ2xRFO8jjvI7sYyEx bmKROflKboswOlS8u9Rvwl5tqptmuauhQn12lNHstanm2XWU/e4FLEWdVG8Gicht G//kCfHaPvSuPV3X/lQW/G7zNHnBrKjy3rmXsbwGwfdt+ckJywvwFNin7evb8gVX LqUjIqsmscwp8Hj9qqKrDMHZ3TujNcY92yKlF7pBeDqEfszTHk8Wv8neFigyd8HX gp9OkegPFQgTDAIUCkHxoOXURpXbTx681yhsd11rIR9PVd1MyKYcsoFjt9tYpC2R Zf3IVrQI17FZzF0uNqjd9JZ6Trv6AYjfBEl+4VT1t/ySsg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:13:53 2025 by rpki-client