This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/04p8KrQzLE3_55k5WI6hT9mZY7I.roa File: 04p8KrQzLE3_55k5WI6hT9mZY7I.roa (raw, json) Hash identifier: fLB1vC6DtYgNR3pd4HHiFVc8DTvk2K0a96GUua+8IXM= Subject key identifier: D3:8A:7C:2A:B4:33:2C:4D:FF:E7:99:39:58:8E:A1:4F:D9:99:63:B2 Certificate issuer: /CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361 Certificate serial: 019AE8E30D985C0005E9F2B536C6F1E8D4F8 Authority key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/04p8KrQzLE3_55k5WI6hT9mZY7I.roa Signing time: Thu 04 Dec 2025 10:23:05 +0000 ROA not before: Thu 04 Dec 2025 10:23:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208565 IP address blocks: 2a11:4e00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:e3:0d:98:5c:00:05:e9:f2:b5:36:c6:f1:e8:d4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361 Validity Not Before: Dec 4 10:23:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d38a7c2ab4332c4dffe79939588ea14fd99963b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:8a:e1:00:4d:91:e5:f4:4f:e6:66:60:5c: 06:6a:2b:20:90:8e:a4:d3:a7:56:c3:b3:63:d5:a7: 8b:5a:9d:11:44:bf:a8:ba:eb:65:d5:ce:62:0a:f4: 90:7f:8f:09:73:f6:8e:6a:90:f3:11:26:1c:cd:d4: 05:40:ff:41:48:51:2b:3e:3d:43:56:10:01:7e:6b: 26:76:97:45:8b:ac:6f:31:22:c3:a0:48:18:77:ee: 7f:b0:c8:a6:48:d1:55:5c:b9:3d:62:6e:4e:fc:28: 94:24:5d:f0:7d:61:a3:f5:08:a8:d0:b2:db:60:c6: 18:6f:45:0d:56:10:13:68:5a:93:13:49:6d:44:e7: 9a:c4:e8:bd:fa:3c:bb:69:9b:64:a6:66:d3:af:fe: 38:d5:29:c6:a8:5a:f2:a7:f5:11:fe:76:ca:07:3d: 5d:a0:87:0c:31:1d:22:05:a3:9e:8e:9b:43:09:e4: 52:56:8d:85:79:3d:34:cd:1e:66:75:18:2e:c0:ad: ba:1f:f3:46:96:6a:e1:8a:ba:d1:61:c0:da:01:49: b3:57:37:4a:53:5f:9b:08:89:f5:73:bb:f9:34:49: c3:7a:fa:0b:ce:58:9f:1e:a3:26:61:59:37:d9:e0: 64:e7:9f:02:d9:c5:7c:6b:e3:b9:8c:09:4c:36:51: bd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:7C:2A:B4:33:2C:4D:FF:E7:99:39:58:8E:A1:4F:D9:99:63:B2 X509v3 Authority Key Identifier: keyid:8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/04p8KrQzLE3_55k5WI6hT9mZY7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:4e00::/29 Signature Algorithm: sha256WithRSAEncryption ae:f1:cd:d8:44:a0:0f:36:2f:49:0a:cc:8b:f8:91:d4:d6:f8: f8:26:d5:45:22:39:a9:cb:78:27:c5:81:e4:d0:31:b6:bb:64: 10:69:c0:a7:83:a1:66:0c:26:78:66:c0:e1:1a:bf:f9:8c:52: 53:ab:0c:75:a7:de:04:bc:c4:79:67:23:34:76:a1:63:39:d6: d4:7e:be:3c:de:90:b9:ed:b6:27:f2:36:95:e3:06:d3:87:eb: af:25:3b:30:6e:b8:aa:d6:d2:70:c2:9e:da:d0:98:2b:ae:a1: 9f:c4:74:c9:2a:0a:e8:eb:b5:31:e4:68:84:6e:8a:6f:da:1a: 7b:3c:b1:f5:90:f1:33:5a:f0:fc:d1:74:ed:e3:6b:09:6f:32: ca:44:59:54:36:df:0c:7b:11:33:59:34:07:5f:fa:7c:58:4d: be:a1:63:73:0b:26:fd:7f:e4:07:64:97:f9:36:83:dd:28:54: 71:5e:42:08:2d:dc:66:a0:9a:4b:12:97:6e:63:2a:4c:2b:a8: a5:a7:ca:b7:52:f1:97:33:0e:06:60:9d:4b:dc:be:24:9a:1d: 60:26:e8:9a:34:59:cd:d8:36:22:1f:a9:8c:ba:7c:7c:ec:3e: 1e:5b:7d:72:57:6f:4e:ac:c4:57:df:c0:6d:f6:04:c4:39:6e: 45:ee:f3:e1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZro4w2YXAAF6fK1Nsbx6NT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkM2YzNTZhMDJkOTY3OWNlODkwYjVkNTFlMGRlYzJmM2Yz NjMzNjEwHhcNMjUxMjA0MTAyMzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzhhN2MyYWI0MzMyYzRkZmZlNzk5Mzk1ODhlYTE0ZmQ5OTk2M2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5uK4QBNkeX0T+ZmYFwGaisgkI6k 06dWw7Nj1aeLWp0RRL+ouutl1c5iCvSQf48Jc/aOapDzESYczdQFQP9BSFErPj1D VhABfmsmdpdFi6xvMSLDoEgYd+5/sMimSNFVXLk9Ym5O/CiUJF3wfWGj9Qio0LLb YMYYb0UNVhATaFqTE0ltROeaxOi9+jy7aZtkpmbTr/441SnGqFryp/UR/nbKBz1d oIcMMR0iBaOejptDCeRSVo2FeT00zR5mdRguwK26H/NGlmrhirrRYcDaAUmzVzdK U1+bCIn1c7v5NEnDevoLzlifHqMmYVk32eBk558C2cV8a+O5jAlMNlG98QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNOKfCq0MyxN/+eZOViOoU/ZmWOyMB8GA1UdIwQY MBaAFI0/NWoC2Wec6JC11R4N7C8/NjNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalQ4MWFnTFpaNXpva0xYVkhnM3NMejgyTTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81NjZjYjEtNzkxNS00ZmZkLTg1NzAt NmI5M2FmNjEzZDdkLzEvMDRwOEtyUXpMRTNfNTVrNVdJNmhUOW1aWTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81NjZjYjEtNzkxNS00ZmZkLTg1NzAtNmI5M2FmNjEzZDdk LzEvalQ4MWFnTFpaNXpva0xYVkhnM3NMejgyTTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhFOADAN BgkqhkiG9w0BAQsFAAOCAQEArvHN2ESgDzYvSQrMi/iR1Nb4+CbVRSI5qct4J8WB 5NAxtrtkEGnAp4OhZgwmeGbA4Rq/+YxSU6sMdafeBLzEeWcjNHahYznW1H6+PN6Q ue22J/I2leMG04frryU7MG64qtbScMKe2tCYK66hn8R0ySoK6Ou1MeRohG6Kb9oa ezyx9ZDxM1rw/NF07eNrCW8yykRZVDbfDHsRM1k0B1/6fFhNvqFjcwsm/X/kB2SX +TaD3ShUcV5CCC3cZqCaSxKXbmMqTCuopafKt1LxlzMOBmCdS9y+JJodYCbomjRZ zdg2Ih+pjLp8fOw+Hlt9cldvTqzEV9/AbfYExDluRe7z4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:50 2025 by rpki-client