This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/mUsc8rGd4_JM4XnD9bClRCU4zxo.roa File: mUsc8rGd4_JM4XnD9bClRCU4zxo.roa (raw, json) Hash identifier: 3sss9GFoAf2253c6EyBbZyTorugY9kFPDM+aiR2bERI= Subject key identifier: 99:4B:1C:F2:B1:9D:E3:F2:4C:E1:79:C3:F5:B0:A5:44:25:38:CF:1A Certificate issuer: /CN=3d639fa4eddc162df3659e721d247ff338962f68 Certificate serial: 019A977A7AA9941A2CCC95D8AF99A9F53C55 Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/mUsc8rGd4_JM4XnD9bClRCU4zxo.roa Signing time: Tue 18 Nov 2025 14:59:37 +0000 ROA not before: Tue 18 Nov 2025 14:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208765 IP address blocks: 2a04:6400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:7a:7a:a9:94:1a:2c:cc:95:d8:af:99:a9:f5:3c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68 Validity Not Before: Nov 18 14:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=994b1cf2b19de3f24ce179c3f5b0a5442538cf1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:57:66:7d:d4:b2:5e:2c:8a:a5:37:a7:44: 53:da:57:85:5a:ab:9b:3c:ec:da:96:06:15:5d:65: 57:ea:51:0b:ea:c8:58:89:5a:2b:42:94:72:3f:e4: d2:f9:45:a7:ad:e4:a8:3c:78:f1:be:13:b5:44:e3: f4:2c:4a:b2:cc:59:62:e8:98:48:34:6c:a9:1f:38: 98:12:6e:88:b4:d3:a9:b4:23:a4:4b:46:18:d2:3f: bb:5a:63:ef:56:85:c7:bb:bc:6a:6f:71:07:82:f0: 5c:db:2f:41:9b:38:28:fd:5e:3d:ec:c7:33:b9:e3: 6b:35:61:8d:4f:f1:ac:1b:c6:cb:3c:ca:94:c7:d9: 95:30:c6:95:ef:7e:22:12:24:ce:d6:4c:32:04:65: b0:76:83:e6:cf:4a:71:23:b9:e7:43:66:34:9c:8f: b4:88:47:82:c3:40:4e:7c:73:fc:ae:12:0c:b5:b6: fd:07:97:a8:0a:09:a3:b3:43:c9:1e:e0:5a:bb:e8: 2f:b2:03:15:67:6b:d2:63:c5:10:a6:e9:39:ef:51: 30:d2:6c:5e:1f:a1:f2:12:47:77:16:fb:96:6b:69: 95:e7:b8:d0:c6:31:af:16:e2:00:06:95:66:83:9c: 12:e6:89:33:57:52:0b:6c:0a:b8:f7:c7:f2:89:c0: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4B:1C:F2:B1:9D:E3:F2:4C:E1:79:C3:F5:B0:A5:44:25:38:CF:1A X509v3 Authority Key Identifier: keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/mUsc8rGd4_JM4XnD9bClRCU4zxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:6400::/29 Signature Algorithm: sha256WithRSAEncryption 18:2c:45:39:0e:fd:b1:26:b8:d1:0d:90:b3:28:12:5b:82:01: c4:99:8e:0e:f6:64:71:fa:13:10:e7:33:9e:7e:d6:e2:65:38: d3:61:19:29:1a:f9:14:8c:3b:8f:db:dd:b5:bc:8a:6d:1d:8f: 63:e9:79:18:c5:89:c7:5a:54:9f:33:71:cf:4e:de:70:10:4b: f6:b4:5d:ee:eb:39:8e:a0:1b:73:d8:c4:51:d3:b4:35:59:42: dd:72:26:dc:34:c8:4c:3b:75:eb:0e:3e:22:2e:08:bb:21:9a: 60:bb:a6:2f:86:13:df:d7:04:20:02:55:49:fe:ad:36:2d:ff: b8:c0:ed:ea:e6:7e:b6:6a:c9:6c:1d:b1:83:57:e8:89:43:2a: f9:63:e4:c6:64:2e:08:47:19:f9:fe:6d:da:07:23:28:dd:8e: 5c:28:b2:44:9f:a4:6c:8c:08:fc:53:73:96:b0:2e:f4:6a:e2: 06:50:78:45:8c:19:de:19:6e:7a:f5:8b:6b:5f:9d:72:b7:46: 70:2f:8e:c7:ee:c8:3b:20:5b:3e:cf:09:43:48:5c:3b:f3:d7: b5:c4:89:1e:c4:63:6c:92:15:51:16:57:61:01:b6:b4:e8:c3: 9c:71:0f:0d:13:87:31:58:a7:19:20:ad:a6:f3:0d:83:1b:bb: f1:52:f0:c9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqXenqplBoszJXYr5mp9TxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNjM5ZmE0ZWRkYzE2MmRmMzY1OWU3MjFkMjQ3ZmYzMzg5 NjJmNjgwHhcNMjUxMTE4MTQ1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTRiMWNmMmIxOWRlM2YyNGNlMTc5YzNmNWIwYTU0NDI1MzhjZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx49XZn3Usl4siqU3p0RT2leFWqub POzalgYVXWVX6lEL6shYiVorQpRyP+TS+UWnreSoPHjxvhO1ROP0LEqyzFli6JhI NGypHziYEm6ItNOptCOkS0YY0j+7WmPvVoXHu7xqb3EHgvBc2y9Bmzgo/V497Mcz ueNrNWGNT/GsG8bLPMqUx9mVMMaV734iEiTO1kwyBGWwdoPmz0pxI7nnQ2Y0nI+0 iEeCw0BOfHP8rhIMtbb9B5eoCgmjs0PJHuBau+gvsgMVZ2vSY8UQpuk571Ew0mxe H6HyEkd3FvuWa2mV57jQxjGvFuIABpVmg5wS5okzV1ILbAq498fyicDPPQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJlLHPKxnePyTOF5w/WwpUQlOM8aMB8GA1UdIwQY MBaAFD1jn6Tt3BYt82Wech0kf/M4li9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAt YWQyODRkMjgyNGE0LzEvbVVzYzhyR2Q0X0pNNFhuRDliQ2xSQ1U0enhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAtYWQyODRkMjgyNGE0 LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgRkADAN BgkqhkiG9w0BAQsFAAOCAQEAGCxFOQ79sSa40Q2QsygSW4IBxJmODvZkcfoTEOcz nn7W4mU402EZKRr5FIw7j9vdtbyKbR2PY+l5GMWJx1pUnzNxz07ecBBL9rRd7us5 jqAbc9jEUdO0NVlC3XIm3DTITDt16w4+Ii4IuyGaYLumL4YT39cEIAJVSf6tNi3/ uMDt6uZ+tmrJbB2xg1foiUMq+WPkxmQuCEcZ+f5t2gcjKN2OXCiyRJ+kbIwI/FNz lrAu9GriBlB4RYwZ3hluevWLa1+dcrdGcC+Ox+7IOyBbPs8JQ0hcO/PXtcSJHsRj bJIVURZXYQG2tOjDnHEPDROHMVinGSCtpvMNgxu78VLwyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:16:32 2025 by rpki-client