This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/I3CYd5aT3ZPdNL5xHm2jz76xGV4.roa File: I3CYd5aT3ZPdNL5xHm2jz76xGV4.roa (raw, json) Hash identifier: qi1ROqthfkgOHrX36NP0GwB0gel+WGXnE7nh+33yHCk= Subject key identifier: 23:70:98:77:96:93:DD:93:DD:34:BE:71:1E:6D:A3:CF:BE:B1:19:5E Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B2568E42B3A722ADAF708F91D649C291B Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/I3CYd5aT3ZPdNL5xHm2jz76xGV4.roa Signing time: Tue 16 Dec 2025 04:26:29 +0000 ROA not before: Tue 16 Dec 2025 04:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202909 IP address blocks: 2a0a:79c0:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:68:e4:2b:3a:72:2a:da:f7:08:f9:1d:64:9c:29:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Dec 16 04:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=237098779693dd93dd34be711e6da3cfbeb1195e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:2d:b6:86:c4:db:8b:98:22:25:7f:81:18: 2d:4a:84:da:f6:56:ec:89:aa:ec:1a:d8:fb:3b:ea: a9:4a:e1:dd:23:b9:12:2d:32:e6:e4:21:f1:1f:1b: af:b2:a3:26:37:eb:99:78:3b:c6:14:f6:3c:35:8d: 9b:bb:62:53:34:f8:65:8f:95:21:31:3c:10:df:fb: d0:b5:f8:61:e6:52:87:6a:3d:81:a6:81:26:c8:e8: b1:f6:72:be:e2:40:7c:a8:cb:17:c8:7d:18:50:d8: 27:ca:03:85:e8:20:22:24:44:98:3d:4f:06:d6:31: 3e:12:8f:41:8f:c3:09:7f:07:56:49:fc:45:bd:3d: 68:8c:32:89:ac:a2:41:0a:d1:69:a4:0c:4a:45:5e: 66:f3:00:f3:a6:51:3a:fc:ba:81:97:ed:5a:3e:b3: 00:77:fa:b3:a7:05:ae:32:20:aa:6c:ce:fb:f8:c6: c5:40:e1:2a:92:1b:08:23:81:c4:b4:9f:07:2a:46: 6a:83:44:89:4f:6a:b2:28:dc:5e:0b:fd:49:e0:e8: 83:35:7e:89:73:26:bb:ae:2e:69:da:90:16:52:c4: e6:be:bc:05:4f:82:79:f5:9d:2f:ff:aa:c4:a0:3a: 73:fe:fd:d9:7f:0f:87:1f:6e:e5:9a:c0:81:c9:de: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:70:98:77:96:93:DD:93:DD:34:BE:71:1E:6D:A3:CF:BE:B1:19:5E X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/I3CYd5aT3ZPdNL5xHm2jz76xGV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c0:1200::/40 Signature Algorithm: sha256WithRSAEncryption 67:70:7a:5d:6f:01:06:7e:5d:99:bd:40:b8:a5:12:68:8f:95: b2:18:fe:96:bd:84:bf:36:c7:d6:b0:db:db:1c:88:d0:72:d4: 5d:70:0d:7e:d1:6d:ea:20:33:57:23:2f:1d:c9:ed:bc:75:6b: c2:a8:4a:a8:87:84:c6:c7:31:c2:e3:77:bc:ce:50:97:d2:df: 4c:f0:78:69:17:0f:fb:71:ed:17:a4:3e:e7:90:7d:ab:33:7c: 9f:68:62:97:97:d9:28:e8:36:9d:33:24:4e:f3:09:6d:d5:3e: 27:10:04:96:72:33:68:4d:ea:12:1e:8d:28:57:6b:84:f5:cc: 74:63:09:df:50:fa:41:70:99:3f:b1:0f:4b:ef:77:b4:3a:cf: 38:97:5b:ae:b9:19:4c:2b:a9:23:8d:ef:86:ec:9c:49:5a:7f: 88:81:67:b1:bf:56:91:25:ea:4b:8d:24:6b:d4:e3:fe:89:6a: 8e:df:4f:84:03:aa:5d:02:77:a6:d0:24:fa:28:ea:b4:c9:e2: 42:60:b3:3f:f0:51:ed:a7:ba:ba:1d:56:85:75:08:85:96:f9: 0f:20:c8:43:94:66:37:25:83:88:51:5f:1e:f4:32:87:79:77: 1b:c4:6f:71:37:11:99:aa:e2:6e:aa:f6:c3:d4:e9:79:d9:dc: 41:97:94:41 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZslaOQrOnIq2vcI+R1knCkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjUxMjE2MDQyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzcwOTg3Nzk2OTNkZDkzZGQzNGJlNzExZTZkYTNjZmJlYjExOTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEYttobE24uYIiV/gRgtSoTa9lbs iarsGtj7O+qpSuHdI7kSLTLm5CHxHxuvsqMmN+uZeDvGFPY8NY2bu2JTNPhlj5Uh MTwQ3/vQtfhh5lKHaj2BpoEmyOix9nK+4kB8qMsXyH0YUNgnygOF6CAiJESYPU8G 1jE+Eo9Bj8MJfwdWSfxFvT1ojDKJrKJBCtFppAxKRV5m8wDzplE6/LqBl+1aPrMA d/qzpwWuMiCqbM77+MbFQOEqkhsII4HEtJ8HKkZqg0SJT2qyKNxeC/1J4OiDNX6J cya7ri5p2pAWUsTmvrwFT4J59Z0v/6rEoDpz/v3Zfw+HH27lmsCByd7BiQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCNwmHeWk92T3TS+cR5to8++sRleMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvSTNDWWQ1YVQzWlBkTkw1eEhtMmp6NzZ4R1Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgp5wBIw DQYJKoZIhvcNAQELBQADggEBAGdwel1vAQZ+XZm9QLilEmiPlbIY/pa9hL82x9aw 29sciNBy1F1wDX7RbeogM1cjLx3J7bx1a8KoSqiHhMbHMcLjd7zOUJfS30zweGkX D/tx7RekPueQfaszfJ9oYpeX2SjoNp0zJE7zCW3VPicQBJZyM2hN6hIejShXa4T1 zHRjCd9Q+kFwmT+xD0vvd7Q6zziXW665GUwrqSON74bsnElaf4iBZ7G/VpEl6kuN JGvU4/6Jao7fT4QDql0Cd6bQJPoo6rTJ4kJgsz/wUe2nurodVoV1CIWW+Q8gyEOU Zjclg4hRXx70Mod5dxvEb3E3EZmq4m6q9sPU6XnZ3EGXlEE= -----END CERTIFICATE-----Generated at Wed Dec 17 01:13:55 2025 by rpki-client