This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/lYXFJBiFIo7GF8qx1TduAJu4mZk.roa File: lYXFJBiFIo7GF8qx1TduAJu4mZk.roa (raw, json) Hash identifier: EFfOawY/LhITRuUSXF2uybmDfyRYV8O+uOvPFUBho9Y= Subject key identifier: 95:85:C5:24:18:85:22:8E:C6:17:CA:B1:D5:37:6E:00:9B:B8:99:99 Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e Certificate serial: 019AE10B0A0FF2841E49A7982CF520767E15 Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/lYXFJBiFIo7GF8qx1TduAJu4mZk.roa Signing time: Tue 02 Dec 2025 21:49:48 +0000 ROA not before: Tue 02 Dec 2025 21:49:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211895 IP address blocks: 2a11:b100:c100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e1:0b:0a:0f:f2:84:1e:49:a7:98:2c:f5:20:76:7e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e Validity Not Before: Dec 2 21:49:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9585c5241885228ec617cab1d5376e009bb89999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:8d:05:3c:d4:d8:1e:95:d2:42:3a:01:30: e2:c3:3d:89:19:3c:1c:90:f5:dc:c1:cd:af:70:a0: 3b:3e:0a:2b:39:dd:ac:5f:7e:3c:76:97:4b:32:77: fe:ed:d8:11:1d:55:24:0f:9a:bb:ca:2f:66:10:dc: d5:7f:53:40:7a:66:a2:e6:39:fa:49:bc:f7:51:60: f1:16:88:9a:a1:7f:f3:ca:5b:e0:34:ce:72:23:8b: a8:a7:12:85:27:77:17:c4:6f:72:01:e3:d7:0a:2a: a4:5f:22:a7:44:93:a8:40:b8:76:0e:4b:3b:8e:03: 57:ba:f2:3e:30:6f:18:09:e3:54:3b:6b:c1:da:dd: 74:f4:aa:64:e1:65:65:10:4c:4a:8c:4b:e8:86:f5: 02:e1:ef:69:6b:4f:07:a8:16:af:07:43:e9:70:a5: bf:11:1d:92:12:10:48:e3:0f:bb:fd:63:69:3f:eb: cf:aa:2f:e8:96:36:9f:da:ba:6d:27:2d:27:97:44: 6e:6a:df:f2:60:d0:5c:cf:82:72:ad:47:73:57:c9: b6:76:d7:f3:cd:f6:eb:9b:0a:63:cb:1a:58:0b:56: ce:26:33:bb:eb:ae:4f:2c:dc:b8:1a:e0:59:cd:5c: e0:e1:a4:6f:33:d4:46:93:8e:a2:ec:7b:f3:79:f4: cf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:85:C5:24:18:85:22:8E:C6:17:CA:B1:D5:37:6E:00:9B:B8:99:99 X509v3 Authority Key Identifier: keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/lYXFJBiFIo7GF8qx1TduAJu4mZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:b100:c100::/48 Signature Algorithm: sha256WithRSAEncryption 68:7e:6d:d6:cb:44:20:96:6f:17:8d:5e:e6:44:8f:c5:0a:f4: 6f:40:ac:c7:15:f6:8e:11:af:bc:dd:99:ab:83:3d:b4:c6:c2: ac:c0:24:ca:fe:0a:a7:fc:91:91:e1:15:74:95:6c:ea:d3:cf: 4d:43:30:ef:19:62:99:ae:8f:cb:ac:0e:ee:6c:55:0e:55:d1: 41:36:06:63:75:26:cf:10:a7:f5:70:36:13:3b:3a:74:58:16: ed:32:2b:9d:00:91:24:99:3e:f2:db:b7:a2:f3:e9:d3:4e:e4: 5e:23:38:b0:bf:20:e0:c1:89:50:2f:51:96:6e:7d:b8:e6:28: be:8e:8a:64:9b:2f:02:a9:87:cd:96:2d:5b:f6:df:fd:76:c2: 3a:5b:ef:c5:dd:1e:8d:36:47:55:70:91:aa:ea:7f:5a:16:c4: 70:93:7d:cf:3f:55:e7:dd:41:1e:fa:b4:b1:9a:d7:fe:6a:19: 20:7c:ae:72:2f:fa:e7:09:d8:ea:57:80:99:96:95:33:a1:79: 2f:d6:25:77:ae:bf:b3:28:bc:0e:6f:d1:4c:a9:48:a5:03:8c: d5:10:64:29:c2:d5:78:89:de:31:73:1c:09:89:83:f8:74:fa: 77:db:51:e7:b7:fc:e6:a3:d5:31:3d:85:82:59:34:26:5b:82: ca:7e:2d:db -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrhCwoP8oQeSaeYLPUgdn4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTk0NTY4NjE4ODk4YTlmYjcyMGFlMDliZWQwZWQxYmU0 Zjg1N2UwHhcNMjUxMjAyMjE0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTg1YzUyNDE4ODUyMjhlYzYxN2NhYjFkNTM3NmUwMDliYjg5OTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuCNBTzU2B6V0kI6ATDiwz2JGTwc kPXcwc2vcKA7PgorOd2sX348dpdLMnf+7dgRHVUkD5q7yi9mENzVf1NAemai5jn6 Sbz3UWDxFoiaoX/zylvgNM5yI4uopxKFJ3cXxG9yAePXCiqkXyKnRJOoQLh2Dks7 jgNXuvI+MG8YCeNUO2vB2t109Kpk4WVlEExKjEvohvUC4e9pa08HqBavB0PpcKW/ ER2SEhBI4w+7/WNpP+vPqi/oljaf2rptJy0nl0Ruat/yYNBcz4JyrUdzV8m2dtfz zfbrmwpjyxpYC1bOJjO7665PLNy4GuBZzVzg4aRvM9RGk46i7HvzefTPRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJWFxSQYhSKOxhfKsdU3bgCbuJmZMB8GA1UdIwQY MBaAFAdZRWhhiJip+3IK4JvtDtG+T4V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgt MWVjY2JlNjdjNjYxLzEvbFlYRkpCaUZJbzdHRjhxeDFUZHVBSnU0bVprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgtMWVjY2JlNjdjNjYx LzEvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhGxAMEA MA0GCSqGSIb3DQEBCwUAA4IBAQBofm3Wy0Qglm8XjV7mRI/FCvRvQKzHFfaOEa+8 3Zmrgz20xsKswCTK/gqn/JGR4RV0lWzq089NQzDvGWKZro/LrA7ubFUOVdFBNgZj dSbPEKf1cDYTOzp0WBbtMiudAJEkmT7y27ei8+nTTuReIziwvyDgwYlQL1GWbn24 5ii+jopkmy8CqYfNli1b9t/9dsI6W+/F3R6NNkdVcJGq6n9aFsRwk33PP1Xn3UEe +rSxmtf+ahkgfK5yL/rnCdjqV4CZlpUzoXkv1iV3rr+zKLwOb9FMqUilA4zVEGQp wtV4id4xcxwJiYP4dPp321Hnt/zmo9UxPYWCWTQmW4LKfi3b -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:34 2025 by rpki-client