This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/LDoP5Dfl1mKROHPXAg7g52U96wY.roa File: LDoP5Dfl1mKROHPXAg7g52U96wY.roa (raw, json) Hash identifier: zTokmzR2O1Fhpl59w3s7zzWY51T7sYMdoDy4HTwa7WM= Subject key identifier: 2C:3A:0F:E4:37:E5:D6:62:91:38:73:D7:02:0E:E0:E7:65:3D:EB:06 Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a Certificate serial: 019AA5C83F38D576C9094521BBED122A0A0E Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/LDoP5Dfl1mKROHPXAg7g52U96wY.roa Signing time: Fri 21 Nov 2025 09:39:15 +0000 ROA not before: Fri 21 Nov 2025 09:39:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203062 IP address blocks: 2a06:2c80::/36 maxlen: 48 2a06:2c80:b::/48 maxlen: 48 2a06:2c80:1000::/36 maxlen: 48 2a06:2c80:4000::/36 maxlen: 48 2a06:2c81:8000::/33 maxlen: 33 2a06:2c82:8000::/33 maxlen: 33 2a06:2c87:e000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:c8:3f:38:d5:76:c9:09:45:21:bb:ed:12:2a:0a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a Validity Not Before: Nov 21 09:39:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c3a0fe437e5d662913873d7020ee0e7653deb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:3f:a9:f3:8e:07:3e:ec:96:4d:07:ba:e7: 20:d6:f4:0a:f3:e9:47:65:ef:36:4e:6e:e1:aa:0b: 08:54:e1:6b:59:7e:0d:d4:b2:62:a4:be:2a:aa:94: 70:ae:7e:7c:6a:42:e8:13:40:88:a5:67:9c:fa:9b: f8:4e:b7:13:ec:d3:7e:6c:75:bf:24:36:9b:78:b4: 64:a7:69:cc:71:aa:07:fd:c4:94:5d:f6:f3:1a:40: ff:72:70:71:ed:8a:5e:10:29:65:f7:cc:1a:6c:69: 1e:b9:ef:3f:72:67:e8:14:d7:57:7a:a6:84:e9:0b: 44:85:eb:25:3d:10:89:a4:75:c0:22:45:4d:b3:1b: 35:81:93:b2:4c:2b:39:38:44:bd:28:94:34:87:a3: 63:52:f6:46:b6:85:ab:48:24:a8:58:12:4c:46:76: a8:ec:fd:f6:20:e5:e6:37:7e:99:7e:b7:84:5b:a9: dc:91:af:80:10:ca:d8:d2:9a:e4:95:c1:52:ef:6e: 95:a6:9b:f0:9b:ab:f5:39:5d:a9:c5:f6:0c:ee:5e: ed:22:61:4e:47:cf:5a:24:75:5c:23:e5:21:61:03: 58:70:54:22:2a:8d:23:2e:7c:94:3d:ec:82:3e:cd: 16:6c:80:47:83:81:c3:fb:e0:6e:7b:57:44:72:4d: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3A:0F:E4:37:E5:D6:62:91:38:73:D7:02:0E:E0:E7:65:3D:EB:06 X509v3 Authority Key Identifier: keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/LDoP5Dfl1mKROHPXAg7g52U96wY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:2c80::/35 2a06:2c80:4000::/36 2a06:2c81:8000::/33 2a06:2c82:8000::/33 2a06:2c87:e000::/36 Signature Algorithm: sha256WithRSAEncryption 20:3d:75:c7:34:b4:c2:9a:d5:73:41:df:72:ea:3a:50:a6:37: e7:2b:37:39:ee:e8:b2:8b:0c:38:d9:50:45:19:24:5a:df:c1: 3f:b9:08:e4:49:00:7e:11:3a:9a:63:19:9f:b7:a1:14:3e:a7: 02:1d:59:24:b1:c0:e6:cd:8a:02:e9:c8:43:28:9f:4a:03:0c: 86:3b:f4:c6:34:0b:d8:18:4f:fb:62:26:bf:0d:82:9a:19:b0: ad:37:4f:ca:b1:cc:24:2f:f6:69:48:16:6f:50:c6:b3:6b:4b: 6c:64:ad:a0:ee:93:86:79:26:b8:ac:09:b5:db:b0:c5:32:d0: 03:7c:04:41:17:a3:81:77:01:1a:40:6c:35:52:85:83:f6:35: cc:0d:cb:27:da:59:57:aa:f0:a0:6b:06:13:cc:1e:08:45:73: 52:ff:90:9c:4d:1f:79:b7:7e:22:ce:4e:b3:48:31:74:38:5b: 5b:38:ee:d5:25:86:80:71:7c:38:b0:b7:38:c7:9e:79:82:1f: c4:9f:06:7a:e2:38:1a:21:3e:13:35:5a:9d:db:79:36:33:f4: 42:2d:60:7b:8d:55:ff:95:bb:0e:fb:b8:eb:3a:c5:69:f6:75: 57:dc:29:d4:8a:1f:20:3d:b4:c7:3a:21:35:25:fc:8d:d6:3b: c8:ce:bc:91 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZqlyD841XbJCUUhu+0SKgoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMzE1MGY4YzY3MDYzMTIxMDI3MzI4OTU0OTY4ZDA4ZDRj ZjMyOWEwHhcNMjUxMTIxMDkzOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzNhMGZlNDM3ZTVkNjYyOTEzODczZDcwMjBlZTBlNzY1M2RlYjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPw/qfOOBz7slk0Huucg1vQK8+lH Ze82Tm7hqgsIVOFrWX4N1LJipL4qqpRwrn58akLoE0CIpWec+pv4TrcT7NN+bHW/ JDabeLRkp2nMcaoH/cSUXfbzGkD/cnBx7YpeECll98wabGkeue8/cmfoFNdXeqaE 6QtEheslPRCJpHXAIkVNsxs1gZOyTCs5OES9KJQ0h6NjUvZGtoWrSCSoWBJMRnao 7P32IOXmN36ZfreEW6ncka+AEMrY0prklcFS726Vppvwm6v1OV2pxfYM7l7tImFO R89aJHVcI+UhYQNYcFQiKo0jLnyUPeyCPs0WbIBHg4HD++Bue1dEck04swIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFCw6D+Q35dZikThz1wIO4OdlPesGMB8GA1UdIwQY MBaAFH4xUPjGcGMSECcyiVSWjQjUzzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAt OTM1ZTQxOGJkYmU3LzEvTERvUDVEZmwxbUtST0hQWEFnN2c1MlU5NndZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAtOTM1ZTQxOGJkYmU3 LzEvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAAjAoAwYFKgYsgAAD BgQqBiyAQAMGByoGLIGAAwYHKgYsgoADBgQqBiyH4DANBgkqhkiG9w0BAQsFAAOC AQEAID11xzS0wprVc0Hfcuo6UKY35ys3Oe7ososMONlQRRkkWt/BP7kI5EkAfhE6 mmMZn7ehFD6nAh1ZJLHA5s2KAunIQyifSgMMhjv0xjQL2BhP+2Imvw2CmhmwrTdP yrHMJC/2aUgWb1DGs2tLbGStoO6ThnkmuKwJtduwxTLQA3wEQRejgXcBGkBsNVKF g/Y1zA3LJ9pZV6rwoGsGE8weCEVzUv+QnE0febd+Is5Os0gxdDhbWzju1SWGgHF8 OLC3OMeeeYIfxJ8GeuI4GiE+EzVandt5NjP0Qi1ge41V/5W7Dvu46zrFafZ1V9wp 1IofID20xzohNSX8jdY7yM68kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:17 2025 by rpki-client