This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/LjHQRUqe4fLfiS_M0uR2yHkIVsY.roa File: LjHQRUqe4fLfiS_M0uR2yHkIVsY.roa (raw, json) Hash identifier: jHwF+Ucs9Egx9vRvgHwI9YrO/JhN5R4twljmxbgKN5c= Subject key identifier: 2E:31:D0:45:4A:9E:E1:F2:DF:89:2F:CC:D2:E4:76:C8:79:08:56:C6 Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019AE4A1A1104199B44AA0845B4C4D3C9A11 Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/LjHQRUqe4fLfiS_M0uR2yHkIVsY.roa Signing time: Wed 03 Dec 2025 14:33:08 +0000 ROA not before: Wed 03 Dec 2025 14:33:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 2a0d:4480::/32 maxlen: 32 2a0d:4481::/32 maxlen: 32 2a0d:4482::/32 maxlen: 32 2a0d:4483::/32 maxlen: 32 2a0d:4484::/32 maxlen: 32 2a0d:4485::/32 maxlen: 32 2a0d:4486::/32 maxlen: 32 2a0d:4487::/32 maxlen: 32 2a0d:ab00::/32 maxlen: 32 2a0d:ab01::/32 maxlen: 32 2a0d:ab02::/32 maxlen: 32 2a0d:ab03::/32 maxlen: 32 2a0d:ab04::/32 maxlen: 32 2a0d:ab05::/32 maxlen: 32 2a0d:ab06::/32 maxlen: 32 2a0d:ab07::/32 maxlen: 32 2a0d:af00::/32 maxlen: 32 2a0d:af01::/32 maxlen: 32 2a0d:af02::/32 maxlen: 32 2a0d:af03::/32 maxlen: 32 2a0d:af04::/32 maxlen: 32 2a0d:af05::/32 maxlen: 32 2a0d:af06::/32 maxlen: 32 2a0d:af07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:a1:a1:10:41:99:b4:4a:a0:84:5b:4c:4d:3c:9a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Dec 3 14:33:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e31d0454a9ee1f2df892fccd2e476c8790856c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:86:98:a3:31:36:ee:43:0c:40:39:fe:fe:a7: fa:cb:c8:bc:1e:3a:72:92:d2:07:e5:8b:03:5f:1f: 6b:11:15:4c:7f:16:fd:34:7f:db:ee:c7:5c:c9:f8: dc:00:d0:d5:82:2d:e1:88:e7:e2:15:4d:fa:5e:a7: b5:22:51:2d:f4:39:07:ae:87:8c:54:24:ed:15:17: 31:ce:2a:96:f3:fa:42:65:2d:55:54:1d:3c:7d:60: 95:04:b0:21:17:66:66:11:88:bd:40:5d:85:e6:9b: 96:f8:df:25:e6:8a:70:10:d2:ab:ea:39:ca:04:4c: 58:92:76:80:9c:1a:6c:bf:64:6e:3f:3d:8f:48:62: 0f:25:8c:85:cf:fc:8b:ec:88:b2:6a:03:bd:f6:33: 13:c8:c2:49:b1:71:46:60:84:fc:db:af:e9:6d:1d: b4:f9:b8:71:99:10:b7:a4:61:7e:c0:5f:0b:ef:3b: 3c:99:f8:e0:f2:f0:4d:f1:56:5c:2e:5a:82:89:d5: 48:94:ed:07:8d:ec:d0:fd:b9:60:b8:43:16:bb:6f: cc:39:60:4a:6d:53:42:76:e3:f1:0f:6a:95:9f:66: 9d:9d:c8:dc:3d:cf:e4:cf:ad:37:cf:94:f3:6a:38: 4e:dd:63:ca:bd:65:3d:32:de:b1:8b:e6:51:a2:a3: a0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:31:D0:45:4A:9E:E1:F2:DF:89:2F:CC:D2:E4:76:C8:79:08:56:C6 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/LjHQRUqe4fLfiS_M0uR2yHkIVsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:4480::/29 2a0d:ab00::/29 2a0d:af00::/29 Signature Algorithm: sha256WithRSAEncryption 11:43:f9:44:20:ec:06:19:f0:43:12:1b:44:9f:eb:2a:2e:50: b7:b9:98:08:07:ed:f1:79:19:a8:b3:e7:31:ed:1f:ba:c8:65: 98:a2:87:18:b3:01:b5:cc:a4:33:74:2d:97:20:a5:88:71:4e: e5:cc:42:e9:3c:5e:ec:13:fe:ce:ae:4d:a8:68:46:94:bf:83: 3d:97:05:c3:85:fc:63:4c:06:29:a6:41:12:77:2d:be:89:12: 37:e6:6b:32:b8:c9:7b:1b:d9:73:d8:0f:d6:fc:57:ac:ad:8a: ad:7d:e6:11:7a:41:eb:0c:21:ed:1f:50:7b:19:3a:14:c1:f3: e5:68:58:1f:54:3b:77:83:9b:ae:da:c3:21:23:2b:89:b1:0e: a8:7f:92:a1:b9:47:2f:1c:9e:16:f7:52:16:62:ca:db:25:5d: 35:2d:54:9b:9d:33:9c:b0:77:07:c5:cb:26:33:50:e3:49:f0: 87:29:d5:c8:ee:f7:57:5a:4b:c2:52:ad:5a:26:bd:bf:75:86: 9a:07:60:cb:0d:7d:85:fc:2c:25:7c:af:4f:8d:5c:ef:07:9b: 95:1c:d3:f2:cd:3f:16:dc:10:1c:92:ae:dc:2f:eb:d2:6e:c5: e5:6d:b7:8a:d9:b8:90:31:7f:ef:57:f5:62:c8:02:5d:4c:61: dd:ef:a3:b2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrkoaEQQZm0SqCEW0xNPJoRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjUxMjAzMTQzMzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTMxZDA0NTRhOWVlMWYyZGY4OTJmY2NkMmU0NzZjODc5MDg1NmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64aYozE27kMMQDn+/qf6y8i8Hjpy ktIH5YsDXx9rERVMfxb9NH/b7sdcyfjcANDVgi3hiOfiFU36Xqe1IlEt9DkHroeM VCTtFRcxziqW8/pCZS1VVB08fWCVBLAhF2ZmEYi9QF2F5puW+N8l5opwENKr6jnK BExYknaAnBpsv2RuPz2PSGIPJYyFz/yL7IiyagO99jMTyMJJsXFGYIT826/pbR20 +bhxmRC3pGF+wF8L7zs8mfjg8vBN8VZcLlqCidVIlO0HjezQ/blguEMWu2/MOWBK bVNCduPxD2qVn2adncjcPc/kz603z5TzajhO3WPKvWU9Mt6xi+ZRoqOgjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC4x0EVKnuHy34kvzNLkdsh5CFbGMB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvTGpIUVJVcWU0ZkxmaVNfTTB1UjJ5SGtJVnNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg1EgAMF AyoNqwADBQMqDa8AMA0GCSqGSIb3DQEBCwUAA4IBAQARQ/lEIOwGGfBDEhtEn+sq LlC3uZgIB+3xeRmos+cx7R+6yGWYoocYswG1zKQzdC2XIKWIcU7lzELpPF7sE/7O rk2oaEaUv4M9lwXDhfxjTAYppkESdy2+iRI35msyuMl7G9lz2A/W/FesrYqtfeYR ekHrDCHtH1B7GToUwfPlaFgfVDt3g5uu2sMhIyuJsQ6of5KhuUcvHJ4W91IWYsrb JV01LVSbnTOcsHcHxcsmM1DjSfCHKdXI7vdXWkvCUq1aJr2/dYaaB2DLDX2F/Cwl fK9PjVzvB5uVHNPyzT8W3BAckq7cL+vSbsXlbbeK2biQMX/vV/ViyAJdTGHd76Oy -----END CERTIFICATE-----Generated at Sat Dec 6 16:20:01 2025 by rpki-client