This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/2jKDawQ0pdKg9vwfKd1xkF7eDQc.roa File: 2jKDawQ0pdKg9vwfKd1xkF7eDQc.roa (raw, json) Hash identifier: X/kSQ9Iv95Or4GI5REjYDyad9owZKbuvRGjc/Ed+85U= Subject key identifier: DA:32:83:6B:04:34:A5:D2:A0:F6:FC:1F:29:DD:71:90:5E:DE:0D:07 Certificate issuer: /CN=8ca4499e04c466cfe9879a7a05732df34015c193 Certificate serial: 019A921EA27D2B91D70FADE2994BCD2402B3 Authority key identifier: 8C:A4:49:9E:04:C4:66:CF:E9:87:9A:7A:05:73:2D:F3:40:15:C1:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/2jKDawQ0pdKg9vwfKd1xkF7eDQc.roa Signing time: Mon 17 Nov 2025 14:01:12 +0000 ROA not before: Mon 17 Nov 2025 14:01:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50696 IP address blocks: 195.191.216.0/23 maxlen: 24 2001:678:10ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:1e:a2:7d:2b:91:d7:0f:ad:e2:99:4b:cd:24:02:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ca4499e04c466cfe9879a7a05732df34015c193 Validity Not Before: Nov 17 14:01:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=da32836b0434a5d2a0f6fc1f29dd71905ede0d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:aa:51:68:26:74:59:15:89:c8:64:ae:e8:6e: eb:79:1d:cc:c1:52:c5:40:7a:86:75:a1:93:2f:8a: 9f:2e:0e:68:de:e1:11:49:da:6c:6b:2e:11:50:fe: 3e:d3:e6:e7:4f:75:0e:d3:23:37:43:51:9a:99:38: 9d:7a:0f:f5:aa:07:58:da:35:83:4f:b8:ea:7f:63: 6b:62:f3:79:26:03:6a:14:76:a3:dc:4f:f9:63:70: db:fb:4d:21:50:79:1c:ba:7a:83:ce:2b:c3:36:c7: c5:35:11:de:67:99:37:f3:38:e0:f5:4f:76:6c:e0: d8:45:8d:f6:46:be:0f:77:a1:13:cf:5d:9a:48:2f: 28:33:93:3c:e9:24:d6:32:69:ab:fd:cb:bf:5a:ce: 31:a8:8e:0e:ed:3e:ce:4d:be:bb:80:57:c3:18:5a: c0:3f:c4:6d:2f:8d:41:9a:b6:5a:01:8c:16:1a:97: 1f:45:a8:30:ec:c7:d5:7f:da:58:55:5a:d7:9e:d8: 3c:4e:5c:56:01:3b:b3:b3:af:51:1c:5f:dc:e5:40: 4f:c4:84:a2:1c:15:dd:38:fa:55:12:af:25:c0:28: b3:2b:5d:7b:12:8a:6c:9d:4b:1a:ef:71:1c:b3:5e: 55:ca:8f:db:74:74:e9:2b:a8:65:ac:ba:d5:0c:01: db:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:32:83:6B:04:34:A5:D2:A0:F6:FC:1F:29:DD:71:90:5E:DE:0D:07 X509v3 Authority Key Identifier: keyid:8C:A4:49:9E:04:C4:66:CF:E9:87:9A:7A:05:73:2D:F3:40:15:C1:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/2jKDawQ0pdKg9vwfKd1xkF7eDQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.216.0/23 IPv6: 2001:678:10ac::/48 Signature Algorithm: sha256WithRSAEncryption 87:08:e4:13:11:e3:fe:e8:74:6d:0d:7d:ab:5d:89:90:0a:44: 82:39:7e:69:e7:7a:1b:8a:8c:b8:04:cd:cf:82:31:32:9c:a6: 74:c2:6d:9b:68:9d:ed:8c:41:a5:15:b8:2c:8f:63:0c:a2:0b: 55:d6:a8:12:f0:0e:69:1b:dc:df:13:2d:1b:1d:f0:3c:39:b1: 66:fa:28:9e:64:bc:73:43:3f:9f:c9:b4:ad:df:7b:5b:c6:ef: 8b:1e:f0:d8:1a:72:9a:11:ae:b1:c1:4c:39:75:8f:24:0d:4c: 8e:00:91:fd:35:9a:41:8b:cc:e2:b9:5d:1b:b6:96:37:f4:de: 12:f2:5c:ec:af:d1:aa:15:d7:8f:a3:f8:b2:0c:f7:32:f1:71: b1:46:cf:e3:14:f9:b7:03:d9:8a:ef:22:c7:94:43:33:0a:70: 50:d3:c4:f9:4d:2b:b4:f0:ae:89:f5:49:fa:f2:e5:b3:4b:60: 1f:d8:96:02:f7:89:80:83:15:e5:86:45:b0:bb:29:f0:5d:9b: e1:5a:b1:1f:70:4d:87:e8:8a:e1:fb:21:1a:20:ff:2e:d2:bd: be:54:40:d9:04:7a:7f:de:e0:86:1d:7d:35:a8:ce:a2:e4:06: 01:d2:b9:90:7f:f8:6e:60:91:29:14:ca:c5:cc:4f:5e:88:b9: 43:3c:33:b5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqSHqJ9K5HXD63imUvNJAKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYTQ0OTllMDRjNDY2Y2ZlOTg3OWE3YTA1NzMyZGYzNDAx NWMxOTMwHhcNMjUxMTE3MTQwMTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTMyODM2YjA0MzRhNWQyYTBmNmZjMWYyOWRkNzE5MDVlZGUwZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KpRaCZ0WRWJyGSu6G7reR3MwVLF QHqGdaGTL4qfLg5o3uERSdpsay4RUP4+0+bnT3UO0yM3Q1GamTideg/1qgdY2jWD T7jqf2NrYvN5JgNqFHaj3E/5Y3Db+00hUHkcunqDzivDNsfFNRHeZ5k38zjg9U92 bODYRY32Rr4Pd6ETz12aSC8oM5M86STWMmmr/cu/Ws4xqI4O7T7OTb67gFfDGFrA P8RtL41BmrZaAYwWGpcfRagw7MfVf9pYVVrXntg8TlxWATuzs69RHF/c5UBPxISi HBXdOPpVEq8lwCizK117EopsnUsa73Ecs15Vyo/bdHTpK6hlrLrVDAHbRwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNoyg2sENKXSoPb8HyndcZBe3g0HMB8GA1UdIwQY MBaAFIykSZ4ExGbP6YeaegVzLfNAFcGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaktSSm5nVEVac19waDVwNkJYTXQ4MEFWd1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82NWQ0MmUtODMyYi00ZWJhLTk4ZDgt NjUyOTI3MGI4YmM1LzEvMmpLRGF3UTBwZEtnOXZ3ZktkMXhrRjdlRFFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82NWQ0MmUtODMyYi00ZWJhLTk4ZDgtNjUyOTI3MGI4YmM1 LzEvaktSSm5nVEVac19waDVwNkJYTXQ4MEFWd1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw7/YMA8E AgACMAkDBwAgAQZ4EKwwDQYJKoZIhvcNAQELBQADggEBAIcI5BMR4/7odG0Nfatd iZAKRII5fmnnehuKjLgEzc+CMTKcpnTCbZtone2MQaUVuCyPYwyiC1XWqBLwDmkb 3N8TLRsd8Dw5sWb6KJ5kvHNDP5/JtK3fe1vG74se8NgacpoRrrHBTDl1jyQNTI4A kf01mkGLzOK5XRu2ljf03hLyXOyv0aoV14+j+LIM9zLxcbFGz+MU+bcD2YrvIseU QzMKcFDTxPlNK7Twron1Sfry5bNLYB/YlgL3iYCDFeWGRbC7KfBdm+FasR9wTYfo iuH7IRog/y7Svb5UQNkEen/e4IYdfTWozqLkBgHSuZB/+G5gkSkUysXMT16IuUM8 M7U= -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:26 2025 by rpki-client