This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/PJd5oiJlNNpa6bqcXLHiHXWWgDc.roa File: PJd5oiJlNNpa6bqcXLHiHXWWgDc.roa (raw, json) Hash identifier: GGgzoj2Mm5Fc4LoEFoe3yEWV5i9Cn3vEUPsbJ0RHjrI= Subject key identifier: 3C:97:79:A2:22:65:34:DA:5A:E9:BA:9C:5C:B1:E2:1D:75:96:80:37 Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43 Certificate serial: 019AB72F338CA4A56D746F21C1651DFE4C16 Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/PJd5oiJlNNpa6bqcXLHiHXWWgDc.roa Signing time: Mon 24 Nov 2025 18:45:15 +0000 ROA not before: Mon 24 Nov 2025 18:45:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203521 IP address blocks: 2a12:bfc0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:2f:33:8c:a4:a5:6d:74:6f:21:c1:65:1d:fe:4c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43 Validity Not Before: Nov 24 18:45:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3c9779a2226534da5ae9ba9c5cb1e21d75968037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:d2:0e:cc:c5:08:50:8d:6f:b7:43:5b:38: ce:64:48:ce:7f:16:ba:c5:ac:4b:5a:2c:68:65:f6: b3:76:68:12:4b:0a:e2:1a:66:77:47:86:8b:e1:76: 55:40:92:e1:45:b7:7e:8e:93:87:d8:e0:6d:6c:d9: 32:6c:7b:d8:09:93:52:cf:b6:59:87:3b:e4:50:9d: 8e:af:54:81:7e:3e:45:30:98:ae:6f:5a:3e:3e:6e: 56:a6:ae:d3:fb:6b:4e:7b:3b:91:19:02:8d:23:c1: 11:fc:cd:ba:d6:03:24:96:dc:2f:49:0b:2b:38:ea: a7:a7:71:a0:b7:9e:68:39:13:98:bb:65:18:18:60: f6:16:5a:68:e1:0c:35:6b:8d:50:dd:e1:21:29:47: fb:1b:94:c4:1a:78:d2:99:99:5a:ed:29:6c:cf:bc: c3:a3:ff:f4:53:a7:92:78:06:b8:49:db:03:1e:d6: 9b:7d:07:c9:eb:10:7f:22:de:1d:34:02:0e:15:f4: 11:a7:e4:7d:81:41:ed:31:6e:17:92:cd:4f:72:92: 1b:7f:a7:55:9c:20:6c:cc:17:e3:c4:4c:be:0c:5b: 88:52:79:4f:a9:c0:dc:c6:b8:de:77:66:38:12:70: f3:3d:21:c6:8c:c1:59:00:d0:0d:3b:62:a7:08:09: 5e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:79:A2:22:65:34:DA:5A:E9:BA:9C:5C:B1:E2:1D:75:96:80:37 X509v3 Authority Key Identifier: keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/PJd5oiJlNNpa6bqcXLHiHXWWgDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bfc0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 31:e4:60:f3:ef:49:da:d6:c8:84:9c:49:42:01:fd:4a:24:9e: f3:73:06:d7:22:50:52:e3:73:f8:cf:a2:4a:f7:4f:e9:9d:e8: 86:db:9c:16:9b:1a:97:f7:49:0e:c2:b7:77:45:dc:21:22:c2: e1:74:2f:41:4e:5c:7a:9a:fc:7c:46:fa:aa:e5:fd:21:09:83: 1b:9e:77:f9:44:cb:f5:e2:47:cf:cf:a8:f4:67:31:42:36:b6: 24:51:eb:df:86:3a:fe:66:d5:f5:ec:f9:af:07:c7:b1:88:99: 9e:8f:2a:42:de:97:c5:a7:1a:f4:84:41:99:a3:ea:ed:5a:58: 29:42:7e:63:18:c8:6d:52:18:4a:9e:b5:7e:8b:8c:58:9f:30: 83:5b:10:ca:cc:97:81:b3:16:75:8a:9f:fd:f0:e0:fc:39:0b: 9f:6a:31:5f:24:3f:30:91:ab:25:b8:9e:5b:d5:ee:1c:1c:86: e7:da:c3:07:8d:11:6c:8d:46:42:57:74:cd:d8:70:88:4e:64: c7:71:01:ab:32:9f:10:13:26:e3:51:9a:2f:7d:63:b3:d0:1b: 99:b4:69:1e:ab:0b:cb:69:f2:05:d9:61:10:86:58:c8:d6:ad: 51:fa:77:31:6e:08:cb:22:b3:1e:34:6f:bd:c7:6f:45:b2:6a: df:9c:32:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZq3LzOMpKVtdG8hwWUd/kwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmIyNmM1NTI1NjMwMDYyMTNjZmU0ODE0YTlkYzJhMGZj MTZmNDMwHhcNMjUxMTI0MTg0NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzk3NzlhMjIyNjUzNGRhNWFlOWJhOWM1Y2IxZTIxZDc1OTY4MDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ/SDszFCFCNb7dDWzjOZEjOfxa6 xaxLWixoZfazdmgSSwriGmZ3R4aL4XZVQJLhRbd+jpOH2OBtbNkybHvYCZNSz7ZZ hzvkUJ2Or1SBfj5FMJiub1o+Pm5Wpq7T+2tOezuRGQKNI8ER/M261gMkltwvSQsr OOqnp3Ggt55oOROYu2UYGGD2Flpo4Qw1a41Q3eEhKUf7G5TEGnjSmZla7Slsz7zD o//0U6eSeAa4SdsDHtabfQfJ6xB/It4dNAIOFfQRp+R9gUHtMW4Xks1PcpIbf6dV nCBszBfjxEy+DFuIUnlPqcDcxrjed2Y4EnDzPSHGjMFZANANO2KnCAleJwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDyXeaIiZTTaWum6nFyx4h11loA3MB8GA1UdIwQY MBaAFC8rJsVSVjAGITz+SBSp3CoPwW9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjkt MWMzNWI4MzkzNzliLzEvUEpkNW9pSmxOTnBhNmJxY1hMSGlIWFdXZ0RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjktMWMzNWI4MzkzNzli LzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhK/wP// MA0GCSqGSIb3DQEBCwUAA4IBAQAx5GDz70na1siEnElCAf1KJJ7zcwbXIlBS43P4 z6JK90/pneiG25wWmxqX90kOwrd3RdwhIsLhdC9BTlx6mvx8Rvqq5f0hCYMbnnf5 RMv14kfPz6j0ZzFCNrYkUevfhjr+ZtX17PmvB8exiJmejypC3pfFpxr0hEGZo+rt WlgpQn5jGMhtUhhKnrV+i4xYnzCDWxDKzJeBsxZ1ip/98OD8OQufajFfJD8wkasl uJ5b1e4cHIbn2sMHjRFsjUZCV3TN2HCITmTHcQGrMp8QEybjUZovfWOz0BuZtGke qwvLafIF2WEQhljI1q1R+ncxbgjLIrMeNG+9x29FsmrfnDK8 -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:19 2025 by rpki-client