This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/lkvywQn4TW4L9lkE7bYcNqmXY0Y.roa File: lkvywQn4TW4L9lkE7bYcNqmXY0Y.roa (raw, json) Hash identifier: s4brEsiLVJQXgD883/yiLA0Z0ctXhJodTNwAgNakFBg= Subject key identifier: 96:4B:F2:C1:09:F8:4D:6E:0B:F6:59:04:ED:B6:1C:36:A9:97:63:46 Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019AEA487A010808E6695F06A479F164EF5A Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/lkvywQn4TW4L9lkE7bYcNqmXY0Y.roa Signing time: Thu 04 Dec 2025 16:53:29 +0000 ROA not before: Thu 04 Dec 2025 16:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213703 IP address blocks: 195.72.32.0/24 maxlen: 24 2a14:ae00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:48:7a:01:08:08:e6:69:5f:06:a4:79:f1:64:ef:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Dec 4 16:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=964bf2c109f84d6e0bf65904edb61c36a9976346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:93:18:20:31:a2:fb:b1:13:2d:e2:89:27: ae:87:ea:9f:b0:c9:44:1f:cc:70:f4:1d:1d:68:63: f7:76:35:9e:a0:7e:71:50:17:e0:e6:b3:af:a5:f0: 36:fd:3b:d7:60:03:2d:ec:90:94:79:9a:a7:7a:de: c6:9c:aa:b4:e6:1a:95:5d:ee:aa:ca:b2:34:bf:0d: 51:6d:83:bb:79:8f:12:c6:cb:93:6d:9c:53:1d:b0: 5f:ac:f5:71:df:8f:4f:30:36:cb:34:bd:57:a4:3b: bb:3a:87:92:5f:47:f0:b6:41:a5:36:5c:e8:75:10: d8:80:d5:09:96:72:2b:f2:4b:69:9f:5d:29:71:56: 47:8a:bf:08:e2:35:6d:e9:39:70:ca:87:2a:86:71: 45:79:4d:8c:a8:b5:aa:53:20:36:fa:c3:0a:4b:b0: 91:b8:35:97:b0:c5:79:7b:22:fc:c6:cd:67:09:3e: 61:47:cd:3f:55:49:4d:fb:18:80:2d:05:38:db:26: fe:59:db:b0:cb:b9:07:fa:e4:57:7b:2e:c2:6f:2b: 86:0c:d3:62:b7:eb:0e:a9:55:93:d5:23:1f:f0:29: 86:9a:de:c7:e0:37:9b:60:fd:72:1c:84:d2:44:f7: d7:71:b1:48:04:b3:b0:a3:63:77:15:20:64:1f:03: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4B:F2:C1:09:F8:4D:6E:0B:F6:59:04:ED:B6:1C:36:A9:97:63:46 X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/lkvywQn4TW4L9lkE7bYcNqmXY0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.72.32.0/24 IPv6: 2a14:ae00::/48 Signature Algorithm: sha256WithRSAEncryption 42:6f:60:65:70:d4:cf:66:c5:21:02:01:4c:5b:5a:39:1b:c5: 58:30:8f:4c:64:3e:7f:ff:0c:94:9a:bb:b5:1c:64:55:4e:42: 82:52:f2:5f:9b:8a:06:b1:ec:52:c3:94:06:0d:a2:ce:3d:4d: af:5c:de:fd:b8:84:5e:27:a9:75:eb:49:9e:d1:a7:ea:17:ec: 8a:02:8e:8a:f6:24:97:cd:a7:b5:26:cb:7a:bf:83:23:ec:cf: 6b:5e:46:12:91:43:bb:a2:fa:14:71:3e:7c:55:3a:fd:20:dc: ec:32:39:cb:d5:f4:eb:db:ca:5e:5c:60:25:b8:f2:19:ae:62: c4:8c:d7:cc:4b:e5:1b:d2:c4:a6:df:69:66:f8:d2:49:f5:c4: e7:e9:81:39:91:2b:9d:c4:49:3f:4c:62:d7:39:a9:3e:8c:ee: aa:6b:7e:4f:ae:dd:82:b5:06:d9:67:2b:75:f7:df:3b:3a:d1: c4:2b:95:9b:e6:de:1f:52:5c:8a:73:dd:48:0f:b8:4b:dd:24: 24:91:f0:f6:7d:0e:56:c3:44:f9:1d:ce:77:65:59:7e:56:2a: 2b:ad:75:71:88:d5:49:10:a0:f1:7a:35:fd:96:fb:ae:51:c7: 60:82:de:7b:08:7b:83:e8:a1:ba:34:28:80:04:22:96:8f:7b: 21:5d:ba:3a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZrqSHoBCAjmaV8GpHnxZO9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjUxMjA0MTY1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjRiZjJjMTA5Zjg0ZDZlMGJmNjU5MDRlZGI2MWMzNmE5OTc2MzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphCTGCAxovuxEy3iiSeuh+qfsMlE H8xw9B0daGP3djWeoH5xUBfg5rOvpfA2/TvXYAMt7JCUeZqnet7GnKq05hqVXe6q yrI0vw1RbYO7eY8SxsuTbZxTHbBfrPVx349PMDbLNL1XpDu7OoeSX0fwtkGlNlzo dRDYgNUJlnIr8ktpn10pcVZHir8I4jVt6TlwyocqhnFFeU2MqLWqUyA2+sMKS7CR uDWXsMV5eyL8xs1nCT5hR80/VUlN+xiALQU42yb+Wduwy7kH+uRXey7CbyuGDNNi t+sOqVWT1SMf8CmGmt7H4DebYP1yHITSRPfXcbFIBLOwo2N3FSBkHwNfXwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJZL8sEJ+E1uC/ZZBO22HDapl2NGMB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvbGt2eXdRbjRUVzRMOWxrRTdiWWNOcW1YWTBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw0ggMA8E AgACMAkDBwAqFK4AAAAwDQYJKoZIhvcNAQELBQADggEBAEJvYGVw1M9mxSECAUxb WjkbxVgwj0xkPn//DJSau7UcZFVOQoJS8l+bigax7FLDlAYNos49Ta9c3v24hF4n qXXrSZ7Rp+oX7IoCjor2JJfNp7Umy3q/gyPsz2teRhKRQ7ui+hRxPnxVOv0g3Owy OcvV9Ovbyl5cYCW48hmuYsSM18xL5RvSxKbfaWb40kn1xOfpgTmRK53EST9MYtc5 qT6M7qprfk+u3YK1BtlnK3X33zs60cQrlZvm3h9SXIpz3UgPuEvdJCSR8PZ9DlbD RPkdzndlWX5WKiutdXGI1UkQoPF6Nf2W+65Rx2CC3nsIe4Poobo0KIAEIpaPeyFd ujo= -----END CERTIFICATE-----Generated at Sun Dec 7 03:34:10 2025 by rpki-client