This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/lSAFi0AS7lwc80_GiyN1SVbyEjE.roa File: lSAFi0AS7lwc80_GiyN1SVbyEjE.roa (raw, json) Hash identifier: IpNC6H+wtSzqWhKKjTe24YQSqbQnWBRVcmkv2jnHdus= Subject key identifier: 95:20:05:8B:40:12:EE:5C:1C:F3:4F:C6:8B:23:75:49:56:F2:12:31 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019ADE6CDF4B295A961E983C6F9B04F059AA Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/lSAFi0AS7lwc80_GiyN1SVbyEjE.roa Signing time: Tue 02 Dec 2025 09:37:48 +0000 ROA not before: Tue 02 Dec 2025 09:37:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215023 IP address blocks: 2a0f:7802:e2bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:6c:df:4b:29:5a:96:1e:98:3c:6f:9b:04:f0:59:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Dec 2 09:37:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9520058b4012ee5c1cf34fc68b23754956f21231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:22:71:24:e3:35:90:5b:99:05:c0:8e:30: 34:0b:72:97:9c:63:96:2a:8d:3e:e5:17:e6:77:0a: 96:e7:41:3f:90:c7:e2:04:88:e9:7e:78:a7:91:ff: ad:0a:a7:4a:76:cd:d2:1e:03:81:14:2e:dc:73:de: 28:e9:cf:2d:34:5b:bf:e2:43:cc:a4:19:82:00:d5: 7c:3b:90:48:2d:31:4c:8d:57:e2:e0:fd:97:3c:4d: 7b:56:85:62:b2:fe:b6:5b:41:77:2b:d7:87:92:48: 0f:16:07:a1:71:36:6d:ce:ea:b0:e6:13:27:63:10: dd:09:25:cf:65:60:c0:b9:c3:1c:79:c8:37:f8:70: dc:a6:8c:3f:4b:4d:84:76:9e:c7:2a:77:71:ec:30: ca:40:e5:31:a6:04:28:13:9d:dd:79:8b:42:20:9a: cd:47:08:ad:16:d4:a5:47:33:0c:a9:b8:d2:7d:19: 27:5d:43:1e:ca:ab:f1:f4:d3:d8:93:0b:30:ec:93: 1b:fd:95:f7:01:2b:72:a4:d5:cc:9d:f3:00:aa:4c: e6:06:f1:3e:ce:19:7d:3e:dd:21:9f:b6:8f:8d:8d: 4b:5b:78:6b:97:94:83:01:98:f6:41:90:f4:69:ee: 95:2b:c6:12:6b:0e:11:fd:33:31:73:30:9d:a6:eb: 8f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:20:05:8B:40:12:EE:5C:1C:F3:4F:C6:8B:23:75:49:56:F2:12:31 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/lSAFi0AS7lwc80_GiyN1SVbyEjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e2bf::/48 Signature Algorithm: sha256WithRSAEncryption 25:31:1e:bc:a0:57:dc:63:f9:ab:18:fd:2d:d3:bd:ba:1c:c1: e5:cc:ba:ff:6b:0d:e6:6e:29:39:f1:61:ad:67:4e:b6:2b:f1: 51:fe:81:26:81:e3:9e:59:dd:a9:d8:6d:92:69:7e:a2:62:f5: 63:58:88:01:10:51:ee:a1:e8:f5:c0:06:93:94:90:e2:44:f1: 2b:14:99:56:0b:f6:cf:89:65:93:42:52:17:3b:e7:18:58:a8: 7c:68:60:c6:3b:3b:73:55:fd:c0:e9:a9:fc:89:04:c1:3b:17: 28:19:2f:80:da:a9:ae:a6:30:e5:58:3b:0e:bb:bd:c4:a3:b8: 04:3c:c1:7a:44:bb:ff:0e:3c:c0:61:ad:02:92:27:9e:aa:c6: 9a:02:ae:52:6c:3c:65:48:aa:12:00:a0:c8:fb:4f:ea:2b:67: 45:86:0a:6e:39:c1:41:ec:7a:fd:e4:0a:cf:87:a2:cb:e0:61: 36:c9:35:ee:00:c9:3e:80:5e:b6:85:46:d9:9f:78:50:32:a8: 6f:c4:4d:27:1d:f3:db:33:f9:84:0f:54:80:40:1d:95:c4:bd: 01:9b:89:6b:80:da:b6:db:28:b5:8e:51:95:e6:b2:0e:32:75: c4:e9:7b:c3:14:32:94:f0:c3:ac:ba:cc:dc:45:d3:4d:c8:64: bc:1b:e7:bf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrebN9LKVqWHpg8b5sE8FmqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjUxMjAyMDkzNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTIwMDU4YjQwMTJlZTVjMWNmMzRmYzY4YjIzNzU0OTU2ZjIxMjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfgicSTjNZBbmQXAjjA0C3KXnGOW Ko0+5RfmdwqW50E/kMfiBIjpfninkf+tCqdKds3SHgOBFC7cc94o6c8tNFu/4kPM pBmCANV8O5BILTFMjVfi4P2XPE17VoVisv62W0F3K9eHkkgPFgehcTZtzuqw5hMn YxDdCSXPZWDAucMcecg3+HDcpow/S02Edp7HKndx7DDKQOUxpgQoE53deYtCIJrN RwitFtSlRzMMqbjSfRknXUMeyqvx9NPYkwsw7JMb/ZX3AStypNXMnfMAqkzmBvE+ zhl9Pt0hn7aPjY1LW3hrl5SDAZj2QZD0ae6VK8YSaw4R/TMxczCdpuuPXwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJUgBYtAEu5cHPNPxosjdUlW8hIxMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvbFNBRmkwQVM3bHdjODBfR2l5TjFTVmJ5RWpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg94AuK/ MA0GCSqGSIb3DQEBCwUAA4IBAQAlMR68oFfcY/mrGP0t0726HMHlzLr/aw3mbik5 8WGtZ062K/FR/oEmgeOeWd2p2G2SaX6iYvVjWIgBEFHuoej1wAaTlJDiRPErFJlW C/bPiWWTQlIXO+cYWKh8aGDGOztzVf3A6an8iQTBOxcoGS+A2qmupjDlWDsOu73E o7gEPMF6RLv/DjzAYa0CkieeqsaaAq5SbDxlSKoSAKDI+0/qK2dFhgpuOcFB7Hr9 5ArPh6LL4GE2yTXuAMk+gF62hUbZn3hQMqhvxE0nHfPbM/mED1SAQB2VxL0Bm4lr gNq22yi1jlGV5rIOMnXE6XvDFDKU8MOsuszcRdNNyGS8G+e/ -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:26 2025 by rpki-client