This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/lSUoyhWMHbmgpoXkCra8Rs1Nn-g.roa File: lSUoyhWMHbmgpoXkCra8Rs1Nn-g.roa (raw, json) Hash identifier: 5g+dmSnMfU1SGAiBvgoR9zPzmM0+TE1oU9Nn2BXp3xI= Subject key identifier: 95:25:28:CA:15:8C:1D:B9:A0:A6:85:E4:0A:B6:BC:46:CD:4D:9F:E8 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B0C821469B9430F4BF260EBFF47617DEA Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/lSUoyhWMHbmgpoXkCra8Rs1Nn-g.roa Signing time: Thu 11 Dec 2025 08:23:30 +0000 ROA not before: Thu 11 Dec 2025 08:23:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215304 IP address blocks: 2a0f:7803:fb40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:82:14:69:b9:43:0f:4b:f2:60:eb:ff:47:61:7d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Dec 11 08:23:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=952528ca158c1db9a0a685e40ab6bc46cd4d9fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:33:6d:8d:32:a9:0b:b4:41:85:d1:cd:e6: 9e:33:c6:5d:de:36:ac:f1:09:8e:93:f2:5e:08:ee: ba:52:4e:6f:5c:d7:b1:bf:14:3f:20:33:bf:8d:06: c2:87:a2:f4:2e:cc:8c:51:59:3b:4c:e8:52:f9:6a: 8b:36:b7:61:6c:37:9f:fd:00:90:61:a9:d5:9c:1e: 57:e1:85:3c:ce:4a:3d:1b:8d:ab:e1:03:80:5b:9c: 47:50:78:bd:fc:51:33:7e:83:31:9a:bc:1e:4a:73: 17:7e:66:1f:bd:b1:f4:a8:a0:c2:b8:5a:dd:37:9e: 5c:0e:69:f7:a7:3a:37:4d:d5:9f:99:05:8e:f7:af: ab:2c:ea:96:83:53:11:ce:41:9d:82:b3:99:91:ea: 5a:58:d8:52:35:4c:17:36:23:48:df:da:ee:cc:a7: 65:69:79:1b:9a:af:75:78:e6:75:60:38:a3:ce:48: eb:d5:db:cc:65:c6:40:14:6b:21:83:0a:99:a1:7e: 52:0f:af:79:15:24:eb:0f:7c:15:1f:3d:5a:c3:ad: 34:64:12:63:7a:21:a4:ba:ba:74:83:0d:8e:03:77: 4a:f3:91:83:ce:69:ba:34:6c:e9:c3:7c:71:8f:0e: 0e:e9:82:28:e5:fe:8d:7a:d2:65:a1:ee:69:4b:b8: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:25:28:CA:15:8C:1D:B9:A0:A6:85:E4:0A:B6:BC:46:CD:4D:9F:E8 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/lSUoyhWMHbmgpoXkCra8Rs1Nn-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fb40::/44 Signature Algorithm: sha256WithRSAEncryption 87:9d:0b:b1:69:cc:6a:21:d8:59:cc:74:a0:cc:f8:15:a1:55: 6f:1c:00:39:5e:7d:29:2f:60:0c:15:25:4e:36:ee:a1:6c:bc: ba:69:cc:46:0a:c7:7c:da:52:32:c8:d7:95:81:e8:05:43:98: f3:52:28:79:6e:d7:81:2e:8b:a1:c3:9d:ce:97:9f:29:1f:a5: ce:76:6d:9a:8d:28:ee:f2:78:c4:99:8e:5b:72:cc:4c:92:fe: 21:16:7c:03:bf:c8:6a:0b:8d:b4:df:61:d7:aa:17:40:91:19: f6:07:53:40:4e:ff:d3:66:1e:4c:6a:65:03:a9:f2:eb:56:fb: 6a:ae:2e:84:41:4a:b1:2d:23:6c:03:7f:b0:52:a1:c6:de:cd: 6a:b9:4f:31:e2:de:3e:36:ed:a5:a8:f6:9c:f7:24:70:e1:a8: 48:bb:7a:95:51:6b:f6:18:41:14:8a:40:22:01:a2:3c:1b:03: 9e:67:ac:3b:c4:f1:cf:d3:dd:5b:e1:b0:b3:ad:23:bc:9b:43: 75:5d:c1:81:ad:c5:39:d8:30:ad:75:84:c2:89:c2:e2:67:f5: 33:70:43:4a:a1:ea:eb:05:9e:8a:4f:0a:ce:9c:79:cb:19:ed: 20:97:8e:81:56:f3:6f:f4:59:ab:0a:b3:91:ec:26:ed:aa:45: 2c:9b:e7:d0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsMghRpuUMPS/Jg6/9HYX3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjUxMjExMDgyMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTI1MjhjYTE1OGMxZGI5YTBhNjg1ZTQwYWI2YmM0NmNkNGQ5ZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq00zbY0yqQu0QYXRzeaeM8Zd3jas 8QmOk/JeCO66Uk5vXNexvxQ/IDO/jQbCh6L0LsyMUVk7TOhS+WqLNrdhbDef/QCQ YanVnB5X4YU8zko9G42r4QOAW5xHUHi9/FEzfoMxmrweSnMXfmYfvbH0qKDCuFrd N55cDmn3pzo3TdWfmQWO96+rLOqWg1MRzkGdgrOZkepaWNhSNUwXNiNI39ruzKdl aXkbmq91eOZ1YDijzkjr1dvMZcZAFGshgwqZoX5SD695FSTrD3wVHz1aw600ZBJj eiGkurp0gw2OA3dK85GDzmm6NGzpw3xxjw4O6YIo5f6NetJloe5pS7hNrQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJUlKMoVjB25oKaF5Aq2vEbNTZ/oMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvbFNVb3loV01IYm1ncG9Ya0NyYThSczFObi1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/tA MA0GCSqGSIb3DQEBCwUAA4IBAQCHnQuxacxqIdhZzHSgzPgVoVVvHAA5Xn0pL2AM FSVONu6hbLy6acxGCsd82lIyyNeVgegFQ5jzUih5bteBLouhw53Ol58pH6XOdm2a jSju8njEmY5bcsxMkv4hFnwDv8hqC42032HXqhdAkRn2B1NATv/TZh5MamUDqfLr Vvtqri6EQUqxLSNsA3+wUqHG3s1quU8x4t4+Nu2lqPac9yRw4ahIu3qVUWv2GEEU ikAiAaI8GwOeZ6w7xPHP091b4bCzrSO8m0N1XcGBrcU52DCtdYTCicLiZ/UzcENK oerrBZ6KTwrOnHnLGe0gl46BVvNv9FmrCrOR7CbtqkUsm+fQ -----END CERTIFICATE-----Generated at Wed Dec 17 17:00:35 2025 by rpki-client