This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/Keyyj4RlU6KIyfot_42DKFmSfoI.roa File: Keyyj4RlU6KIyfot_42DKFmSfoI.roa (raw, json) Hash identifier: aG5Y9w1gawLE6uq7HjbCvsSXt/o+A+J95s8ApYj0exc= Subject key identifier: 29:EC:B2:8F:84:65:53:A2:88:C9:FA:2D:FF:8D:83:28:59:92:7E:82 Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598 Certificate serial: 019AA3C03A016FB21B2E4FE7180825BA9011 Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/Keyyj4RlU6KIyfot_42DKFmSfoI.roa Signing time: Fri 21 Nov 2025 00:11:15 +0000 ROA not before: Fri 21 Nov 2025 00:11:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213220 IP address blocks: 212.15.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a3:c0:3a:01:6f:b2:1b:2e:4f:e7:18:08:25:ba:90:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598 Validity Not Before: Nov 21 00:11:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=29ecb28f846553a288c9fa2dff8d832859927e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:90:58:43:a6:55:e6:fd:ee:f1:40:95:3c: 21:90:cb:e7:f8:c1:b5:4f:b7:61:0c:59:83:c5:ee: e7:2e:e6:c1:3b:03:d8:78:b4:86:08:f9:6e:1b:aa: 17:a7:1b:7b:7b:f6:cb:93:9c:fb:88:86:cb:6b:55: 00:8c:3b:ac:31:e3:69:db:97:71:6e:84:4b:92:65: 78:e5:8e:40:c9:6d:32:38:87:23:f6:20:62:06:27: 7c:44:a7:41:93:88:9b:ef:92:42:c9:bf:e2:93:8f: 40:c7:0a:ad:f8:a2:e9:4c:87:9c:23:b4:06:2e:08: ad:b1:39:a2:37:a6:d6:38:37:c5:36:0d:8c:27:1b: 73:8b:7d:f0:76:bd:88:da:77:94:6f:91:55:fd:03: dd:83:34:6c:a3:41:64:5f:22:f1:fa:01:86:fd:e7: ee:be:4a:90:a1:38:b7:39:b8:c6:76:c0:16:99:57: 83:8e:29:07:f0:a5:cf:4e:b4:23:29:5c:14:b3:32: 18:82:06:f2:47:25:b6:7a:82:fd:8b:5b:13:f2:cc: 36:ea:bc:04:41:16:07:5e:48:39:bc:69:12:5c:8a: d7:6e:67:d7:10:7e:d2:31:bf:b7:f3:7d:4a:f6:0d: 9c:34:44:75:ed:73:0d:b6:91:b7:6a:0f:f5:7c:bc: 9a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EC:B2:8F:84:65:53:A2:88:C9:FA:2D:FF:8D:83:28:59:92:7E:82 X509v3 Authority Key Identifier: keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/Keyyj4RlU6KIyfot_42DKFmSfoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.15.49.0/24 Signature Algorithm: sha256WithRSAEncryption 74:d5:ba:09:54:7c:2b:0c:90:b4:8e:1e:07:01:8b:f5:7c:a3: 8a:69:3a:06:45:de:6f:79:dd:02:f1:52:6a:f5:b1:69:cb:6d: 46:cd:f8:0b:d6:50:d6:94:aa:e3:b5:39:0c:3a:35:fb:84:ec: 85:42:64:74:1b:34:fc:fb:67:3b:d7:fa:a3:a9:da:50:29:8d: 67:b9:bf:52:f6:46:87:eb:67:13:3e:92:c5:5d:07:5e:cc:fc: 61:20:5f:d9:c5:6d:25:cc:bb:b2:49:8c:8f:75:9c:04:7b:60: 8c:c9:b2:71:5f:07:9b:4a:3f:b8:d9:ae:cd:98:80:25:19:58: 7a:29:86:d2:b6:2f:a1:a9:e8:38:99:50:3d:c6:de:8e:45:25: ab:1e:20:3a:a9:db:3c:34:24:77:b1:91:65:c4:22:43:a9:84: 31:c3:08:c0:b0:74:7c:4f:26:e6:4f:33:ea:95:94:96:22:f1: 3e:47:f6:07:a7:c4:ec:e3:81:31:08:7e:2d:c1:84:8e:c2:8e: f8:52:db:77:76:cd:14:fb:7f:ab:00:0f:54:9a:22:e3:f0:99: 49:8b:a6:56:c8:59:7c:98:69:14:b7:a9:d0:67:9f:f9:92:34: 42:82:50:63:94:ac:1c:30:7a:41:a8:33:05:6a:80:84:b3:b2: b3:05:d3:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqjwDoBb7IbLk/nGAglupARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1 NjY1OTgwHhcNMjUxMTIxMDAxMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWVjYjI4Zjg0NjU1M2EyODhjOWZhMmRmZjhkODMyODU5OTI3ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJuQWEOmVeb97vFAlTwhkMvn+MG1 T7dhDFmDxe7nLubBOwPYeLSGCPluG6oXpxt7e/bLk5z7iIbLa1UAjDusMeNp25dx boRLkmV45Y5AyW0yOIcj9iBiBid8RKdBk4ib75JCyb/ik49Axwqt+KLpTIecI7QG LgitsTmiN6bWODfFNg2MJxtzi33wdr2I2neUb5FV/QPdgzRso0FkXyLx+gGG/efu vkqQoTi3ObjGdsAWmVeDjikH8KXPTrQjKVwUszIYggbyRyW2eoL9i1sT8sw26rwE QRYHXkg5vGkSXIrXbmfXEH7SMb+3831K9g2cNER17XMNtpG3ag/1fLyarQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCnsso+EZVOiiMn6Lf+NgyhZkn6CMB8GA1UdIwQY MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt NWVjYWZkYTQ3MWY3LzEvS2V5eWo0UmxVNktJeWZvdF80MkRLRm1TZm9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3 LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1A8xMA0G CSqGSIb3DQEBCwUAA4IBAQB01boJVHwrDJC0jh4HAYv1fKOKaToGRd5ved0C8VJq 9bFpy21GzfgL1lDWlKrjtTkMOjX7hOyFQmR0GzT8+2c71/qjqdpQKY1nub9S9kaH 62cTPpLFXQdezPxhIF/ZxW0lzLuySYyPdZwEe2CMybJxXwebSj+42a7NmIAlGVh6 KYbSti+hqeg4mVA9xt6ORSWrHiA6qds8NCR3sZFlxCJDqYQxwwjAsHR8TybmTzPq lZSWIvE+R/YHp8Ts44ExCH4twYSOwo74Utt3ds0U+3+rAA9UmiLj8JlJi6ZWyFl8 mGkUt6nQZ5/5kjRCglBjlKwcMHpBqDMFaoCEs7KzBdNI -----END CERTIFICATE-----Generated at Sat Dec 6 19:59:40 2025 by rpki-client