This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/XNNLmF6xYLzYM5AanU02Pset_Q0.roa File: XNNLmF6xYLzYM5AanU02Pset_Q0.roa (raw, json) Hash identifier: HlxBuNjrBjrN/3xEMV5/reH8Pvrb165mYX7ZjyMcf4M= Subject key identifier: 5C:D3:4B:98:5E:B1:60:BC:D8:33:90:1A:9D:4D:36:3E:C7:AD:FD:0D Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Certificate serial: 019AC9D487C3645C75A08F5D06B884355971 Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/XNNLmF6xYLzYM5AanU02Pset_Q0.roa Signing time: Fri 28 Nov 2025 09:39:00 +0000 ROA not before: Fri 28 Nov 2025 09:39:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212725 IP address blocks: 2001:67c:24b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:d4:87:c3:64:5c:75:a0:8f:5d:06:b8:84:35:59:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Validity Not Before: Nov 28 09:39:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5cd34b985eb160bcd833901a9d4d363ec7adfd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:d6:7d:79:e1:d9:76:7d:ff:06:01:39:ca: 70:c9:fb:ca:42:ab:3e:58:bc:fe:8c:70:0c:89:ad: be:00:f3:68:ca:87:13:ac:37:cd:ab:84:6c:c6:c1: 23:15:0b:d5:29:7f:9c:9f:08:23:0a:6d:ab:0c:8a: d2:9a:43:ff:f5:f8:43:66:29:b4:06:eb:4e:7d:bd: e6:8e:b5:5c:57:62:38:9c:44:29:8e:3c:97:1f:f3: f8:2d:0e:04:69:5c:c3:43:a5:34:91:6e:41:ed:8b: d5:3e:0e:c3:d2:cc:4f:a2:23:31:26:84:83:21:40: 8a:4d:14:b1:d3:6d:8a:c5:0c:2f:de:70:fa:9a:cb: 28:7d:5e:a9:b0:5a:aa:4a:f1:94:a4:9c:ae:44:d0: 0e:c5:56:69:5c:3d:bc:d7:e8:7c:1d:a0:97:72:0f: 1a:7c:10:3b:29:a6:ee:a7:45:24:4b:89:22:5e:d3: 35:0b:e9:b8:05:f4:ab:71:52:a4:0d:76:1c:ce:12: c1:84:ae:fe:c6:67:10:0c:45:36:af:1d:36:50:ab: 21:ed:17:ce:ff:34:48:1e:8a:fc:2b:45:a6:ec:56: a7:68:89:d8:a3:db:78:08:6b:84:17:6b:7b:3c:6d: 4c:26:e6:d7:5c:99:7a:8e:c8:07:6a:45:a2:54:3a: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D3:4B:98:5E:B1:60:BC:D8:33:90:1A:9D:4D:36:3E:C7:AD:FD:0D X509v3 Authority Key Identifier: keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/XNNLmF6xYLzYM5AanU02Pset_Q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:24b8::/48 Signature Algorithm: sha256WithRSAEncryption 53:6c:7f:37:5c:c7:9c:0a:c8:ed:55:70:0e:98:5e:15:08:2c: 1c:c8:ca:22:3e:8c:1e:ec:f7:05:5d:b7:bb:d3:a5:c0:2c:9f: be:65:7d:4a:d7:12:90:03:a2:1b:01:95:bf:42:40:8a:bf:93: a7:7e:21:b0:ee:42:1a:a0:13:8a:82:78:cc:d4:c0:7e:29:c5: 30:84:15:2e:fd:1f:8c:ec:92:50:dc:5e:1c:16:98:78:d7:ca: 3e:6a:6e:4d:0f:d9:b0:b1:e1:43:12:bd:5a:ba:88:85:05:63: 8b:be:a5:2d:2c:7c:95:b3:45:9c:6c:d4:eb:1a:e0:ca:c5:6c: b7:e6:b1:31:a1:f5:d2:35:8d:72:69:bb:5d:dc:23:e1:87:47: bb:f5:26:49:e4:c5:26:bc:6a:70:0d:a1:53:d0:3a:2a:74:0b: ef:62:e3:37:a2:33:13:a0:c2:62:c6:81:55:9a:7e:c9:22:88: 2c:7e:95:c3:e4:e8:38:22:a7:ba:00:28:b2:11:39:8e:80:8b: 44:3d:af:6f:5a:59:20:f8:48:e9:92:0c:fb:55:05:89:c3:3a: 40:cd:67:9a:5e:fa:21:be:80:7f:2a:fb:6c:9c:1c:a8:5e:85: c0:af:73:e7:f4:2f:5b:9b:92:6a:2a:af:d1:99:34:85:31:7a: c4:8d:74:fd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrJ1IfDZFx1oI9dBriENVlxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDNlODg4YzIyM2IzYmZhZTgxOWIyMjBmZmIyNWYyNmYx YzJmNDgwHhcNMjUxMTI4MDkzOTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2QzNGI5ODVlYjE2MGJjZDgzMzkwMWE5ZDRkMzYzZWM3YWRmZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaXWfXnh2XZ9/wYBOcpwyfvKQqs+ WLz+jHAMia2+APNoyocTrDfNq4RsxsEjFQvVKX+cnwgjCm2rDIrSmkP/9fhDZim0 ButOfb3mjrVcV2I4nEQpjjyXH/P4LQ4EaVzDQ6U0kW5B7YvVPg7D0sxPoiMxJoSD IUCKTRSx022KxQwv3nD6mssofV6psFqqSvGUpJyuRNAOxVZpXD281+h8HaCXcg8a fBA7Kabup0UkS4kiXtM1C+m4BfSrcVKkDXYczhLBhK7+xmcQDEU2rx02UKsh7RfO /zRIHor8K0Wm7FanaInYo9t4CGuEF2t7PG1MJubXXJl6jsgHakWiVDpLbwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFzTS5hesWC82DOQGp1NNj7Hrf0NMB8GA1UdIwQY MBaAFDoD6IjCI7O/roGbIg/7JfJvHC9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDIt ODQ4MTA0MmU5YTM1LzEvWE5OTG1GNnhZTHpZTTVBYW5VMDJQc2V0X1EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDItODQ4MTA0MmU5YTM1 LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCS4 MA0GCSqGSIb3DQEBCwUAA4IBAQBTbH83XMecCsjtVXAOmF4VCCwcyMoiPowe7PcF Xbe706XALJ++ZX1K1xKQA6IbAZW/QkCKv5OnfiGw7kIaoBOKgnjM1MB+KcUwhBUu /R+M7JJQ3F4cFph418o+am5ND9mwseFDEr1auoiFBWOLvqUtLHyVs0WcbNTrGuDK xWy35rExofXSNY1yabtd3CPhh0e79SZJ5MUmvGpwDaFT0DoqdAvvYuM3ojMToMJi xoFVmn7JIogsfpXD5Og4Iqe6ACiyETmOgItEPa9vWlkg+Ejpkgz7VQWJwzpAzWea XvohvoB/KvtsnByoXoXAr3Pn9C9bm5JqKq/RmTSFMXrEjXT9 -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:07 2025 by rpki-client