This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/PP1_JMN7o3eQJTAVw4rJH9gu14o.roa File: PP1_JMN7o3eQJTAVw4rJH9gu14o.roa (raw, json) Hash identifier: G1K8GTtfUKhA972s1dfffX97stR9/k7Xacyj/AIs1tw= Subject key identifier: 3C:FD:7F:24:C3:7B:A3:77:90:25:30:15:C3:8A:C9:1F:D8:2E:D7:8A Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019A810A75904124C174AA095BAEAEF7ADD5 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/PP1_JMN7o3eQJTAVw4rJH9gu14o.roa Signing time: Fri 14 Nov 2025 06:25:37 +0000 ROA not before: Fri 14 Nov 2025 06:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151373 IP address blocks: 2a0b:21c1:6028::/48 maxlen: 48 2a0b:21c1:6029::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:0a:75:90:41:24:c1:74:aa:09:5b:ae:ae:f7:ad:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Nov 14 06:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3cfd7f24c37ba37790253015c38ac91fd82ed78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:33:95:c3:2e:f1:f5:0f:f0:5d:ec:e0:1e:b8: ed:6c:d3:19:7b:b6:85:70:cc:59:fb:09:6b:7b:1c: a9:51:25:c4:f4:7a:e2:21:93:60:c3:69:a2:45:04: 3e:58:9e:02:71:43:33:de:ef:64:57:40:d1:b8:b9: 53:ab:77:31:a6:0c:21:aa:f9:36:be:33:37:3e:d7: b8:b8:b4:25:ec:f4:cd:2f:37:66:80:fa:39:83:32: 87:32:62:11:97:e4:03:2c:63:2f:ce:eb:06:b4:21: 79:46:bc:1a:c0:ab:a1:94:57:41:70:9b:dd:c5:6a: 47:8d:2b:5e:21:3e:f9:27:76:b5:33:2a:e7:4b:8d: 69:91:65:d8:19:01:30:d1:b1:0f:da:a1:23:6d:ba: 14:d1:4c:fe:38:ec:f1:70:f7:34:18:bc:af:63:44: 46:fb:5e:be:40:43:c3:6c:ac:3d:95:d3:27:cb:65: f3:c7:b3:74:51:67:66:6e:c2:7d:11:51:5f:f7:d9: 5b:9a:96:6c:20:4b:5b:5e:af:64:a8:89:a7:ea:be: a6:18:74:0a:1a:b6:8a:ef:d0:81:ba:f6:40:62:2e: f1:ac:30:c8:ae:2a:1e:3b:ed:fe:85:6e:7c:3a:4c: 2d:fd:3c:f9:1f:77:39:d7:41:6d:9b:5c:ec:6a:18: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FD:7F:24:C3:7B:A3:77:90:25:30:15:C3:8A:C9:1F:D8:2E:D7:8A X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/PP1_JMN7o3eQJTAVw4rJH9gu14o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:21c1:6028::/47 Signature Algorithm: sha256WithRSAEncryption 7a:20:83:97:b3:2e:19:00:34:69:36:a1:70:3a:33:30:40:f4: 1e:9c:d5:71:e3:88:99:25:f7:50:73:a9:f2:2e:3c:2a:36:4e: 30:5f:0e:90:53:ce:44:18:26:ae:fc:75:66:37:94:7b:3f:02: 50:f2:14:1a:3f:39:9e:28:4f:1e:aa:a2:34:4a:f0:9a:f3:1f: a7:8a:50:91:31:cb:5c:ac:76:74:28:b0:fb:0e:47:3a:0c:d8: ac:25:59:4a:01:92:1a:91:94:93:8e:c8:5e:e3:f8:05:86:80: bd:4f:3a:a6:d6:f8:81:00:06:c6:78:ee:b9:fa:5e:1d:3a:60: 0d:38:62:c2:0c:a0:ff:4b:94:fc:07:da:16:8b:cf:a9:9c:e5: c0:7c:65:b6:b7:65:4d:d2:d0:53:1a:96:f5:62:ec:8e:57:e2: e2:c0:3e:3a:6e:54:41:09:70:af:15:1b:2f:a2:ab:c1:37:d8: 2e:d0:a4:58:3f:60:1c:14:d6:a0:a6:d1:aa:41:73:95:a2:d7: 28:60:60:23:d6:48:07:de:d8:1b:7c:ae:0a:e9:be:18:d8:10: 82:02:3b:f0:87:a4:71:3c:1f:af:71:f9:55:7b:f2:36:2a:0d: 3b:64:1f:9e:58:b8:88:cf:ac:d0:3a:d7:fc:35:2a:42:98:ac: 8b:7c:27:3b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqBCnWQQSTBdKoJW66u963VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjUxMTE0MDYyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2ZkN2YyNGMzN2JhMzc3OTAyNTMwMTVjMzhhYzkxZmQ4MmVkNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TOVwy7x9Q/wXezgHrjtbNMZe7aF cMxZ+wlrexypUSXE9HriIZNgw2miRQQ+WJ4CcUMz3u9kV0DRuLlTq3cxpgwhqvk2 vjM3Pte4uLQl7PTNLzdmgPo5gzKHMmIRl+QDLGMvzusGtCF5RrwawKuhlFdBcJvd xWpHjSteIT75J3a1MyrnS41pkWXYGQEw0bEP2qEjbboU0Uz+OOzxcPc0GLyvY0RG +16+QEPDbKw9ldMny2Xzx7N0UWdmbsJ9EVFf99lbmpZsIEtbXq9kqImn6r6mGHQK GraK79CBuvZAYi7xrDDIrioeO+3+hW58Okwt/Tz5H3c510Ftm1zsahjPLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDz9fyTDe6N3kCUwFcOKyR/YLteKMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvUFAxX0pNTjdvM2VRSlRBVnc0ckpIOWd1MTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgshwWAo MA0GCSqGSIb3DQEBCwUAA4IBAQB6IIOXsy4ZADRpNqFwOjMwQPQenNVx44iZJfdQ c6nyLjwqNk4wXw6QU85EGCau/HVmN5R7PwJQ8hQaPzmeKE8eqqI0SvCa8x+nilCR MctcrHZ0KLD7Dkc6DNisJVlKAZIakZSTjshe4/gFhoC9Tzqm1viBAAbGeO65+l4d OmANOGLCDKD/S5T8B9oWi8+pnOXAfGW2t2VN0tBTGpb1YuyOV+LiwD46blRBCXCv FRsvoqvBN9gu0KRYP2AcFNagptGqQXOVotcoYGAj1kgH3tgbfK4K6b4Y2BCCAjvw h6RxPB+vcflVe/I2Kg07ZB+eWLiIz6zQOtf8NSpCmKyLfCc7 -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:29 2025 by rpki-client