This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/521vPqsNAtwuNsJyI_rQBpdX-Uc.roa File: 521vPqsNAtwuNsJyI_rQBpdX-Uc.roa (raw, json) Hash identifier: YfRhw2unUaF4LO6eWR08wiLBbOBW6D8h7YemWU7OYzE= Subject key identifier: E7:6D:6F:3E:AB:0D:02:DC:2E:36:C2:72:23:FA:D0:06:97:57:F9:47 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B46F2033E25A9D7BD1E99E7D62D73E11A Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/521vPqsNAtwuNsJyI_rQBpdX-Uc.roa Signing time: Mon 22 Dec 2025 16:43:44 +0000 ROA not before: Mon 22 Dec 2025 16:43:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208717 IP address blocks: 2a0e:46c3:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:f2:03:3e:25:a9:d7:bd:1e:99:e7:d6:2d:73:e1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Dec 22 16:43:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e76d6f3eab0d02dc2e36c27223fad0069757f947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:c4:de:3c:58:ab:76:1c:fe:95:a6:74:20: dc:23:9d:d9:63:2f:bd:c7:3d:50:13:d2:26:6b:95: d7:ce:33:4a:cb:76:7e:0a:d6:8d:90:c5:fb:61:10: 03:19:3a:bc:9e:84:7d:18:a9:2f:bf:ce:42:be:ce: dc:9c:99:95:af:d2:aa:61:56:47:f7:a3:81:be:a0: 0b:6d:35:7f:fc:d2:51:11:9c:ce:1c:56:f7:bd:a8: fb:fd:91:b9:b0:13:93:d1:e4:65:38:66:13:b6:bf: 04:43:8c:24:97:ad:86:69:0b:9c:49:53:e5:78:34: 6b:39:ee:a4:4d:dd:9d:04:df:4c:db:bd:ae:4d:60: 46:92:0b:6f:3d:79:48:cd:32:54:5b:38:f5:3b:1f: f3:c8:92:c3:54:1a:88:eb:e9:53:37:b0:4e:a9:71: a4:09:3e:ae:df:95:b8:3f:73:5b:a6:38:1e:fd:b0: ac:99:fe:41:14:13:09:4d:c5:3a:68:93:b4:84:55: b7:c8:5a:3f:d7:6f:b1:8b:79:e4:68:f1:0a:26:23: c0:a2:0b:ec:0f:73:89:88:c3:9f:3e:05:c1:e9:b7: 76:06:ce:65:7a:84:99:73:2f:32:5c:cd:22:e1:6c: dc:09:cf:96:c2:f1:6e:0f:af:56:4a:68:12:0f:05: 38:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6D:6F:3E:AB:0D:02:DC:2E:36:C2:72:23:FA:D0:06:97:57:F9:47 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/521vPqsNAtwuNsJyI_rQBpdX-Uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:46c3:200::/40 Signature Algorithm: sha256WithRSAEncryption 19:53:c8:84:60:b7:59:60:f5:48:33:f3:16:4f:dc:d6:7f:9b: a2:33:e1:95:41:93:2d:5f:85:8a:2b:96:db:6c:c5:73:6a:9e: 69:d1:0f:af:73:e1:45:56:75:b4:07:44:e1:f5:06:1f:0f:02: 2c:5b:68:f6:11:f6:92:4b:a2:ae:3e:0f:e4:fa:23:cb:69:a1: f2:4e:3f:a4:71:3f:bb:5e:a1:11:27:e5:b7:3d:b1:55:8c:c3: ed:84:77:c1:f4:ad:d5:39:06:2d:f6:4d:13:76:a4:65:e8:5b: 58:d9:08:b8:67:13:b1:cd:d1:1c:f6:b1:20:cd:70:00:c3:2a: 77:12:8c:22:fd:04:d3:d2:69:de:be:6a:fb:7d:39:87:3e:2a: ee:e1:6a:48:d8:48:2c:11:06:4a:69:2f:2b:d3:c5:96:f9:0c: e4:01:de:90:e2:c5:94:00:72:9d:4c:ff:92:17:86:ca:dd:9d: 1d:9a:be:41:63:a7:14:d7:a8:92:fe:5f:77:2c:53:1e:9e:d6: d2:55:50:02:c9:2f:fe:91:7d:e6:91:1a:e1:b4:31:ec:10:2d: 2c:69:31:7a:03:e3:14:a1:d8:e5:39:30:b3:45:5c:7d:72:64: 4b:ae:65:6d:e9:f9:24:6a:d3:66:0f:5f:49:2e:6d:db:fe:3b: c5:1a:d4:0f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZtG8gM+JanXvR6Z59Ytc+EaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMjIyMTY0MzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzZkNmYzZWFiMGQwMmRjMmUzNmMyNzIyM2ZhZDAwNjk3NTdmOTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYLE3jxYq3Yc/pWmdCDcI53ZYy+9 xz1QE9Ima5XXzjNKy3Z+CtaNkMX7YRADGTq8noR9GKkvv85Cvs7cnJmVr9KqYVZH 96OBvqALbTV//NJREZzOHFb3vaj7/ZG5sBOT0eRlOGYTtr8EQ4wkl62GaQucSVPl eDRrOe6kTd2dBN9M272uTWBGkgtvPXlIzTJUWzj1Ox/zyJLDVBqI6+lTN7BOqXGk CT6u35W4P3Nbpjge/bCsmf5BFBMJTcU6aJO0hFW3yFo/12+xi3nkaPEKJiPAogvs D3OJiMOfPgXB6bd2Bs5leoSZcy8yXM0i4WzcCc+WwvFuD69WSmgSDwU4MQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOdtbz6rDQLcLjbCciP60AaXV/lHMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNTIxdlBxc05BdHd1TnNKeUlfclFCcGRYLVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg5GwwIw DQYJKoZIhvcNAQELBQADggEBABlTyIRgt1lg9Ugz8xZP3NZ/m6Iz4ZVBky1fhYor lttsxXNqnmnRD69z4UVWdbQHROH1Bh8PAixbaPYR9pJLoq4+D+T6I8tpofJOP6Rx P7teoREn5bc9sVWMw+2Ed8H0rdU5Bi32TRN2pGXoW1jZCLhnE7HN0Rz2sSDNcADD KncSjCL9BNPSad6+avt9OYc+Ku7hakjYSCwRBkppLyvTxZb5DOQB3pDixZQAcp1M /5IXhsrdnR2avkFjpxTXqJL+X3csUx6e1tJVUALJL/6RfeaRGuG0MewQLSxpMXoD 4xSh2OU5MLNFXH1yZEuuZW3p+SRq02YPX0kubdv+O8Ua1A8= -----END CERTIFICATE-----Generated at Sat Dec 27 00:40:35 2025 by rpki-client