This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LsS3bacEY2Pdkf_EEkl7KW_4UB0.roa File: LsS3bacEY2Pdkf_EEkl7KW_4UB0.roa (raw, json) Hash identifier: JHyRmqhF9VDmLo56crEAFEzh+9eSpqeDehl+I+celJI= Subject key identifier: 2E:C4:B7:6D:A7:04:63:63:DD:91:FF:C4:12:49:7B:29:6F:F8:50:1D Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B46F202C06B7E81B9F06E97263D2EDD04 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LsS3bacEY2Pdkf_EEkl7KW_4UB0.roa Signing time: Mon 22 Dec 2025 16:43:44 +0000 ROA not before: Mon 22 Dec 2025 16:43:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207888 IP address blocks: 2a0e:46c3::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:f2:02:c0:6b:7e:81:b9:f0:6e:97:26:3d:2e:dd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Dec 22 16:43:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2ec4b76da7046363dd91ffc412497b296ff8501d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:1e:67:f4:07:16:47:95:63:ce:b8:1d:4f: 6e:2c:5f:73:84:a2:93:cc:bb:30:ed:71:c6:2c:3d: 4e:de:ee:61:66:a7:42:ee:44:4b:d9:60:db:6f:83: 33:f4:85:26:0b:74:e2:d4:1d:1d:63:ad:32:9e:49: a9:9d:4c:11:26:4b:ca:68:76:dc:28:ac:56:d4:d6: 52:b2:08:a2:ac:8e:be:dd:97:ed:cf:87:63:d5:8c: b7:f4:8c:ba:d0:05:40:8b:e9:0c:99:8a:df:8a:5f: d0:c8:97:82:53:be:34:94:1e:47:ce:4e:4e:f6:6a: c5:ff:1f:2a:8e:4a:dc:5b:4f:ca:54:a8:f4:c3:8c: fa:3b:b1:c7:e5:ce:9c:97:cf:8f:b4:8e:af:30:ed: cd:d1:d9:91:51:21:aa:18:54:91:51:61:20:67:31: cb:f2:0b:fa:95:72:a6:8f:7a:f7:40:e5:24:39:77: 57:37:6f:8b:7c:bd:e1:b2:3c:7a:3a:a8:3f:c2:de: 94:1b:a9:e3:0b:ff:fe:41:75:69:5e:c1:bc:45:21: f5:e0:11:12:91:2e:43:2d:65:77:a8:db:e6:69:cf: df:b7:77:0b:d0:51:ad:8a:1e:d7:73:04:e6:6d:3b: 5a:dd:33:f1:38:5f:05:15:a2:ac:d4:d4:00:53:90: d2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C4:B7:6D:A7:04:63:63:DD:91:FF:C4:12:49:7B:29:6F:F8:50:1D X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LsS3bacEY2Pdkf_EEkl7KW_4UB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:46c3::/40 Signature Algorithm: sha256WithRSAEncryption cd:15:46:73:ad:a9:2c:33:ec:ba:54:6d:2c:28:0d:6a:b4:ac: c3:55:38:a0:ff:19:cf:6a:aa:f9:e7:f0:e4:1d:7a:c2:d1:12: 3c:15:99:85:1a:f9:2e:0d:7a:11:3e:dd:04:4f:28:4f:2b:8f: 2e:99:fe:44:f5:80:7c:9b:91:d7:20:4a:2c:40:05:60:8e:93: 7c:62:25:16:6d:be:f5:63:a8:ba:e1:d2:58:85:03:5f:51:02: af:d7:bd:74:a3:58:61:31:fc:62:5f:b1:f7:00:6c:81:9a:50: d0:10:aa:fc:f1:78:ee:19:a1:92:8c:cb:e2:2d:3c:c7:b4:a7: c7:c0:1b:fd:ee:01:e3:6a:65:00:c5:17:ba:23:00:b8:43:15: 74:2f:d8:44:65:b2:a5:ae:3c:cc:f1:a7:d5:d4:79:c6:f3:cb: 37:b3:a8:d2:79:70:2a:9c:47:fa:36:43:b2:d0:c8:5e:15:28: 1f:2b:a6:b7:2f:a7:c0:94:a6:6c:d5:12:0a:a0:77:d4:5e:23: b6:a5:e2:b2:d7:14:84:79:9a:4e:6f:01:c5:a1:86:0e:a2:c2: 8c:6e:2a:c1:b7:df:51:03:85:7f:ad:f5:c8:c3:59:fe:e1:86: fe:b2:da:a9:18:bd:9d:69:4f:53:9a:07:b1:c9:65:b8:7e:fd: e2:b5:d7:18 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZtG8gLAa36BufBulyY9Lt0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMjIyMTY0MzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWM0Yjc2ZGE3MDQ2MzYzZGQ5MWZmYzQxMjQ5N2IyOTZmZjg1MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbweZ/QHFkeVY864HU9uLF9zhKKT zLsw7XHGLD1O3u5hZqdC7kRL2WDbb4Mz9IUmC3Ti1B0dY60ynkmpnUwRJkvKaHbc KKxW1NZSsgiirI6+3Zftz4dj1Yy39Iy60AVAi+kMmYrfil/QyJeCU740lB5Hzk5O 9mrF/x8qjkrcW0/KVKj0w4z6O7HH5c6cl8+PtI6vMO3N0dmRUSGqGFSRUWEgZzHL 8gv6lXKmj3r3QOUkOXdXN2+LfL3hsjx6Oqg/wt6UG6njC//+QXVpXsG8RSH14BES kS5DLWV3qNvmac/ft3cL0FGtih7XcwTmbTta3TPxOF8FFaKs1NQAU5DSMwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFC7Et22nBGNj3ZH/xBJJeylv+FAdMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvTHNTM2JhY0VZMlBka2ZfRUVrbDdLV180VUIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg5GwwAw DQYJKoZIhvcNAQELBQADggEBAM0VRnOtqSwz7LpUbSwoDWq0rMNVOKD/Gc9qqvnn 8OQdesLREjwVmYUa+S4NehE+3QRPKE8rjy6Z/kT1gHybkdcgSixABWCOk3xiJRZt vvVjqLrh0liFA19RAq/XvXSjWGEx/GJfsfcAbIGaUNAQqvzxeO4ZoZKMy+ItPMe0 p8fAG/3uAeNqZQDFF7ojALhDFXQv2ERlsqWuPMzxp9XUecbzyzezqNJ5cCqcR/o2 Q7LQyF4VKB8rprcvp8CUpmzVEgqgd9ReI7al4rLXFIR5mk5vAcWhhg6iwoxuKsG3 31EDhX+t9cjDWf7hhv6y2qkYvZ1pT1OaB7HJZbh+/eK11xg= -----END CERTIFICATE-----Generated at Sat Dec 27 00:40:35 2025 by rpki-client