This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/NYMaFoViX2lAhStZm9x_grA9T18.roa File: NYMaFoViX2lAhStZm9x_grA9T18.roa (raw, json) Hash identifier: tWBC4K3jlP5jve6TzPNJrV6Z7ikcoFCQ6oxMffCuxvk= Subject key identifier: 35:83:1A:16:85:62:5F:69:40:85:2B:59:9B:DC:7F:82:B0:3D:4F:5F Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d Certificate serial: 019B2BFF4AE1C2F2C763877B39E7724B8116 Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/NYMaFoViX2lAhStZm9x_grA9T18.roa Signing time: Wed 17 Dec 2025 11:08:29 +0000 ROA not before: Wed 17 Dec 2025 11:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203020 IP address blocks: 2a06:80c0::/29 maxlen: 48 2a06:8e40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:ff:4a:e1:c2:f2:c7:63:87:7b:39:e7:72:4b:81:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d Validity Not Before: Dec 17 11:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=35831a1685625f6940852b599bdc7f82b03d4f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ac:f9:f4:a8:a7:7a:80:bc:0f:c7:07:4f:78: 61:a1:80:81:8a:61:6d:3b:e8:bd:a4:df:6b:67:38: 02:a3:24:29:6b:60:58:32:c6:e6:74:e8:1d:ce:17: 24:3c:65:6f:0f:4b:fe:18:2b:14:32:b6:24:57:a0: f1:dc:d4:38:35:b0:b7:1e:fc:6c:58:00:72:fb:66: b5:d9:de:f1:9b:d1:9b:dc:73:52:93:de:08:cd:97: 6a:ed:0f:f9:37:d2:eb:1b:a7:29:67:78:81:9f:33: 16:14:71:a3:05:c8:31:6c:dc:df:1b:d9:72:b5:bf: 24:31:55:b7:ff:6e:d6:c4:8f:39:ae:53:58:33:96: 58:7b:1b:1c:06:2f:08:49:56:02:96:24:81:ef:5e: 0d:8d:0b:b9:17:f9:5e:4f:6d:8b:f9:16:ce:0f:65: 44:78:e5:78:97:40:fa:80:ac:c5:92:db:3c:5f:00: 91:b1:c8:dd:62:87:85:cf:db:9d:ad:77:d7:d3:06: 55:cd:20:e9:e6:e5:cb:a4:13:93:39:4b:35:05:14: 86:92:a1:74:33:3e:f4:8b:8b:43:fa:6d:ed:eb:cb: 3b:2a:3b:f1:ec:6c:02:a7:9d:5a:4a:b5:e8:01:2c: 85:62:11:90:57:35:98:56:2a:9f:03:67:4e:84:42: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:83:1A:16:85:62:5F:69:40:85:2B:59:9B:DC:7F:82:B0:3D:4F:5F X509v3 Authority Key Identifier: keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/NYMaFoViX2lAhStZm9x_grA9T18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:80c0::/29 2a06:8e40::/29 Signature Algorithm: sha256WithRSAEncryption 11:88:a9:a6:09:37:62:3c:db:78:22:07:93:ec:e9:75:3a:a4: 03:86:49:04:5f:b8:d2:1b:e0:eb:7e:5e:2f:da:79:54:39:f2: 67:78:ee:ad:51:95:25:e2:06:1c:88:6d:c3:55:19:86:ab:82: 9b:f0:51:e1:89:83:72:43:b0:c5:47:86:2c:1c:7e:c8:89:a2: 88:52:6e:65:b6:8e:8e:ff:ed:b0:12:2f:00:63:58:3a:7f:8a: 61:8c:db:77:64:a6:a8:9f:b5:ae:4d:90:97:2c:93:a1:57:ab: da:f4:37:f0:74:0b:cc:6b:5a:d1:a0:1b:70:32:41:f0:a9:8d: 89:12:fd:0f:72:05:68:a8:a1:60:16:8a:a7:84:d9:68:53:ef: 21:8f:ae:0a:f0:85:ad:49:c5:88:03:17:2e:a0:30:ab:a2:12: 8b:3b:3e:71:7e:fa:12:87:69:fd:6a:58:37:ff:4a:c2:80:a1: 8c:6c:58:4d:83:cf:ab:2d:69:7c:b3:ce:e3:b7:02:11:38:a1: 34:cf:2b:12:d0:24:eb:b9:8c:f8:42:cc:24:d0:3f:a6:9b:39: 5b:ef:9c:94:b4:32:58:3e:ee:79:70:1f:84:44:47:5a:60:bf: 07:7f:14:4e:81:35:eb:c3:62:2b:1f:90:45:7d:cb:83:80:47: 3a:c8:37:9a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsr/0rhwvLHY4d7OedyS4EWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTMxNmZjNGE4M2IzZDAzZTI5NzVmOGJlYzI3MGNiMGY0 ZWZiMWQwHhcNMjUxMjE3MTEwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTgzMWExNjg1NjI1ZjY5NDA4NTJiNTk5YmRjN2Y4MmIwM2Q0ZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Kz59KineoC8D8cHT3hhoYCBimFt O+i9pN9rZzgCoyQpa2BYMsbmdOgdzhckPGVvD0v+GCsUMrYkV6Dx3NQ4NbC3Hvxs WABy+2a12d7xm9Gb3HNSk94IzZdq7Q/5N9LrG6cpZ3iBnzMWFHGjBcgxbNzfG9ly tb8kMVW3/27WxI85rlNYM5ZYexscBi8ISVYCliSB714NjQu5F/leT22L+RbOD2VE eOV4l0D6gKzFkts8XwCRscjdYoeFz9udrXfX0wZVzSDp5uXLpBOTOUs1BRSGkqF0 Mz70i4tD+m3t68s7Kjvx7GwCp51aSrXoASyFYhGQVzWYViqfA2dOhELdkQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDWDGhaFYl9pQIUrWZvcf4KwPU9fMB8GA1UdIwQY MBaAFK9TFvxKg7PQPil1+L7CcMsPTvsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEt ZDEyMDVlMGMwY2NlLzEvTllNYUZvVmlYMmxBaFN0Wm05eF9nckE5VDE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEtZDEyMDVlMGMwY2Nl LzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgaAwAMF AyoGjkAwDQYJKoZIhvcNAQELBQADggEBABGIqaYJN2I823giB5Ps6XU6pAOGSQRf uNIb4Ot+Xi/aeVQ58md47q1RlSXiBhyIbcNVGYargpvwUeGJg3JDsMVHhiwcfsiJ oohSbmW2jo7/7bASLwBjWDp/imGM23dkpqifta5NkJcsk6FXq9r0N/B0C8xrWtGg G3AyQfCpjYkS/Q9yBWiooWAWiqeE2WhT7yGPrgrwha1JxYgDFy6gMKuiEos7PnF+ +hKHaf1qWDf/SsKAoYxsWE2Dz6staXyzzuO3AhE4oTTPKxLQJOu5jPhCzCTQP6ab OVvvnJS0Mlg+7nlwH4RER1pgvwd/FE6BNevDYisfkEV9y4OARzrIN5o= -----END CERTIFICATE-----Generated at Sat Dec 20 02:00:12 2025 by rpki-client