This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/dYJSVxEZgDei3viP39Y4btT5FiM.roa File: dYJSVxEZgDei3viP39Y4btT5FiM.roa (raw, json) Hash identifier: GVxx2rls/AyUvWNi2L9Idnr+t5Xad94uy8RGF2BpTNs= Subject key identifier: 75:82:52:57:11:19:80:37:A2:DE:F8:8F:DF:D6:38:6E:D4:F9:16:23 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B33140A1901CC3052DC86ECE02B57A5A7 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/dYJSVxEZgDei3viP39Y4btT5FiM.roa Signing time: Thu 18 Dec 2025 20:08:29 +0000 ROA not before: Thu 18 Dec 2025 20:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397006 IP address blocks: 2a13:c3c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:14:0a:19:01:cc:30:52:dc:86:ec:e0:2b:57:a5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Dec 18 20:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7582525711198037a2def88fdfd6386ed4f91623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7e:09:57:ae:cb:ae:6d:3d:99:58:cf:01:a2: 37:28:65:62:c5:d8:7d:50:a8:72:6d:a4:ad:c7:dd: 57:44:c8:88:cb:82:d9:a2:34:df:5f:3f:42:d3:82: 37:ea:1f:0e:0b:2e:b1:b9:aa:00:39:1f:8a:19:d8: c6:28:f2:e8:91:08:d5:a6:80:e4:87:b9:f2:94:5a: 86:1c:03:84:c7:32:cc:87:51:f0:79:3b:fd:9d:01: 01:54:19:33:ae:3c:3d:a6:3c:cb:db:1b:cc:d7:df: 37:63:74:2e:ea:07:a6:54:a6:f8:1d:69:ff:97:14: ed:7f:9e:45:ca:05:1c:d6:42:fe:43:52:1d:f2:b8: 5f:07:fb:b8:31:97:05:db:c5:d9:a8:41:48:97:f4: 4c:18:2f:d6:23:1a:9a:2c:d3:d0:86:59:c8:43:8e: 95:6c:55:89:44:00:e1:1d:19:c4:a6:ad:ae:25:76: 5e:7c:a7:ec:00:c7:b4:43:cf:0d:e1:ed:f6:a8:4e: ef:3c:27:96:a8:17:ed:06:a3:a0:32:61:b0:a8:78: df:e8:d0:8a:cb:50:94:c4:b5:a4:1d:0e:a8:73:7a: 72:0c:51:bc:f6:0f:e9:24:11:af:b5:2a:97:3a:94: 83:8d:da:99:28:b9:37:c7:9a:db:d5:a0:89:0a:c3: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:82:52:57:11:19:80:37:A2:DE:F8:8F:DF:D6:38:6E:D4:F9:16:23 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/dYJSVxEZgDei3viP39Y4btT5FiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c3c0::/29 Signature Algorithm: sha256WithRSAEncryption 5f:a0:30:77:f6:7f:6f:47:ba:b1:01:48:8f:e2:5e:31:7f:0f: 32:25:a0:58:43:63:1f:e9:94:bb:ee:3e:56:34:40:a4:f1:12: 45:d6:54:1b:9c:56:88:f1:a1:ab:83:f4:d6:6f:63:be:1f:4b: 99:44:1c:17:bf:6e:f2:e5:72:3b:74:7f:e7:6c:b2:71:03:50: 3e:8d:b0:5a:0f:fb:1c:9e:3d:ab:41:44:14:4f:92:2a:0a:dc: 00:9a:fe:21:63:70:d4:cf:d9:e8:7f:c2:e9:d4:6f:81:99:da: fa:87:b0:0f:81:fc:f3:db:ab:23:02:27:67:24:03:1e:08:9d: e2:87:b2:75:90:f2:52:57:d2:d7:f4:40:58:8c:57:96:22:83: 4e:c1:89:e8:df:b4:85:76:c3:a6:70:0a:f4:77:40:a5:0f:79: 60:1a:9a:8f:b4:19:48:8c:f2:31:a7:b9:7c:4f:28:dc:4a:20: f2:a7:ff:41:cd:46:49:c0:20:88:29:39:aa:15:be:b2:62:ca: 29:2d:4a:f2:c5:b8:24:af:7d:33:f5:32:be:c9:b4:e8:59:fa: 69:3b:33:5e:2a:29:7f:9e:61:85:cd:f0:ae:a6:1e:33:cc:c6: 99:b8:b7:76:ea:dc:8c:c5:3b:0e:ff:55:85:2c:c3:6f:f0:e3: a6:1f:58:e0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZszFAoZAcwwUtyG7OArV6WnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMjE4MjAwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTgyNTI1NzExMTk4MDM3YTJkZWY4OGZkZmQ2Mzg2ZWQ0ZjkxNjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X4JV67Lrm09mVjPAaI3KGVixdh9 UKhybaStx91XRMiIy4LZojTfXz9C04I36h8OCy6xuaoAOR+KGdjGKPLokQjVpoDk h7nylFqGHAOExzLMh1HweTv9nQEBVBkzrjw9pjzL2xvM1983Y3Qu6gemVKb4HWn/ lxTtf55FygUc1kL+Q1Id8rhfB/u4MZcF28XZqEFIl/RMGC/WIxqaLNPQhlnIQ46V bFWJRADhHRnEpq2uJXZefKfsAMe0Q88N4e32qE7vPCeWqBftBqOgMmGwqHjf6NCK y1CUxLWkHQ6oc3pyDFG89g/pJBGvtSqXOpSDjdqZKLk3x5rb1aCJCsMYkQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHWCUlcRGYA3ot74j9/WOG7U+RYjMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvZFlKU1Z4RVpnRGVpM3ZpUDM5WTRidFQ1RmlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPDwDAN BgkqhkiG9w0BAQsFAAOCAQEAX6Awd/Z/b0e6sQFIj+JeMX8PMiWgWENjH+mUu+4+ VjRApPESRdZUG5xWiPGhq4P01m9jvh9LmUQcF79u8uVyO3R/52yycQNQPo2wWg/7 HJ49q0FEFE+SKgrcAJr+IWNw1M/Z6H/C6dRvgZna+oewD4H889urIwInZyQDHgid 4oeydZDyUlfS1/RAWIxXliKDTsGJ6N+0hXbDpnAK9HdApQ95YBqaj7QZSIzyMae5 fE8o3Eog8qf/Qc1GScAgiCk5qhW+smLKKS1K8sW4JK99M/Uyvsm06Fn6aTszXiop f55hhc3wrqYeM8zGmbi3durcjMU7Dv9VhSzDb/Djph9Y4A== -----END CERTIFICATE-----Generated at Sat Dec 20 06:16:49 2025 by rpki-client