This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/m4Fzw9UZUz8ylIym1jPPtBOeg54.roa File: m4Fzw9UZUz8ylIym1jPPtBOeg54.roa (raw, json) Hash identifier: NgibsJth7wbZVzCGk1oX/Iv2u09yVrSApLARffL8ea8= Subject key identifier: 9B:81:73:C3:D5:19:53:3F:32:94:8C:A6:D6:33:CF:B4:13:9E:83:9E Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B130802430C357154191F391FC3CDD03F Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/m4Fzw9UZUz8ylIym1jPPtBOeg54.roa Signing time: Fri 12 Dec 2025 14:47:30 +0000 ROA not before: Fri 12 Dec 2025 14:47:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202858 IP address blocks: 2a0c:b641:820::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:08:02:43:0c:35:71:54:19:1f:39:1f:c3:cd:d0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Dec 12 14:47:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9b8173c3d519533f32948ca6d633cfb4139e839e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:bb:65:58:b9:5b:43:f8:f7:f7:12:66:f9: 38:d1:0d:a8:a8:95:3e:2d:e8:11:0e:e2:2b:c9:35: d7:f4:d2:d8:5b:ae:1e:48:3c:37:01:f4:80:25:e5: cd:01:92:11:8c:5b:94:e4:33:69:13:0c:c3:9e:06: 00:0d:bb:da:e7:ef:ca:1d:50:40:ca:c6:9a:e8:cf: 3f:16:7f:3d:20:1f:ed:b2:94:16:78:a9:29:2f:57: 74:f6:31:9d:e3:48:3b:2d:ac:90:df:21:c9:c3:5f: 57:22:b3:b2:c9:a0:63:a1:a0:1b:c4:ca:8c:01:f1: cc:52:81:20:50:8d:36:f3:7c:94:fe:6a:d1:d7:4f: 26:4f:c5:8a:85:4e:6d:80:f8:c8:e7:55:55:a2:9c: 6b:db:0e:99:5b:d4:78:7c:b0:3f:14:a9:22:07:d0: d7:76:bd:4c:ee:6d:95:69:8b:30:e0:69:c4:d5:12: 64:e6:4a:35:15:7a:bd:55:6a:fe:17:33:4d:f5:37: 65:4b:ce:ef:5f:0a:a2:bf:a4:04:cb:2e:f9:f7:cf: b6:9d:42:82:4a:c6:12:fe:63:ed:ab:14:9b:5b:7c: 4a:97:64:67:f6:5a:5c:f3:3e:3a:80:ae:63:46:66: 8e:bc:f6:17:64:ef:c0:45:c5:9c:20:1c:98:25:8f: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:81:73:C3:D5:19:53:3F:32:94:8C:A6:D6:33:CF:B4:13:9E:83:9E X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/m4Fzw9UZUz8ylIym1jPPtBOeg54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:820::/44 Signature Algorithm: sha256WithRSAEncryption 2c:85:28:ab:f6:2c:91:a8:d9:4c:11:d9:c5:22:09:a3:41:81: 11:aa:86:6c:a0:a6:8a:41:1e:27:a9:b1:a4:7c:3c:1b:fb:55: 56:7b:fc:d4:89:57:ff:d8:f7:6a:8b:fc:cf:92:8b:e9:b8:63: 5c:f2:08:d3:77:fc:dd:7b:b1:40:3e:30:22:77:9c:87:9f:1a: d9:4f:61:fc:67:8a:0d:60:e1:fb:9a:65:e8:ac:e2:5b:07:e8: 7e:12:3f:58:0c:c0:36:41:1e:ef:f0:eb:97:9e:3a:d7:04:91: 91:60:4d:b7:2c:71:fc:ea:de:21:af:d9:cd:71:37:9d:8d:84: 42:0a:57:3f:b3:3e:98:e2:13:f4:7b:aa:4c:72:11:b3:6f:35: 8f:3d:19:a3:69:91:82:1d:ad:8f:d6:19:a3:6f:df:10:e3:19: df:94:be:71:e5:fc:e4:7f:ed:a1:a8:58:24:2d:47:75:3f:48: 14:72:9c:70:65:96:ad:78:28:5b:01:35:89:2e:84:f0:d6:cf: c2:84:9d:cf:a1:3e:5e:49:14:cf:74:71:73:39:ef:bd:f5:a8: 2b:a1:ff:cc:46:5d:b7:2e:49:44:b0:e9:4b:78:0e:f3:d8:88: 46:9b:9b:c3:db:f2:01:f4:5b:2c:c3:23:43:ce:af:76:2e:0e: db:77:d6:1f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsTCAJDDDVxVBkfOR/DzdA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjUxMjEyMTQ0NzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjgxNzNjM2Q1MTk1MzNmMzI5NDhjYTZkNjMzY2ZiNDEzOWU4MzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKe7ZVi5W0P49/cSZvk40Q2oqJU+ LegRDuIryTXX9NLYW64eSDw3AfSAJeXNAZIRjFuU5DNpEwzDngYADbva5+/KHVBA ysaa6M8/Fn89IB/tspQWeKkpL1d09jGd40g7LayQ3yHJw19XIrOyyaBjoaAbxMqM AfHMUoEgUI0283yU/mrR108mT8WKhU5tgPjI51VVopxr2w6ZW9R4fLA/FKkiB9DX dr1M7m2VaYsw4GnE1RJk5ko1FXq9VWr+FzNN9TdlS87vXwqiv6QEyy7598+2nUKC SsYS/mPtqxSbW3xKl2Rn9lpc8z46gK5jRmaOvPYXZO/ARcWcIByYJY9g1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJuBc8PVGVM/MpSMptYzz7QTnoOeMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvbTRGenc5VVpVejh5bEl5bTFqUFB0Qk9lZzU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQgg MA0GCSqGSIb3DQEBCwUAA4IBAQAshSir9iyRqNlMEdnFIgmjQYERqoZsoKaKQR4n qbGkfDwb+1VWe/zUiVf/2Pdqi/zPkovpuGNc8gjTd/zde7FAPjAid5yHnxrZT2H8 Z4oNYOH7mmXorOJbB+h+Ej9YDMA2QR7v8OuXnjrXBJGRYE23LHH86t4hr9nNcTed jYRCClc/sz6Y4hP0e6pMchGzbzWPPRmjaZGCHa2P1hmjb98Q4xnflL5x5fzkf+2h qFgkLUd1P0gUcpxwZZateChbATWJLoTw1s/ChJ3PoT5eSRTPdHFzOe+99agrof/M Rl23LklEsOlLeA7z2IhGm5vD2/IB9FsswyNDzq92Lg7bd9Yf -----END CERTIFICATE-----Generated at Sat Dec 20 02:37:35 2025 by rpki-client