This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/2YHoXUXWMifEuVNpTWTFm-KkAmw.roa File: 2YHoXUXWMifEuVNpTWTFm-KkAmw.roa (raw, json) Hash identifier: B9HmQDtJ07IPSBPV0uqoqnCmnWsJbrWoLizOitNT2ac= Subject key identifier: D9:81:E8:5D:45:D6:32:27:C4:B9:53:69:4D:64:C5:9B:E2:A4:02:6C Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c Certificate serial: 019B2ED3795E3BDEB9212CC082D71AEAF79A Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/2YHoXUXWMifEuVNpTWTFm-KkAmw.roa Signing time: Thu 18 Dec 2025 00:19:29 +0000 ROA not before: Thu 18 Dec 2025 00:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 54113 IP address blocks: 2a00:8c40:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:d3:79:5e:3b:de:b9:21:2c:c0:82:d7:1a:ea:f7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c Validity Not Before: Dec 18 00:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d981e85d45d63227c4b953694d64c59be2a4026c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:87:b6:27:07:64:26:a5:44:95:0a:d9:5e: 5c:1f:b8:fd:3f:fe:18:54:ae:3a:0d:3b:b3:46:2f: 4c:7d:d5:12:26:b3:db:00:00:1c:c3:c4:98:74:8a: 7d:cf:da:25:f4:bf:03:e6:cc:d6:a4:91:6f:16:08: 84:8a:64:c4:1b:6c:17:2a:cb:72:90:13:df:10:ed: 98:f2:3e:8d:08:3a:1c:5c:f3:ee:af:2f:42:79:ec: 77:35:33:76:6a:7c:85:b6:68:01:3a:a3:0a:e1:27: d0:a3:90:36:30:d1:75:f3:32:c2:06:13:65:5a:4f: 7d:f0:b2:fd:6b:80:10:d4:b9:2a:ce:d8:a6:3a:3c: e8:41:1d:b6:3d:72:ca:ec:6f:51:97:ba:49:49:2c: f4:6e:25:a7:55:af:c2:45:a8:66:48:6c:4b:b7:6d: 49:09:d2:54:d8:a3:b1:e7:91:ff:b8:5a:af:26:4c: 5b:cf:51:90:dd:ff:af:41:99:a7:db:a0:69:53:1e: 18:50:f8:14:83:78:1a:b5:1a:0f:42:aa:7d:14:f1: 65:bf:90:38:c8:bc:23:32:4a:77:05:2d:9f:95:43: f7:60:ae:f5:77:52:ec:c9:5e:64:b3:78:6b:96:79: cc:cd:0f:4a:73:45:e1:5c:f0:51:0f:85:e4:8d:00: 78:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:81:E8:5D:45:D6:32:27:C4:B9:53:69:4D:64:C5:9B:E2:A4:02:6C X509v3 Authority Key Identifier: keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/2YHoXUXWMifEuVNpTWTFm-KkAmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:8c40:f000::/36 Signature Algorithm: sha256WithRSAEncryption 5f:f2:e1:eb:5b:32:e9:8d:ef:3d:18:59:da:83:13:d1:16:c8: e7:27:a9:90:60:9d:31:41:19:50:47:24:83:cf:8a:b2:fb:2c: b5:50:2c:55:23:74:ba:4d:c3:04:81:ab:b6:56:a0:41:cd:db: 32:30:fc:7b:19:86:00:d0:34:b9:fd:c0:2b:d1:cc:3b:8c:9a: 97:8b:b9:4d:9f:42:6f:55:fc:c8:41:f1:66:ce:ff:bb:b9:6a: 48:76:06:65:dc:a8:06:e4:60:62:da:20:cb:e8:8f:40:95:d9: 88:d2:d6:94:40:99:fc:e8:6d:db:3a:ab:03:42:0a:f0:c9:b8: 43:ed:9f:75:aa:da:8e:a4:eb:16:2e:c0:4f:6a:12:e1:27:f4: 0d:fa:71:3a:65:31:38:3d:b8:bd:c6:49:10:fc:f6:d4:73:d7: 3d:a8:6f:c1:1b:03:e9:fa:22:52:f1:aa:9c:ac:50:7f:f4:6e: 85:9c:a3:22:5a:b5:70:12:38:e4:6b:ed:b2:b0:0d:56:96:05: 7d:8b:77:e8:e1:61:7f:47:8d:ef:6a:2c:9a:4f:64:1a:95:c3: a3:ca:fd:f4:ac:cf:ff:86:08:92:2c:95:48:11:7e:63:a4:2e: 7c:91:6d:40:46:59:2a:ce:02:ab:9e:7c:5a:c0:5e:5a:00:78: 4a:d1:fc:d1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZsu03leO965ISzAgtca6veaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWYwMTg4MWI3M2M4ZTliNWQ5MjIzOTIyOWE2ZTUxMmVj YTRlN2MwHhcNMjUxMjE4MDAxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTgxZTg1ZDQ1ZDYzMjI3YzRiOTUzNjk0ZDY0YzU5YmUyYTQwMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAmHticHZCalRJUK2V5cH7j9P/4Y VK46DTuzRi9MfdUSJrPbAAAcw8SYdIp9z9ol9L8D5szWpJFvFgiEimTEG2wXKsty kBPfEO2Y8j6NCDocXPPury9Ceex3NTN2anyFtmgBOqMK4SfQo5A2MNF18zLCBhNl Wk998LL9a4AQ1LkqztimOjzoQR22PXLK7G9Rl7pJSSz0biWnVa/CRahmSGxLt21J CdJU2KOx55H/uFqvJkxbz1GQ3f+vQZmn26BpUx4YUPgUg3gatRoPQqp9FPFlv5A4 yLwjMkp3BS2flUP3YK71d1LsyV5ks3hrlnnMzQ9Kc0XhXPBRD4XkjQB4HQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNmB6F1F1jInxLlTaU1kxZvipAJsMB8GA1UdIwQY MBaAFO8fAYgbc8jptdkiOSKablEuyk58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYt NTUxMzFjYzFlZmVhLzEvMllIb1hVWFdNaWZFdVZOcFRXVEZtLUtrQW13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYtNTUxMzFjYzFlZmVh LzEvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgCMQPAw DQYJKoZIhvcNAQELBQADggEBAF/y4etbMumN7z0YWdqDE9EWyOcnqZBgnTFBGVBH JIPPirL7LLVQLFUjdLpNwwSBq7ZWoEHN2zIw/HsZhgDQNLn9wCvRzDuMmpeLuU2f Qm9V/MhB8WbO/7u5akh2BmXcqAbkYGLaIMvoj0CV2YjS1pRAmfzobds6qwNCCvDJ uEPtn3Wq2o6k6xYuwE9qEuEn9A36cTplMTg9uL3GSRD89tRz1z2ob8EbA+n6IlLx qpysUH/0boWcoyJatXASOORr7bKwDVaWBX2Ld+jhYX9Hje9qLJpPZBqVw6PK/fSs z/+GCJIslUgRfmOkLnyRbUBGWSrOAquefFrAXloAeErR/NE= -----END CERTIFICATE-----Generated at Sat Dec 20 09:57:46 2025 by rpki-client