This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/riu-Erw6ggoEJPGxpmScPYndYfw.roa File: riu-Erw6ggoEJPGxpmScPYndYfw.roa (raw, json) Hash identifier: wJKk+CwVxUgR9cTPpHbTrZU08Cy9AWK1AiKyfyV+SFw= Subject key identifier: AE:2B:BE:12:BC:3A:82:0A:04:24:F1:B1:A6:64:9C:3D:89:DD:61:FC Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a Certificate serial: 019A7DCDE8309251F204D85BB4D3411DDA02 Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/riu-Erw6ggoEJPGxpmScPYndYfw.roa Signing time: Thu 13 Nov 2025 15:20:37 +0000 ROA not before: Thu 13 Nov 2025 15:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214390 IP address blocks: 2a0f:3400:100::/40 maxlen: 48 2a0f:3400:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:cd:e8:30:92:51:f2:04:d8:5b:b4:d3:41:1d:da:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a Validity Not Before: Nov 13 15:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ae2bbe12bc3a820a0424f1b1a6649c3d89dd61fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:5e:03:34:eb:8c:8e:72:bf:04:4f:63:7c: 16:37:56:30:ad:4a:52:e1:7c:93:3f:81:bf:24:83: cc:24:9b:84:f4:03:eb:2a:e3:a9:61:71:64:84:ea: 83:49:bb:57:63:eb:15:70:bc:4b:ab:7d:ee:e2:e2: c3:ae:1b:ec:50:c9:c7:71:92:ab:f0:7b:24:dd:3e: 38:bd:79:66:cf:e0:3a:51:fe:a3:77:58:95:e5:43: 97:93:4b:fb:c6:3d:aa:d6:50:92:1a:1a:21:8a:f0: e7:6c:10:87:6c:dd:d3:81:a3:04:de:86:55:81:ac: 7a:0f:1d:35:72:69:38:df:39:ce:cc:57:13:51:dc: aa:ad:5b:b5:78:97:97:8c:90:ce:ff:85:c3:77:79: ae:d4:a3:45:2f:f9:81:c3:39:ba:42:70:83:5d:34: 5f:91:0c:4b:4c:f4:cf:c3:56:0c:e2:40:a4:43:04: 7f:ec:8f:4c:ec:00:19:d4:28:99:d2:8a:60:c1:ec: 24:c2:d9:0e:5c:cf:05:f2:82:06:b2:f6:cd:8b:1b: 80:f9:ee:7c:27:dc:c9:18:d5:85:05:c3:72:76:1c: 0b:bb:46:21:fb:7f:be:1e:8d:06:a8:b9:1b:c0:99: 45:9b:c5:03:98:9b:0a:4d:0f:5e:07:7a:e8:11:9a: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2B:BE:12:BC:3A:82:0A:04:24:F1:B1:A6:64:9C:3D:89:DD:61:FC X509v3 Authority Key Identifier: keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/riu-Erw6ggoEJPGxpmScPYndYfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:3400:100::/40 2a0f:3400:400::/40 Signature Algorithm: sha256WithRSAEncryption 6a:5d:5c:92:de:76:c3:3b:81:f3:b8:e5:69:a8:65:9c:cc:37: 18:01:85:fa:24:cd:0a:e1:1f:63:d9:3e:53:2d:98:93:b2:42: e0:8d:7f:04:93:b5:e6:cb:c7:f2:be:c0:bc:5a:1c:20:18:ca: 27:0b:cc:b9:a6:2e:11:b1:6c:79:42:99:8a:ef:a6:a0:aa:4c: 43:cd:a2:d0:dd:96:ca:c5:8f:28:f2:27:3f:56:b2:12:a7:8f: 60:88:52:39:4b:a2:a8:65:16:e6:4c:d8:fb:bd:f3:70:95:31: 23:98:7e:e9:73:da:06:f9:3a:4d:fa:52:fd:d9:c0:a4:da:f5: 1c:3a:24:e6:ae:08:00:09:93:24:8d:14:35:fb:00:55:a2:e4: 10:44:c7:ef:27:0b:97:32:b5:0d:b8:ce:5a:e6:47:8e:bd:6e: 1e:0d:7c:93:5c:6a:eb:87:54:11:b5:60:43:20:25:ce:aa:7f: 68:18:d6:61:2b:07:59:9e:2d:21:97:75:7e:c9:47:60:4b:43: 18:79:6b:37:eb:c9:e6:b0:e5:bd:bb:84:e5:d6:ed:d9:16:fe: b3:73:b8:f2:11:89:ac:13:b0:4e:55:11:af:6a:b2:66:28:ec: 7a:0e:bd:3e:36:2d:95:0a:2c:17:1b:a0:4c:a2:91:42:f9:ea: d7:bf:09:54 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZp9zegwklHyBNhbtNNBHdoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNTk1NWM0YWYzZWIxYThkMzQwMGE4NjYyNWUzNjVjMjYy OThkNmEwHhcNMjUxMTEzMTUyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTJiYmUxMmJjM2E4MjBhMDQyNGYxYjFhNjY0OWMzZDg5ZGQ2MWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspReAzTrjI5yvwRPY3wWN1YwrUpS 4XyTP4G/JIPMJJuE9APrKuOpYXFkhOqDSbtXY+sVcLxLq33u4uLDrhvsUMnHcZKr 8Hsk3T44vXlmz+A6Uf6jd1iV5UOXk0v7xj2q1lCSGhohivDnbBCHbN3TgaME3oZV gax6Dx01cmk43znOzFcTUdyqrVu1eJeXjJDO/4XDd3mu1KNFL/mBwzm6QnCDXTRf kQxLTPTPw1YM4kCkQwR/7I9M7AAZ1CiZ0opgwewkwtkOXM8F8oIGsvbNixuA+e58 J9zJGNWFBcNydhwLu0Yh+3++Ho0GqLkbwJlFm8UDmJsKTQ9eB3roEZpGpQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFK4rvhK8OoIKBCTxsaZknD2J3WH8MB8GA1UdIwQY MBaAFDFZVcSvPrGo00AKhmJeNlwmKY1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODIt OTczNDgzMzZmMzNhLzEvcml1LUVydzZnZ29FSlBHeHBtU2NQWW5kWWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODItOTczNDgzMzZmMzNh LzEvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKg80AAED BgAqDzQABDANBgkqhkiG9w0BAQsFAAOCAQEAal1ckt52wzuB87jlaahlnMw3GAGF +iTNCuEfY9k+Uy2Yk7JC4I1/BJO15svH8r7AvFocIBjKJwvMuaYuEbFseUKZiu+m oKpMQ82i0N2WysWPKPInP1ayEqePYIhSOUuiqGUW5kzY+73zcJUxI5h+6XPaBvk6 TfpS/dnApNr1HDok5q4IAAmTJI0UNfsAVaLkEETH7ycLlzK1DbjOWuZHjr1uHg18 k1xq64dUEbVgQyAlzqp/aBjWYSsHWZ4tIZd1fslHYEtDGHlrN+vJ5rDlvbuE5dbt 2Rb+s3O48hGJrBOwTlURr2qyZijseg69PjYtlQosFxugTKKRQvnq178JVA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:30 2025 by rpki-client