This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/2EsieiXiM2jel60RIcPYUIpOT4w.roa File: 2EsieiXiM2jel60RIcPYUIpOT4w.roa (raw, json) Hash identifier: kjt+dM6zPWxsAKMD9mR3rKyLqq89bd3Gc7klu1c7+v4= Subject key identifier: D8:4B:22:7A:25:E2:33:68:DE:97:AD:11:21:C3:D8:50:8A:4E:4F:8C Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Certificate serial: 019B33DB5F924538CF30FF0F6152C13C4503 Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/2EsieiXiM2jel60RIcPYUIpOT4w.roa Signing time: Thu 18 Dec 2025 23:46:13 +0000 ROA not before: Thu 18 Dec 2025 23:46:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206507 IP address blocks: 2001:30c0:fffd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:db:5f:92:45:38:cf:30:ff:0f:61:52:c1:3c:45:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Validity Not Before: Dec 18 23:46:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d84b227a25e23368de97ad1121c3d8508a4e4f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f7:32:da:8b:5c:a8:6e:bc:39:e6:1e:48:9d: 11:9e:10:39:3d:0e:fa:0a:c1:d6:53:27:d6:95:ad: 6f:d8:9d:7c:a2:3a:71:2b:ec:b8:cc:77:6a:1b:3d: 28:9b:1d:3f:0d:5f:4b:28:42:98:c9:07:10:bd:70: c6:e9:fb:c8:92:32:38:8f:8b:9c:a3:3e:c1:ee:b6: f1:86:d0:6d:01:07:d5:8b:48:8d:2f:e1:c4:d0:90: 57:59:4b:f4:5a:7b:96:db:f6:87:a9:8e:35:3c:1c: 35:0f:a8:45:ea:88:6b:8d:62:f1:30:d5:3f:e1:20: 35:c2:df:b8:df:ab:89:a1:e0:29:e5:c5:56:be:7d: d3:0e:d5:93:e9:2d:80:29:79:72:49:b8:d8:11:8c: 6b:de:84:d0:be:3c:da:0b:9c:68:09:42:0b:5b:01: fa:52:5f:51:90:50:b3:f9:8c:4e:87:08:74:c8:9c: ac:7d:7e:24:ea:7d:31:6d:8d:0e:5e:25:c9:fe:70: 01:23:d1:5b:21:2b:e0:8e:50:37:08:3d:4c:2e:7b: b1:b9:6b:87:12:7c:29:25:ac:7f:86:95:ee:17:90: a1:1e:f9:54:ce:2d:e6:cb:b7:7e:cf:bc:c6:54:57: 23:16:96:8f:29:44:a0:ab:f4:b9:7c:c0:62:c8:f0: 2a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4B:22:7A:25:E2:33:68:DE:97:AD:11:21:C3:D8:50:8A:4E:4F:8C X509v3 Authority Key Identifier: keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/2EsieiXiM2jel60RIcPYUIpOT4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:30c0:fffd::/48 Signature Algorithm: sha256WithRSAEncryption 67:10:41:c0:fd:2a:e1:72:1d:29:08:d0:7e:16:f2:e9:7d:43: 89:81:a6:50:83:26:db:e6:65:e4:27:31:1e:a8:dd:f3:ca:f2: cb:81:de:b3:08:96:c2:53:24:7b:f6:4b:a1:14:57:fc:f5:f4: 98:05:d2:c4:53:07:7f:58:83:e9:10:5e:fa:d3:db:94:04:c7: 27:1c:4b:0b:fe:5f:ce:86:d6:b5:80:23:4a:1a:8c:37:b1:6b: c4:fd:95:74:20:d0:d3:02:38:ac:74:95:2e:09:03:36:58:a6: 40:b5:77:b1:20:43:99:cc:c3:23:0e:4f:bd:2e:e3:7e:29:fe: 97:8f:d5:88:78:6e:5d:22:17:db:ca:5b:56:6d:92:9d:31:8a: 49:da:d7:21:f1:a7:e0:c0:58:20:44:d3:ed:3d:f6:dc:bf:70: dc:2e:36:78:66:5d:82:c2:09:07:56:33:7b:8c:ed:01:60:e4: 3c:f9:a0:59:c4:07:bd:27:26:5b:22:7c:d3:fb:34:85:fe:a0: 92:58:50:20:fe:08:48:dd:78:39:1c:a9:94:43:d3:97:39:04: 7f:e4:87:3e:57:fb:84:c6:68:79:cf:23:74:8e:31:46:24:69: d6:ce:66:24:ea:ff:5c:df:13:8a:1e:8f:05:74:2f:bf:ba:39: 7f:1a:db:a5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsz21+SRTjPMP8PYVLBPEUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYWY0OGIwMmI5N2RjMmQzMTIyNTBhYTIzNDA4M2I4YzFi YjllODEwHhcNMjUxMjE4MjM0NjEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODRiMjI3YTI1ZTIzMzY4ZGU5N2FkMTEyMWMzZDg1MDhhNGU0ZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vcy2otcqG68OeYeSJ0RnhA5PQ76 CsHWUyfWla1v2J18ojpxK+y4zHdqGz0omx0/DV9LKEKYyQcQvXDG6fvIkjI4j4uc oz7B7rbxhtBtAQfVi0iNL+HE0JBXWUv0WnuW2/aHqY41PBw1D6hF6ohrjWLxMNU/ 4SA1wt+436uJoeAp5cVWvn3TDtWT6S2AKXlySbjYEYxr3oTQvjzaC5xoCUILWwH6 Ul9RkFCz+YxOhwh0yJysfX4k6n0xbY0OXiXJ/nABI9FbISvgjlA3CD1MLnuxuWuH EnwpJax/hpXuF5ChHvlUzi3my7d+z7zGVFcjFpaPKUSgq/S5fMBiyPAq3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNhLInol4jNo3petESHD2FCKTk+MMB8GA1UdIwQY MBaAFG+vSLArl9wtMSJQqiNAg7jBu56BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODct YjM0ZDY0OWNmYjdiLzEvMkVzaWVpWGlNMmplbDYwUkljUFlVSXBPVDR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODctYjM0ZDY0OWNmYjdi LzEvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEwwP/9 MA0GCSqGSIb3DQEBCwUAA4IBAQBnEEHA/Srhch0pCNB+FvLpfUOJgaZQgybb5mXk JzEeqN3zyvLLgd6zCJbCUyR79kuhFFf89fSYBdLEUwd/WIPpEF7609uUBMcnHEsL /l/Ohta1gCNKGow3sWvE/ZV0INDTAjisdJUuCQM2WKZAtXexIEOZzMMjDk+9LuN+ Kf6Xj9WIeG5dIhfbyltWbZKdMYpJ2tch8afgwFggRNPtPfbcv3DcLjZ4Zl2CwgkH VjN7jO0BYOQ8+aBZxAe9JyZbInzT+zSF/qCSWFAg/ghI3Xg5HKmUQ9OXOQR/5Ic+ V/uExmh5zyN0jjFGJGnWzmYk6v9c3xOKHo8FdC+/ujl/Gtul -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:41 2025 by rpki-client