This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/N2aA-jTgbo5bK-Xpb488F349NpA.roa File: N2aA-jTgbo5bK-Xpb488F349NpA.roa (raw, json) Hash identifier: 8Y0PVTVuI1bylVWoDlTQsuk+kCy3r9vqPS7woOdQ1TQ= Subject key identifier: 37:66:80:FA:34:E0:6E:8E:5B:2B:E5:E9:6F:8F:3C:17:7E:3D:36:90 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B04FDA313D2B4061AC05E440C2BD189CC Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/N2aA-jTgbo5bK-Xpb488F349NpA.roa Signing time: Tue 09 Dec 2025 21:21:29 +0000 ROA not before: Tue 09 Dec 2025 21:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133153 IP address blocks: 213.220.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:fd:a3:13:d2:b4:06:1a:c0:5e:44:0c:2b:d1:89:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Dec 9 21:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=376680fa34e06e8e5b2be5e96f8f3c177e3d3690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:91:16:2c:d4:97:6a:8c:8f:23:10:d7:ea: 0e:b9:41:56:5c:ab:37:e4:b4:eb:6f:82:15:23:6d: ad:9e:c4:3d:82:0d:7d:73:2d:a3:3f:e5:97:ad:28: 9b:51:fd:78:6b:5b:d2:23:3e:f0:36:a9:da:f2:e0: 01:fe:ae:e4:e8:95:a1:a5:2a:da:e5:ea:ae:54:45: a5:1c:85:d0:e3:2f:44:d0:cb:60:c2:24:88:a6:88: 76:fd:52:bd:41:d7:b8:8c:a0:bd:02:7e:93:83:3d: 38:55:b4:08:3f:b1:80:05:76:77:84:bc:32:f4:4d: 21:84:1e:f4:1a:90:9d:94:b3:63:74:54:0f:aa:c4: 4d:7a:eb:f1:ac:64:21:2b:1f:60:2b:cc:9d:79:7c: 9d:92:6d:9e:ed:08:d5:98:d4:cc:0e:fd:33:89:67: d2:6d:93:48:1f:4c:68:3b:6c:e6:e7:ed:34:14:0d: a4:8f:12:d9:4f:35:67:63:5e:2d:67:d3:93:e4:fa: 1d:f2:a7:ad:78:1e:8c:aa:17:8e:64:5b:67:c6:40: d8:cb:d0:fd:5e:5b:8d:a4:f9:09:21:51:26:09:25: 0c:c1:6e:dd:bf:ce:bf:1e:e6:bf:dc:2b:67:16:30: 29:36:67:79:a8:66:13:a4:96:33:c8:45:ec:d1:40: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:66:80:FA:34:E0:6E:8E:5B:2B:E5:E9:6F:8F:3C:17:7E:3D:36:90 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/N2aA-jTgbo5bK-Xpb488F349NpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.220.62.0/24 Signature Algorithm: sha256WithRSAEncryption 82:43:9b:41:2a:96:52:32:52:df:57:d1:27:f8:ee:48:8b:61: cc:d0:e8:31:40:33:e5:a4:3e:e3:fe:86:d3:4d:52:42:52:42: 0c:ea:87:99:59:63:a1:99:71:e2:b8:33:f5:ce:81:bd:03:11: e6:c5:37:f7:e9:10:cf:6b:51:58:8b:fd:81:a9:9d:cd:c4:15: 80:70:86:f2:7d:ee:ee:d3:17:7e:d9:0f:8d:c1:00:7f:c3:ea: 2f:5c:18:d0:af:b4:23:55:61:25:45:b4:06:18:49:51:fe:2d: 9a:e4:2b:ec:3b:60:7a:fc:a2:23:f2:1e:ec:81:0e:2e:e2:aa: 36:4e:d6:64:cc:e2:9a:9f:a3:7f:4d:d0:64:14:24:0f:98:e5: 40:97:0c:31:2e:61:2c:9a:d9:1d:f2:63:70:4f:11:9f:fc:f9: cb:5c:ac:bc:44:88:4e:59:17:f3:f7:3e:a9:d1:52:59:0f:a7: 57:88:df:4d:7b:7c:77:17:b2:85:17:95:c3:72:a7:9f:b1:ac: 16:63:cb:9d:50:fd:54:85:5f:09:5b:75:b4:03:27:d4:0b:b3: bf:ff:8c:e1:9a:b4:ee:25:22:ad:b4:47:0d:56:e7:92:3d:21: e6:0d:0f:40:77:da:e7:81:ca:87:44:b5:51:da:75:83:7e:4c: 1d:3d:0a:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsE/aMT0rQGGsBeRAwr0YnMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMjA5MjEyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzY2ODBmYTM0ZTA2ZThlNWIyYmU1ZTk2ZjhmM2MxNzdlM2QzNjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlouRFizUl2qMjyMQ1+oOuUFWXKs3 5LTrb4IVI22tnsQ9gg19cy2jP+WXrSibUf14a1vSIz7wNqna8uAB/q7k6JWhpSra 5equVEWlHIXQ4y9E0MtgwiSIpoh2/VK9Qde4jKC9An6Tgz04VbQIP7GABXZ3hLwy 9E0hhB70GpCdlLNjdFQPqsRNeuvxrGQhKx9gK8ydeXydkm2e7QjVmNTMDv0ziWfS bZNIH0xoO2zm5+00FA2kjxLZTzVnY14tZ9OT5Pod8qeteB6MqheOZFtnxkDYy9D9 XluNpPkJIVEmCSUMwW7dv86/Hua/3CtnFjApNmd5qGYTpJYzyEXs0UCoTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdmgPo04G6OWyvl6W+PPBd+PTaQMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvTjJhQS1qVGdibzViSy1YcGI0ODhGMzQ5TnBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dw+MA0G CSqGSIb3DQEBCwUAA4IBAQCCQ5tBKpZSMlLfV9En+O5Ii2HM0OgxQDPlpD7j/obT TVJCUkIM6oeZWWOhmXHiuDP1zoG9AxHmxTf36RDPa1FYi/2BqZ3NxBWAcIbyfe7u 0xd+2Q+NwQB/w+ovXBjQr7QjVWElRbQGGElR/i2a5CvsO2B6/KIj8h7sgQ4u4qo2 TtZkzOKan6N/TdBkFCQPmOVAlwwxLmEsmtkd8mNwTxGf/PnLXKy8RIhOWRfz9z6p 0VJZD6dXiN9Ne3x3F7KFF5XDcqefsawWY8udUP1UhV8JW3W0AyfUC7O//4zhmrTu JSKttEcNVueSPSHmDQ9Ad9rngcqHRLVR2nWDfkwdPQqm -----END CERTIFICATE-----Generated at Sat Dec 20 04:32:11 2025 by rpki-client