This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/LejGA9jv_aQRL8_fX-o1hcfe12g.roa File: LejGA9jv_aQRL8_fX-o1hcfe12g.roa (raw, json) Hash identifier: KzvU7cDKChtmts0/63ODDqiOWBu9aRfolS2LJyBW0BQ= Subject key identifier: 2D:E8:C6:03:D8:EF:FD:A4:11:2F:CF:DF:5F:EA:35:85:C7:DE:D7:68 Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Certificate serial: 019B031114E1D2D385E07E0391C823E997DE Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/LejGA9jv_aQRL8_fX-o1hcfe12g.roa Signing time: Tue 09 Dec 2025 12:23:29 +0000 ROA not before: Tue 09 Dec 2025 12:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13127 IP address blocks: 2a0c:9180::/48 maxlen: 48 2a0c:9180:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:11:14:e1:d2:d3:85:e0:7e:03:91:c8:23:e9:97:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Validity Not Before: Dec 9 12:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2de8c603d8effda4112fcfdf5fea3585c7ded768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:f0:6e:31:da:71:49:da:ad:6a:51:11:b1: dc:eb:bb:72:0a:bc:3a:bf:64:c7:8e:c8:fb:00:0b: 04:e6:54:af:c0:0e:f1:3b:8b:d0:04:fc:53:96:42: e1:df:e4:76:10:df:7e:3c:9d:be:20:e5:91:bf:fb: c0:09:53:9d:fe:7e:4d:db:dc:6b:65:1f:10:c5:c1: 27:19:17:88:06:3d:71:5a:ed:b7:b9:8f:6c:9b:42: fa:5f:ae:b7:62:30:1b:90:bf:19:ae:aa:36:36:d0: ff:5a:6e:86:67:a3:d0:23:dc:84:75:d0:30:e6:b1: ca:9e:84:0a:a8:ff:18:04:91:c6:2f:a5:c2:4e:a6: d1:48:c3:aa:f3:0b:8b:50:e0:08:ec:83:d0:03:68: 95:fe:b8:fe:f5:cd:57:7d:01:78:1f:e2:3e:ac:06: 2b:ca:7b:f8:c2:8e:2b:7b:fe:cd:81:97:9c:57:bf: 07:ee:e2:ce:ff:65:8e:6e:3c:0b:67:91:28:2d:c6: 45:cb:e8:c0:ca:a6:43:f1:df:7d:2a:c7:3a:70:0c: 4d:9a:88:be:a8:cd:2c:c7:10:e2:29:ea:6b:6d:dd: 7c:41:19:70:6c:ca:1b:ba:fc:04:06:1e:c1:a1:bc: 1d:39:b4:bd:eb:4f:f4:ac:0c:3b:29:ad:49:37:93: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E8:C6:03:D8:EF:FD:A4:11:2F:CF:DF:5F:EA:35:85:C7:DE:D7:68 X509v3 Authority Key Identifier: keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/LejGA9jv_aQRL8_fX-o1hcfe12g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9180::/47 Signature Algorithm: sha256WithRSAEncryption 69:e1:94:59:78:e3:4f:e9:8d:af:1b:d9:cd:58:b9:e0:51:62: e6:fe:58:fc:e4:df:02:38:f4:b1:02:66:02:08:72:c5:08:14: 08:b3:47:b4:4e:f2:6b:8c:1d:80:8e:4c:0f:3a:b7:b8:f0:3b: 24:82:5e:ab:50:fc:cf:7b:c0:68:74:e6:92:35:e7:b7:e4:8a: 14:81:b0:7f:5d:35:9e:69:53:79:f7:51:e4:89:bb:f7:b3:b6: 74:56:a9:86:d0:5f:e9:4f:79:6b:d4:ae:9c:68:4f:02:d9:65: 9c:75:07:56:3d:51:75:fd:b6:95:f7:2f:6b:38:35:72:45:8a: 05:6c:6f:c8:c2:fd:4e:af:ce:f4:7a:99:ac:0b:65:40:3b:13: c8:88:2c:8f:30:3e:39:2a:1d:1a:9e:8b:9b:27:53:5e:0e:c7: cb:b3:7d:3f:a6:96:13:bd:09:30:94:8a:e8:82:6f:6d:ff:03: 87:9d:ac:fe:2c:ab:8f:c0:10:78:09:91:5e:25:29:19:16:15: d1:e9:88:6e:96:a1:74:75:c6:4d:d9:a8:6c:4a:2a:b0:ba:d2: f3:11:d2:69:bc:4a:20:3e:39:e3:7d:29:ac:27:c2:09:a6:5a: fe:93:5b:0d:70:80:0f:42:66:c8:98:58:d0:dd:b5:9a:79:c0: a6:1c:30:b0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsDERTh0tOF4H4Dkcgj6ZfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjZhNWNmYTM5Y2ZhOTFlMzEzNDQzZjYxM2U3M2NjZTcz ZjIxNDAwHhcNMjUxMjA5MTIyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGU4YzYwM2Q4ZWZmZGE0MTEyZmNmZGY1ZmVhMzU4NWM3ZGVkNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoozwbjHacUnarWpREbHc67tyCrw6 v2THjsj7AAsE5lSvwA7xO4vQBPxTlkLh3+R2EN9+PJ2+IOWRv/vACVOd/n5N29xr ZR8QxcEnGReIBj1xWu23uY9sm0L6X663YjAbkL8Zrqo2NtD/Wm6GZ6PQI9yEddAw 5rHKnoQKqP8YBJHGL6XCTqbRSMOq8wuLUOAI7IPQA2iV/rj+9c1XfQF4H+I+rAYr ynv4wo4re/7NgZecV78H7uLO/2WObjwLZ5EoLcZFy+jAyqZD8d99Ksc6cAxNmoi+ qM0sxxDiKeprbd18QRlwbMobuvwEBh7BobwdObS960/0rAw7Ka1JN5OuPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC3oxgPY7/2kES/P31/qNYXH3tdoMB8GA1UdIwQY MBaAFJ1mpc+jnPqR4xNEP2E+c8znPyFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYt YTE5NTA3ZGU3NWI0LzEvTGVqR0E5anZfYVFSTDhfZlgtbzFoY2ZlMTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYtYTE5NTA3ZGU3NWI0 LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgyRgAAA MA0GCSqGSIb3DQEBCwUAA4IBAQBp4ZRZeONP6Y2vG9nNWLngUWLm/lj85N8COPSx AmYCCHLFCBQIs0e0TvJrjB2AjkwPOre48Dskgl6rUPzPe8BodOaSNee35IoUgbB/ XTWeaVN591Hkibv3s7Z0VqmG0F/pT3lr1K6caE8C2WWcdQdWPVF1/baV9y9rODVy RYoFbG/Iwv1Or870epmsC2VAOxPIiCyPMD45Kh0anoubJ1NeDsfLs30/ppYTvQkw lIrogm9t/wOHnaz+LKuPwBB4CZFeJSkZFhXR6YhulqF0dcZN2ahsSiqwutLzEdJp vEogPjnjfSmsJ8IJplr+k1sNcIAPQmbImFjQ3bWaecCmHDCw -----END CERTIFICATE-----Generated at Thu Dec 18 21:25:31 2025 by rpki-client