This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/xvG96kRnwdG7PR_lGfPJHrdMaV4.roa File: xvG96kRnwdG7PR_lGfPJHrdMaV4.roa (raw, json) Hash identifier: pffhMvPKQ6cwuLRh2l4tkaNr9f/bxq1LdIavJf6VGcE= Subject key identifier: C6:F1:BD:EA:44:67:C1:D1:BB:3D:1F:E5:19:F3:C9:1E:B7:4C:69:5E Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb Certificate serial: 019A7412C189133129B14469EFD5B818CC2D Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/xvG96kRnwdG7PR_lGfPJHrdMaV4.roa Signing time: Tue 11 Nov 2025 17:59:37 +0000 ROA not before: Tue 11 Nov 2025 17:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2a14:56c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:74:12:c1:89:13:31:29:b1:44:69:ef:d5:b8:18:cc:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb Validity Not Before: Nov 11 17:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6f1bdea4467c1d1bb3d1fe519f3c91eb74c695e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:84:6e:5e:9f:08:48:3b:ff:f3:0f:80:98:e6: 60:95:8e:1a:a6:72:34:79:3e:46:4d:ca:3e:5e:5d: 33:10:98:bf:00:e1:45:37:55:e0:ff:df:37:f1:74: c0:ca:2f:7c:c3:25:1e:96:b2:70:f3:7e:0b:b4:85: f0:fd:58:47:3b:b2:78:de:1d:eb:98:0b:84:ff:3f: 49:db:98:db:7e:0e:3b:16:6c:b3:c2:c7:c3:d9:2c: 87:9d:d6:80:66:a3:2b:11:49:1f:bb:2f:bc:b4:a6: cb:1e:38:53:e6:e6:9d:5f:d4:21:f5:84:8f:22:b1: d2:1b:88:4d:6e:cd:46:f4:5a:e0:3c:f6:cd:9f:f8: 42:c0:93:7b:b0:80:f7:8a:2e:05:79:68:49:0b:f9: ca:fc:6f:23:e2:62:32:ef:b6:3f:70:6f:45:fe:2c: 31:c7:63:f6:5a:23:dc:18:7c:47:78:24:68:8c:7a: 97:37:c1:ec:c2:3a:c4:91:23:65:60:d0:9b:6b:87: db:97:e4:6b:d1:e5:0d:88:8c:d3:2e:21:5e:96:a1: d3:fe:37:14:ee:f8:c1:4c:11:5e:ec:d4:09:3c:d7: 89:90:21:84:8d:9c:61:0a:e9:ee:b4:5b:e4:c3:37: 26:71:90:79:b3:51:a8:96:3c:6a:a4:b0:8a:9a:e4: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F1:BD:EA:44:67:C1:D1:BB:3D:1F:E5:19:F3:C9:1E:B7:4C:69:5E X509v3 Authority Key Identifier: keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/xvG96kRnwdG7PR_lGfPJHrdMaV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:56c0::/32 Signature Algorithm: sha256WithRSAEncryption 2d:ac:e3:1f:35:d1:b1:4a:71:4e:85:6e:f3:54:3e:52:13:db: 30:19:35:f6:68:53:40:f0:72:af:c9:f3:23:6f:cd:52:b2:01: d3:20:e0:d9:3e:40:2e:ee:9f:a4:f9:f5:15:75:65:c0:6b:59: cc:30:fa:14:9d:25:59:41:33:cc:70:7d:0c:b4:ac:5b:8a:6e: ae:1c:74:66:80:6c:96:7c:12:36:c8:f9:4b:41:df:05:ab:1d: f2:1f:a2:ef:64:9d:79:0d:91:4d:49:1e:5c:5f:29:0e:77:04: a5:15:76:14:40:42:59:5c:0d:6a:9c:8b:ee:81:33:5b:46:c9: b2:a2:bd:f9:21:f4:94:37:b4:85:d8:2f:10:61:e4:b2:c5:63: 04:ff:9b:3d:ec:4d:19:b8:1b:c5:3f:0b:f3:3a:41:17:a5:b3: 6d:89:d6:ba:33:29:eb:9b:83:a8:63:b7:5d:1d:6e:22:17:5a: 69:2f:19:5d:21:4f:81:1f:32:14:2d:24:f5:8d:f9:06:4e:85: f8:30:82:b4:d0:75:9e:b5:4f:96:01:c9:d9:fd:f2:95:de:d3: aa:b9:11:32:1d:5a:57:df:a9:46:2a:8e:7d:25:15:49:22:8e: e2:05:ba:d2:29:85:1f:ce:2c:04:35:01:5f:bb:bb:56:ac:93: 60:6b:ac:72 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZp0EsGJEzEpsURp79W4GMwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNjc1NDdkODUxZTNjZDc3NmNkMzMyOTBiMjQ1NGFjYzBl ODUxYmIwHhcNMjUxMTExMTc1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmYxYmRlYTQ0NjdjMWQxYmIzZDFmZTUxOWYzYzkxZWI3NGM2OTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oRuXp8ISDv/8w+AmOZglY4apnI0 eT5GTco+Xl0zEJi/AOFFN1Xg/9838XTAyi98wyUelrJw834LtIXw/VhHO7J43h3r mAuE/z9J25jbfg47FmyzwsfD2SyHndaAZqMrEUkfuy+8tKbLHjhT5uadX9Qh9YSP IrHSG4hNbs1G9FrgPPbNn/hCwJN7sID3ii4FeWhJC/nK/G8j4mIy77Y/cG9F/iwx x2P2WiPcGHxHeCRojHqXN8HswjrEkSNlYNCba4fbl+Rr0eUNiIzTLiFelqHT/jcU 7vjBTBFe7NQJPNeJkCGEjZxhCunutFvkwzcmcZB5s1GoljxqpLCKmuS9hwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMbxvepEZ8HRuz0f5RnzyR63TGleMB8GA1UdIwQY MBaAFENnVH2FHjzXds0zKQskVKzA6FG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYt ZGFiN2YwYzhkMjQwLzEveHZHOTZrUm53ZEc3UFJfbEdmUEpIcmRNYVY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYtZGFiN2YwYzhkMjQw LzEvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhRWwDAN BgkqhkiG9w0BAQsFAAOCAQEALazjHzXRsUpxToVu81Q+UhPbMBk19mhTQPByr8nz I2/NUrIB0yDg2T5ALu6fpPn1FXVlwGtZzDD6FJ0lWUEzzHB9DLSsW4purhx0ZoBs lnwSNsj5S0HfBasd8h+i72SdeQ2RTUkeXF8pDncEpRV2FEBCWVwNapyL7oEzW0bJ sqK9+SH0lDe0hdgvEGHkssVjBP+bPexNGbgbxT8L8zpBF6WzbYnWujMp65uDqGO3 XR1uIhdaaS8ZXSFPgR8yFC0k9Y35Bk6F+DCCtNB1nrVPlgHJ2f3yld7TqrkRMh1a V9+pRiqOfSUVSSKO4gW60imFH84sBDUBX7u7VqyTYGuscg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:37:04 2025 by rpki-client