This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TI0cEw2LIRor2tbl-WBYpX_KY6I.roa File: TI0cEw2LIRor2tbl-WBYpX_KY6I.roa (raw, json) Hash identifier: 1KAgT+fTGwq2vTYONweivcxgpG0Ex+tYcpPFzuhE39A= Subject key identifier: 4C:8D:1C:13:0D:8B:21:1A:2B:DA:D6:E5:F9:60:58:A5:7F:CA:63:A2 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019AC9FBBB4402ECA1BAE915F7AC67D88463 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TI0cEw2LIRor2tbl-WBYpX_KY6I.roa Signing time: Fri 28 Nov 2025 10:21:49 +0000 ROA not before: Fri 28 Nov 2025 10:21:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203453 IP address blocks: 2a0c:9a40:89d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:fb:bb:44:02:ec:a1:ba:e9:15:f7:ac:67:d8:84:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Nov 28 10:21:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c8d1c130d8b211a2bdad6e5f96058a57fca63a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:cd:e3:80:d3:3d:5c:70:cb:75:ba:d1:c0: ec:f2:c7:d9:13:78:a7:c5:66:25:3c:ad:61:e0:98: ff:81:e0:d3:b4:da:4d:be:42:ae:37:ed:a1:ac:19: 67:94:d3:f8:c7:c6:88:d8:b2:5a:dc:a6:f8:22:2d: a3:c1:43:1e:a5:d4:80:20:9c:fe:39:67:d1:3f:1f: 45:5f:5d:30:c8:42:e6:08:f1:75:c5:0f:0a:75:e0: 8a:b7:01:3f:6b:b3:d3:4b:6a:32:e8:b1:e0:a1:9e: 2a:8a:5b:9a:0c:18:1c:12:c1:f7:24:b1:78:dd:ad: 5d:56:7c:a0:d8:15:6f:6c:99:05:82:36:db:b8:af: a7:ae:74:37:6f:14:3d:fe:26:5b:c0:f3:e6:fd:00: 59:9c:a8:ee:05:c9:34:23:39:26:94:3d:57:35:03: ad:a6:13:40:2b:7b:17:22:b6:81:fb:97:be:98:93: 03:21:13:80:1c:d5:24:c4:12:ea:eb:e6:c3:a0:07: fd:87:0e:b6:67:38:b7:7f:1e:e2:64:28:c0:71:be: b3:de:c5:69:3e:87:1f:13:ea:6d:37:05:2c:f8:d7: bb:2b:c3:21:dc:e3:6a:a2:9e:bc:42:4d:57:65:dd: 04:35:aa:8b:de:75:cc:0d:00:7c:73:35:ec:45:00: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8D:1C:13:0D:8B:21:1A:2B:DA:D6:E5:F9:60:58:A5:7F:CA:63:A2 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TI0cEw2LIRor2tbl-WBYpX_KY6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:89d0::/48 Signature Algorithm: sha256WithRSAEncryption 51:4d:75:66:8a:bb:1a:42:4e:ae:a6:9d:d7:64:7f:4b:10:c4: 6f:66:73:52:a6:f8:a5:4c:0d:79:92:3b:d1:d2:28:3c:12:e7: d7:b9:4f:ae:9c:f9:38:e5:f1:68:e6:55:41:d6:90:62:20:be: 1e:c8:0d:7c:04:e0:5a:a8:a4:d3:48:a5:26:2e:c3:af:a6:7b: e1:a6:de:9b:f7:52:53:b2:35:28:4f:67:9e:a9:27:de:c5:70: aa:df:98:cf:10:56:11:0c:c4:2e:80:0d:bc:80:d5:d8:92:ec: 14:c5:3c:b9:ce:26:87:5b:74:f4:a1:5d:87:c8:c1:b3:71:a2: 6f:d0:3c:9b:62:bd:4e:c7:5b:06:0f:ae:be:65:8d:d1:06:97: 13:6a:8c:a6:b0:55:c8:04:cc:e5:d6:50:99:f7:ca:3f:06:96: 09:1d:b8:96:01:24:aa:fd:97:ed:d9:38:93:08:cd:67:98:c8: 1e:e0:62:79:83:1e:63:4b:85:f0:9d:11:b1:3f:6c:b8:cf:fd: 12:03:fe:ec:20:9e:ad:85:20:d5:9f:e9:44:00:b7:1d:f8:92: da:26:6a:50:40:e2:ee:d1:23:44:d1:bd:40:1f:88:70:2e:0f: 56:23:18:1a:ae:0f:68:b3:21:80:89:0c:4d:a3:fe:12:bc:bb: 9f:e6:10:0d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrJ+7tEAuyhuukV96xn2IRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMTI4MTAyMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzhkMWMxMzBkOGIyMTFhMmJkYWQ2ZTVmOTYwNThhNTdmY2E2M2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww/N44DTPVxwy3W60cDs8sfZE3in xWYlPK1h4Jj/geDTtNpNvkKuN+2hrBlnlNP4x8aI2LJa3Kb4Ii2jwUMepdSAIJz+ OWfRPx9FX10wyELmCPF1xQ8KdeCKtwE/a7PTS2oy6LHgoZ4qiluaDBgcEsH3JLF4 3a1dVnyg2BVvbJkFgjbbuK+nrnQ3bxQ9/iZbwPPm/QBZnKjuBck0IzkmlD1XNQOt phNAK3sXIraB+5e+mJMDIROAHNUkxBLq6+bDoAf9hw62Zzi3fx7iZCjAcb6z3sVp PocfE+ptNwUs+Ne7K8Mh3ONqop68Qk1XZd0ENaqL3nXMDQB8czXsRQACzQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEyNHBMNiyEaK9rW5flgWKV/ymOiMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvVEkwY0V3MkxJUm9yMnRibC1XQllwWF9LWTZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQInQ MA0GCSqGSIb3DQEBCwUAA4IBAQBRTXVmirsaQk6upp3XZH9LEMRvZnNSpvilTA15 kjvR0ig8EufXuU+unPk45fFo5lVB1pBiIL4eyA18BOBaqKTTSKUmLsOvpnvhpt6b 91JTsjUoT2eeqSfexXCq35jPEFYRDMQugA28gNXYkuwUxTy5ziaHW3T0oV2HyMGz caJv0DybYr1Ox1sGD66+ZY3RBpcTaoymsFXIBMzl1lCZ98o/BpYJHbiWASSq/Zft 2TiTCM1nmMge4GJ5gx5jS4XwnRGxP2y4z/0SA/7sIJ6thSDVn+lEALcd+JLaJmpQ QOLu0SNE0b1AH4hwLg9WIxgarg9osyGAiQxNo/4SvLuf5hAN -----END CERTIFICATE-----Generated at Sat Dec 6 03:14:38 2025 by rpki-client