This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y4kRPDrYvMQU2qaMZ2cn1EfDNDY.roa File: Y4kRPDrYvMQU2qaMZ2cn1EfDNDY.roa (raw, json) Hash identifier: Ob39eNaEHwVJEVTEPv+6JiXdgh9u9ncH9q9TwuPOBfI= Subject key identifier: 63:89:11:3C:3A:D8:BC:C4:14:DA:A6:8C:67:67:27:D4:47:C3:34:36 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019AD58AB81AF440F5C308FAF71756000C4B Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y4kRPDrYvMQU2qaMZ2cn1EfDNDY.roa Signing time: Sun 30 Nov 2025 16:13:49 +0000 ROA not before: Sun 30 Nov 2025 16:13:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200809 IP address blocks: 2a0c:9a40:8980::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:8a:b8:1a:f4:40:f5:c3:08:fa:f7:17:56:00:0c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Nov 30 16:13:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6389113c3ad8bcc414daa68c676727d447c33436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:3e:47:9a:45:f3:85:d7:8e:2c:93:e7:87: db:e1:60:bb:bd:4c:69:9a:80:2a:90:b9:aa:6c:c6: cd:a3:1c:b3:c2:bd:83:b1:c7:82:a2:00:38:93:e4: 5d:78:d9:40:83:6d:ac:c8:84:f3:5c:b8:be:7f:e6: 8f:b4:28:f0:a0:93:c7:2e:b4:f9:43:d7:b0:02:d5: 47:08:f7:c2:30:31:80:a3:20:be:6a:4a:33:47:59: b2:d2:94:a5:c0:a7:f3:59:63:b8:43:bf:82:4b:70: fb:5e:55:c2:72:3c:02:e2:b4:7f:ba:69:1f:3b:f9: a1:d8:ab:d4:9a:04:90:9a:78:dc:c7:1b:cb:8c:88: 89:3f:8d:ee:a1:a9:5e:2a:a9:21:93:d7:94:6b:52: b7:2e:cf:e4:9f:4d:42:47:c6:ca:73:34:0c:ff:e6: f3:e1:fb:47:e1:32:3f:e3:e0:27:4a:45:07:51:7b: 16:7e:27:5c:ee:1e:09:d1:b8:6c:43:f6:71:c4:e1: 5e:86:03:ab:38:09:72:c9:06:fb:c7:87:f3:95:89: 99:d9:1e:8a:91:a2:fc:4b:e4:70:47:50:81:ab:db: 96:28:6b:e7:5f:29:3a:f1:30:86:14:e1:eb:35:57: 92:4b:a8:74:a0:c0:ec:bf:ab:78:0e:a9:d6:8b:0d: ed:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:89:11:3C:3A:D8:BC:C4:14:DA:A6:8C:67:67:27:D4:47:C3:34:36 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y4kRPDrYvMQU2qaMZ2cn1EfDNDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8980::/44 Signature Algorithm: sha256WithRSAEncryption 14:a9:95:d1:89:07:fe:d6:e8:fc:6a:da:e5:b8:4d:f0:f8:8e: 9e:82:26:ee:92:a6:5b:e4:eb:b2:7f:20:4d:d6:8b:2b:af:26: 87:7c:2f:06:9c:3f:10:a0:a2:ac:21:84:9a:80:53:36:41:2f: d8:be:51:01:3f:3b:c1:cb:d6:31:cf:f7:3f:ef:01:12:6f:74: ab:48:59:8f:15:0d:e7:c8:ef:55:14:d4:97:ec:61:56:19:1c: 6f:08:13:fa:a7:b6:f7:fd:5b:81:e6:7b:4c:7a:8c:3b:a6:f7: da:3c:65:1e:31:36:a6:d5:e5:22:96:51:89:db:c1:a8:18:a6: 48:88:06:d6:5b:20:2f:ea:14:62:f2:ec:7d:fc:50:50:e5:f1: f0:ef:b8:c4:63:62:83:00:25:80:71:47:db:dd:b1:c1:29:cb: b5:db:82:93:82:f4:cc:58:5a:38:87:51:34:24:aa:10:43:d7: 70:9f:c3:ef:63:25:fb:17:59:c6:1f:f7:cf:b5:b3:ae:4b:b0: 2e:7a:36:89:2c:a8:6b:c6:57:55:00:55:94:3c:fb:12:78:fe: 9e:da:8b:16:c3:8f:7b:e8:5d:f9:b0:9a:70:5f:c4:76:bf:d2: d9:4a:43:3a:aa:a9:53:da:31:32:52:78:64:09:21:13:fc:ff: fd:d1:08:d0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrVirga9ED1wwj69xdWAAxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMTMwMTYxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzg5MTEzYzNhZDhiY2M0MTRkYWE2OGM2NzY3MjdkNDQ3YzMzNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgw+R5pF84XXjiyT54fb4WC7vUxp moAqkLmqbMbNoxyzwr2DsceCogA4k+RdeNlAg22syITzXLi+f+aPtCjwoJPHLrT5 Q9ewAtVHCPfCMDGAoyC+akozR1my0pSlwKfzWWO4Q7+CS3D7XlXCcjwC4rR/umkf O/mh2KvUmgSQmnjcxxvLjIiJP43uoaleKqkhk9eUa1K3Ls/kn01CR8bKczQM/+bz 4ftH4TI/4+AnSkUHUXsWfidc7h4J0bhsQ/ZxxOFehgOrOAlyyQb7x4fzlYmZ2R6K kaL8S+RwR1CBq9uWKGvnXyk68TCGFOHrNVeSS6h0oMDsv6t4DqnWiw3tCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGOJETw62LzEFNqmjGdnJ9RHwzQ2MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvWTRrUlBEcll2TVFVMnFhTVoyY24xRWZETkRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQImA MA0GCSqGSIb3DQEBCwUAA4IBAQAUqZXRiQf+1uj8atrluE3w+I6egibukqZb5Ouy fyBN1osrryaHfC8GnD8QoKKsIYSagFM2QS/YvlEBPzvBy9Yxz/c/7wESb3SrSFmP FQ3nyO9VFNSX7GFWGRxvCBP6p7b3/VuB5ntMeow7pvfaPGUeMTam1eUillGJ28Go GKZIiAbWWyAv6hRi8ux9/FBQ5fHw77jEY2KDACWAcUfb3bHBKcu124KTgvTMWFo4 h1E0JKoQQ9dwn8PvYyX7F1nGH/fPtbOuS7AuejaJLKhrxldVAFWUPPsSeP6e2osW w4976F35sJpwX8R2v9LZSkM6qqlT2jEyUnhkCSET/P/90QjQ -----END CERTIFICATE-----Generated at Sat Dec 6 03:14:54 2025 by rpki-client