This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lr_MajPdprf6hQsMjcz4XXffzrc.roa File: lr_MajPdprf6hQsMjcz4XXffzrc.roa (raw, json) Hash identifier: yk1S0LaUk4uthvhZazkrLTN0yui/Q/DvCLXaCb7aOWQ= Subject key identifier: 96:BF:CC:6A:33:DD:A6:B7:FA:85:0B:0C:8D:CC:F8:5D:77:DF:CE:B7 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019AB7BE0821DEE9D7D1325E684A8C729A5C Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lr_MajPdprf6hQsMjcz4XXffzrc.roa Signing time: Mon 24 Nov 2025 21:21:15 +0000 ROA not before: Mon 24 Nov 2025 21:21:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215750 IP address blocks: 2a0c:9a40:89c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:be:08:21:de:e9:d7:d1:32:5e:68:4a:8c:72:9a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Nov 24 21:21:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=96bfcc6a33dda6b7fa850b0c8dccf85d77dfceb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:04:a8:c3:e4:9f:b9:2e:a9:29:28:65:e6:87: d7:40:cc:87:64:8a:a5:75:70:34:fe:63:06:3e:92: 29:04:62:d8:00:40:02:92:27:6f:5e:a6:50:00:37: a0:4a:01:93:cb:3d:f6:4f:60:a4:84:9d:13:2c:04: c3:88:9f:00:6a:e4:b1:10:76:9c:25:15:c1:e1:37: c4:49:aa:16:f3:79:57:2a:59:75:e0:6d:ec:dd:ec: 03:1d:dd:95:c8:6f:c3:f1:e3:bd:a2:c3:cb:9e:d8: 54:58:ca:a8:b0:78:ff:1d:45:3e:19:d6:ec:54:f4: 10:e6:67:3b:6b:02:43:85:66:a0:b2:ef:02:cd:b5: bd:66:13:c6:3b:0d:f8:c7:7c:77:85:1f:da:d0:77: 40:87:61:b7:00:2e:72:83:8f:36:03:5b:bf:d2:9d: bd:91:e1:ed:6d:2f:1c:aa:51:9d:13:64:52:fd:d0: 39:f2:0c:82:1c:41:c6:f5:c8:80:2c:40:42:2e:ab: bc:6e:af:9f:b7:1d:29:36:f1:46:a3:7d:a7:f4:1d: 97:7b:e2:a5:7e:d4:98:3e:ef:02:f0:de:ff:e4:47: 8c:24:7b:84:5f:40:8e:bf:b3:5c:5b:b7:6a:81:73: d4:af:38:7c:70:ba:dc:47:34:9f:e2:96:1d:68:74: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:CC:6A:33:DD:A6:B7:FA:85:0B:0C:8D:CC:F8:5D:77:DF:CE:B7 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/lr_MajPdprf6hQsMjcz4XXffzrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:89c0::/48 Signature Algorithm: sha256WithRSAEncryption 08:cb:72:5c:03:f6:8b:e4:a3:f0:05:55:08:2b:41:a0:42:80: 7f:1c:c3:d6:8e:c3:e7:aa:76:f1:dd:ff:be:6f:e6:0b:a5:a7: ac:4c:50:5b:47:34:82:c7:fe:b4:61:0b:8c:ba:6c:63:59:b0: 14:76:69:71:53:03:63:1f:25:20:dd:28:fe:dd:2c:de:18:ab: 30:e1:3b:08:cd:22:21:b7:30:e6:20:19:72:ad:12:f4:ed:de: 25:a4:82:7d:d0:5d:c1:c0:96:37:21:fa:07:42:50:f0:a0:2e: 37:1b:96:21:d8:e1:fb:5e:3f:d6:13:db:ad:d4:54:74:26:9e: 4c:35:70:8b:3f:8f:17:90:a4:2a:37:34:de:d7:14:15:f0:57: e3:aa:bf:a5:51:76:c7:a3:cc:ec:be:20:df:09:b1:73:ca:b6: 30:17:b9:a2:b8:dc:d0:e6:51:c7:46:d0:1a:e5:18:41:b5:2a: bd:35:24:32:74:2e:79:85:66:fb:37:c5:40:e9:2d:74:19:e9: 8b:de:9e:bf:89:f1:44:f2:73:d7:8f:fc:3c:ae:d3:f6:2c:16: 16:03:d0:33:c7:bd:ff:3d:c8:1e:2a:df:dd:75:0e:75:a5:78: ed:f2:7e:d5:0a:8c:4b:29:08:c1:b1:aa:b0:4e:d8:5a:11:5a: 54:8b:be:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZq3vggh3unX0TJeaEqMcppcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMTI0MjEyMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmJmY2M2YTMzZGRhNmI3ZmE4NTBiMGM4ZGNjZjg1ZDc3ZGZjZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gSow+SfuS6pKShl5ofXQMyHZIql dXA0/mMGPpIpBGLYAEACkidvXqZQADegSgGTyz32T2CkhJ0TLATDiJ8AauSxEHac JRXB4TfESaoW83lXKll14G3s3ewDHd2VyG/D8eO9osPLnthUWMqosHj/HUU+Gdbs VPQQ5mc7awJDhWagsu8CzbW9ZhPGOw34x3x3hR/a0HdAh2G3AC5yg482A1u/0p29 keHtbS8cqlGdE2RS/dA58gyCHEHG9ciALEBCLqu8bq+ftx0pNvFGo32n9B2Xe+Kl ftSYPu8C8N7/5EeMJHuEX0COv7NcW7dqgXPUrzh8cLrcRzSf4pYdaHStiQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJa/zGoz3aa3+oULDI3M+F133863MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvbHJfTWFqUGRwcmY2aFFzTWpjejRYWGZmenJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQInA MA0GCSqGSIb3DQEBCwUAA4IBAQAIy3JcA/aL5KPwBVUIK0GgQoB/HMPWjsPnqnbx 3f++b+YLpaesTFBbRzSCx/60YQuMumxjWbAUdmlxUwNjHyUg3Sj+3SzeGKsw4TsI zSIhtzDmIBlyrRL07d4lpIJ90F3BwJY3IfoHQlDwoC43G5Yh2OH7Xj/WE9ut1FR0 Jp5MNXCLP48XkKQqNzTe1xQV8Ffjqr+lUXbHo8zsviDfCbFzyrYwF7miuNzQ5lHH RtAa5RhBtSq9NSQydC55hWb7N8VA6S10GemL3p6/ifFE8nPXj/w8rtP2LBYWA9Az x73/PcgeKt/ddQ51pXjt8n7VCoxLKQjBsaqwTthaEVpUi76S -----END CERTIFICATE-----Generated at Sat Dec 6 03:13:27 2025 by rpki-client