This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/S_KGny0V2oEXYwCcr5dtwWcRsJA.roa File: S_KGny0V2oEXYwCcr5dtwWcRsJA.roa (raw, json) Hash identifier: M1AuhFAujciHfpbA/eogA50Y0iOEp0xBeyr+x1qiwDE= Subject key identifier: 4B:F2:86:9F:2D:15:DA:81:17:63:00:9C:AF:97:6D:C1:67:11:B0:90 Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Certificate serial: 019B0275710FF5B2D84D7FB17FD1BE777406 Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/S_KGny0V2oEXYwCcr5dtwWcRsJA.roa Signing time: Tue 09 Dec 2025 09:33:29 +0000 ROA not before: Tue 09 Dec 2025 09:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209263 IP address blocks: 2a02:ef40::/29 maxlen: 29 2a02:ef40:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:75:71:0f:f5:b2:d8:4d:7f:b1:7f:d1:be:77:74:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Validity Not Before: Dec 9 09:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4bf2869f2d15da811763009caf976dc16711b090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b5:3f:a3:6d:70:eb:4d:f9:83:c6:66:94:55: 41:e4:4a:5f:77:fd:57:62:9e:17:d6:ea:50:10:60: cf:a4:02:b8:39:ab:00:6b:cf:0f:a6:af:6d:07:8c: ab:25:3b:0d:f2:89:91:7d:7e:61:ff:25:5a:bc:28: 78:45:ec:da:6e:7d:30:dc:eb:be:bc:3e:7e:9c:ad: e5:22:75:bd:96:9e:67:8d:5e:ce:61:b5:a6:98:87: da:54:c6:a7:4f:9b:71:04:80:61:7b:c3:3e:e5:c0: 65:74:98:eb:c9:4a:e7:cb:d8:2f:60:24:5e:48:f5: bc:c2:76:70:69:07:ae:8b:69:63:24:23:b9:ed:e0: 4f:f0:ef:66:88:3e:b5:37:f0:b2:ac:11:c3:1a:18: 3d:82:68:1b:97:7f:6c:92:ce:47:33:31:5c:b4:30: 13:68:5f:59:e1:d9:e4:e2:24:6a:8a:b2:d3:0f:33: 38:dc:e8:04:df:84:f7:fb:7c:d2:b3:ed:e2:c6:6b: e7:3a:29:34:1c:d2:71:59:fd:8e:50:32:1a:00:65: 96:fb:c0:9a:4a:91:c8:22:9e:7f:01:21:a7:d2:ed: db:85:a8:3a:88:d5:f0:3c:ca:5f:56:06:94:b0:53: 88:78:da:d2:cd:e1:55:a7:c5:1d:00:55:dc:ba:06: 93:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F2:86:9F:2D:15:DA:81:17:63:00:9C:AF:97:6D:C1:67:11:B0:90 X509v3 Authority Key Identifier: keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/S_KGny0V2oEXYwCcr5dtwWcRsJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:ef40::/29 Signature Algorithm: sha256WithRSAEncryption 49:45:d7:71:b3:f0:86:cc:9c:da:82:e0:fc:6b:b4:0a:fa:e6: 97:c7:f8:ee:e1:6b:27:d7:ba:16:99:2e:93:d0:8d:1b:b3:86: f3:5f:50:e5:83:5c:a3:df:8e:0e:b9:e9:30:74:08:b3:92:79: f2:d5:b9:ea:7a:65:44:26:a8:9a:b6:c1:43:99:0b:d0:2a:48: a9:bc:0f:db:e8:c2:d3:f7:34:17:1f:56:a4:34:22:5e:ad:05: 52:e5:04:eb:1f:c4:70:5e:5a:f8:c7:5f:73:cf:52:93:27:89: 7a:ac:f3:23:7e:83:71:38:86:61:3d:9c:18:83:dd:2c:b1:d6: fb:50:5f:1e:72:a8:82:ed:37:0f:ea:7e:d1:44:28:61:47:9c: b5:8d:f1:6e:c7:bb:2c:cf:58:c9:c3:b3:18:ae:90:0e:df:14: 81:4d:81:99:a7:f7:20:8c:64:40:9a:06:8f:d6:e1:0e:28:c7: 24:3b:31:aa:1f:a7:ce:55:93:f0:46:10:da:3d:49:a4:60:21: 37:48:db:ca:72:2c:e7:e2:93:a4:1b:69:08:cd:39:a0:e5:da: f1:01:63:3e:86:d7:de:86:84:dc:64:89:72:6f:49:0d:d7:d1: aa:cb:ff:ef:57:4c:28:25:fe:30:d3:ff:40:a9:e7:45:05:51: 9b:d1:a3:16 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsCdXEP9bLYTX+xf9G+d3QGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj YzcwYTkwHhcNMjUxMjA5MDkzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmYyODY5ZjJkMTVkYTgxMTc2MzAwOWNhZjk3NmRjMTY3MTFiMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rU/o21w6035g8ZmlFVB5Epfd/1X Yp4X1upQEGDPpAK4OasAa88Ppq9tB4yrJTsN8omRfX5h/yVavCh4Rezabn0w3Ou+ vD5+nK3lInW9lp5njV7OYbWmmIfaVManT5txBIBhe8M+5cBldJjryUrny9gvYCRe SPW8wnZwaQeui2ljJCO57eBP8O9miD61N/CyrBHDGhg9gmgbl39sks5HMzFctDAT aF9Z4dnk4iRqirLTDzM43OgE34T3+3zSs+3ixmvnOik0HNJxWf2OUDIaAGWW+8Ca SpHIIp5/ASGn0u3bhag6iNXwPMpfVgaUsFOIeNrSzeFVp8UdAFXcugaT/wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEvyhp8tFdqBF2MAnK+XbcFnEbCQMB8GA1UdIwQY MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt ODk3YTRjYzkyOTIyLzEvU19LR255MFYyb0VYWXdDY3I1ZHR3V2NSc0pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgLvQDAN BgkqhkiG9w0BAQsFAAOCAQEASUXXcbPwhsyc2oLg/Gu0Cvrml8f47uFrJ9e6Fpku k9CNG7OG819Q5YNco9+ODrnpMHQIs5J58tW56nplRCaomrbBQ5kL0CpIqbwP2+jC 0/c0Fx9WpDQiXq0FUuUE6x/EcF5a+Mdfc89SkyeJeqzzI36DcTiGYT2cGIPdLLHW +1BfHnKogu03D+p+0UQoYUectY3xbse7LM9YycOzGK6QDt8UgU2Bmaf3IIxkQJoG j9bhDijHJDsxqh+nzlWT8EYQ2j1JpGAhN0jbynIs5+KTpBtpCM05oOXa8QFjPobX 3oaE3GSJcm9JDdfRqsv/71dMKCX+MNP/QKnnRQVRm9GjFg== -----END CERTIFICATE-----Generated at Mon Dec 15 22:20:07 2025 by rpki-client