This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/l_iqXW9dyl7D8MpCtjMa9qSGj2Q.roa File: l_iqXW9dyl7D8MpCtjMa9qSGj2Q.roa (raw, json) Hash identifier: IlrDpw6rZgeNS1gziw1WjnYRjRGw7n3tFy+r4Zi5kNU= Subject key identifier: 97:F8:AA:5D:6F:5D:CA:5E:C3:F0:CA:42:B6:33:1A:F6:A4:86:8F:64 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019A92507664B2FD326C3E197ED48407F678 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/l_iqXW9dyl7D8MpCtjMa9qSGj2Q.roa Signing time: Mon 17 Nov 2025 14:55:37 +0000 ROA not before: Mon 17 Nov 2025 14:55:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203731 IP address blocks: 2a0c:b641:450::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:50:76:64:b2:fd:32:6c:3e:19:7e:d4:84:07:f6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Nov 17 14:55:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=97f8aa5d6f5dca5ec3f0ca42b6331af6a4868f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:2f:fc:c4:14:cd:fd:15:0f:c7:09:b0:e0: f6:ff:d4:8f:7e:24:6f:25:ea:40:b1:63:c3:60:9f: 5f:05:f0:f2:2d:a2:a5:c0:f4:7e:66:9c:2b:f9:bb: 12:ea:e9:b3:1d:ca:ad:6c:c2:58:7e:40:53:a6:a8: 21:ff:cd:01:e0:73:4f:e7:92:7d:6f:6e:17:06:24: fa:30:75:eb:07:9e:3c:7c:1c:c4:5c:f3:bc:47:a4: 37:96:52:ee:87:c5:ee:d3:32:1a:2f:5a:7c:1e:8f: 4c:78:a4:62:f8:ca:f0:ba:5b:aa:98:26:d5:f0:7c: fe:48:47:90:81:7d:83:9c:97:44:e3:b2:a4:e3:37: 8d:82:a1:95:bd:b4:83:da:3f:e5:98:94:26:b1:e0: b0:89:24:d3:bb:95:ed:ee:bd:2c:a0:8f:65:96:69: 5b:d8:ee:ae:b4:df:08:e3:aa:1d:a4:c1:f9:19:9b: 7b:db:56:ad:c6:69:2e:e3:15:10:3f:13:d8:a4:4f: f7:5a:c0:d8:83:27:bb:d5:80:df:3d:d3:c2:6b:c7: 9e:b0:06:ba:df:1a:10:f3:f3:c3:06:1d:66:5d:e9: e5:51:df:43:17:c9:ac:78:d4:47:20:af:a4:63:a6: 1a:85:8a:35:e0:41:41:b5:31:53:de:18:d0:d0:47: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F8:AA:5D:6F:5D:CA:5E:C3:F0:CA:42:B6:33:1A:F6:A4:86:8F:64 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/l_iqXW9dyl7D8MpCtjMa9qSGj2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:450::/44 Signature Algorithm: sha256WithRSAEncryption 10:18:c7:57:a8:35:38:cd:32:2e:8c:7e:9b:36:41:05:b3:7f: c6:3c:9b:69:83:ba:21:7a:6f:8d:26:ce:eb:96:67:10:af:ec: 64:17:7e:6c:6f:2b:22:40:c3:d5:8f:2a:20:a4:50:70:d4:39: 74:a5:60:61:b3:91:ae:06:b4:00:ef:fa:80:9d:43:23:25:13: dc:f5:54:9b:66:24:da:2e:fd:de:72:1e:5b:25:3b:ab:10:64: 65:c6:79:6a:cb:0b:97:34:49:92:c9:96:4a:b5:f8:9c:a3:8c: 71:31:2a:46:cd:48:03:c6:86:79:59:0b:05:76:59:10:af:df: 7f:a1:d3:72:33:10:f9:59:a9:71:4b:9f:a1:19:6f:c7:d0:7c: 44:50:1b:6f:e7:a1:4d:34:84:ef:4f:a3:7e:8b:90:ed:30:05: f2:62:0c:9e:ca:2f:48:d4:61:54:a2:7c:9e:14:6b:bd:d3:36: 94:0a:59:17:9a:42:b6:50:83:f3:6e:71:ed:cc:55:8a:df:60: f1:db:36:69:9a:a0:36:11:17:81:ea:74:db:56:55:f3:d4:1f: 8c:85:00:02:18:80:6c:8b:9d:88:a0:5c:69:6f:23:ff:41:11: 65:61:0c:24:64:a7:3f:8d:a2:a8:73:ad:57:5b:9b:88:c8:e2: e9:c4:42:00 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqSUHZksv0ybD4ZftSEB/Z4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjUxMTE3MTQ1NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2Y4YWE1ZDZmNWRjYTVlYzNmMGNhNDJiNjMzMWFmNmE0ODY4ZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvEv/MQUzf0VD8cJsOD2/9SPfiRv JepAsWPDYJ9fBfDyLaKlwPR+Zpwr+bsS6umzHcqtbMJYfkBTpqgh/80B4HNP55J9 b24XBiT6MHXrB548fBzEXPO8R6Q3llLuh8Xu0zIaL1p8Ho9MeKRi+MrwuluqmCbV 8Hz+SEeQgX2DnJdE47Kk4zeNgqGVvbSD2j/lmJQmseCwiSTTu5Xt7r0soI9llmlb 2O6utN8I46odpMH5GZt721atxmku4xUQPxPYpE/3WsDYgye71YDfPdPCa8eesAa6 3xoQ8/PDBh1mXenlUd9DF8mseNRHIK+kY6YahYo14EFBtTFT3hjQ0EeRkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJf4ql1vXcpew/DKQrYzGvakho9kMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvbF9pcVhXOWR5bDdEOE1wQ3RqTWE5cVNHajJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQRQ MA0GCSqGSIb3DQEBCwUAA4IBAQAQGMdXqDU4zTIujH6bNkEFs3/GPJtpg7ohem+N Js7rlmcQr+xkF35sbysiQMPVjyogpFBw1Dl0pWBhs5GuBrQA7/qAnUMjJRPc9VSb ZiTaLv3ech5bJTurEGRlxnlqywuXNEmSyZZKtfico4xxMSpGzUgDxoZ5WQsFdlkQ r99/odNyMxD5WalxS5+hGW/H0HxEUBtv56FNNITvT6N+i5DtMAXyYgyeyi9I1GFU onyeFGu90zaUClkXmkK2UIPzbnHtzFWK32Dx2zZpmqA2EReB6nTbVlXz1B+MhQAC GIBsi52IoFxpbyP/QRFlYQwkZKc/jaKoc61XW5uIyOLpxEIA -----END CERTIFICATE-----Generated at Fri Dec 5 20:27:53 2025 by rpki-client