This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/IzbD7mcraoOG_DimOkj2L2oAjhw.roa File: IzbD7mcraoOG_DimOkj2L2oAjhw.roa (raw, json) Hash identifier: wu+QMMHTKCstbdiRuln4sn4sjq5YOED5W8egMC/fkZA= Subject key identifier: 23:36:C3:EE:67:2B:6A:83:86:FC:38:A6:3A:48:F6:2F:6A:00:8E:1C Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B0A949ABF49F395472A934FA251C4986F Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/IzbD7mcraoOG_DimOkj2L2oAjhw.roa Signing time: Wed 10 Dec 2025 23:24:29 +0000 ROA not before: Wed 10 Dec 2025 23:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207432 IP address blocks: 2a11:d440::/29 maxlen: 64 2a11:ef40::/29 maxlen: 64 2a11:fbc0::/29 maxlen: 64 2a12:ac0::/29 maxlen: 64 2a12:2a40::/29 maxlen: 64 2a12:33c0::/29 maxlen: 64 2a12:3b00::/29 maxlen: 64 2a12:3b80::/29 maxlen: 64 2a12:4d00::/29 maxlen: 64 2a12:4f80::/29 maxlen: 64 2a12:5a80::/29 maxlen: 64 2a12:6e80::/29 maxlen: 64 2a12:9c00::/29 maxlen: 64 2a12:a400::/29 maxlen: 64 2a12:b980::/29 maxlen: 64 2a12:cd80::/29 maxlen: 64 2a12:dd80::/29 maxlen: 64 2a12:ef80::/29 maxlen: 64 2a12:f000::/29 maxlen: 64 2a12:f400::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:94:9a:bf:49:f3:95:47:2a:93:4f:a2:51:c4:98:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Dec 10 23:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2336c3ee672b6a8386fc38a63a48f62f6a008e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:8c:13:7c:01:79:03:75:8f:23:e6:24:3f: 71:ab:d1:83:09:20:5e:2c:91:7a:3b:43:80:01:b1: c4:4f:ad:9a:41:03:fc:57:90:9a:77:fd:a4:ef:81: 5d:f8:45:a9:27:ca:22:77:fc:65:8e:80:18:86:92: 7a:df:0e:68:21:1e:7e:19:1f:6a:5c:92:fb:20:01: 46:ef:fa:4f:3a:46:9c:db:48:ba:aa:1e:43:f8:4b: e1:97:8f:d1:3c:67:0c:7d:11:99:fb:ce:58:90:14: 92:4c:34:6b:b3:ca:aa:dc:80:b4:0b:75:ef:70:47: c6:ee:0b:15:fc:c2:39:6b:3f:4b:10:0d:55:fc:81: c2:97:f4:0e:d4:2d:9c:56:c1:5c:39:aa:38:6a:db: 90:87:cc:cd:e9:d0:55:06:25:72:2d:f1:a7:1b:64: 56:17:84:0e:57:6e:82:4b:30:31:01:db:68:96:3b: db:38:61:ea:ec:f9:92:96:6d:c3:11:47:11:5a:fd: ae:a0:1f:44:fa:fb:44:37:c0:6e:69:6c:95:df:36: 80:1c:00:45:3e:a1:ce:63:50:ff:f1:95:f8:9b:41: 1a:e8:e7:ea:23:ed:7f:aa:df:51:31:24:23:dd:fd: f0:f1:77:19:6b:0e:23:fb:d2:4b:66:44:58:10:18: 7a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:36:C3:EE:67:2B:6A:83:86:FC:38:A6:3A:48:F6:2F:6A:00:8E:1C X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/IzbD7mcraoOG_DimOkj2L2oAjhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:d440::/29 2a11:ef40::/29 2a11:fbc0::/29 2a12:ac0::/29 2a12:2a40::/29 2a12:33c0::/29 2a12:3b00::/29 2a12:3b80::/29 2a12:4d00::/29 2a12:4f80::/29 2a12:5a80::/29 2a12:6e80::/29 2a12:9c00::/29 2a12:a400::/29 2a12:b980::/29 2a12:cd80::/29 2a12:dd80::/29 2a12:ef80::/29 2a12:f000::/29 2a12:f400::/29 Signature Algorithm: sha256WithRSAEncryption 9d:bf:86:00:4f:ad:69:81:7b:3b:1c:e3:8c:5a:23:76:70:33: 42:8a:b3:31:b3:b7:43:30:e9:85:c6:e2:41:8e:e8:77:01:09: ae:4f:e1:4b:65:da:c3:27:40:b4:74:51:73:06:ca:dc:0e:de: 52:10:ea:23:aa:57:35:9e:e9:06:1f:94:f6:54:3d:08:32:2b: fe:26:af:2a:90:b7:27:2a:b6:3f:94:ee:76:a4:a1:61:c8:27: 60:eb:85:25:20:bf:5d:a3:ed:df:66:1f:d3:8e:58:ec:6f:f4: ac:89:f3:2d:ab:1f:d5:8b:d6:a3:78:93:65:5b:0f:c3:07:09: 40:aa:d0:bd:c8:9f:51:b3:99:cf:60:24:4f:ae:24:c7:bc:5e: 24:92:85:11:7e:bc:14:b9:5e:3c:1b:bd:ed:1b:ff:8b:18:69: b1:b6:5c:2e:5a:50:98:38:6a:87:66:d9:61:e5:ba:8b:4a:a2: 62:73:24:c3:26:af:b1:89:3e:51:a1:69:55:d9:d6:4e:95:bc: 5a:3e:31:5c:40:66:f6:8f:d5:74:64:d3:79:2d:d4:df:d7:77: f5:98:33:73:d1:15:0f:c3:b7:48:f5:78:c4:a6:9e:e1:5a:8e: 99:de:1b:3f:00:e2:a1:5f:5d:d7:93:c4:dd:0b:5e:b2:8e:cd: 69:32:85:ab -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAZsKlJq/SfOVRyqTT6JRxJhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjUxMjEwMjMyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzM2YzNlZTY3MmI2YTgzODZmYzM4YTYzYTQ4ZjYyZjZhMDA4ZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDiME3wBeQN1jyPmJD9xq9GDCSBe LJF6O0OAAbHET62aQQP8V5Cad/2k74Fd+EWpJ8oid/xljoAYhpJ63w5oIR5+GR9q XJL7IAFG7/pPOkac20i6qh5D+Evhl4/RPGcMfRGZ+85YkBSSTDRrs8qq3IC0C3Xv cEfG7gsV/MI5az9LEA1V/IHCl/QO1C2cVsFcOao4atuQh8zN6dBVBiVyLfGnG2RW F4QOV26CSzAxAdtoljvbOGHq7PmSlm3DEUcRWv2uoB9E+vtEN8BuaWyV3zaAHABF PqHOY1D/8ZX4m0Ea6OfqI+1/qt9RMSQj3f3w8XcZaw4j+9JLZkRYEBh60QIDAQAB o4IClDCCApAwHQYDVR0OBBYEFCM2w+5nK2qDhvw4pjpI9i9qAI4cMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvSXpiRDdtY3Jhb09HX0RpbU9rajJMMm9Bamh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAIwgYwDBQMq EdRAAwUDKhHvQAMFAyoR+8ADBQMqEgrAAwUDKhIqQAMFAyoSM8ADBQMqEjsAAwUD KhI7gAMFAyoSTQADBQMqEk+AAwUDKhJagAMFAyoSboADBQMqEpwAAwUDKhKkAAMF AyoSuYADBQMqEs2AAwUDKhLdgAMFAyoS74ADBQMqEvAAAwUDKhL0ADANBgkqhkiG 9w0BAQsFAAOCAQEAnb+GAE+taYF7OxzjjFojdnAzQoqzMbO3QzDphcbiQY7odwEJ rk/hS2XawydAtHRRcwbK3A7eUhDqI6pXNZ7pBh+U9lQ9CDIr/iavKpC3Jyq2P5Tu dqShYcgnYOuFJSC/XaPt32Yf045Y7G/0rInzLasf1YvWo3iTZVsPwwcJQKrQvcif UbOZz2AkT64kx7xeJJKFEX68FLlePBu97Rv/ixhpsbZcLlpQmDhqh2bZYeW6i0qi YnMkwyavsYk+UaFpVdnWTpW8Wj4xXEBm9o/VdGTTeS3U39d39Zgzc9EVD8O3SPV4 xKae4VqOmd4bPwDioV9d15PE3Qteso7NaTKFqw== -----END CERTIFICATE-----Generated at Sun Dec 14 12:03:12 2025 by rpki-client