This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9HnAjUoAl3gx4y1sIMjIa42HMLg.roa File: 9HnAjUoAl3gx4y1sIMjIa42HMLg.roa (raw, json) Hash identifier: mv2/9b4f6PKmTSCYUZEdcFL2TkKJf9mxTKxE0106Q1E= Subject key identifier: F4:79:C0:8D:4A:00:97:78:31:E3:2D:6C:20:C8:C8:6B:8D:87:30:B8 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B02381EF9DE0CFA9766F6792D1DD09BB2 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9HnAjUoAl3gx4y1sIMjIa42HMLg.roa Signing time: Tue 09 Dec 2025 08:26:31 +0000 ROA not before: Tue 09 Dec 2025 08:26:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212094 IP address blocks: 2a06:de01:e0::/44 maxlen: 48 2a0e:97c0:480::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:38:1e:f9:de:0c:fa:97:66:f6:79:2d:1d:d0:9b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 9 08:26:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f479c08d4a00977831e32d6c20c8c86b8d8730b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:e5:1e:c6:14:cb:93:59:6b:de:ba:34:f4: 1b:a1:d0:a1:c3:dc:30:5c:59:33:73:a2:d0:7c:e2: 46:f0:da:72:f4:85:aa:a0:28:09:88:21:1f:57:28: 78:1a:6c:ab:f1:cd:d8:6f:ea:c9:31:51:d2:e7:7e: 93:49:81:f3:ed:ad:62:5e:29:9a:cd:b2:1e:49:90: 97:54:f7:08:55:2c:1f:02:87:66:89:ff:a2:40:f4: 6e:50:ef:e0:16:ea:c8:3b:42:6b:e8:ac:28:e8:19: 4a:28:68:1c:26:4b:85:6e:3f:c1:b3:b4:16:26:18: d6:ec:c8:70:fe:ca:34:45:ed:a4:86:e8:94:00:20: 99:b0:92:13:be:19:b1:17:4d:67:b6:7a:fc:f2:b9: 47:e6:99:f5:64:1a:79:1e:f8:44:d5:6e:5e:71:5a: 4a:49:6d:10:6a:39:4e:1e:72:c4:78:2c:c3:a4:10: b8:d7:33:c5:7e:b0:66:71:31:a6:fa:79:ee:0b:6f: a3:d0:b5:65:7d:d8:87:cb:41:24:71:11:9c:06:56: 91:ae:d7:ab:64:b8:19:d2:9e:c5:93:79:c1:57:a4: 0e:fa:fb:99:b3:02:ee:e5:a3:a9:14:59:d1:9e:66: dc:54:77:30:ec:41:d8:83:da:de:8c:c0:82:76:ef: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:79:C0:8D:4A:00:97:78:31:E3:2D:6C:20:C8:C8:6B:8D:87:30:B8 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9HnAjUoAl3gx4y1sIMjIa42HMLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de01:e0::/44 2a0e:97c0:480::/44 Signature Algorithm: sha256WithRSAEncryption ab:83:7b:cf:dc:b7:63:f6:0d:5f:e1:82:dd:33:86:38:a4:28: 6f:ee:a6:d4:df:9e:04:22:d9:33:6b:08:77:9c:a5:94:d0:78: dd:4b:b4:09:4e:9d:ba:ef:74:c3:5d:c2:3d:0d:b6:4f:df:2c: e4:d0:81:7c:4c:15:db:3f:78:b2:57:97:de:09:04:cc:1b:63: 39:b0:6f:59:c2:4a:35:13:a9:75:64:d7:96:61:bc:fe:03:44: 48:de:73:d6:d2:0c:43:df:b2:05:5f:48:85:d5:e3:c7:2a:1c: 7a:e1:d7:bf:f7:52:8f:d6:40:ce:b7:6f:61:52:b8:ce:97:50: 5e:e6:5b:71:7d:3f:ba:c3:ce:86:99:8c:65:6a:6f:71:18:84: 6f:4e:f6:37:fb:78:d9:9e:f1:b1:de:46:de:3f:24:f2:9e:b1: bc:9b:2e:a0:fe:cf:6e:30:38:aa:9d:d1:ac:cd:cb:e2:3a:76: 1d:4f:09:97:6f:37:34:ad:4c:89:92:40:47:70:dd:d1:68:ff: df:11:9f:15:b7:1c:06:85:2f:c5:37:4a:67:dc:b4:78:94:f9: 8e:eb:0a:5a:78:95:a8:12:92:8f:e7:47:d7:a3:a9:15:6a:fa: ed:97:2c:14:5e:7d:25:2b:ff:c5:96:4b:50:1b:5c:ea:e6:29: d4:3c:63:1d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsCOB753gz6l2b2eS0d0JuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjA5MDgyNjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDc5YzA4ZDRhMDA5Nzc4MzFlMzJkNmMyMGM4Yzg2YjhkODczMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrvlHsYUy5NZa966NPQbodChw9ww XFkzc6LQfOJG8Npy9IWqoCgJiCEfVyh4Gmyr8c3Yb+rJMVHS536TSYHz7a1iXima zbIeSZCXVPcIVSwfAodmif+iQPRuUO/gFurIO0Jr6Kwo6BlKKGgcJkuFbj/Bs7QW JhjW7Mhw/so0Re2khuiUACCZsJITvhmxF01ntnr88rlH5pn1ZBp5HvhE1W5ecVpK SW0QajlOHnLEeCzDpBC41zPFfrBmcTGm+nnuC2+j0LVlfdiHy0EkcRGcBlaRrter ZLgZ0p7Fk3nBV6QO+vuZswLu5aOpFFnRnmbcVHcw7EHYg9rejMCCdu+DjwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPR5wI1KAJd4MeMtbCDIyGuNhzC4MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvOUhuQWpVb0FsM2d4NHkxc0lNaklhNDJITUxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAQDg AwcEKg6XwASAMA0GCSqGSIb3DQEBCwUAA4IBAQCrg3vP3Ldj9g1f4YLdM4Y4pChv 7qbU354EItkzawh3nKWU0HjdS7QJTp2673TDXcI9DbZP3yzk0IF8TBXbP3iyV5fe CQTMG2M5sG9Zwko1E6l1ZNeWYbz+A0RI3nPW0gxD37IFX0iF1ePHKhx64de/91KP 1kDOt29hUrjOl1Be5ltxfT+6w86GmYxlam9xGIRvTvY3+3jZnvGx3kbePyTynrG8 my6g/s9uMDiqndGszcviOnYdTwmXbzc0rUyJkkBHcN3RaP/fEZ8VtxwGhS/FN0pn 3LR4lPmO6wpaeJWoEpKP50fXo6kVavrtlywUXn0lK//FlktQG1zq5inUPGMd -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:05 2025 by rpki-client