This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/lNuBLYCJ0lfEgO69TARxUVn65MY.roa File: lNuBLYCJ0lfEgO69TARxUVn65MY.roa (raw, json) Hash identifier: c/DzytieLHDcyyqGT5jbt6nBdARkMqsmssA/P9Kdzjk= Subject key identifier: 94:DB:81:2D:80:89:D2:57:C4:80:EE:BD:4C:04:71:51:59:FA:E4:C6 Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d Certificate serial: 019AA7166B04E491442295FA8A4A63D5F77E Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/lNuBLYCJ0lfEgO69TARxUVn65MY.roa Signing time: Fri 21 Nov 2025 15:44:15 +0000 ROA not before: Fri 21 Nov 2025 15:44:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48659 IP address blocks: 2a03:ae40:fa00::/40 maxlen: 40 2a03:ae40:fb00::/40 maxlen: 40 2a13:2802:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:16:6b:04:e4:91:44:22:95:fa:8a:4a:63:d5:f7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d Validity Not Before: Nov 21 15:44:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=94db812d8089d257c480eebd4c04715159fae4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:05:43:f3:44:9c:e3:a2:6c:e1:8d:b4:96: 1a:9f:48:3c:2c:f4:43:88:d9:ee:7b:ce:60:a0:5e: 7a:08:39:bb:c8:8f:9a:f3:12:82:0d:45:ac:96:52: c0:82:e3:a0:73:6d:e2:3e:04:0b:55:06:42:58:fc: f2:36:5a:db:28:de:ad:fd:5b:d8:60:6a:fb:5e:4c: b0:0d:b3:36:6f:4c:11:ba:bd:f5:94:cd:7c:3e:61: c4:f4:06:38:ad:a2:ea:85:25:c6:27:53:4c:0b:d8: ee:5f:0e:ed:2d:04:36:a0:87:68:46:49:1a:69:b1: e7:5a:29:cd:54:a2:19:b0:6f:e9:c1:4f:b6:0a:6a: 19:44:6b:eb:f5:68:00:a4:1d:c5:a2:c1:d5:7c:06: e7:e6:bc:52:fe:a9:53:6f:3b:76:77:f7:84:11:89: 3d:cc:eb:8e:37:16:6b:19:f1:57:28:d4:eb:b7:7c: 58:c9:db:09:c0:4f:ac:62:1d:fa:b4:68:1e:2d:a3: 35:54:70:92:3b:cc:01:88:29:40:6f:ec:29:c9:4e: c2:1b:14:09:a6:ee:e8:12:a8:7f:97:fd:35:d5:80: c9:15:5c:1a:07:5f:5e:57:4e:b0:5e:60:30:d9:cc: 25:f1:f7:f1:76:26:df:0d:f2:11:af:9d:35:cb:c6: b5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:81:2D:80:89:D2:57:C4:80:EE:BD:4C:04:71:51:59:FA:E4:C6 X509v3 Authority Key Identifier: keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/lNuBLYCJ0lfEgO69TARxUVn65MY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:ae40:fa00::/39 2a13:2802:5000::/36 Signature Algorithm: sha256WithRSAEncryption 9a:82:68:bd:e2:e2:59:64:27:eb:e7:7f:71:ec:7e:61:5d:be: 3c:4a:6a:5d:bf:33:32:af:e4:59:03:2f:c4:91:6f:39:7e:a4: a8:7d:15:a8:30:54:b2:7f:6e:13:30:a0:d5:2f:29:63:b2:a3: 6e:b9:56:ca:ed:eb:25:14:78:62:03:f3:ab:58:89:e6:ef:cc: 60:d4:af:1d:0a:ea:6b:a6:42:b6:9d:2b:d2:7d:03:80:3d:43: 7b:e9:bc:fd:31:d8:5e:32:5c:47:e3:d1:a6:c6:00:af:1a:c2: 78:ba:19:c8:1b:95:be:2c:fc:d9:c1:54:fd:85:ea:a5:33:75: 66:5f:25:0a:ee:fc:17:af:d0:b7:51:6d:12:cd:8d:bf:39:cd: 01:45:cf:83:96:64:48:11:64:e3:22:9c:9d:b5:dd:88:2f:e4: 58:c5:a4:4d:6f:27:26:fc:80:68:08:d6:3a:9d:a4:96:62:0f: ae:f1:2e:74:db:a4:33:84:4e:99:5a:11:16:68:75:25:d0:cb: 36:ee:c0:fd:f1:a4:bc:77:da:31:31:15:1f:5b:c4:c2:b7:d7: 7a:34:5b:00:65:94:fb:9e:59:64:b9:cb:36:14:0e:2e:44:2f: 99:14:67:34:38:ff:f4:8f:8a:97:1d:bb:3e:e1:bc:b0:2b:95: b5:1d:4f:4a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZqnFmsE5JFEIpX6ikpj1fd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZjYzODEwN2FiYjg0YWU2ZmIwM2NjMWRiMmNmZDFiYzQ0 ODdmOGQwHhcNMjUxMTIxMTU0NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGRiODEyZDgwODlkMjU3YzQ4MGVlYmQ0YzA0NzE1MTU5ZmFlNGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugIFQ/NEnOOibOGNtJYan0g8LPRD iNnue85goF56CDm7yI+a8xKCDUWsllLAguOgc23iPgQLVQZCWPzyNlrbKN6t/VvY YGr7XkywDbM2b0wRur31lM18PmHE9AY4raLqhSXGJ1NMC9juXw7tLQQ2oIdoRkka abHnWinNVKIZsG/pwU+2CmoZRGvr9WgApB3FosHVfAbn5rxS/qlTbzt2d/eEEYk9 zOuONxZrGfFXKNTrt3xYydsJwE+sYh36tGgeLaM1VHCSO8wBiClAb+wpyU7CGxQJ pu7oEqh/l/011YDJFVwaB19eV06wXmAw2cwl8ffxdibfDfIRr501y8a1NwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFJTbgS2AidJXxIDuvUwEcVFZ+uTGMB8GA1UdIwQY MBaAFCD2OBB6u4Sub7A8wdss/RvESH+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQt YTgyODM2ZGUwNWZjLzEvbE51QkxZQ0owbGZFZ082OVRBUnhVVm42NU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQtYTgyODM2ZGUwNWZj LzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYBKgOuQPoD BgQqEygCUDANBgkqhkiG9w0BAQsFAAOCAQEAmoJoveLiWWQn6+d/cex+YV2+PEpq Xb8zMq/kWQMvxJFvOX6kqH0VqDBUsn9uEzCg1S8pY7KjbrlWyu3rJRR4YgPzq1iJ 5u/MYNSvHQrqa6ZCtp0r0n0DgD1De+m8/THYXjJcR+PRpsYArxrCeLoZyBuVviz8 2cFU/YXqpTN1Zl8lCu78F6/Qt1FtEs2NvznNAUXPg5ZkSBFk4yKcnbXdiC/kWMWk TW8nJvyAaAjWOp2klmIPrvEudNukM4ROmVoRFmh1JdDLNu7A/fGkvHfaMTEVH1vE wrfXejRbAGWU+55ZZLnLNhQOLkQvmRRnNDj/9I+Klx27PuG8sCuVtR1PSg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:34 2025 by rpki-client