This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/1-12KncT50SrkE5upvUmkNH2Z7_g.roa File: 1-12KncT50SrkE5upvUmkNH2Z7_g.roa (raw, json) Hash identifier: 9LgkMNGBsksMwlyYlyy/ImCM494Li5RxP5cL/njnu2w= Subject key identifier: FB:5D:8A:9D:C4:F9:D1:2A:E4:13:9B:A9:BD:49:A4:34:7D:99:EF:F8 Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc Certificate serial: 019ADFD1029ACCA7EA3D549C53A129FA83DB Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/1-12KncT50SrkE5upvUmkNH2Z7_g.roa Signing time: Tue 02 Dec 2025 16:06:48 +0000 ROA not before: Tue 02 Dec 2025 16:06:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20546 IP address blocks: 212.29.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:d1:02:9a:cc:a7:ea:3d:54:9c:53:a1:29:fa:83:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc Validity Not Before: Dec 2 16:06:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fb5d8a9dc4f9d12ae4139ba9bd49a4347d99eff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:71:d8:ba:65:25:65:c8:ac:77:f0:3f:c0: cd:8a:72:8a:8c:9e:29:96:21:d8:30:cd:bf:0e:91: 30:cc:4f:23:43:83:cf:ea:ae:24:0b:57:cd:7a:5e: 6a:fa:e1:d6:14:00:f8:72:f6:11:9c:f0:52:dc:6b: 33:54:2f:d8:e8:05:ec:12:68:f0:20:74:fa:16:ba: 5b:2f:77:1b:94:09:5e:a7:48:96:6d:0d:63:f8:dc: a1:c6:fd:d2:14:02:6e:ba:18:db:d9:9a:64:7e:2f: 3a:d1:60:83:04:65:9f:64:ac:fc:63:9e:7c:35:4f: dd:9a:64:41:d0:12:2c:ab:a4:6b:b4:af:11:d5:f5: 5f:2e:fe:50:7d:b7:32:32:58:2d:30:d7:ca:7d:13: 18:11:e4:1f:cc:60:f2:8e:74:50:2b:70:02:9c:07: f6:82:4f:52:55:78:c6:a1:a3:9b:63:13:79:d3:8a: 39:d3:08:dc:82:82:f2:8e:db:72:65:c0:c7:5c:49: a1:0e:29:55:8a:18:20:5b:ae:e9:76:41:b8:5a:5a: 54:a7:37:79:41:50:72:19:e4:24:aa:f2:ef:d5:f8: 5e:de:73:ba:4d:ff:62:40:3a:fd:07:bc:1a:ef:29: 1d:64:5e:64:36:82:48:6f:ac:27:b4:90:bd:a6:73: 0f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5D:8A:9D:C4:F9:D1:2A:E4:13:9B:A9:BD:49:A4:34:7D:99:EF:F8 X509v3 Authority Key Identifier: keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/1-12KncT50SrkE5upvUmkNH2Z7_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.29.30.0/24 Signature Algorithm: sha256WithRSAEncryption 06:e1:df:71:51:81:f5:91:d5:ac:90:16:e5:14:67:5a:ac:8d: 9d:15:b2:6b:cd:76:78:86:fa:2a:ba:24:65:f3:2a:47:33:c7: c9:0a:7d:84:46:a5:59:13:e5:b0:17:de:10:f8:91:b7:21:10: f4:b3:5c:c3:87:3e:fc:7f:bb:1f:d9:ca:2a:48:58:fd:02:33: 4d:2d:a1:f6:6d:c3:2d:7c:4d:6c:d3:80:3a:33:c1:81:c7:87: 94:47:87:ca:fa:77:ed:13:c6:ab:77:83:7e:0b:05:40:e0:fd: 2a:99:fd:51:e3:0c:78:fd:ab:32:f0:94:38:0d:30:91:bd:62: 0c:a0:29:42:9b:ad:9d:7d:74:08:0b:fb:4f:bb:5e:f0:9e:77: 73:0e:f5:44:e3:84:3d:76:97:40:4f:ab:ef:9b:2d:9b:8f:0b: ca:43:a1:ed:6c:65:c1:18:0f:11:31:0d:b2:53:a2:6d:df:0f: 5e:5a:57:58:7d:80:e1:81:c9:73:db:6a:bd:f4:3c:0d:56:e5: e3:11:4e:00:17:a0:06:0d:93:ab:c9:1a:f9:d8:54:13:ac:4e: 11:85:80:1e:09:45:4b:89:de:40:16:84:09:08:35:b3:cb:6a: 9f:17:51:9b:f3:57:49:0a:fb:fa:0a:19:da:ef:8f:be:2c:90: 52:a6:2d:c7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrf0QKazKfqPVScU6Ep+oPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNjliZGY5YmJkMmE0NTk3ZTI2Y2UyMGJmZTEzODYyNGNh ZDMzZGMwHhcNMjUxMjAyMTYwNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjVkOGE5ZGM0ZjlkMTJhZTQxMzliYTliZDQ5YTQzNDdkOTllZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRZx2LplJWXIrHfwP8DNinKKjJ4p liHYMM2/DpEwzE8jQ4PP6q4kC1fNel5q+uHWFAD4cvYRnPBS3GszVC/Y6AXsEmjw IHT6FrpbL3cblAlep0iWbQ1j+Nyhxv3SFAJuuhjb2Zpkfi860WCDBGWfZKz8Y558 NU/dmmRB0BIsq6RrtK8R1fVfLv5QfbcyMlgtMNfKfRMYEeQfzGDyjnRQK3ACnAf2 gk9SVXjGoaObYxN504o50wjcgoLyjttyZcDHXEmhDilVihggW67pdkG4WlpUpzd5 QVByGeQkqvLv1fhe3nO6Tf9iQDr9B7wa7ykdZF5kNoJIb6wntJC9pnMPhwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPtdip3E+dEq5BObqb1JpDR9me/4MB8GA1UdIwQY MBaAFJ9pvfm70qRZfibOIL/hOGJMrTPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEt NjE5MjgxMzgwYmMyLzEvMS0xMktuY1Q1MFNya0U1dXB2VW1rTkgyWjdfZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzkvY2RiZDBhLTY4ZWMtNDg3ZC04ZmVhLTYxOTI4MTM4MGJj Mi8xL24ybTktYnZTcEZsLUpzNGd2LUU0WWt5dE05dy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQdHjAN BgkqhkiG9w0BAQsFAAOCAQEABuHfcVGB9ZHVrJAW5RRnWqyNnRWya812eIb6Krok ZfMqRzPHyQp9hEalWRPlsBfeEPiRtyEQ9LNcw4c+/H+7H9nKKkhY/QIzTS2h9m3D LXxNbNOAOjPBgceHlEeHyvp37RPGq3eDfgsFQOD9Kpn9UeMMeP2rMvCUOA0wkb1i DKApQputnX10CAv7T7te8J53cw71ROOEPXaXQE+r75stm48LykOh7WxlwRgPETEN slOibd8PXlpXWH2A4YHJc9tqvfQ8DVbl4xFOABegBg2Tq8ka+dhUE6xOEYWAHglF S4neQBaECQg1s8tqnxdRm/NXSQr7+goZ2u+PviyQUqYtxw== -----END CERTIFICATE-----Generated at Fri Dec 12 11:51:18 2025 by rpki-client