This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-3lcpuCH4P_A_1N1Tv4QnmfcsFk.roa File: 1-3lcpuCH4P_A_1N1Tv4QnmfcsFk.roa (raw, json) Hash identifier: XChZp7xThaG3hB39XRJOyP3jpfLFEBE/s9rrSMn63rY= Subject key identifier: FB:79:5C:A6:E0:87:E0:FF:C0:FF:53:75:4E:FE:10:9E:67:DC:B0:59 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AFD93C4756E3A86272479902A477FCA37 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-3lcpuCH4P_A_1N1Tv4QnmfcsFk.roa Signing time: Mon 08 Dec 2025 10:48:31 +0000 ROA not before: Mon 08 Dec 2025 10:48:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213069 IP address blocks: 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:93:c4:75:6e:3a:86:27:24:79:90:2a:47:7f:ca:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 8 10:48:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fb795ca6e087e0ffc0ff53754efe109e67dcb059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c7:c8:4d:2d:28:40:7b:94:fa:e2:53:18:15: be:57:e0:db:5e:78:09:da:2d:42:4f:2d:5d:04:3e: 7c:56:79:d0:55:de:a4:72:3e:a6:06:d8:02:aa:9b: dd:a4:7a:dd:ec:35:e7:20:87:76:8d:fa:85:50:98: d0:cd:49:b4:44:f4:45:c2:01:79:21:55:b9:ee:3b: 88:ef:85:17:24:20:9f:e3:36:c5:af:9c:8b:8e:f4: 6e:2f:01:92:ea:91:50:2e:75:86:c9:9b:5f:20:36: 59:8b:1f:22:16:a8:b9:43:06:ed:44:65:f1:cc:9e: 40:12:1d:bd:48:a0:59:ef:d1:22:c2:14:ef:1a:0b: a6:97:92:75:fb:a4:b8:cb:b1:a8:7c:be:b6:25:55: e3:7f:ef:26:42:70:c5:82:63:3c:36:e8:48:2c:10: 1b:38:c9:ba:dd:46:1a:80:69:8e:d3:7d:4d:97:68: c3:a0:2c:68:f9:42:f5:9b:dc:70:75:93:d7:23:75: c9:dc:d9:9d:d8:b8:b7:48:95:dc:0e:2f:80:d8:00: 2a:c4:94:99:f8:ec:b9:dc:78:33:7b:73:b8:3e:8f: 77:c4:c4:92:58:56:2c:9c:23:d9:4b:c2:e5:13:1e: c8:33:c8:18:14:7d:90:ee:fd:d6:65:3f:a3:4f:ca: 5a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:79:5C:A6:E0:87:E0:FF:C0:FF:53:75:4E:FE:10:9E:67:DC:B0:59 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-3lcpuCH4P_A_1N1Tv4QnmfcsFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption 8b:44:25:03:bc:b5:01:10:d7:b2:83:29:91:1a:36:2f:81:2e: 0c:72:b9:78:66:c2:2c:54:01:bf:a3:12:e9:03:80:83:4e:ee: f0:c1:21:80:f6:9e:e7:0e:fb:ed:6e:e8:fb:c7:eb:ec:a6:30: 90:7b:fc:64:6a:48:c4:f2:01:a5:c8:81:15:6f:67:e0:a7:5e: 0e:92:50:b1:7d:0c:0d:31:f4:3a:cd:4c:b3:ff:89:d1:71:af: 89:d3:8e:b6:19:26:af:df:e7:92:1a:16:b0:27:c0:2a:93:a1: 01:27:99:5c:66:d5:50:33:c1:97:87:14:83:0c:7c:28:e3:29: f4:06:94:fe:bd:a1:14:14:22:8c:fd:3a:75:45:56:c9:29:8e: 5c:19:7a:22:7a:ca:6b:82:1a:4e:75:81:4c:b1:65:7a:87:42: 4e:ad:c3:3c:4f:ba:32:af:9b:d6:03:28:c1:53:28:bb:57:f5: 5a:6c:57:84:fb:7c:cb:5e:94:43:d4:a8:0b:a4:5d:05:30:b6: 81:59:41:22:94:ff:e4:d7:5d:a9:fb:0c:39:57:2a:87:b4:8f: e5:39:c0:9b:f2:d8:3f:c1:d2:5e:47:14:53:45:e0:16:d7:02: 66:18:c1:28:73:7f:15:e8:c2:14:3c:5d:ac:fb:8f:3b:34:5c: 7d:c5:e5:2d -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZr9k8R1bjqGJyR5kCpHf8o3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA4MTA0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjc5NWNhNmUwODdlMGZmYzBmZjUzNzU0ZWZlMTA5ZTY3ZGNiMDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cfITS0oQHuU+uJTGBW+V+DbXngJ 2i1CTy1dBD58VnnQVd6kcj6mBtgCqpvdpHrd7DXnIId2jfqFUJjQzUm0RPRFwgF5 IVW57juI74UXJCCf4zbFr5yLjvRuLwGS6pFQLnWGyZtfIDZZix8iFqi5QwbtRGXx zJ5AEh29SKBZ79EiwhTvGguml5J1+6S4y7GofL62JVXjf+8mQnDFgmM8NuhILBAb OMm63UYagGmO031Nl2jDoCxo+UL1m9xwdZPXI3XJ3Nmd2Li3SJXcDi+A2AAqxJSZ +Oy53Hgze3O4Po93xMSSWFYsnCPZS8LlEx7IM8gYFH2Q7v3WZT+jT8paowIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPt5XKbgh+D/wP9TdU7+EJ5n3LBZMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMS0zbGNwdUNINFBfQV8xTjFUdjRRbm1mY3NGay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTIvNTExZjk1LWU0YmYtNDNmMS1hZjJmLWI4MTFjZmNiOWZk NS8xL1R4c0pYNnRuWXp3Qko5WWY5b1Y0Wk9wckpjVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUbkAA ATANBgkqhkiG9w0BAQsFAAOCAQEAi0QlA7y1ARDXsoMpkRo2L4EuDHK5eGbCLFQB v6MS6QOAg07u8MEhgPae5w777W7o+8fr7KYwkHv8ZGpIxPIBpciBFW9n4KdeDpJQ sX0MDTH0Os1Ms/+J0XGvidOOthkmr9/nkhoWsCfAKpOhASeZXGbVUDPBl4cUgwx8 KOMp9AaU/r2hFBQijP06dUVWySmOXBl6InrKa4IaTnWBTLFleodCTq3DPE+6Mq+b 1gMowVMou1f1WmxXhPt8y16UQ9SoC6RdBTC2gVlBIpT/5NddqfsMOVcqh7SP5TnA m/LYP8HSXkcUU0XgFtcCZhjBKHN/FejCFDxdrPuPOzRcfcXlLQ== -----END CERTIFICATE-----Generated at Wed Dec 10 09:04:00 2025 by rpki-client