This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/84lXCeM1b-UlSDmBqMeN697kzhs.roa File: 84lXCeM1b-UlSDmBqMeN697kzhs.roa (raw, json) Hash identifier: 9aPyxhqKaJRT2YWhoUygXZfHefmuqc2c5RpHc8TeV8k= Subject key identifier: F3:89:57:09:E3:35:6F:E5:25:48:39:81:A8:C7:8D:EB:DE:E4:CE:1B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AFD9126A833480B37332CAF3F2FA4F6AA Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/84lXCeM1b-UlSDmBqMeN697kzhs.roa Signing time: Mon 08 Dec 2025 10:45:39 +0000 ROA not before: Mon 08 Dec 2025 10:45:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47376 IP address blocks: 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:91:26:a8:33:48:0b:37:33:2c:af:3f:2f:a4:f6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 8 10:45:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3895709e3356fe525483981a8c78debdee4ce1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:f4:00:06:cc:b1:82:6c:73:ea:9a:19:6a: 30:67:d5:c6:c8:e7:2e:68:9d:eb:df:01:3f:79:50: a2:1e:4b:68:88:d2:f5:67:ca:6b:d5:b5:63:56:98: 17:fb:d8:c5:89:b3:c9:d9:35:98:f2:f9:e8:ed:88: 04:7c:c5:04:18:b6:1e:9c:a6:b9:73:f2:31:59:ff: bd:92:e9:56:ce:72:6c:d2:b4:8b:86:90:df:30:c8: c4:ee:91:1b:6a:26:e0:e5:9b:bb:8a:27:0c:7c:73: f2:78:b2:01:93:12:3d:ff:25:9f:9b:fd:9a:b7:9d: 8d:5c:e5:14:e4:5b:99:3e:ba:cb:70:93:21:f4:6f: b4:b8:46:1e:19:97:4d:da:2f:5e:8c:95:6b:fb:af: 10:b4:4c:68:82:c1:12:4c:3d:72:a4:90:24:28:03: 06:49:64:6a:7c:90:4b:4f:74:ce:4c:fe:ac:36:6e: 0a:bb:96:90:52:20:77:4d:ff:12:18:a7:3a:b8:25: e8:76:c1:09:2a:63:c9:eb:62:ae:9b:9e:44:e9:03: 18:02:d7:29:35:65:49:ed:cd:51:c3:90:3e:5b:00: ce:25:7a:79:5c:6f:fc:b6:77:41:9d:8b:a1:42:9a: 01:19:07:4f:d9:b2:dd:55:23:31:d2:a1:7b:d1:50: a2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:89:57:09:E3:35:6F:E5:25:48:39:81:A8:C7:8D:EB:DE:E4:CE:1B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/84lXCeM1b-UlSDmBqMeN697kzhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption 3d:b0:b7:69:83:2f:b2:74:6c:84:f5:7e:4e:e6:58:61:91:b9: bd:80:4a:99:89:8a:b1:ec:b9:9c:98:a6:4c:ba:6d:76:85:c1: f4:e2:2e:c1:dd:d5:91:07:5d:16:60:98:cc:0b:ec:0d:cc:b6: 40:bd:9c:53:e0:f6:a1:68:77:9d:bd:df:f7:c4:ba:5d:06:3e: 9e:94:e9:c0:2c:f1:d5:ec:a1:7a:59:e1:38:be:74:46:d3:20: d5:ed:c0:33:09:05:c2:15:1e:82:e5:36:f7:09:23:1f:19:a1: d0:42:cc:9c:88:75:e6:c0:dd:e7:33:0f:c7:57:c0:a3:b4:a5: da:e6:c8:10:20:c5:67:c4:2d:08:ae:49:70:ef:ad:d5:5e:2d: 21:4c:6d:c7:8a:36:5c:c5:87:d3:ae:3b:98:34:79:b5:16:03: 59:41:64:3c:a3:a9:be:36:d6:9b:20:f9:71:83:ad:fd:5b:71: c8:7c:2e:c8:8b:08:a2:01:3c:e8:a8:9e:f7:b0:14:51:01:ad: c8:30:7b:04:14:5a:b2:e5:75:a8:92:d3:62:0a:58:b4:27:65: 8f:03:bc:86:f9:49:45:8c:e4:ba:b2:52:07:0e:d9:17:f5:ed: 73:09:fc:aa:7d:6d:01:f5:84:92:5a:05:40:86:ae:47:55:e4: 66:14:15:76 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZr9kSaoM0gLNzMsrz8vpPaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA4MTA0NTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzg5NTcwOWUzMzU2ZmU1MjU0ODM5ODFhOGM3OGRlYmRlZTRjZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNT0AAbMsYJsc+qaGWowZ9XGyOcu aJ3r3wE/eVCiHktoiNL1Z8pr1bVjVpgX+9jFibPJ2TWY8vno7YgEfMUEGLYenKa5 c/IxWf+9kulWznJs0rSLhpDfMMjE7pEbaibg5Zu7iicMfHPyeLIBkxI9/yWfm/2a t52NXOUU5FuZPrrLcJMh9G+0uEYeGZdN2i9ejJVr+68QtExogsESTD1ypJAkKAMG SWRqfJBLT3TOTP6sNm4Ku5aQUiB3Tf8SGKc6uCXodsEJKmPJ62Kum55E6QMYAtcp NWVJ7c1Rw5A+WwDOJXp5XG/8tndBnYuhQpoBGQdP2bLdVSMx0qF70VCiEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPOJVwnjNW/lJUg5gajHjeve5M4bMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvODRsWENlTTFiLVVsU0RtQnFNZU42OTdremhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRuQAAB MA0GCSqGSIb3DQEBCwUAA4IBAQA9sLdpgy+ydGyE9X5O5lhhkbm9gEqZiYqx7Lmc mKZMum12hcH04i7B3dWRB10WYJjMC+wNzLZAvZxT4PahaHedvd/3xLpdBj6elOnA LPHV7KF6WeE4vnRG0yDV7cAzCQXCFR6C5Tb3CSMfGaHQQsyciHXmwN3nMw/HV8Cj tKXa5sgQIMVnxC0Irklw763VXi0hTG3HijZcxYfTrjuYNHm1FgNZQWQ8o6m+Ntab IPlxg639W3HIfC7IiwiiATzoqJ73sBRRAa3IMHsEFFqy5XWoktNiCli0J2WPA7yG +UlFjOS6slIHDtkX9e1zCfyqfW0B9YSSWgVAhq5HVeRmFBV2 -----END CERTIFICATE-----Generated at Wed Dec 10 08:59:57 2025 by rpki-client