This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9jAQ-plbj4Gc-hx4bux29IofICI.roa File: 9jAQ-plbj4Gc-hx4bux29IofICI.roa (raw, json) Hash identifier: 1NJDMZEsqW+0+jeNoFDOtTMIoVh7d+xhMAabqgOPgLM= Subject key identifier: F6:30:10:FA:99:5B:8F:81:9C:FA:1C:78:6E:EC:76:F4:8A:1F:20:22 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AFD9127C1DE106395A3BF2CBED215FD60 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9jAQ-plbj4Gc-hx4bux29IofICI.roa Signing time: Mon 08 Dec 2025 10:45:39 +0000 ROA not before: Mon 08 Dec 2025 10:45:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212615 IP address blocks: 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:91:27:c1:de:10:63:95:a3:bf:2c:be:d2:15:fd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 8 10:45:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f63010fa995b8f819cfa1c786eec76f48a1f2022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:77:5f:6f:b9:e3:74:a5:58:d6:3c:7a:ab: 85:a2:b8:80:ca:6c:db:ed:42:00:12:15:7f:65:83: b6:68:11:bc:ea:e7:ad:a2:c0:93:d5:68:91:e6:e8: b4:aa:6f:6a:5e:4f:d1:9c:bc:27:2b:40:a4:c3:8b: 29:7d:b3:ab:19:26:cf:fb:c6:74:9f:e1:f8:08:50: 97:c3:35:cf:bd:19:80:f2:f1:a0:9e:52:cb:d3:d6: d7:1e:b1:02:cb:e2:01:ba:20:20:ea:e5:0b:9f:bc: 10:6d:95:82:23:71:f9:64:36:e6:df:54:5f:a9:67: 20:76:33:73:71:42:3f:ed:8c:23:ab:3e:c9:6d:78: 6f:86:7b:15:c8:af:1a:cd:35:b2:3e:94:1b:46:0e: 06:66:87:0b:d9:a0:4f:9f:5a:66:d0:dd:cb:12:fa: a3:aa:24:ef:5e:ab:0b:8a:7d:1e:d0:77:ed:ee:bb: 11:8a:12:bc:f9:77:2d:45:ad:8c:11:6c:15:37:5f: 43:22:e7:29:c0:50:28:f9:af:f8:39:5e:11:bb:d9: 7a:78:84:14:6a:e8:02:46:3d:2a:be:95:96:b1:04: cb:14:80:fd:07:00:6c:11:c1:8a:bf:59:a3:d8:d0: ac:87:c1:45:dc:30:70:0f:54:34:19:43:5d:82:c0: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:30:10:FA:99:5B:8F:81:9C:FA:1C:78:6E:EC:76:F4:8A:1F:20:22 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9jAQ-plbj4Gc-hx4bux29IofICI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption 67:d5:de:c0:3d:bc:21:9e:22:ef:81:bd:2d:5c:88:d6:89:3f: 82:47:6b:b3:36:33:55:e1:b1:82:f6:55:c9:c1:2c:4e:70:86: cc:16:28:a6:ca:d2:8c:34:bb:1f:bf:6f:27:9c:43:9c:6e:e4: 57:e5:dd:b8:9e:8b:1c:e9:bf:a1:c2:09:b0:ec:db:38:d2:2c: 63:78:48:1d:d8:b4:10:44:71:3a:3c:fe:1f:75:bf:ac:24:c8: f5:fe:8a:cd:9a:97:6f:80:a9:ed:9e:43:f1:46:19:3b:3c:2a: 7b:4e:c4:16:6f:40:5b:b0:d1:61:bf:92:af:b0:56:df:81:6f: 4d:69:42:bf:58:ea:9b:5e:ef:3d:73:6b:e7:75:b0:5f:84:4b: b4:5c:47:e6:83:2e:74:8e:22:39:b8:fb:b7:6e:35:4a:00:2b: 51:1f:2e:0d:cb:bb:5d:c7:30:bd:71:e8:2c:07:20:9c:bb:f5: d6:cf:fd:d6:5b:d2:56:c7:1a:9d:c5:82:0c:74:fe:e6:e5:63: a4:93:9d:ec:bf:d5:90:9b:48:c5:24:cf:56:b0:5e:b0:f3:a1: ee:36:ff:05:f4:aa:cf:cc:90:2b:b2:6a:e9:33:c8:e9:32:93: f6:cf:7f:4a:40:28:2b:b7:38:b2:b3:02:65:7e:a9:ba:e4:57: 45:19:1f:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZr9kSfB3hBjlaO/LL7SFf1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA4MTA0NTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjMwMTBmYTk5NWI4ZjgxOWNmYTFjNzg2ZWVjNzZmNDhhMWYyMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PZ3X2+543SlWNY8equForiAymzb 7UIAEhV/ZYO2aBG86uetosCT1WiR5ui0qm9qXk/RnLwnK0Ckw4spfbOrGSbP+8Z0 n+H4CFCXwzXPvRmA8vGgnlLL09bXHrECy+IBuiAg6uULn7wQbZWCI3H5ZDbm31Rf qWcgdjNzcUI/7Ywjqz7JbXhvhnsVyK8azTWyPpQbRg4GZocL2aBPn1pm0N3LEvqj qiTvXqsLin0e0Hft7rsRihK8+XctRa2MEWwVN19DIucpwFAo+a/4OV4Ru9l6eIQU augCRj0qvpWWsQTLFID9BwBsEcGKv1mj2NCsh8FF3DBwD1Q0GUNdgsDZVQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPYwEPqZW4+BnPoceG7sdvSKHyAiMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOWpBUS1wbGJqNEdjLWh4NGJ1eDI5SW9mSUNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRuQAAB MA0GCSqGSIb3DQEBCwUAA4IBAQBn1d7APbwhniLvgb0tXIjWiT+CR2uzNjNV4bGC 9lXJwSxOcIbMFiimytKMNLsfv28nnEOcbuRX5d24nosc6b+hwgmw7Ns40ixjeEgd 2LQQRHE6PP4fdb+sJMj1/orNmpdvgKntnkPxRhk7PCp7TsQWb0BbsNFhv5KvsFbf gW9NaUK/WOqbXu89c2vndbBfhEu0XEfmgy50jiI5uPu3bjVKACtRHy4Ny7tdxzC9 cegsByCcu/XWz/3WW9JWxxqdxYIMdP7m5WOkk53sv9WQm0jFJM9WsF6w86HuNv8F 9KrPzJArsmrpM8jpMpP2z39KQCgrtziyswJlfqm65FdFGR+J -----END CERTIFICATE-----Generated at Wed Dec 10 09:00:17 2025 by rpki-client