This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/jlRsnNgvFlgHwrIkC3ndsz-DeHA.roa File: jlRsnNgvFlgHwrIkC3ndsz-DeHA.roa (raw, json) Hash identifier: KIeWObQIaCMxnHDPh3clv17Pl6xMfKd4hJmG5jzOw94= Subject key identifier: 8E:54:6C:9C:D8:2F:16:58:07:C2:B2:24:0B:79:DD:B3:3F:83:78:70 Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Certificate serial: 019A787706FDFEF7C9679C3A42DEF524F086 Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/jlRsnNgvFlgHwrIkC3ndsz-DeHA.roa Signing time: Wed 12 Nov 2025 14:27:37 +0000 ROA not before: Wed 12 Nov 2025 14:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16097 IP address blocks: 86.56.96.0/19 maxlen: 19 2001:4c51::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:77:06:fd:fe:f7:c9:67:9c:3a:42:de:f5:24:f0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Validity Not Before: Nov 12 14:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e546c9cd82f165807c2b2240b79ddb33f837870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:35:b0:99:0e:01:2f:4c:7b:83:38:51:71:0a: 78:48:1f:77:1e:b7:12:c4:b2:17:56:9f:3b:f0:cd: 65:05:e4:36:5f:a6:89:84:ff:02:a8:9a:3a:14:c0: 7a:ee:39:75:7e:9b:51:ff:2a:4f:1b:85:bc:5d:ca: d9:72:3f:35:0b:f3:8c:9f:08:fd:7a:b2:79:fe:3e: 73:10:5b:50:15:10:13:69:7e:64:f3:93:de:7e:82: df:8f:d8:cd:28:cb:ef:02:d8:9d:b0:34:b4:a2:ca: 8a:02:20:9b:40:9f:bc:7d:5e:5b:b1:ea:bd:6d:78: 1e:aa:f4:2e:0a:d8:80:f9:35:c5:b3:08:98:b3:5a: 87:7e:06:43:2a:3f:57:7f:cb:04:f1:68:22:e5:8b: e0:ed:51:65:dc:b0:49:1a:ab:be:b9:cc:f3:11:a2: 3b:4b:2a:c7:ba:26:6d:c2:a7:29:6a:d8:e1:a3:ee: ee:86:f4:30:23:fb:fe:9f:f3:f6:fd:fd:0a:aa:07: 63:68:19:2a:56:d0:b3:25:0d:2f:4c:9b:be:14:d1: a9:8a:dc:56:f6:5f:8e:ac:46:62:92:88:86:2b:7d: 10:d3:2e:e6:3d:d1:6d:ac:77:0e:d5:36:0f:a9:b9: 72:3d:e6:5d:fe:cd:7a:2e:61:2e:a7:17:41:50:0f: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:54:6C:9C:D8:2F:16:58:07:C2:B2:24:0B:79:DD:B3:3F:83:78:70 X509v3 Authority Key Identifier: keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/jlRsnNgvFlgHwrIkC3ndsz-DeHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.56.96.0/19 IPv6: 2001:4c51::/32 Signature Algorithm: sha256WithRSAEncryption 2f:51:25:86:f7:84:0a:79:ac:06:bb:68:ef:39:8a:6d:6e:74: b5:81:a3:a5:6d:32:78:be:80:bd:41:1e:08:58:0a:3a:e9:f8: ea:b8:48:6d:84:b7:fa:e8:d9:ef:be:1a:43:b1:36:a5:e6:ac: e9:00:4c:34:27:5c:7d:88:17:8b:98:bb:f4:6f:25:ea:e1:f9: dc:39:f0:e8:a5:f1:e4:81:66:31:24:1b:ae:a0:d4:40:72:71: 01:82:42:e0:c9:ee:50:4b:1b:3c:10:69:26:04:e8:e7:46:14: 14:b6:f6:85:4d:7a:b3:32:3e:7e:0b:c0:ee:bf:f2:d0:89:6b: 2d:6e:81:67:24:ad:24:7d:88:f0:b7:59:2b:49:5a:92:14:86: 59:7d:18:ae:9a:18:c2:01:b8:fb:e4:fd:f9:47:53:f5:25:be: 40:ba:86:42:c6:29:6d:d3:1d:f6:16:79:3c:a1:26:1b:39:3d: d8:45:e3:2e:6d:ca:26:01:4b:2e:44:ee:97:9f:33:36:58:a5: dc:de:64:28:dd:fa:0c:68:82:d0:17:a6:5b:c4:bd:fe:ad:a5: 16:18:41:2c:6d:40:58:c2:48:2e:44:e0:aa:81:ac:ec:35:03: 3f:c4:f6:60:63:94:78:d6:ec:6a:df:19:5a:f3:99:59:26:e2: c4:4b:30:de -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZp4dwb9/vfJZ5w6Qt71JPCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5 YzJkYmEwHhcNMjUxMTEyMTQyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTU0NmM5Y2Q4MmYxNjU4MDdjMmIyMjQwYjc5ZGRiMzNmODM3ODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDWwmQ4BL0x7gzhRcQp4SB93HrcS xLIXVp878M1lBeQ2X6aJhP8CqJo6FMB67jl1fptR/ypPG4W8XcrZcj81C/OMnwj9 erJ5/j5zEFtQFRATaX5k85PefoLfj9jNKMvvAtidsDS0osqKAiCbQJ+8fV5bseq9 bXgeqvQuCtiA+TXFswiYs1qHfgZDKj9Xf8sE8Wgi5Yvg7VFl3LBJGqu+uczzEaI7 SyrHuiZtwqcpatjho+7uhvQwI/v+n/P2/f0KqgdjaBkqVtCzJQ0vTJu+FNGpitxW 9l+OrEZikoiGK30Q0y7mPdFtrHcO1TYPqblyPeZd/s16LmEupxdBUA+9dwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI5UbJzYLxZYB8KyJAt53bM/g3hwMB8GA1UdIwQY MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt ZDdjMzZjMjdjMDg3LzEvamxSc25OZ3ZGbGdId3JJa0MzbmRzei1EZUhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3 LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFVjhgMA0E AgACMAcDBQAgAUxRMA0GCSqGSIb3DQEBCwUAA4IBAQAvUSWG94QKeawGu2jvOYpt bnS1gaOlbTJ4voC9QR4IWAo66fjquEhthLf66NnvvhpDsTal5qzpAEw0J1x9iBeL mLv0byXq4fncOfDopfHkgWYxJBuuoNRAcnEBgkLgye5QSxs8EGkmBOjnRhQUtvaF TXqzMj5+C8Duv/LQiWstboFnJK0kfYjwt1krSVqSFIZZfRiumhjCAbj75P35R1P1 Jb5AuoZCxilt0x32Fnk8oSYbOT3YReMubcomAUsuRO6XnzM2WKXc3mQo3foMaILQ F6ZbxL3+raUWGEEsbUBYwkguROCqgazsNQM/xPZgY5R41uxq3xla85lZJuLESzDe -----END CERTIFICATE-----Generated at Fri Dec 5 11:10:25 2025 by rpki-client