This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/JDrx2eivum3EpEC2yYMV800Yrss.roa File: JDrx2eivum3EpEC2yYMV800Yrss.roa (raw, json) Hash identifier: ulTfb+dP81eWcEGPfJ82GxDQnMLjoBVpbbuuCeB7TlU= Subject key identifier: 24:3A:F1:D9:E8:AF:BA:6D:C4:A4:40:B6:C9:83:15:F3:4D:18:AE:CB Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8 Certificate serial: 019B0265E02135590F2AA5BC9A738D847A2A Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/JDrx2eivum3EpEC2yYMV800Yrss.roa Signing time: Tue 09 Dec 2025 09:16:29 +0000 ROA not before: Tue 09 Dec 2025 09:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61992 IP address blocks: 2a14:e900::/29 maxlen: 48 2a14:e900:22::/48 maxlen: 48 2a14:e900:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:65:e0:21:35:59:0f:2a:a5:bc:9a:73:8d:84:7a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8 Validity Not Before: Dec 9 09:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=243af1d9e8afba6dc4a440b6c98315f34d18aecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:85:1c:fa:df:ad:d7:77:ec:23:93:f6:0e: 34:5e:2a:9a:cd:db:0c:6e:d0:bc:cb:f6:eb:4f:24: a2:2f:5e:0d:5e:39:4a:7d:34:1e:4f:1d:29:37:f9: 71:fd:8a:20:d3:f9:2a:1f:91:a8:c0:83:c8:e8:d4: 0c:f6:20:8c:bc:84:3f:23:bf:8d:86:eb:bd:e3:23: 89:0d:ca:a5:08:48:46:56:1f:7b:6a:aa:1f:64:a4: b8:91:5b:e9:fd:16:0d:03:34:29:51:5d:91:57:a9: 70:3f:9e:a0:d1:17:4b:63:ed:1b:7f:be:52:41:f0: cf:df:63:06:33:32:73:7d:b2:a1:6d:e4:ba:a7:65: 70:b1:ff:79:20:2c:4a:1b:9c:28:c5:27:5f:b7:e3: a0:22:13:cc:25:db:e1:7d:07:59:80:f6:6b:46:4b: 66:21:b6:40:d3:9d:b2:78:f8:e5:7a:94:ad:8b:46: 63:05:98:f1:20:9b:cc:67:75:5b:90:c9:6d:fa:92: 4b:6e:42:7d:7a:a0:93:d3:e1:4c:77:50:a2:26:8f: b9:e4:85:1b:14:45:ef:20:d5:01:22:86:9b:e6:ce: 34:8c:3f:bd:ad:5b:68:43:b1:00:9f:2e:57:09:ec: 86:d3:e6:61:a8:1a:46:67:53:8e:6f:ba:90:ce:8a: 42:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3A:F1:D9:E8:AF:BA:6D:C4:A4:40:B6:C9:83:15:F3:4D:18:AE:CB X509v3 Authority Key Identifier: keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/JDrx2eivum3EpEC2yYMV800Yrss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:e900::/29 Signature Algorithm: sha256WithRSAEncryption 99:b7:0a:bd:cb:5c:5a:d5:a6:52:ba:b6:4b:bc:57:dc:34:aa: 90:3e:d5:da:a2:0f:f0:61:05:44:8a:b4:ea:26:f3:8f:cb:ba: ab:54:0e:9f:07:55:15:4b:08:7e:19:ab:7f:91:3e:dd:a6:16: 11:f8:30:30:af:41:f1:a9:35:86:11:fc:07:4e:a6:82:99:1d: bf:2a:51:49:ba:18:40:0b:3b:17:94:bb:ea:02:0d:b1:51:5a: 05:c7:48:c7:f1:2d:42:07:47:cf:3a:fb:0f:43:d2:c2:ec:dd: 62:05:c3:b6:b6:6c:66:7b:c6:dc:0a:75:c9:56:62:a8:ca:a2: 95:b5:e4:35:f4:7a:c8:50:53:de:6d:ee:32:3c:2e:cf:b1:fa: 19:db:16:81:34:f8:83:b7:d8:94:0f:ec:88:88:f5:98:7d:6b: 07:85:05:5e:ca:f2:4a:22:d2:c7:d1:dd:59:1d:bc:2f:ae:79: db:d0:b9:62:c2:34:6d:c1:08:55:76:83:a6:33:6b:17:05:c3: d8:13:7d:c1:11:fd:5e:bc:86:05:08:cf:13:02:10:95:10:15: a0:ec:4e:30:55:e4:5d:63:0c:25:60:79:ac:6a:22:1c:ea:32: bf:4a:1c:e3:ad:19:27:7c:16:dd:c3:f8:c5:11:e0:a0:bc:21: 65:99:e4:0e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsCZeAhNVkPKqW8mnONhHoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZmZkOWRmNDU2YWRiZTNiMWU2NjFlZTE1NjI2ODY1ZmUx Njg4YzgwHhcNMjUxMjA5MDkxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDNhZjFkOWU4YWZiYTZkYzRhNDQwYjZjOTgzMTVmMzRkMThhZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7qFHPrfrdd37COT9g40XiqazdsM btC8y/brTySiL14NXjlKfTQeTx0pN/lx/Yog0/kqH5GowIPI6NQM9iCMvIQ/I7+N huu94yOJDcqlCEhGVh97aqofZKS4kVvp/RYNAzQpUV2RV6lwP56g0RdLY+0bf75S QfDP32MGMzJzfbKhbeS6p2Vwsf95ICxKG5woxSdft+OgIhPMJdvhfQdZgPZrRktm IbZA052yePjlepSti0ZjBZjxIJvMZ3VbkMlt+pJLbkJ9eqCT0+FMd1CiJo+55IUb FEXvINUBIoab5s40jD+9rVtoQ7EAny5XCeyG0+ZhqBpGZ1OOb7qQzopCSwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCQ68dnor7ptxKRAtsmDFfNNGK7LMB8GA1UdIwQY MBaAFID/2d9FatvjseZh7hViaGX+FojIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQt M2NiOGQ4MTdlMDI3LzEvSkRyeDJlaXZ1bTNFcEVDMnlZTVY4MDBZcnNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQtM2NiOGQ4MTdlMDI3 LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTpADAN BgkqhkiG9w0BAQsFAAOCAQEAmbcKvctcWtWmUrq2S7xX3DSqkD7V2qIP8GEFRIq0 6ibzj8u6q1QOnwdVFUsIfhmrf5E+3aYWEfgwMK9B8ak1hhH8B06mgpkdvypRSboY QAs7F5S76gINsVFaBcdIx/EtQgdHzzr7D0PSwuzdYgXDtrZsZnvG3Ap1yVZiqMqi lbXkNfR6yFBT3m3uMjwuz7H6GdsWgTT4g7fYlA/siIj1mH1rB4UFXsrySiLSx9Hd WR28L65529C5YsI0bcEIVXaDpjNrFwXD2BN9wRH9XryGBQjPEwIQlRAVoOxOMFXk XWMMJWB5rGoiHOoyv0oc460ZJ3wW3cP4xRHgoLwhZZnkDg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:30:09 2025 by rpki-client