This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/2-cPca3BQbteLewWctZgGhiU1wY.roa File: 2-cPca3BQbteLewWctZgGhiU1wY.roa (raw, json) Hash identifier: lZf+VCaw3A3O31xvuWWNxHL6ORv1qapam84PvDjDlBM= Subject key identifier: DB:E7:0F:71:AD:C1:41:BB:5E:2D:EC:16:72:D6:60:1A:18:94:D7:06 Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6 Certificate serial: 019B4819824B6461E1EBB5D9BD94C1E4603F Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/2-cPca3BQbteLewWctZgGhiU1wY.roa Signing time: Mon 22 Dec 2025 22:06:29 +0000 ROA not before: Mon 22 Dec 2025 22:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215990 IP address blocks: 2001:678:1194::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:19:82:4b:64:61:e1:eb:b5:d9:bd:94:c1:e4:60:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6 Validity Not Before: Dec 22 22:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dbe70f71adc141bb5e2dec1672d6601a1894d706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:5f:00:60:5e:6c:64:15:e2:cc:05:dc:0a: ad:08:7e:fa:07:d7:a1:61:ff:7f:bd:d7:4d:9b:19: 68:69:ba:5c:a9:6e:8c:83:dd:89:bf:f5:5c:6c:3b: d6:6f:46:47:d2:93:46:04:6c:7a:d7:54:b8:ab:f3: e5:be:34:8d:fe:01:da:55:02:10:e8:0d:62:66:9b: 71:1c:36:99:0f:f0:ec:99:ab:d3:b0:67:51:44:0e: 1c:3e:70:38:0c:0a:3f:fc:8a:92:7b:e6:b9:a4:12: dd:fe:65:1f:73:93:2d:fe:ca:df:0e:c2:fe:b2:b3: e5:c7:cd:d4:aa:5c:ec:9f:54:1c:81:2e:8b:4c:2d: f2:56:04:cf:1f:55:9c:ca:ab:35:93:56:1a:52:cc: 13:0f:59:0c:80:41:7b:cc:9d:b4:c3:de:47:ed:d4: 78:59:ac:d5:a5:d4:84:74:c4:25:ae:ca:83:61:e5: 71:d4:49:45:32:24:6e:3b:44:de:8b:2f:f6:a5:4e: 89:0d:55:fe:6a:b0:95:ae:0f:14:14:18:04:a1:0b: 2c:14:72:5d:30:c4:bf:08:44:d0:25:17:1b:06:c4: fd:af:09:92:99:a4:f6:b8:ee:1f:e3:00:10:95:0d: 7b:dc:16:8c:65:3f:81:98:93:53:8c:0f:31:2a:12: b4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E7:0F:71:AD:C1:41:BB:5E:2D:EC:16:72:D6:60:1A:18:94:D7:06 X509v3 Authority Key Identifier: keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/2-cPca3BQbteLewWctZgGhiU1wY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1194::/48 Signature Algorithm: sha256WithRSAEncryption b7:cf:9f:fd:eb:f3:8c:15:c7:23:6c:52:3e:4f:91:9c:73:0f: ef:e2:41:64:90:d5:29:00:51:ed:20:d8:bd:eb:80:d6:36:3e: 60:96:db:9f:3b:27:48:90:be:c8:1d:fa:42:56:b0:db:ea:81: a2:08:47:7a:14:58:34:31:78:78:6e:2f:87:82:09:c3:9f:2b: 67:6b:5d:65:cf:e1:e0:e8:ab:07:3d:ce:b4:b8:5b:67:81:c1: f0:69:d0:72:43:48:90:c2:06:28:73:82:87:03:9c:57:27:d7: 31:08:ed:73:88:c1:6f:d1:57:5d:97:f9:21:25:a7:14:90:dd: 4c:59:f3:24:68:c5:47:31:0e:1a:84:2f:3c:48:64:e6:c5:31: 89:4c:a6:92:90:a2:75:f4:09:80:ca:96:ca:35:df:4f:5a:db: c5:89:6a:43:ab:d5:f8:5b:78:46:ca:1a:34:2a:cd:b8:be:13: fa:84:a3:5e:e3:19:72:71:a4:56:62:20:fa:0e:91:7f:16:63: 3b:32:03:9e:d8:47:c4:ab:41:e3:4b:5f:04:13:58:cc:87:1a: 7b:ea:a4:f1:1f:60:02:af:46:3f:8d:c2:38:2d:fe:d8:be:86: fc:ba:b4:55:d4:af:83:b8:fe:b4:3f:58:8b:18:04:c6:27:de: 90:27:e9:38 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtIGYJLZGHh67XZvZTB5GA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YWYzYWYxNjdjM2I3NTk0Mjk4MjdkMGYwYjc4NjBjZGYx Y2NlYTYwHhcNMjUxMjIyMjIwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmU3MGY3MWFkYzE0MWJiNWUyZGVjMTY3MmQ2NjAxYTE4OTRkNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxdfAGBebGQV4swF3AqtCH76B9eh Yf9/vddNmxloabpcqW6Mg92Jv/VcbDvWb0ZH0pNGBGx611S4q/PlvjSN/gHaVQIQ 6A1iZptxHDaZD/DsmavTsGdRRA4cPnA4DAo//IqSe+a5pBLd/mUfc5Mt/srfDsL+ srPlx83Uqlzsn1QcgS6LTC3yVgTPH1Wcyqs1k1YaUswTD1kMgEF7zJ20w95H7dR4 WazVpdSEdMQlrsqDYeVx1ElFMiRuO0Teiy/2pU6JDVX+arCVrg8UFBgEoQssFHJd MMS/CETQJRcbBsT9rwmSmaT2uO4f4wAQlQ173BaMZT+BmJNTjA8xKhK0DQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNvnD3GtwUG7Xi3sFnLWYBoYlNcGMB8GA1UdIwQY MBaAFEWvOvFnw7dZQpgn0PC3hgzfHM6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmE4NjhXZkR0MWxDbUNmUThMZUdETjhjenFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yNDBjMmEtMWViYi00ODQ0LTg0MTQt NjY5N2U0MGIwOTAzLzEvMi1jUGNhM0JRYnRlTGV3V2N0WmdHaGlVMXdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yNDBjMmEtMWViYi00ODQ0LTg0MTQtNjY5N2U0MGIwOTAz LzEvUmE4NjhXZkR0MWxDbUNmUThMZUdETjhjenFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBGU MA0GCSqGSIb3DQEBCwUAA4IBAQC3z5/96/OMFccjbFI+T5Gccw/v4kFkkNUpAFHt INi964DWNj5gltufOydIkL7IHfpCVrDb6oGiCEd6FFg0MXh4bi+HggnDnytna11l z+Hg6KsHPc60uFtngcHwadByQ0iQwgYoc4KHA5xXJ9cxCO1ziMFv0Vddl/khJacU kN1MWfMkaMVHMQ4ahC88SGTmxTGJTKaSkKJ19AmAypbKNd9PWtvFiWpDq9X4W3hG yho0Ks24vhP6hKNe4xlycaRWYiD6DpF/FmM7MgOe2EfEq0HjS18EE1jMhxp76qTx H2ACr0Y/jcI4Lf7Yvob8urRV1K+DuP60P1iLGATGJ96QJ+k4 -----END CERTIFICATE-----Generated at Fri Dec 26 17:18:21 2025 by rpki-client