This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/x2L9sUbxW33fcs0aePdpG3ktSqs.roa File: x2L9sUbxW33fcs0aePdpG3ktSqs.roa (raw, json) Hash identifier: t5ZLRaewJtsVQa5rjFmmNY5tynxtVjHiqD40jfPku7U= Subject key identifier: C7:62:FD:B1:46:F1:5B:7D:DF:72:CD:1A:78:F7:69:1B:79:2D:4A:AB Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Certificate serial: 019AFDED77C2706BEC99C640D63F899C2768 Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/x2L9sUbxW33fcs0aePdpG3ktSqs.roa Signing time: Mon 08 Dec 2025 12:26:29 +0000 ROA not before: Mon 08 Dec 2025 12:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210976 IP address blocks: 216.57.104.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 12:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:ed:77:c2:70:6b:ec:99:c6:40:d6:3f:89:9c:27:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Validity Not Before: Dec 8 12:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c762fdb146f15b7ddf72cd1a78f7691b792d4aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:f0:d5:67:b4:2e:fb:c5:cf:f3:84:dc:a4: 4e:4e:8b:19:53:f6:ce:7f:04:1d:90:be:b9:b3:7e: e4:0d:64:9a:b9:a5:80:51:76:f0:34:02:36:a6:64: cf:fc:ec:86:db:79:0a:63:c8:d6:1b:f6:15:5c:47: f2:08:26:d9:55:0d:ff:c5:07:df:b0:58:01:15:6f: 6a:76:bb:9e:6f:bb:77:d2:30:0b:76:47:a7:8b:d3: 2d:8b:47:93:f0:60:66:91:cc:9b:a2:4b:11:f4:9f: 75:60:f4:fc:bb:d1:55:fb:15:15:9a:c4:8f:00:07: 6e:50:91:71:f2:18:d1:12:55:13:4f:a6:19:b4:e5: 13:81:3b:d7:97:6f:f2:4d:a4:f3:5c:f6:b5:89:50: 2e:c1:1d:1c:56:51:48:f7:64:69:87:5c:54:5f:01: 59:fe:54:19:a7:a0:e8:85:2d:f3:a8:a4:f4:fa:bc: 3c:04:7d:f9:72:65:80:18:fd:a8:1c:07:f4:7c:ea: 81:32:a4:56:f1:67:12:8b:46:11:16:6a:82:b3:e6: 60:b5:55:c3:9f:c0:4e:40:a4:1a:a9:f7:75:c4:9b: 86:85:5b:3e:2d:3d:9b:0d:fe:11:78:ca:3e:36:b5: 67:17:fa:68:6c:48:f5:42:f2:f3:9a:be:ab:b9:97: d3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:62:FD:B1:46:F1:5B:7D:DF:72:CD:1A:78:F7:69:1B:79:2D:4A:AB X509v3 Authority Key Identifier: keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/x2L9sUbxW33fcs0aePdpG3ktSqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.57.104.0/21 Signature Algorithm: sha256WithRSAEncryption 79:f5:17:83:f5:e5:03:63:90:cf:1d:a1:97:20:3c:2a:82:a5: 7e:33:a7:18:27:31:4e:11:04:83:1e:9c:c1:eb:75:ff:60:aa: fd:b5:42:f4:a9:f4:17:54:59:4b:3f:52:b2:e3:68:6a:0f:68: 82:1d:59:0b:7e:54:d9:80:e5:07:91:04:df:d6:69:04:cd:8b: a2:a8:ec:2f:49:58:1b:fd:bc:1c:0c:cb:62:54:28:4c:f4:b9: 61:18:7f:6f:1b:96:a6:58:f5:f8:e3:0e:5a:f0:a0:48:ba:e4: 18:0e:aa:ac:6b:07:f3:27:97:f3:e5:aa:1b:98:aa:72:fa:5d: fb:1c:75:2e:0c:22:27:1c:b1:38:fb:04:bd:5c:6c:39:ef:14: 6d:c3:4b:79:6d:fb:a7:cb:7f:f2:63:4e:51:a1:c5:1e:3e:6f: 47:1c:df:77:f4:58:af:bf:07:1d:57:60:a8:8e:df:a8:30:c1: 5a:be:1a:6a:a3:80:96:3f:95:9c:e3:a3:bb:34:c8:06:48:2c: 1f:b3:70:c5:3c:80:92:4f:de:27:c9:2c:20:fc:27:7c:da:b3: 7f:1f:fa:b0:6e:49:f7:0a:d2:84:c3:f0:3b:48:d0:60:58:59: 57:72:81:63:95:41:b1:90:14:53:df:55:83:85:78:e9:10:d7: 4b:e2:11:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr97XfCcGvsmcZA1j+JnCdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl ZGZlYjgwHhcNMjUxMjA4MTIyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzYyZmRiMTQ2ZjE1YjdkZGY3MmNkMWE3OGY3NjkxYjc5MmQ0YWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhHw1We0LvvFz/OE3KROTosZU/bO fwQdkL65s37kDWSauaWAUXbwNAI2pmTP/OyG23kKY8jWG/YVXEfyCCbZVQ3/xQff sFgBFW9qdrueb7t30jALdkeni9Mti0eT8GBmkcyboksR9J91YPT8u9FV+xUVmsSP AAduUJFx8hjRElUTT6YZtOUTgTvXl2/yTaTzXPa1iVAuwR0cVlFI92Rph1xUXwFZ /lQZp6DohS3zqKT0+rw8BH35cmWAGP2oHAf0fOqBMqRW8WcSi0YRFmqCs+ZgtVXD n8BOQKQaqfd1xJuGhVs+LT2bDf4ReMo+NrVnF/pobEj1QvLzmr6ruZfTewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMdi/bFG8Vt933LNGnj3aRt5LUqrMB8GA1UdIwQY MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt YTcwZGI1ODI4MGZjLzEveDJMOXNVYnhXMzNmY3MwYWVQZHBHM2t0U3FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYtYTcwZGI1ODI4MGZj LzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2DloMA0G CSqGSIb3DQEBCwUAA4IBAQB59ReD9eUDY5DPHaGXIDwqgqV+M6cYJzFOEQSDHpzB 63X/YKr9tUL0qfQXVFlLP1Ky42hqD2iCHVkLflTZgOUHkQTf1mkEzYuiqOwvSVgb /bwcDMtiVChM9LlhGH9vG5amWPX44w5a8KBIuuQYDqqsawfzJ5fz5aobmKpy+l37 HHUuDCInHLE4+wS9XGw57xRtw0t5bfuny3/yY05RocUePm9HHN939FivvwcdV2Co jt+oMMFavhpqo4CWP5Wc46O7NMgGSCwfs3DFPICST94nySwg/Cd82rN/H/qwbkn3 CtKEw/A7SNBgWFlXcoFjlUGxkBRT31WDhXjpENdL4hES -----END CERTIFICATE-----Generated at Mon Dec 8 16:29:07 2025 by rpki-client