This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/S8GYV0UKYdMXgcUCVKYMLghPA6I.roa File: S8GYV0UKYdMXgcUCVKYMLghPA6I.roa (raw, json) Hash identifier: XsIqQuhv93O1Uq0O1YAxneqXx3P8rncK7QQkBoOgVKw= Subject key identifier: 4B:C1:98:57:45:0A:61:D3:17:81:C5:02:54:A6:0C:2E:08:4F:03:A2 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019AB95E973FF073263CFD54FF5F38D5293A Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/S8GYV0UKYdMXgcUCVKYMLghPA6I.roa Signing time: Tue 25 Nov 2025 04:56:15 +0000 ROA not before: Tue 25 Nov 2025 04:56:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49063 IP address blocks: 2a11:4b41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:5e:97:3f:f0:73:26:3c:fd:54:ff:5f:38:d5:29:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Nov 25 04:56:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4bc19857450a61d31781c50254a60c2e084f03a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:c3:3e:f3:38:f6:1c:80:6c:38:b9:ac:c8: aa:f8:17:df:9c:e4:b8:44:b1:69:ac:c0:17:41:28: 90:4a:a1:e1:cd:ac:2b:0e:45:22:a7:6b:67:fb:06: 9b:d5:66:6b:8e:ec:55:c3:81:a9:03:58:2e:47:fe: 46:8b:cc:7f:ab:7e:cd:dc:a9:39:73:67:55:1c:4c: 8a:5d:42:19:8d:0a:cf:6a:9c:92:50:6a:c7:32:07: 29:37:6e:74:86:94:f4:2c:43:49:a5:a7:03:ca:81: 67:fe:bd:34:cd:77:6a:ef:6c:cf:fc:cb:22:58:da: a3:d7:68:2f:79:cc:6d:2c:90:46:ed:26:b1:93:84: cd:46:fa:60:fb:69:28:24:fe:aa:99:ff:bc:e3:44: cc:d5:ba:75:3c:70:6f:04:db:47:55:25:0c:56:f7: 5f:8b:35:a2:a6:a1:2e:01:0e:42:4f:a2:80:df:ba: 88:00:15:24:35:9c:c8:82:af:d6:b5:10:de:29:a4: 6f:64:e8:57:94:00:67:35:82:cc:0e:bd:13:d5:4b: 29:f6:54:f7:94:f0:1d:11:99:31:3b:07:94:43:ce: 26:c0:a1:68:65:90:6a:da:8f:48:cc:b1:a1:ae:04: 31:40:ce:05:49:dd:8a:6e:60:00:5e:50:57:ed:ea: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C1:98:57:45:0A:61:D3:17:81:C5:02:54:A6:0C:2E:08:4F:03:A2 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/S8GYV0UKYdMXgcUCVKYMLghPA6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:4b41::/32 Signature Algorithm: sha256WithRSAEncryption 7d:01:8f:8d:ea:a2:99:f0:83:44:b1:cb:d3:a8:0b:51:eb:07: fa:4c:42:76:4c:41:cf:d6:e0:65:37:42:21:d6:a4:40:4e:00: 79:22:bb:ae:e4:80:c6:b7:a7:9b:ed:d5:71:e4:e8:00:84:a8: af:2d:37:fb:34:25:3f:ca:29:58:1f:44:71:e9:9f:4a:71:d1: 15:9d:1b:3f:ac:0e:6c:65:b4:d0:79:64:e3:ee:68:68:76:1f: 67:4a:69:b3:13:72:dd:97:6e:31:f0:cf:7f:3c:fc:85:20:d7: 07:0e:bc:dd:3f:09:11:90:38:86:4a:60:f6:da:24:f2:99:20: 1b:80:f9:f1:ad:79:3f:2a:87:7f:d6:1f:9e:c1:13:17:80:2e: 9d:25:d5:83:53:10:52:e9:6b:9b:eb:3c:2f:5a:01:d2:8e:46: 2c:5b:51:62:bb:b2:9c:ec:f0:cb:71:e5:49:e7:3a:33:55:d2: 1a:77:a9:71:f2:e9:f6:65:43:a0:e7:00:00:64:d9:b1:6f:bb: c4:68:38:da:22:f8:c9:22:25:a3:5d:59:14:70:67:95:8d:96: 4d:74:a5:cd:9b:7a:31:1d:52:02:cd:31:48:38:73:ea:83:0f: 07:bc:2d:78:8c:e2:2a:19:02:06:58:f5:35:ef:71:04:1c:89: 54:fd:f8:e2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZq5Xpc/8HMmPP1U/1841Sk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjUxMTI1MDQ1NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmMxOTg1NzQ1MGE2MWQzMTc4MWM1MDI1NGE2MGMyZTA4NGYwM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUrDPvM49hyAbDi5rMiq+BffnOS4 RLFprMAXQSiQSqHhzawrDkUip2tn+wab1WZrjuxVw4GpA1guR/5Gi8x/q37N3Kk5 c2dVHEyKXUIZjQrPapySUGrHMgcpN250hpT0LENJpacDyoFn/r00zXdq72zP/Msi WNqj12gvecxtLJBG7Saxk4TNRvpg+2koJP6qmf+840TM1bp1PHBvBNtHVSUMVvdf izWipqEuAQ5CT6KA37qIABUkNZzIgq/WtRDeKaRvZOhXlABnNYLMDr0T1Usp9lT3 lPAdEZkxOweUQ84mwKFoZZBq2o9IzLGhrgQxQM4FSd2KbmAAXlBX7epHcQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEvBmFdFCmHTF4HFAlSmDC4ITwOiMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvUzhHWVYwVUtZZE1YZ2NVQ1ZLWU1MZ2hQQTZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhFLQTAN BgkqhkiG9w0BAQsFAAOCAQEAfQGPjeqimfCDRLHL06gLUesH+kxCdkxBz9bgZTdC IdakQE4AeSK7ruSAxrenm+3VceToAISory03+zQlP8opWB9EcemfSnHRFZ0bP6wO bGW00Hlk4+5oaHYfZ0ppsxNy3ZduMfDPfzz8hSDXBw683T8JEZA4hkpg9tok8pkg G4D58a15PyqHf9YfnsETF4AunSXVg1MQUulrm+s8L1oB0o5GLFtRYruynOzwy3Hl Sec6M1XSGnepcfLp9mVDoOcAAGTZsW+7xGg42iL4ySIlo11ZFHBnlY2WTXSlzZt6 MR1SAs0xSDhz6oMPB7wteIziKhkCBlj1Ne9xBByJVP344g== -----END CERTIFICATE-----Generated at Fri Dec 5 08:36:43 2025 by rpki-client