This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/sxkA2JZElRHHnwkRP7l5o6EcW_c.roa File: sxkA2JZElRHHnwkRP7l5o6EcW_c.roa (raw, json) Hash identifier: WWNvzLP8kOo38HdNOn5p8W3MbChp2TJuSGefZ3MdLAA= Subject key identifier: B3:19:00:D8:96:44:95:11:C7:9F:09:11:3F:B9:79:A3:A1:1C:5B:F7 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019AE3DBE06FEE18647EC2F7428F8F9601FF Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/sxkA2JZElRHHnwkRP7l5o6EcW_c.roa Signing time: Wed 03 Dec 2025 10:57:09 +0000 ROA not before: Wed 03 Dec 2025 10:57:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42881 IP address blocks: 2a09:e2c0::/32 maxlen: 32 2a09:e2c1::/32 maxlen: 32 2a09:e2c2::/32 maxlen: 32 2a09:e2c3::/32 maxlen: 32 2a09:e2c4::/32 maxlen: 32 2a09:e2c5::/32 maxlen: 32 2a09:e2c6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:db:e0:6f:ee:18:64:7e:c2:f7:42:8f:8f:96:01:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Dec 3 10:57:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b31900d896449511c79f09113fb979a3a11c5bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:ef:56:6a:ac:60:56:6b:62:c9:a7:9e:a5: 51:90:35:e9:1f:bf:6b:04:bf:15:f9:ff:a1:4a:76: 92:ac:fe:32:85:2f:4f:80:ed:dc:34:32:aa:61:5b: 90:b1:ab:37:10:58:de:77:8a:5c:11:c0:7d:79:5e: 0e:6c:60:a0:12:24:c1:40:bc:df:d4:0e:97:45:64: 03:24:e9:6e:3f:be:3a:e7:04:ee:41:12:de:a9:c6: 87:6f:9c:5d:15:c2:87:13:94:e9:09:e5:d9:a9:9f: 97:2f:63:81:b0:27:87:fe:e4:83:f9:f6:33:d8:75: 18:ca:c3:ea:3e:5b:28:82:37:38:d1:70:9a:bc:f0: a8:8a:a1:fe:d3:c7:32:c8:a4:95:aa:c2:bb:41:0e: 6a:30:49:67:94:38:2a:f4:28:98:cd:a7:75:7d:57: 1b:23:1d:3e:92:fa:9e:90:de:bb:df:33:6f:e5:e4: e5:f6:6d:c2:b3:ff:41:40:2a:29:67:84:a6:8f:72: dc:63:b4:8b:6c:35:42:84:08:5d:a0:43:fe:d0:24: 02:3c:f9:dd:47:72:31:13:21:e3:e7:6e:f2:fc:24: 19:fb:00:54:a2:e9:c9:cb:9f:f1:9e:2c:19:ce:44: c7:84:44:b2:29:8c:39:a7:6c:06:2f:18:91:cf:a1: 72:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:19:00:D8:96:44:95:11:C7:9F:09:11:3F:B9:79:A3:A1:1C:5B:F7 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/sxkA2JZElRHHnwkRP7l5o6EcW_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:e2c0::-2a09:e2c6:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 60:bd:51:aa:58:78:88:f1:b6:b6:31:56:91:08:db:d3:20:04: 47:25:2a:53:3b:bd:4e:ad:1f:58:18:c3:5d:aa:5d:55:ab:4f: c8:e1:98:d9:48:ee:1a:44:76:77:aa:cc:cc:57:3d:85:01:ee: b0:4f:b8:ab:f2:4f:0e:90:61:27:2f:af:f8:d5:4f:c7:e2:48: c3:5b:15:31:31:7d:64:31:ec:f9:91:da:5b:ab:da:5d:8b:41: a6:63:6d:2a:58:9d:52:56:ce:ff:20:89:96:9b:d5:45:54:d1: 92:44:42:5e:b5:05:94:65:8c:d8:f8:26:d4:2d:85:f4:69:11: af:43:e7:7d:d7:4b:9b:7a:fd:27:74:b8:1d:ba:93:15:9c:fd: 8a:b7:7f:c3:94:a0:48:43:78:b4:e8:43:20:f6:70:74:60:62: 24:56:e0:10:df:b1:05:dd:23:d4:3c:cb:32:00:69:84:20:32: 81:2b:3e:65:77:9b:a9:a8:b8:e5:36:41:fc:05:01:58:ca:01: 84:ed:00:5a:0b:1e:3d:3d:11:d9:0d:37:07:b1:4d:d1:ae:0b: 4e:d6:b5:f4:e6:3b:04:4c:39:1b:2d:b7:c8:3e:59:62:6c:79: db:d8:70:76:d7:bf:c7:d6:7c:d0:94:49:3c:11:72:38:c7:ba: 0f:af:e5:9c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZrj2+Bv7hhkfsL3Qo+PlgH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjUxMjAzMTA1NzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzE5MDBkODk2NDQ5NTExYzc5ZjA5MTEzZmI5NzlhM2ExMWM1YmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz3vVmqsYFZrYsmnnqVRkDXpH79r BL8V+f+hSnaSrP4yhS9PgO3cNDKqYVuQsas3EFjed4pcEcB9eV4ObGCgEiTBQLzf 1A6XRWQDJOluP7465wTuQRLeqcaHb5xdFcKHE5TpCeXZqZ+XL2OBsCeH/uSD+fYz 2HUYysPqPlsogjc40XCavPCoiqH+08cyyKSVqsK7QQ5qMElnlDgq9CiYzad1fVcb Ix0+kvqekN673zNv5eTl9m3Cs/9BQCopZ4Smj3LcY7SLbDVChAhdoEP+0CQCPPnd R3IxEyHj527y/CQZ+wBUounJy5/xniwZzkTHhESyKYw5p2wGLxiRz6FyMwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFLMZANiWRJURx58JET+5eaOhHFv3MB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvc3hrQTJKWkVsUkhIbndrUlA3bDVvNkVjV19jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQYqCeLA AwUAKgnixjANBgkqhkiG9w0BAQsFAAOCAQEAYL1Rqlh4iPG2tjFWkQjb0yAERyUq Uzu9Tq0fWBjDXapdVatPyOGY2UjuGkR2d6rMzFc9hQHusE+4q/JPDpBhJy+v+NVP x+JIw1sVMTF9ZDHs+ZHaW6vaXYtBpmNtKlidUlbO/yCJlpvVRVTRkkRCXrUFlGWM 2Pgm1C2F9GkRr0PnfddLm3r9J3S4HbqTFZz9ird/w5SgSEN4tOhDIPZwdGBiJFbg EN+xBd0j1DzLMgBphCAygSs+ZXebqai45TZB/AUBWMoBhO0AWgsePT0R2Q03B7FN 0a4LTta19OY7BEw5Gy23yD5ZYmx529hwdte/x9Z80JRJPBFyOMe6D6/lnA== -----END CERTIFICATE-----Generated at Fri Dec 5 08:38:04 2025 by rpki-client