This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ReXRabkSqX_GkMhqhxVNbdLHXUA.roa File: ReXRabkSqX_GkMhqhxVNbdLHXUA.roa (raw, json) Hash identifier: Pnrwh8+7cIkiNWIKAXpyYDCVRyg5NiaECO3v7SL3WzM= Subject key identifier: 45:E5:D1:69:B9:12:A9:7F:C6:90:C8:6A:87:15:4D:6D:D2:C7:5D:40 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C109CE8405D9D6B618AD8586D4D2 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ReXRabkSqX_GkMhqhxVNbdLHXUA.roa Signing time: Fri 02 Jan 2026 18:21:48 +0000 ROA not before: Fri 02 Jan 2026 18:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211798 IP address blocks: 2a03:5840:124::/48 maxlen: 48 2a03:5840:131::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c1:09:ce:84:05:d9:d6:b6:18:ad:85:86:d4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45e5d169b912a97fc690c86a87154d6dd2c75d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:da:f0:31:58:60:51:f8:d8:9f:b5:4d:90: b5:cc:b7:e8:fa:20:86:92:bd:4a:45:9e:68:38:af: e7:ce:36:ca:e4:45:f1:c8:67:e2:f6:eb:ab:51:64: 9b:44:73:2c:13:11:77:69:a2:e3:84:bd:23:29:7f: ed:b4:f5:0e:15:8d:04:32:72:b3:46:0f:45:59:3a: 93:32:47:58:f5:f0:2c:36:59:b0:6a:29:76:51:5e: 7e:8a:de:07:af:fd:06:2d:f9:ad:11:76:0d:30:22: 5a:8d:bd:82:c0:7d:16:98:75:90:a5:4e:45:1a:9c: ff:2e:f7:97:d9:be:99:33:d2:c0:97:b8:1a:0b:ad: 99:f0:71:d3:31:5e:59:39:70:ae:c4:3d:a3:6e:af: 16:cd:32:51:5b:56:1c:89:ce:56:0b:bf:72:73:67: 89:65:8c:cd:ab:59:20:cb:12:9e:53:de:84:91:6a: d1:a2:ef:83:f6:32:e2:4a:f6:c8:c3:d7:fb:42:96: 60:3b:3b:1f:ef:04:2d:15:50:a4:f2:07:64:f9:5a: 00:f8:6b:c4:87:2d:ed:d3:3a:8b:4f:ff:fb:fc:d7: 70:c9:74:2c:a7:c0:48:5e:ec:e9:02:35:8a:da:f6: ec:27:b5:a2:8a:e7:5d:79:fd:52:6e:72:db:c4:ae: 94:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E5:D1:69:B9:12:A9:7F:C6:90:C8:6A:87:15:4D:6D:D2:C7:5D:40 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ReXRabkSqX_GkMhqhxVNbdLHXUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:124::/48 2a03:5840:131::/48 Signature Algorithm: sha256WithRSAEncryption 37:e4:0b:28:e2:c1:e2:52:5f:67:b2:7e:76:bb:22:f7:b7:a2: 25:b1:92:05:83:40:26:7c:2c:a9:5d:44:ea:28:60:6d:f2:4a: d1:29:64:f6:5a:3a:c3:a8:54:ea:ce:1a:9a:19:da:fd:ac:41: 25:65:5a:1b:1f:d5:ac:95:69:be:ef:57:72:5e:b4:e3:53:5e: 49:df:e7:10:87:ef:4a:da:ad:33:c0:3a:f3:58:46:bd:c9:ea: 72:95:40:24:9e:24:71:59:30:7a:2a:e1:3a:05:f1:fc:a7:e9: b5:61:67:9c:10:3b:43:8a:6b:ed:91:63:68:a0:8d:78:db:45: 65:ba:90:94:c7:43:4a:74:f8:5e:68:f3:6c:a4:a8:5a:04:ec: 86:51:e1:88:80:70:4b:3d:60:2d:95:76:0e:44:71:b2:66:19: b1:ae:6d:57:36:d6:ed:73:ef:16:ce:a1:24:8c:83:c0:cc:14: 5d:ea:13:21:24:6b:9a:6f:bc:c5:b2:ac:8f:f0:4e:77:c8:83: 73:6d:9c:d3:8b:0c:29:fe:17:5e:b8:0b:00:df:65:e2:65:73: 65:d8:b6:57:d2:8c:96:84:8b:fa:4c:a6:d0:44:06:34:3f:c4: ba:2c:cd:bd:c5:ed:fb:af:78:ff:08:98:ed:ea:f9:48:48:f3: c2:47:c9:2a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8cEJzoQF2da2GK2FhtTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWU1ZDE2OWI5MTJhOTdmYzY5MGM4NmE4NzE1NGQ2ZGQyYzc1ZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR3a8DFYYFH42J+1TZC1zLfo+iCG kr1KRZ5oOK/nzjbK5EXxyGfi9uurUWSbRHMsExF3aaLjhL0jKX/ttPUOFY0EMnKz Rg9FWTqTMkdY9fAsNlmwail2UV5+it4Hr/0GLfmtEXYNMCJajb2CwH0WmHWQpU5F Gpz/LveX2b6ZM9LAl7gaC62Z8HHTMV5ZOXCuxD2jbq8WzTJRW1Ycic5WC79yc2eJ ZYzNq1kgyxKeU96EkWrRou+D9jLiSvbIw9f7QpZgOzsf7wQtFVCk8gdk+VoA+GvE hy3t0zqLT//7/NdwyXQsp8BIXuzpAjWK2vbsJ7Wiiuddef1SbnLbxK6USwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEXl0Wm5Eql/xpDIaocVTW3Sx11AMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvUmVYUmFia1NxWF9Ha01ocWh4Vk5iZExIWFVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgNYQAEk AwcAKgNYQAExMA0GCSqGSIb3DQEBCwUAA4IBAQA35Aso4sHiUl9nsn52uyL3t6Il sZIFg0AmfCypXUTqKGBt8krRKWT2WjrDqFTqzhqaGdr9rEElZVobH9WslWm+71dy XrTjU15J3+cQh+9K2q0zwDrzWEa9yepylUAkniRxWTB6KuE6BfH8p+m1YWecEDtD imvtkWNooI1420VlupCUx0NKdPheaPNspKhaBOyGUeGIgHBLPWAtlXYORHGyZhmx rm1XNtbtc+8WzqEkjIPAzBRd6hMhJGuab7zFsqyP8E53yINzbZzTiwwp/hdeuAsA 32XiZXNl2LZX0oyWhIv6TKbQRAY0P8S6LM29xe37r3j/CJjt6vlISPPCR8kq -----END CERTIFICATE-----Generated at Fri Jan 23 15:23:13 2026 by rpki-client