This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/cW_f_ISsC3lUV_oLgarOMwWmiKA.roa File: cW_f_ISsC3lUV_oLgarOMwWmiKA.roa (raw, json) Hash identifier: VkDZaP7r1yBe7FdYTbpjAnsq08ytttiNYvN0XY+9mVA= Subject key identifier: 71:6F:DF:FC:84:AC:0B:79:54:57:FA:0B:81:AA:CE:33:05:A6:88:A0 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C4794D18EB94CF72582980625A71 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/cW_f_ISsC3lUV_oLgarOMwWmiKA.roa Signing time: Fri 02 Jan 2026 18:21:49 +0000 ROA not before: Fri 02 Jan 2026 18:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214387 IP address blocks: 2a03:5840:11f::/48 maxlen: 48 2a03:5840:139::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c4:79:4d:18:eb:94:cf:72:58:29:80:62:5a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=716fdffc84ac0b795457fa0b81aace3305a688a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:81:d9:51:f8:df:3e:3a:f0:7a:69:fb:01: 62:2c:8c:09:1f:8b:e8:8a:b1:6d:82:1b:cd:d8:ee: fc:27:da:c0:66:75:c7:4c:c8:2d:46:86:29:36:2c: b4:a8:75:d6:d1:f2:cc:82:5d:5a:ac:a2:13:d6:93: a2:8b:39:ca:ea:a4:19:24:e8:f3:15:e5:01:6a:be: 3a:f5:87:b8:4c:3b:1f:70:0e:67:35:a9:da:36:05: d5:b5:0c:0b:37:59:d4:68:f8:fc:2e:94:f1:30:6d: 17:bc:db:79:d0:04:30:96:80:39:8b:a2:3e:06:bc: 43:33:f5:89:9c:e4:f8:ed:81:1f:75:1a:d2:e6:a4: eb:11:c2:32:5e:bb:83:ab:08:8c:54:62:53:e2:83: 74:c9:c4:d8:09:0e:19:e4:77:15:24:37:22:8b:62: 5f:25:fb:c2:46:12:18:f6:ac:14:0a:42:fd:04:8d: b8:8a:a9:7d:4f:48:73:00:ff:9f:c3:34:8a:a4:0e: e2:01:1a:35:df:87:71:25:b7:5d:59:75:90:8d:b6: 0c:cc:d6:46:c4:e3:ae:1c:b6:65:01:b1:b1:af:0d: ee:24:e8:d2:59:22:d6:ed:a7:26:f0:e8:84:d5:26: c0:dc:67:bf:36:55:98:7a:e3:1d:0b:1a:40:a3:9e: 95:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6F:DF:FC:84:AC:0B:79:54:57:FA:0B:81:AA:CE:33:05:A6:88:A0 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/cW_f_ISsC3lUV_oLgarOMwWmiKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:11f::/48 2a03:5840:139::/48 Signature Algorithm: sha256WithRSAEncryption 55:a1:93:3a:05:4c:af:57:2d:b4:4d:58:8e:4c:52:4d:29:61: 11:c2:08:fb:ad:d9:7a:25:7d:a0:97:f5:c2:0f:d9:b3:87:9b: 07:9d:20:b6:5d:4a:de:b0:39:87:21:0b:d9:7c:e4:fc:13:8f: 65:23:b4:fc:3b:d4:88:fa:96:06:01:52:c4:1e:2f:3f:6a:c0: b4:fb:d1:8a:fc:0b:3b:05:68:8b:20:95:33:75:8d:db:cb:55: 62:3e:2b:84:7b:87:ed:f9:92:9c:6f:ab:3e:0e:c1:7a:be:d4: af:3a:b0:f5:1d:ca:54:39:ff:5d:1f:e6:fa:e3:03:30:c4:4f: 37:c9:6c:6d:ed:16:fd:08:6d:81:0d:92:84:2f:bf:9b:2e:ec: d6:15:25:6e:8f:99:ff:47:4d:84:24:ee:d5:44:e2:90:a6:95: 3f:7b:53:a4:99:f1:1a:67:4d:e9:6e:66:61:af:d7:07:e4:35: c0:68:ab:a6:42:cb:21:23:e0:0e:10:c1:76:93:48:84:61:82: 2e:15:35:d1:b3:e6:c1:a9:12:01:80:c2:2d:7a:9f:92:b0:8f: 8c:27:98:5f:0a:12:b4:b0:eb:e5:ca:5d:07:9c:c7:22:9b:02: a0:a9:42:ba:a4:46:a0:e2:ee:82:dd:6b:c1:e7:61:84:90:c2: 48:b4:c0:8e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8cR5TRjrlM9yWCmAYlpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTZmZGZmYzg0YWMwYjc5NTQ1N2ZhMGI4MWFhY2UzMzA1YTY4OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNWB2VH43z468Hpp+wFiLIwJH4vo irFtghvN2O78J9rAZnXHTMgtRoYpNiy0qHXW0fLMgl1arKIT1pOiiznK6qQZJOjz FeUBar469Ye4TDsfcA5nNanaNgXVtQwLN1nUaPj8LpTxMG0XvNt50AQwloA5i6I+ BrxDM/WJnOT47YEfdRrS5qTrEcIyXruDqwiMVGJT4oN0ycTYCQ4Z5HcVJDcii2Jf JfvCRhIY9qwUCkL9BI24iql9T0hzAP+fwzSKpA7iARo134dxJbddWXWQjbYMzNZG xOOuHLZlAbGxrw3uJOjSWSLW7acm8OiE1SbA3Ge/NlWYeuMdCxpAo56V+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHFv3/yErAt5VFf6C4GqzjMFpoigMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvY1dfZl9JU3NDM2xVVl9vTGdhck9Nd1dtaUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgNYQAEf AwcAKgNYQAE5MA0GCSqGSIb3DQEBCwUAA4IBAQBVoZM6BUyvVy20TViOTFJNKWER wgj7rdl6JX2gl/XCD9mzh5sHnSC2XUresDmHIQvZfOT8E49lI7T8O9SI+pYGAVLE Hi8/asC0+9GK/As7BWiLIJUzdY3by1ViPiuEe4ft+ZKcb6s+DsF6vtSvOrD1HcpU Of9dH+b64wMwxE83yWxt7Rb9CG2BDZKEL7+bLuzWFSVuj5n/R02EJO7VROKQppU/ e1OkmfEaZ03pbmZhr9cH5DXAaKumQsshI+AOEMF2k0iEYYIuFTXRs+bBqRIBgMIt ep+SsI+MJ5hfChK0sOvlyl0HnMcimwKgqUK6pEag4u6C3WvB52GEkMJItMCO -----END CERTIFICATE-----Generated at Fri Jan 23 15:20:07 2026 by rpki-client