This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-mPW15nbW3uNXWV-Zcn1nG2IMqc.roa File: 1-mPW15nbW3uNXWV-Zcn1nG2IMqc.roa (raw, json) Hash identifier: Wt8yFEkuB0SNOvxJLnDxzFQLttY6i58IrpA5dmcq8VI= Subject key identifier: FA:63:D6:D7:99:DB:5B:7B:8D:5D:65:7E:65:C9:F5:9C:6D:88:32:A7 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D93E2C4753AA24BFEAD26E793161 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-mPW15nbW3uNXWV-Zcn1nG2IMqc.roa Signing time: Fri 02 Jan 2026 00:19:28 +0000 ROA not before: Fri 02 Jan 2026 00:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57433 IP address blocks: 2a02:2fc0:3::/48 maxlen: 48 2a02:2fc0:a::/48 maxlen: 48 2a02:2fc0:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d9:3e:2c:47:53:aa:24:bf:ea:d2:6e:79:31:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa63d6d799db5b7b8d5d657e65c9f59c6d8832a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:0d:7f:f8:19:3f:69:eb:a0:58:08:56:64: 49:c9:75:ac:29:5a:df:63:08:58:02:fa:25:fb:91: fb:4b:3b:15:29:2e:d9:fe:3d:ba:65:80:f0:96:dd: b7:1b:91:40:37:c1:ee:e1:32:80:76:02:10:05:17: 31:f8:ff:4d:f0:27:89:6a:a9:74:be:22:52:51:6a: 82:f4:fd:8f:a4:6a:8a:80:0c:db:4d:7b:7d:d7:bf: 7e:19:2a:34:af:38:8a:45:be:d2:d4:c8:e4:d4:b5: fd:f9:4d:12:d1:a1:e3:f1:b8:19:4d:41:ab:58:03: 1b:16:46:8d:76:08:35:be:04:e3:94:5d:d2:ef:ad: 43:23:0e:8e:d1:ae:2e:22:ab:6a:db:cd:fe:04:96: 00:cc:20:f0:fb:8d:dc:15:75:fe:ba:b3:08:3a:38: 3d:ac:01:4d:43:80:8a:14:e1:71:12:e6:6d:4b:d7: 3f:8b:6b:6a:ef:e2:11:14:56:77:e2:6a:34:0c:5c: 05:50:cb:a0:2b:0e:0a:6b:75:de:8f:89:11:ca:9b: 9c:29:26:c4:df:fa:f3:75:95:a3:16:a1:a9:37:ad: c2:03:9c:df:39:4b:1c:a2:36:09:06:6c:61:1c:8b: 76:1d:bf:9f:35:2a:38:e4:76:9e:d3:3b:43:c1:5e: 63:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:63:D6:D7:99:DB:5B:7B:8D:5D:65:7E:65:C9:F5:9C:6D:88:32:A7 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-mPW15nbW3uNXWV-Zcn1nG2IMqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2fc0:3::/48 2a02:2fc0:a::/47 Signature Algorithm: sha256WithRSAEncryption a7:44:4a:4f:44:22:f9:92:f6:17:fc:5f:a2:52:58:99:ff:bf: 03:11:aa:ec:32:57:34:dd:26:4f:85:a9:89:a0:a1:2c:51:99: fc:8c:72:f6:08:87:4a:1f:c4:ee:73:09:f2:a5:0b:97:42:8a: 66:a1:34:45:aa:be:0c:95:f7:d0:ba:17:ef:d5:7f:58:3d:b9: c4:26:96:da:74:c9:83:cf:2e:11:82:0c:a1:86:88:2f:fe:b1: dc:68:24:fd:46:a9:38:76:70:5e:b2:31:7c:aa:21:f0:da:41: 14:41:70:b4:8d:cf:47:95:63:8a:db:4a:4d:d4:02:8e:ff:5a: d8:29:01:cf:c1:a0:7e:36:22:99:a9:fb:9f:01:1c:5e:86:cb: d5:48:d2:7d:77:4b:a7:e7:c4:d4:0f:48:be:36:b0:1f:59:99: 69:14:6e:46:a4:39:73:f7:43:0f:01:b5:e2:40:ae:ea:20:4e: 6b:1c:39:0e:d4:2b:82:3b:44:ba:4f:09:42:f8:32:9b:f0:9c: 81:42:2e:88:59:6b:f0:37:1b:bf:ec:95:62:08:58:8e:17:94: 00:9e:12:98:03:52:3e:2c:d7:dc:0f:dc:b6:c5:98:32:45:3d: 0a:a8:4c:11:36:62:3f:8f:df:c1:4a:43:09:7a:26:e4:d3:94: 55:8e:1e:06 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt8Etk+LEdTqiS/6tJueTFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTYzZDZkNzk5ZGI1YjdiOGQ1ZDY1N2U2NWM5ZjU5YzZkODgzMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY0Nf/gZP2nroFgIVmRJyXWsKVrf YwhYAvol+5H7SzsVKS7Z/j26ZYDwlt23G5FAN8Hu4TKAdgIQBRcx+P9N8CeJaql0 viJSUWqC9P2PpGqKgAzbTXt9179+GSo0rziKRb7S1Mjk1LX9+U0S0aHj8bgZTUGr WAMbFkaNdgg1vgTjlF3S761DIw6O0a4uIqtq283+BJYAzCDw+43cFXX+urMIOjg9 rAFNQ4CKFOFxEuZtS9c/i2tq7+IRFFZ34mo0DFwFUMugKw4Ka3Xej4kRypucKSbE 3/rzdZWjFqGpN63CA5zfOUscojYJBmxhHIt2Hb+fNSo45Hae0ztDwV5jpQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPpj1teZ21t7jV1lfmXJ9ZxtiDKnMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMS1tUFcxNW5iVzN1TlhXVi1aY24xbkcySU1xYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTAvOTY1ODM3LTUyY2ItNDZiNC1hZWRiLWUxYmQ4OGQzZmQw Ny8xL1BtQ1hhWWFHNFZWZlVmYklnN3hhV0ZTYkkySS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoCL8AA AwMHASoCL8AACjANBgkqhkiG9w0BAQsFAAOCAQEAp0RKT0Qi+ZL2F/xfolJYmf+/ AxGq7DJXNN0mT4WpiaChLFGZ/Ixy9giHSh/E7nMJ8qULl0KKZqE0Raq+DJX30LoX 79V/WD25xCaW2nTJg88uEYIMoYaIL/6x3Ggk/UapOHZwXrIxfKoh8NpBFEFwtI3P R5VjittKTdQCjv9a2CkBz8GgfjYiman7nwEcXobL1UjSfXdLp+fE1A9IvjawH1mZ aRRuRqQ5c/dDDwG14kCu6iBOaxw5DtQrgjtEuk8JQvgym/CcgUIuiFlr8Dcbv+yV YghYjheUAJ4SmANSPizX3A/ctsWYMkU9CqhMETZiP4/fwUpDCXom5NOUVY4eBg== -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:20 2026 by rpki-client