This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1We3sM1PJzJjh431T2RewyKy7qc.roa
File: 1We3sM1PJzJjh431T2RewyKy7qc.roa (raw, json)
Hash identifier: TwjuUkz+WwHOXiQ9h/horDxuIN/qowEGiYayrZl3rRs=
Subject key identifier: D5:67:B7:B0:CD:4F:27:32:63:87:8D:F5:4F:64:5E:C3:22:B2:EE:A7
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 019B7F13F65329ED9FAEFC8745C3F9976229
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1We3sM1PJzJjh431T2RewyKy7qc.roa
Signing time: Fri 02 Jan 2026 14:19:33 +0000
ROA not before: Fri 02 Jan 2026 14:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50544
IP address blocks: 2a02:2698:3000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:f6:53:29:ed:9f:ae:fc:87:45:c3:f9:97:62:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 14:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d567b7b0cd4f273263878df54f645ec322b2eea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:2b:59:4f:49:3f:4e:05:d2:8a:05:34:d8:
7d:d5:58:1c:39:f4:40:c5:67:31:da:f4:d8:11:a2:
02:6a:f5:eb:2c:31:45:00:17:d6:09:61:69:80:ad:
57:53:bd:30:46:5b:49:16:e1:07:23:59:77:f0:ea:
c8:fa:d7:2d:1c:3f:b0:81:ef:86:65:63:9b:94:6b:
42:87:d3:f4:c3:50:45:35:40:b7:ec:2b:62:25:de:
1b:e2:6b:0d:bb:8c:f0:01:c1:25:55:0b:9b:d8:db:
06:45:56:66:1b:2b:d7:e2:c0:2a:c3:8b:2a:a3:a7:
ed:74:bf:b5:2c:a1:fc:b1:6a:ef:3a:69:f9:9d:00:
0e:81:1f:c5:59:b0:98:0a:00:da:90:24:e6:f7:14:
57:bd:7e:d9:40:4b:98:bc:42:6c:cd:88:ac:e4:50:
b4:74:6b:c1:6e:63:22:26:3e:c0:35:ca:b6:b1:35:
65:72:ab:7b:cc:4b:98:ff:96:14:b0:99:d4:eb:ec:
4e:d3:7b:14:3b:1b:74:65:f6:5e:d6:7e:91:7a:ba:
7f:b8:00:06:d3:01:47:38:11:c2:fe:3f:08:ad:8e:
40:49:4f:8f:28:65:f2:6c:57:82:93:8c:d1:95:c5:
75:9b:16:cd:3b:9c:49:92:03:87:49:c3:40:8f:97:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:67:B7:B0:CD:4F:27:32:63:87:8D:F5:4F:64:5E:C3:22:B2:EE:A7
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1We3sM1PJzJjh431T2RewyKy7qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:3000::/38
Signature Algorithm: sha256WithRSAEncryption
4d:f5:8a:e1:3f:9b:91:35:a9:58:3f:35:3d:b1:d6:5d:cd:b6:
7d:6b:8e:06:71:7d:10:69:65:d7:83:98:3a:b3:2e:72:3d:d3:
fe:7d:d1:66:21:46:d0:0e:89:01:e0:14:67:7b:1f:78:bf:ec:
02:c5:54:61:ff:1b:f0:e6:a1:36:cf:fe:d3:4b:4e:cf:f4:9e:
f7:44:c9:e5:09:1e:64:5b:e5:55:d7:1e:30:04:c7:3d:66:1e:
99:ac:15:34:eb:46:23:f8:3a:e4:8f:6b:bb:df:84:c2:59:7d:
21:6b:e7:14:bf:cc:89:bd:b8:2a:9a:27:17:ff:15:60:3a:1d:
77:f8:cd:13:2c:5e:7e:08:f8:cd:21:b9:4b:f1:77:8a:fc:a9:
ad:87:36:f1:a9:af:b0:2a:f9:d8:03:5a:8e:86:8b:70:77:99:
71:f0:53:fa:83:88:03:e8:9c:4d:d1:ad:30:a9:d0:82:d3:94:
4b:8e:3b:b7:24:97:0c:2b:e0:0a:d2:35:c8:92:a1:37:3c:99:
9a:12:c4:4f:0f:b8:87:6e:0c:24:9f:41:d1:72:76:20:cd:6e:
86:cf:7d:05:09:75:0e:be:5f:7f:ff:03:48:2e:52:51:ed:df:
9f:9c:25:69:29:59:65:a6:e6:94:6b:0e:56:53:bf:9d:8e:43:
a2:b0:21:c2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt/E/ZTKe2frvyHRcP5l2IpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjYwMTAyMTQxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTY3YjdiMGNkNGYyNzMyNjM4NzhkZjU0ZjY0NWVjMzIyYjJlZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1MrWU9JP04F0ooFNNh91VgcOfRA
xWcx2vTYEaICavXrLDFFABfWCWFpgK1XU70wRltJFuEHI1l38OrI+tctHD+wge+G
ZWOblGtCh9P0w1BFNUC37CtiJd4b4msNu4zwAcElVQub2NsGRVZmGyvX4sAqw4sq
o6ftdL+1LKH8sWrvOmn5nQAOgR/FWbCYCgDakCTm9xRXvX7ZQEuYvEJszYis5FC0
dGvBbmMiJj7ANcq2sTVlcqt7zEuY/5YUsJnU6+xO03sUOxt0ZfZe1n6Rerp/uAAG
0wFHOBHC/j8IrY5ASU+PKGXybFeCk4zRlcV1mxbNO5xJkgOHScNAj5eFYQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNVnt7DNTycyY4eN9U9kXsMisu6nMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvMVdlM3NNMVBKekpqaDQzMVQyUmV3eUt5N3FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmDAw
DQYJKoZIhvcNAQELBQADggEBAE31iuE/m5E1qVg/NT2x1l3Ntn1rjgZxfRBpZdeD
mDqzLnI90/590WYhRtAOiQHgFGd7H3i/7ALFVGH/G/DmoTbP/tNLTs/0nvdEyeUJ
HmRb5VXXHjAExz1mHpmsFTTrRiP4OuSPa7vfhMJZfSFr5xS/zIm9uCqaJxf/FWA6
HXf4zRMsXn4I+M0huUvxd4r8qa2HNvGpr7Aq+dgDWo6Gi3B3mXHwU/qDiAPonE3R
rTCp0ILTlEuOO7cklwwr4ArSNciSoTc8mZoSxE8PuIduDCSfQdFydiDNbobPfQUJ
dQ6+X3//A0guUlHt35+cJWkpWWWm5pRrDlZTv52OQ6KwIcI=
-----END CERTIFICATE-----
Generated at Thu Feb 5 05:54:56 2026 by rpki-client