This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/cb0EEAKvHHk6_aqJKin8YWvHIXY.roa File: cb0EEAKvHHk6_aqJKin8YWvHIXY.roa (raw, json) Hash identifier: YDpP9XOCMWs39OOIHnBxhZZcAFGUEpXeEqdMZZFTkP4= Subject key identifier: 71:BD:04:10:02:AF:1C:79:3A:FD:AA:89:2A:29:FC:61:6B:C7:21:76 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F75D2A68A9C90433ED657090FB6F Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/cb0EEAKvHHk6_aqJKin8YWvHIXY.roa Signing time: Fri 02 Jan 2026 14:19:33 +0000 ROA not before: Fri 02 Jan 2026 14:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51570 IP address blocks: 2a02:2698:6c00::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f7:5d:2a:68:a9:c9:04:33:ed:65:70:90:fb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71bd041002af1c793afdaa892a29fc616bc72176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cd:bc:ca:b9:d6:ba:15:80:f5:2c:b9:f3:3b: 0f:eb:d5:5b:33:86:ae:10:83:12:8b:94:34:41:a2: 95:b8:01:bf:dd:ed:90:42:37:1d:a4:c0:a3:87:a7: 5c:e0:b8:3a:fa:ad:54:73:31:ab:11:de:a4:21:a4: 9c:9e:4f:3b:71:46:f9:7d:04:04:dc:dc:9e:16:fa: 2b:0d:6b:1e:76:cb:ca:a6:0b:81:09:1e:4e:e8:6f: 1c:0e:dc:c9:af:d2:07:7e:65:42:2e:bc:a9:0c:eb: f7:6c:d2:fd:57:99:3f:00:7e:e2:24:e7:0d:52:87: 13:6a:59:d2:60:f1:ae:15:a4:05:ad:d8:32:1b:0f: 68:04:73:43:74:27:a6:4b:d3:1e:c6:e5:04:4e:43: 77:c2:a7:b3:0e:b8:84:a7:55:79:e2:f0:3f:ee:da: 24:8c:dd:88:9f:3c:97:3b:c0:c8:bb:d9:13:41:a6: 99:b9:b4:96:31:4f:97:e5:52:61:8f:9a:3f:7e:ee: 2e:4d:6f:ba:ed:05:2f:88:61:9f:98:a1:50:54:de: 05:45:b0:96:e3:6a:fd:fe:d2:dc:40:69:08:bc:69: 10:c3:1b:5b:31:dc:95:50:cc:8a:aa:c6:f0:64:1f: 7f:57:ae:27:96:f4:08:43:a6:6a:bf:68:be:53:2c: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BD:04:10:02:AF:1C:79:3A:FD:AA:89:2A:29:FC:61:6B:C7:21:76 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/cb0EEAKvHHk6_aqJKin8YWvHIXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:6c00::/38 Signature Algorithm: sha256WithRSAEncryption bd:51:71:16:09:a1:f3:6e:5a:4c:c7:b8:56:29:0e:dc:89:2c: b3:1c:5a:61:9d:29:ef:3b:bb:a1:7e:1d:c4:1d:c5:0b:41:7d: cc:a5:e5:b9:7b:c0:d5:22:e2:20:ee:78:28:94:67:43:db:f6: 91:3f:f6:ba:76:d1:00:66:08:61:9f:32:66:1c:6c:cf:91:ec: 49:62:79:d9:fe:fc:1e:6d:29:3f:5d:29:2c:2f:58:64:60:20: 57:d0:8f:db:71:d7:d7:71:07:16:16:c5:f1:26:92:d0:e7:66: 3a:bd:58:42:bb:a4:4a:2a:a6:b0:4d:55:0f:d9:f9:1f:86:40: 3f:1e:b7:a9:88:be:06:04:f7:45:21:30:b1:40:0f:8e:e4:82: f0:5d:a6:cf:dd:8b:af:c6:e4:64:3b:8a:b2:99:7b:dc:f1:6e: 3b:1b:05:a6:77:3b:bb:04:a3:d5:ff:66:f3:e1:9b:65:17:4f: 6b:8b:46:c7:bf:e0:90:91:27:a0:7f:36:b9:f1:bb:e9:84:04: 9d:a7:76:78:18:24:9b:b7:83:b6:89:9b:ce:26:f6:09:5d:6a: 68:db:f7:00:99:16:ee:df:14:b2:7e:68:c5:83:6b:78:39:40: 6c:f1:61:1c:68:27:f6:4d:55:8a:d0:5c:ba:6e:55:9f:dc:3f: 11:5c:1e:9b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E/ddKmipyQQz7WVwkPtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWJkMDQxMDAyYWYxYzc5M2FmZGFhODkyYTI5ZmM2MTZiYzcyMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks28yrnWuhWA9Sy58zsP69VbM4au EIMSi5Q0QaKVuAG/3e2QQjcdpMCjh6dc4Lg6+q1UczGrEd6kIaScnk87cUb5fQQE 3NyeFvorDWsedsvKpguBCR5O6G8cDtzJr9IHfmVCLrypDOv3bNL9V5k/AH7iJOcN UocTalnSYPGuFaQFrdgyGw9oBHNDdCemS9MexuUETkN3wqezDriEp1V54vA/7tok jN2InzyXO8DIu9kTQaaZubSWMU+X5VJhj5o/fu4uTW+67QUviGGfmKFQVN4FRbCW 42r9/tLcQGkIvGkQwxtbMdyVUMyKqsbwZB9/V64nlvQIQ6Zqv2i+UyxQ1wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHG9BBACrxx5Ov2qiSop/GFrxyF2MB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvY2IwRUVBS3ZISGs2X2FxSktpbjhZV3ZISVhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmGww DQYJKoZIhvcNAQELBQADggEBAL1RcRYJofNuWkzHuFYpDtyJLLMcWmGdKe87u6F+ HcQdxQtBfcyl5bl7wNUi4iDueCiUZ0Pb9pE/9rp20QBmCGGfMmYcbM+R7Eliedn+ /B5tKT9dKSwvWGRgIFfQj9tx19dxBxYWxfEmktDnZjq9WEK7pEoqprBNVQ/Z+R+G QD8et6mIvgYE90UhMLFAD47kgvBdps/di6/G5GQ7irKZe9zxbjsbBaZ3O7sEo9X/ ZvPhm2UXT2uLRse/4JCRJ6B/Nrnxu+mEBJ2ndngYJJu3g7aJm84m9gldamjb9wCZ Fu7fFLJ+aMWDa3g5QGzxYRxoJ/ZNVYrQXLpuVZ/cPxFcHps= -----END CERTIFICATE-----Generated at Thu Feb 5 05:54:42 2026 by rpki-client