This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/reWnB99ZgyKfDxLMYCU0eB60oMM.roa File: reWnB99ZgyKfDxLMYCU0eB60oMM.roa (raw, json) Hash identifier: zmOzk6zG/XUr+wMEv4S5Xft1/xA0B0cNXZlAxmFFu9E= Subject key identifier: AD:E5:A7:07:DF:59:83:22:9F:0F:12:CC:60:25:34:78:1E:B4:A0:C3 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13E97106B3D7B7F0BE941007ADE323 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/reWnB99ZgyKfDxLMYCU0eB60oMM.roa Signing time: Fri 02 Jan 2026 14:19:29 +0000 ROA not before: Fri 02 Jan 2026 14:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41668 IP address blocks: 2a02:2698:2800::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:e9:71:06:b3:d7:b7:f0:be:94:10:07:ad:e3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ade5a707df5983229f0f12cc602534781eb4a0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:96:bf:2a:b1:31:67:28:47:1f:d4:a7:62: 79:35:88:5b:b0:55:e1:14:16:0b:c5:73:4e:bd:93: ef:72:c6:bf:1e:2e:15:4a:3c:67:df:ed:8c:a4:10: 5a:fc:a0:e3:ab:77:0f:f1:1b:e1:76:59:ef:70:62: 0d:94:a9:3f:b6:4f:ab:55:71:b0:81:ea:85:48:c5: 79:8d:63:ed:7e:2a:13:00:a7:97:67:86:0d:ca:b8: 4a:55:69:3a:8b:09:89:16:05:8b:ee:13:59:36:5f: 1c:9e:b3:5d:c8:f7:ec:ba:ca:fc:81:5c:83:73:ee: 2e:99:2e:1e:14:cb:8c:07:be:75:dd:ad:4a:13:87: 9b:9a:dd:a9:5c:72:7e:a8:27:e0:ab:3c:ca:2c:b3: c2:f8:61:96:15:07:40:ca:3d:ff:09:b3:c6:3f:73: 9a:66:e6:e0:37:85:28:71:fd:47:a8:f5:13:bd:69: d1:6f:be:95:1b:8a:af:2f:56:cb:b0:71:e1:a8:2d: 78:ef:0b:3e:58:b8:24:4b:e3:25:8d:c3:99:94:84: 28:c1:93:54:01:c2:9e:eb:1f:f2:ee:f3:c8:ad:e7: 62:cd:76:70:7d:7e:9b:bd:e0:c5:95:99:c5:53:ef: b2:e4:bd:42:93:a3:8d:0a:0f:ae:9c:a6:b5:31:4c: 6d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E5:A7:07:DF:59:83:22:9F:0F:12:CC:60:25:34:78:1E:B4:A0:C3 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/reWnB99ZgyKfDxLMYCU0eB60oMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:2800::/38 Signature Algorithm: sha256WithRSAEncryption b1:c4:18:94:71:fe:a6:5f:a6:7a:2a:ee:cc:26:03:2c:ed:5e: db:e9:28:f3:91:e7:41:4a:84:93:b3:93:b7:2d:7e:b3:05:64: 7e:b0:82:8f:c5:19:ea:f9:86:41:82:95:38:55:c1:24:b5:3a: f0:0d:93:92:3c:8e:fe:d4:47:a7:53:3e:9a:32:01:3c:66:2a: 3c:48:58:5b:b9:0e:db:9c:3b:e5:9d:0b:99:55:55:07:72:08: d6:a2:b6:0d:69:56:19:59:af:6c:5d:15:0a:62:0f:12:6d:e4: a4:71:e8:5e:2f:e8:f3:df:5b:64:62:0a:ba:67:cd:1f:b4:5e: de:e0:2f:71:c9:c8:93:4c:fb:32:91:1d:68:1f:ed:6f:e9:ec: bc:e6:eb:7f:11:be:bd:15:50:79:20:f1:e6:8c:fe:bd:08:b8: 00:ce:34:e0:a1:78:fb:d4:85:b7:5d:a0:50:20:1e:5c:bc:8f: b7:32:6e:22:71:f2:6a:93:6a:78:5a:2f:8e:a6:ba:1f:ae:58: 13:ef:d4:63:f5:e4:d6:4c:f6:58:7f:33:bf:4a:9a:4c:02:df: b6:e6:f5:24:37:90:e8:7e:8c:e0:98:f8:cc:49:13:af:d6:25: af:b2:a4:d7:62:5e:c2:90:aa:c0:a0:e0:5d:10:82:e0:78:d2: 27:43:08:5b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E+lxBrPXt/C+lBAHreMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGU1YTcwN2RmNTk4MzIyOWYwZjEyY2M2MDI1MzQ3ODFlYjRhMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo12WvyqxMWcoRx/Up2J5NYhbsFXh FBYLxXNOvZPvcsa/Hi4VSjxn3+2MpBBa/KDjq3cP8RvhdlnvcGINlKk/tk+rVXGw geqFSMV5jWPtfioTAKeXZ4YNyrhKVWk6iwmJFgWL7hNZNl8cnrNdyPfsusr8gVyD c+4umS4eFMuMB7513a1KE4ebmt2pXHJ+qCfgqzzKLLPC+GGWFQdAyj3/CbPGP3Oa ZubgN4Uocf1HqPUTvWnRb76VG4qvL1bLsHHhqC147ws+WLgkS+MljcOZlIQowZNU AcKe6x/y7vPIredizXZwfX6bveDFlZnFU++y5L1Ck6ONCg+unKa1MUxtMwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFK3lpwffWYMinw8SzGAlNHgetKDDMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvcmVXbkI5OVpneUtmRHhMTVlDVTBlQjYwb01NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmCgw DQYJKoZIhvcNAQELBQADggEBALHEGJRx/qZfpnoq7swmAyztXtvpKPOR50FKhJOz k7ctfrMFZH6wgo/FGer5hkGClThVwSS1OvANk5I8jv7UR6dTPpoyATxmKjxIWFu5 DtucO+WdC5lVVQdyCNaitg1pVhlZr2xdFQpiDxJt5KRx6F4v6PPfW2RiCrpnzR+0 Xt7gL3HJyJNM+zKRHWgf7W/p7Lzm638Rvr0VUHkg8eaM/r0IuADONOChePvUhbdd oFAgHly8j7cybiJx8mqTanhaL46muh+uWBPv1GP15NZM9lh/M79KmkwC37bm9SQ3 kOh+jOCY+MxJE6/WJa+ypNdiXsKQqsCg4F0QguB40idDCFs= -----END CERTIFICATE-----Generated at Thu Feb 5 05:55:01 2026 by rpki-client