This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/_rTEx-t_NdmfT_FVcasSap5SuvE.roa File: _rTEx-t_NdmfT_FVcasSap5SuvE.roa (raw, json) Hash identifier: ENf9Zsg8pxzpa14iNxpPB+x6wfIxOC0IvZvTlmEuMS0= Subject key identifier: FE:B4:C4:C7:EB:7F:35:D9:9F:4F:F1:55:71:AB:12:6A:9E:52:BA:F1 Certificate issuer: /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71 Certificate serial: 019B78A2AC33950D0EE43CAB0ED860F332BE Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/_rTEx-t_NdmfT_FVcasSap5SuvE.roa Signing time: Thu 01 Jan 2026 08:18:05 +0000 ROA not before: Thu 01 Jan 2026 08:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213031 IP address blocks: 2a14:c680::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ac:33:95:0d:0e:e4:3c:ab:0e:d8:60:f3:32:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71 Validity Not Before: Jan 1 08:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feb4c4c7eb7f35d99f4ff15571ab126a9e52baf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:bf:0a:e3:8c:a3:68:b7:2c:39:8d:90:11: a9:b1:65:31:95:c2:b2:ef:4d:30:69:b6:06:71:cc: f8:0d:a6:35:36:b9:89:a5:28:19:49:5c:9b:5b:98: 6b:b6:7e:03:5d:c2:cd:23:3f:0c:1d:7c:7f:1a:b2: 53:f5:84:aa:7f:3c:5b:d5:8a:ef:d2:b6:8a:e4:64: 8e:6d:36:4d:57:28:fd:25:a2:f0:ba:eb:70:a0:63: a0:7e:d3:6d:86:d9:16:1b:36:1b:14:a7:e0:11:f0: 7d:b4:89:ec:06:d5:c2:0b:e0:70:1b:b2:a9:07:67: 31:30:4b:8d:94:54:52:cb:90:76:24:1d:6f:9d:6e: 47:62:8d:58:97:98:83:f9:8a:6b:80:14:6c:0e:73: 64:b4:9a:ca:ee:51:bb:06:b4:a3:f2:e3:ea:25:c3: fa:89:c5:83:94:74:be:41:cc:8a:63:c2:26:bf:3a: 22:62:c6:da:9e:7d:0c:81:50:ce:06:fa:1e:21:fd: e0:50:39:6e:d2:d9:06:73:29:48:dd:d2:3a:67:96: 45:bd:e7:e6:46:31:6c:59:b0:2d:e9:e9:04:4e:2b: f6:80:b8:69:db:cc:4f:5f:bc:07:19:8e:27:1e:75: bc:9c:22:1b:16:c9:9c:c2:6e:af:be:44:03:34:79: 88:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B4:C4:C7:EB:7F:35:D9:9F:4F:F1:55:71:AB:12:6A:9E:52:BA:F1 X509v3 Authority Key Identifier: keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/_rTEx-t_NdmfT_FVcasSap5SuvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c680::/44 Signature Algorithm: sha256WithRSAEncryption 11:27:9e:5c:a8:b4:78:b8:c8:8d:4c:cb:bb:1f:14:6b:93:b5: 09:2d:d6:97:89:f9:7a:03:cb:b7:f3:69:ba:14:d0:1c:15:e8: 9c:77:b6:a4:d7:c8:3e:85:3a:49:c1:4a:1a:f9:22:29:3d:9f: 9a:41:9c:2a:46:45:ec:3c:2a:17:32:96:97:ec:ba:e4:dc:37: 08:c3:79:20:6b:88:ba:23:09:68:df:1b:c0:88:51:17:8f:2c: 84:a2:e0:51:0d:c7:3a:97:93:17:23:ee:38:e5:06:8a:81:9c: c8:56:26:2f:bc:88:22:f4:c9:24:fd:97:23:e5:d2:7c:c3:69: 53:b4:84:30:47:8e:85:02:58:7b:0d:61:c5:5a:2c:b1:b3:c8: fd:79:e6:99:09:c6:c7:cc:ff:a0:58:c5:f5:0e:19:be:76:3a: 1a:98:d5:94:2d:3d:f4:8e:d4:ad:7f:06:01:42:e1:a2:c8:76: 51:5b:3b:8c:98:a3:52:10:bb:92:56:e0:7c:71:0f:6d:f5:fe: c7:5c:86:4e:c1:7d:4f:8c:71:23:60:0b:9b:b0:ce:dd:13:fe: e5:35:37:1c:77:fb:63:ca:a7:00:27:f9:32:e2:74:59:36:50: e4:08:69:ad:3c:52:a0:49:38:52:bc:a4:a5:73:ef:66:12:d5: 3b:e1:84:15 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oqwzlQ0O5DyrDthg8zK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwN2M3NzBiYjZiMDhkY2I0ZDZlYTliMGM5NjI3MmFmM2E2 ZjljNzEwHhcNMjYwMTAxMDgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWI0YzRjN2ViN2YzNWQ5OWY0ZmYxNTU3MWFiMTI2YTllNTJiYWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuii/CuOMo2i3LDmNkBGpsWUxlcKy 700wabYGccz4DaY1NrmJpSgZSVybW5hrtn4DXcLNIz8MHXx/GrJT9YSqfzxb1Yrv 0raK5GSObTZNVyj9JaLwuutwoGOgftNthtkWGzYbFKfgEfB9tInsBtXCC+BwG7Kp B2cxMEuNlFRSy5B2JB1vnW5HYo1Yl5iD+YprgBRsDnNktJrK7lG7BrSj8uPqJcP6 icWDlHS+QcyKY8ImvzoiYsbann0MgVDOBvoeIf3gUDlu0tkGcylI3dI6Z5ZFvefm RjFsWbAt6ekETiv2gLhp28xPX7wHGY4nHnW8nCIbFsmcwm6vvkQDNHmI0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP60xMfrfzXZn0/xVXGrEmqeUrrxMB8GA1UdIwQY MBaAFFB8dwu2sI3LTW6psMlicq86b5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUh4M0M3YXdqY3ROYnFtd3lXSnlyenB2bkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi81ZjE1MTEtMTBmYy00M2U3LWE4ZTAt NThiNzliYzliY2M3LzEvX3JURXgtdF9OZG1mVF9GVmNhc1NhcDVTdXZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi81ZjE1MTEtMTBmYy00M2U3LWE4ZTAtNThiNzliYzliY2M3 LzEvVUh4M0M3YXdqY3ROYnFtd3lXSnlyenB2bkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTGgAAA MA0GCSqGSIb3DQEBCwUAA4IBAQARJ55cqLR4uMiNTMu7HxRrk7UJLdaXifl6A8u3 82m6FNAcFeicd7ak18g+hTpJwUoa+SIpPZ+aQZwqRkXsPCoXMpaX7Lrk3DcIw3kg a4i6Iwlo3xvAiFEXjyyEouBRDcc6l5MXI+445QaKgZzIViYvvIgi9Mkk/Zcj5dJ8 w2lTtIQwR46FAlh7DWHFWiyxs8j9eeaZCcbHzP+gWMX1Dhm+djoamNWULT30jtSt fwYBQuGiyHZRWzuMmKNSELuSVuB8cQ9t9f7HXIZOwX1PjHEjYAubsM7dE/7lNTcc d/tjyqcAJ/ky4nRZNlDkCGmtPFKgSThSvKSlc+9mEtU74YQV -----END CERTIFICATE-----Generated at Mon Feb 2 07:54:52 2026 by rpki-client