This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/cNwOavyheuFxgaYyEOxAfXFnlcY.roa File: cNwOavyheuFxgaYyEOxAfXFnlcY.roa (raw, json) Hash identifier: /RqRAHSj/wtS4LPtj6pvvKdcFjWPDrQmqz6E+nX2UCI= Subject key identifier: 70:DC:0E:6A:FC:A1:7A:E1:71:81:A6:32:10:EC:40:7D:71:67:95:C6 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B5BAAB0BC7A285F42776E63154E8 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/cNwOavyheuFxgaYyEOxAfXFnlcY.roa Signing time: Fri 02 Jan 2026 16:20:31 +0000 ROA not before: Fri 02 Jan 2026 16:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 2a0b:7080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b5:ba:ab:0b:c7:a2:85:f4:27:76:e6:31:54:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70dc0e6afca17ae17181a63210ec407d716795c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:63:e5:3b:0d:2f:7a:f5:79:5b:55:1c:50: e4:20:cb:9d:aa:35:85:9a:75:b4:79:3b:1e:ce:bf: 86:99:51:79:2e:25:b4:ba:e7:7b:91:70:da:77:61: 5f:35:79:27:c9:17:a3:cc:51:97:66:df:bf:70:d5: 2c:bf:ca:80:d9:8c:aa:07:d4:60:e4:c6:d9:7a:49: 43:0d:c2:32:19:f0:02:77:a4:89:29:95:cc:b1:08: f9:61:2f:c4:75:d7:b7:33:24:a2:49:a3:58:39:dd: 0d:a3:e9:b8:7d:53:ab:dc:6a:00:a0:e3:98:24:e4: 83:c3:85:a6:37:ba:c0:8a:9a:8c:6f:6d:e0:89:4a: d5:01:89:8c:29:cb:ce:b0:b1:5f:f8:26:d9:65:d0: 1b:e4:a8:89:eb:f0:c0:ad:2a:19:26:46:ff:4d:db: 26:7e:82:eb:49:4e:2c:db:57:f8:68:dd:f7:d9:39: 8e:83:2e:a4:c4:27:d1:b3:da:df:5b:bf:71:54:fb: 2d:f1:2b:39:c6:96:f7:58:7e:06:f3:42:57:8b:23: 6d:7d:9c:d8:6c:0d:9d:5a:f7:83:c6:19:4d:67:ed: 2d:9e:64:29:27:25:5d:d1:2f:d7:73:8c:97:7d:34: 51:ac:51:74:48:ab:92:b3:80:64:39:90:d7:f8:eb: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DC:0E:6A:FC:A1:7A:E1:71:81:A6:32:10:EC:40:7D:71:67:95:C6 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/cNwOavyheuFxgaYyEOxAfXFnlcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:7080::/29 Signature Algorithm: sha256WithRSAEncryption 6f:d0:4a:db:66:83:78:fe:2a:6a:b5:3f:23:a3:b5:69:1e:f0: 17:5a:f5:c3:08:0b:40:e6:4d:43:63:65:ab:89:cf:ff:67:63: ca:0e:00:57:64:8e:b4:2e:ac:cc:08:24:bc:22:91:e5:fa:99: 2c:af:db:b9:79:8d:74:ad:5e:a6:40:ab:93:9f:74:7e:b9:c3: a7:f7:95:31:eb:15:e3:0f:42:0b:02:f7:01:06:a7:ed:0d:0f: 57:05:09:1f:b3:f2:e3:0f:a1:05:32:6e:12:e0:7e:5d:4c:bc: 22:b2:ad:8a:10:52:0d:24:73:d1:5e:6d:a1:82:97:27:f0:c3: b3:df:e3:9b:ea:5f:3b:c3:54:05:e5:5a:1a:cd:b2:01:b6:49: 91:98:b9:6f:38:fa:70:89:85:07:59:83:20:be:c7:d0:60:27: c9:74:ec:cd:b7:42:78:d7:e5:1c:f3:59:6b:0d:15:8e:38:7b: 0e:73:a4:84:44:f6:22:8a:2a:4b:09:0a:23:2b:87:51:5c:00: 80:c8:36:74:1a:5c:6e:80:ef:69:13:74:0f:fc:5c:77:9d:f5: d1:47:ed:f5:21:64:30:39:71:b2:6d:5c:22:4f:dc:1a:43:80: 95:4e:e1:bf:47:10:e0:d2:5a:c0:fd:88:a0:0a:66:3b:94:40: aa:ba:7a:6e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/grW6qwvHooX0J3bmMVToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGRjMGU2YWZjYTE3YWUxNzE4MWE2MzIxMGVjNDA3ZDcxNjc5NWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40xj5TsNL3r1eVtVHFDkIMudqjWF mnW0eTsezr+GmVF5LiW0uud7kXDad2FfNXknyRejzFGXZt+/cNUsv8qA2YyqB9Rg 5MbZeklDDcIyGfACd6SJKZXMsQj5YS/Edde3MySiSaNYOd0No+m4fVOr3GoAoOOY JOSDw4WmN7rAipqMb23giUrVAYmMKcvOsLFf+CbZZdAb5KiJ6/DArSoZJkb/Tdsm foLrSU4s21f4aN332TmOgy6kxCfRs9rfW79xVPst8Ss5xpb3WH4G80JXiyNtfZzY bA2dWveDxhlNZ+0tnmQpJyVd0S/Xc4yXfTRRrFF0SKuSs4BkOZDX+Ou+yQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHDcDmr8oXrhcYGmMhDsQH1xZ5XGMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvY053T2F2eWhldUZ4Z2FZeUVPeEFmWEZubGNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgtwgDAN BgkqhkiG9w0BAQsFAAOCAQEAb9BK22aDeP4qarU/I6O1aR7wF1r1wwgLQOZNQ2Nl q4nP/2djyg4AV2SOtC6szAgkvCKR5fqZLK/buXmNdK1epkCrk590frnDp/eVMesV 4w9CCwL3AQan7Q0PVwUJH7Py4w+hBTJuEuB+XUy8IrKtihBSDSRz0V5toYKXJ/DD s9/jm+pfO8NUBeVaGs2yAbZJkZi5bzj6cImFB1mDIL7H0GAnyXTszbdCeNflHPNZ aw0Vjjh7DnOkhET2IooqSwkKIyuHUVwAgMg2dBpcboDvaRN0D/xcd5310Uft9SFk MDlxsm1cIk/cGkOAlU7hv0cQ4NJawP2IoApmO5RAqrp6bg== -----END CERTIFICATE-----Generated at Thu Jan 8 09:24:01 2026 by rpki-client