This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/479ZV3Yo2azoMThPuEqrM6qYhP8.roa File: 479ZV3Yo2azoMThPuEqrM6qYhP8.roa (raw, json) Hash identifier: iH7bjfyw/FV+kXgRaALQRgdoNp0fV7bf6CUsJ1nPg+k= Subject key identifier: E3:BF:59:57:76:28:D9:AC:E8:31:38:4F:B8:4A:AB:33:AA:98:84:FF Certificate issuer: /CN=ab9dc85f94ca647de0db64d74d3139947cc449ba Certificate serial: 019B7AC792F61C45784DA0FAE769E3689296 Authority key identifier: AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/479ZV3Yo2azoMThPuEqrM6qYhP8.roa Signing time: Thu 01 Jan 2026 18:17:38 +0000 ROA not before: Thu 01 Jan 2026 18:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20705 IP address blocks: 2a0c:6c40:a4ee::/47 maxlen: 48 2a0c:6c40:c82e::/47 maxlen: 48 2a0c:6c40:c840::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.crl rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:92:f6:1c:45:78:4d:a0:fa:e7:69:e3:68:92:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9dc85f94ca647de0db64d74d3139947cc449ba Validity Not Before: Jan 1 18:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3bf59577628d9ace831384fb84aab33aa9884ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:ab:c1:6c:5b:76:4a:01:d2:e5:03:98:19: 1b:32:db:c0:e9:8f:45:b5:d2:61:a2:05:2d:96:fd: a8:e7:62:0f:f0:bb:4d:da:27:19:70:3a:f2:a0:a3: f9:3c:40:21:78:b3:59:8c:6a:ca:e9:6b:bb:b9:66: 06:1c:f5:42:ff:51:03:7d:31:2d:df:3d:28:3f:b0: 83:08:2d:45:9f:ed:6d:55:21:44:ac:79:27:c1:6b: a9:83:43:c2:00:fa:01:8e:4b:55:bf:b3:4e:4f:da: 30:1c:eb:01:a0:cc:47:37:99:03:a6:23:66:e1:6f: 6d:1c:a7:a5:11:c6:88:03:b8:81:e8:84:08:93:be: 7b:95:dd:28:7f:3c:5d:7a:ab:56:5b:f6:db:59:54: d5:52:0b:eb:ad:35:64:5e:cf:c3:30:55:ff:89:38: a3:8a:61:f4:ad:90:2b:01:c1:ff:aa:e0:1d:eb:c1: a1:89:bc:22:a8:fa:18:ea:b8:8d:52:fe:a3:93:b2: 73:9b:65:e5:4f:39:a7:d5:e6:e6:41:30:82:56:67: 98:84:3b:d7:f3:8d:87:f9:9c:48:40:3c:fd:ac:8c: 2e:b9:75:63:63:84:1a:9b:53:65:3f:0a:4e:02:db: b6:65:8d:66:81:b2:75:7c:a4:08:da:ae:ab:60:be: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BF:59:57:76:28:D9:AC:E8:31:38:4F:B8:4A:AB:33:AA:98:84:FF X509v3 Authority Key Identifier: keyid:AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/479ZV3Yo2azoMThPuEqrM6qYhP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:6c40:a4ee::/47 2a0c:6c40:c82e::/47 2a0c:6c40:c840::/47 Signature Algorithm: sha256WithRSAEncryption 6a:2a:be:67:45:ce:89:28:d1:ff:80:17:50:fc:92:56:29:73: 43:6e:dd:1c:b8:3f:b1:e2:6e:c0:fc:97:3a:71:f6:85:d3:56: 29:d8:3b:ef:dc:35:22:48:d7:53:6c:7c:62:0f:b9:6a:4c:53: 4a:3c:6d:53:23:2b:40:e6:9a:0c:6d:36:7e:ad:8f:50:9d:ea: 6d:88:9f:0b:ac:5c:7f:a3:96:f3:f2:14:4c:62:d2:b8:cb:ca: c7:57:18:9d:29:ef:42:4a:90:aa:1d:9e:ac:b8:f4:fc:f9:bd: 84:88:14:da:37:b2:a8:d3:04:f8:18:5f:d1:bc:9b:a1:e2:14: c9:0a:7e:3e:e4:ca:25:02:bb:20:45:ec:04:bd:2a:69:3f:16: 61:4d:80:01:74:bc:0d:c8:74:96:ba:b5:95:ae:56:64:ff:fd: 57:a6:a6:da:29:e2:d4:50:3a:05:ba:2b:20:a2:87:83:4a:85: 72:5f:73:99:e0:b0:1e:a3:44:a0:e6:71:19:c5:e8:16:87:1b: 89:f9:4d:0a:3f:97:09:9e:56:1d:03:27:7a:a2:65:87:a2:ba: af:43:5c:59:51:d3:9e:87:62:99:d8:72:95:84:bc:17:fa:a9: 98:3f:30:45:3e:fa:5f:60:bd:a2:03:f1:9a:23:2a:d9:3f:34: 14:05:a4:4d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x5L2HEV4TaD652njaJKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWRjODVmOTRjYTY0N2RlMGRiNjRkNzRkMzEzOTk0N2Nj NDQ5YmEwHhcNMjYwMTAxMTgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2JmNTk1Nzc2MjhkOWFjZTgzMTM4NGZiODRhYWIzM2FhOTg4NGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPqrwWxbdkoB0uUDmBkbMtvA6Y9F tdJhogUtlv2o52IP8LtN2icZcDryoKP5PEAheLNZjGrK6Wu7uWYGHPVC/1EDfTEt 3z0oP7CDCC1Fn+1tVSFErHknwWupg0PCAPoBjktVv7NOT9owHOsBoMxHN5kDpiNm 4W9tHKelEcaIA7iB6IQIk757ld0ofzxdeqtWW/bbWVTVUgvrrTVkXs/DMFX/iTij imH0rZArAcH/quAd68GhibwiqPoY6riNUv6jk7Jzm2XlTzmn1ebmQTCCVmeYhDvX 842H+ZxIQDz9rIwuuXVjY4Qam1NlPwpOAtu2ZY1mgbJ1fKQI2q6rYL71ywIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOO/WVd2KNms6DE4T7hKqzOqmIT/MB8GA1UdIwQY MBaAFKudyF+UymR94Ntk100xOZR8xEm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTUzSVg1VEtaSDNnMjJUWFRURTVsSHpFU2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85YzgzYTUtM2E5YS00NzE1LTliMTYt NDA0NjMyNDk3MGFmLzEvNDc5WlYzWW8yYXpvTVRoUHVFcXJNNnFZaFA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy85YzgzYTUtM2E5YS00NzE1LTliMTYtNDA0NjMyNDk3MGFm LzEvcTUzSVg1VEtaSDNnMjJUWFRURTVsSHpFU2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcBKgxsQKTu AwcBKgxsQMguAwcBKgxsQMhAMA0GCSqGSIb3DQEBCwUAA4IBAQBqKr5nRc6JKNH/ gBdQ/JJWKXNDbt0cuD+x4m7A/Jc6cfaF01Yp2Dvv3DUiSNdTbHxiD7lqTFNKPG1T IytA5poMbTZ+rY9QneptiJ8LrFx/o5bz8hRMYtK4y8rHVxidKe9CSpCqHZ6suPT8 +b2EiBTaN7Ko0wT4GF/RvJuh4hTJCn4+5MolArsgRewEvSppPxZhTYABdLwNyHSW urWVrlZk//1XpqbaKeLUUDoFuisgooeDSoVyX3OZ4LAeo0Sg5nEZxegWhxuJ+U0K P5cJnlYdAyd6omWHorqvQ1xZUdOeh2KZ2HKVhLwX+qmYPzBFPvpfYL2iA/GaIyrZ PzQUBaRN -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:08 2026 by rpki-client