This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/0V41IrPL9797nvcWEWG2FOZRVs0.roa File: 0V41IrPL9797nvcWEWG2FOZRVs0.roa (raw, json) Hash identifier: 2ssmd6CA4RuDZaqZAWLQB4prRBUYd7qy+OjXYkfyY8U= Subject key identifier: D1:5E:35:22:B3:CB:F7:BF:7B:9E:F7:16:11:61:B6:14:E6:51:56:CD Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B1955421583516C81DF3FF8D3462 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/0V41IrPL9797nvcWEWG2FOZRVs0.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142551 IP address blocks: 2a13:a5c7:1200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b1:95:54:21:58:35:16:c8:1d:f3:ff:8d:34:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d15e3522b3cbf7bf7b9ef7161161b614e65156cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:89:b0:09:cf:03:a0:77:0c:1b:4c:ef:41:ab: ce:c3:81:63:49:68:6b:54:1f:18:b8:e7:0b:b5:1f: 31:15:4a:9e:27:e7:ee:fe:94:2f:5b:3a:e2:e5:37: 91:05:31:9c:c7:93:56:ec:1f:da:41:ae:aa:c1:1c: 38:14:ab:1b:4b:23:1d:0c:ac:dc:b5:05:4b:8e:fd: da:4f:16:b0:4b:b1:c4:08:a5:78:74:af:5f:46:82: b9:7f:5e:be:d3:97:e6:60:74:e8:4c:d5:d1:48:d8: 6a:9c:9a:cf:90:ea:ba:28:2a:26:95:d1:82:bb:29: cb:03:df:50:07:c6:4f:d3:57:58:de:37:3b:ec:5d: 35:a6:ad:37:6b:3c:6c:ad:48:f6:5f:16:aa:ca:db: 7b:dd:da:95:f5:0f:f2:f0:96:6f:45:3c:0f:6d:8c: b0:ee:b2:7e:87:41:9c:51:8d:3b:01:0d:fc:6e:ad: f7:2a:c1:11:ce:88:fe:10:f5:85:9c:a7:9f:00:2a: 5a:4c:4b:ad:ff:fe:cc:d8:ff:b5:a8:cf:c7:8b:48: 70:8a:47:ff:aa:f5:89:eb:cb:2d:fe:70:63:b6:26: 97:e1:6c:3f:44:db:58:2f:5f:df:91:a1:70:e3:38: 49:83:eb:a4:5e:5b:40:68:ab:15:96:43:71:11:b0: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5E:35:22:B3:CB:F7:BF:7B:9E:F7:16:11:61:B6:14:E6:51:56:CD X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/0V41IrPL9797nvcWEWG2FOZRVs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:1200::/40 Signature Algorithm: sha256WithRSAEncryption 01:fb:2e:4c:6f:fa:ff:c3:3c:34:27:09:d9:ee:1d:82:cd:6c: db:6f:96:ee:32:87:97:2d:d7:1e:01:81:ed:c8:c4:71:6c:de: 8d:20:48:8b:ec:6c:61:d2:95:f3:6a:2a:5a:90:48:19:d7:20: 25:4c:51:43:2c:4f:e4:f1:47:2b:0c:75:9c:95:c8:19:97:40: fd:b6:16:23:99:95:27:5d:c5:73:c5:b8:11:98:de:e0:56:32: 13:d0:a3:24:f7:81:99:d8:25:ed:82:60:c2:20:59:3b:d2:78: dc:de:0d:80:65:28:5c:44:18:f4:7a:20:a7:34:8a:af:a6:08: 09:f2:5b:72:77:dc:0c:01:db:69:4d:06:16:62:d9:02:31:ec: 42:24:8d:86:db:e1:83:2a:f9:02:c0:2f:f9:04:cb:6c:0a:69: 70:41:2e:de:5e:c9:e0:ab:e1:1a:b0:a0:83:b9:a0:03:45:19: 5d:d0:8a:85:83:e0:46:48:c4:56:28:9b:c4:8f:f7:61:3f:a8: b4:9e:9b:3b:11:66:9e:04:db:95:3b:2f:dc:00:f5:ca:9a:97: 4f:a6:9c:47:1d:10:5e:96:f0:06:8e:8b:df:c8:e9:a6:4a:23: fa:f4:82:6f:8b:58:ce:72:24:7f:32:20:d5:9a:9f:14:81:e4: 73:b8:ae:57 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLGVVCFYNRbIHfP/jTRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTVlMzUyMmIzY2JmN2JmN2I5ZWY3MTYxMTYxYjYxNGU2NTE1NmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ImwCc8DoHcMG0zvQavOw4FjSWhr VB8YuOcLtR8xFUqeJ+fu/pQvWzri5TeRBTGcx5NW7B/aQa6qwRw4FKsbSyMdDKzc tQVLjv3aTxawS7HECKV4dK9fRoK5f16+05fmYHToTNXRSNhqnJrPkOq6KComldGC uynLA99QB8ZP01dY3jc77F01pq03azxsrUj2Xxaqytt73dqV9Q/y8JZvRTwPbYyw 7rJ+h0GcUY07AQ38bq33KsERzoj+EPWFnKefACpaTEut//7M2P+1qM/Hi0hwikf/ qvWJ68st/nBjtiaX4Ww/RNtYL1/fkaFw4zhJg+ukXltAaKsVlkNxEbDKOwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNFeNSKzy/e/e573FhFhthTmUVbNMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvMFY0MUlyUEw5Nzk3bnZjV0VXRzJGT1pSVnMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxxIw DQYJKoZIhvcNAQELBQADggEBAAH7Lkxv+v/DPDQnCdnuHYLNbNtvlu4yh5ct1x4B ge3IxHFs3o0gSIvsbGHSlfNqKlqQSBnXICVMUUMsT+TxRysMdZyVyBmXQP22FiOZ lSddxXPFuBGY3uBWMhPQoyT3gZnYJe2CYMIgWTvSeNzeDYBlKFxEGPR6IKc0iq+m CAnyW3J33AwB22lNBhZi2QIx7EIkjYbb4YMq+QLAL/kEy2wKaXBBLt5eyeCr4Rqw oIO5oANFGV3QioWD4EZIxFYom8SP92E/qLSemzsRZp4E25U7L9wA9cqal0+mnEcd EF6W8AaOi9/I6aZKI/r0gm+LWM5yJH8yINWanxSB5HO4rlc= -----END CERTIFICATE-----Generated at Mon Jan 5 03:46:57 2026 by rpki-client