This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/cOTwaK6RSeeGqDttEyYUstwdoCE.roa File: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (raw, json) Hash identifier: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ= Subject key identifier: 70:E4:F0:68:AE:91:49:E7:86:A8:3B:6D:13:26:14:B2:DC:1D:A0:21 Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019B7C129F332061CFB792A70D53B096DB1C Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/cOTwaK6RSeeGqDttEyYUstwdoCE.roa Signing time: Fri 02 Jan 2026 00:19:13 +0000 ROA not before: Fri 02 Jan 2026 00:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47583 IP address blocks: 2a00:1eb8:c006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9f:33:20:61:cf:b7:92:a7:0d:53:b0:96:db:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70e4f068ae9149e786a83b6d132614b2dc1da021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6f:ec:37:78:15:0f:71:88:b7:1c:ce:13:5d: d9:95:00:4a:2c:45:1b:05:d1:eb:fc:ca:79:fa:8d: 70:8a:04:5e:36:a4:a9:b5:ae:af:0e:ff:bb:a1:42: ea:71:73:cf:78:13:90:aa:f5:f5:6c:20:a0:31:c6: bb:3a:1d:ed:f1:c3:2d:36:7e:85:0b:1e:9d:bb:8e: d2:fa:fc:33:3e:eb:0a:65:a5:84:cc:1a:da:f7:27: 2b:dd:bd:ae:9e:1b:3e:91:03:e6:51:b0:21:12:ab: 70:89:94:3c:76:06:5f:87:90:36:15:c1:d3:65:10: 2b:11:00:6d:d2:4f:64:31:c3:5b:8f:63:9d:f7:a7: 76:0e:7f:b8:67:f7:18:f0:15:c7:bc:f7:c2:9a:9d: b0:f8:a3:31:10:b7:90:e8:f5:ab:d5:cd:5d:e4:44: 87:e5:b4:6e:48:a7:82:72:f9:02:fc:ea:da:c9:fd: 67:a5:ca:23:f9:97:27:61:a0:c0:24:68:09:2a:3a: da:7e:0f:68:c1:39:56:9a:90:64:2b:e2:33:10:ba: 98:b9:11:42:fc:1d:fa:63:1f:c5:77:ee:dd:cc:a9: fc:f3:98:40:7e:5f:06:e4:a6:db:57:95:0e:47:8c: e7:12:1b:6f:3c:a6:99:1a:b7:f6:7e:47:96:3d:e0: ac:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:F0:68:AE:91:49:E7:86:A8:3B:6D:13:26:14:B2:DC:1D:A0:21 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/cOTwaK6RSeeGqDttEyYUstwdoCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1eb8:c006::/48 Signature Algorithm: sha256WithRSAEncryption 5b:d6:f4:45:55:99:3f:ca:c8:27:ca:70:20:cb:f9:0a:ad:21: 1a:8f:08:5a:bf:91:e2:ce:a6:32:ca:84:8c:99:da:7a:f9:2a: 95:f1:78:ae:9f:cb:d8:63:ac:61:26:1e:5a:6f:8a:b3:eb:37: fd:2c:eb:f3:48:eb:ce:46:6a:22:17:3e:af:d1:77:db:5c:7e: c8:fd:b9:69:b3:78:b8:0d:d1:7a:ad:5c:64:a5:5f:23:fb:7e: d4:f7:28:5f:72:86:20:bc:4a:88:82:5b:ea:7e:0b:d5:5b:40: 05:ed:20:27:48:07:60:75:a1:45:f9:67:c0:d7:cd:80:a6:4d: 22:dd:16:ae:6c:fa:61:50:ab:fb:76:e7:97:ac:10:fa:9d:ee: 01:80:35:2d:00:ee:23:21:76:8f:eb:2b:2b:78:12:c8:44:20: 3b:56:ad:40:02:30:d0:41:e1:27:52:c5:b2:25:04:40:8f:fa: 94:71:33:f3:ee:da:e2:03:aa:e5:93:67:38:0b:44:b8:b0:53: da:93:23:18:6f:91:1e:7a:f9:e3:28:68:7c:59:ec:6d:27:e8: 8c:b3:ff:8b:c6:0a:31:78:e0:ba:38:9f:d1:d3:81:dd:fe:f1: 92:c5:86:f8:97:11:46:50:e6:77:03:1e:d6:6b:99:b6:39:ab: 57:4a:7c:99 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt8Ep8zIGHPt5KnDVOwltscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGU0ZjA2OGFlOTE0OWU3ODZhODNiNmQxMzI2MTRiMmRjMWRhMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm/sN3gVD3GItxzOE13ZlQBKLEUb BdHr/Mp5+o1wigReNqSpta6vDv+7oULqcXPPeBOQqvX1bCCgMca7Oh3t8cMtNn6F Cx6du47S+vwzPusKZaWEzBra9ycr3b2unhs+kQPmUbAhEqtwiZQ8dgZfh5A2FcHT ZRArEQBt0k9kMcNbj2Od96d2Dn+4Z/cY8BXHvPfCmp2w+KMxELeQ6PWr1c1d5ESH 5bRuSKeCcvkC/Orayf1npcoj+ZcnYaDAJGgJKjrafg9owTlWmpBkK+IzELqYuRFC /B36Yx/Fd+7dzKn885hAfl8G5KbbV5UOR4znEhtvPKaZGrf2fkeWPeCs7QIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFHDk8GiukUnnhqg7bRMmFLLcHaAhMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xL2NPVHdhSzZSU2VlR3FEdHRFeVlVc3R3ZG9DRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqAB64 wAYwDQYJKoZIhvcNAQELBQADggEBAFvW9EVVmT/KyCfKcCDL+QqtIRqPCFq/keLO pjLKhIyZ2nr5KpXxeK6fy9hjrGEmHlpvirPrN/0s6/NI685GaiIXPq/Rd9tcfsj9 uWmzeLgN0XqtXGSlXyP7ftT3KF9yhiC8SoiCW+p+C9VbQAXtICdIB2B1oUX5Z8DX zYCmTSLdFq5s+mFQq/t255esEPqd7gGANS0A7iMhdo/rKyt4EshEIDtWrUACMNBB 4SdSxbIlBECP+pRxM/Pu2uIDquWTZzgLRLiwU9qTIxhvkR56+eMoaHxZ7G0n6Iyz /4vGCjF44Lo4n9HTgd3+8ZLFhviXEUZQ5ncDHtZrmbY5q1dKfJk= -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:03 2026 by rpki-client