This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa File: RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa (raw, json) Hash identifier: 74TavDCjufR6GUNTwdp6AJnNFnxix31gx+8KWS5C2g8= Subject key identifier: 47:05:3D:CD:6B:61:C9:F4:8E:51:6B:AF:B1:69:6C:56:1A:4C:6E:64 Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd Certificate serial: 019B7C117027C90D6BF0CEF5456B938288B5 Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa Signing time: Fri 02 Jan 2026 00:17:56 +0000 ROA not before: Fri 02 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31451 IP address blocks: 2001:67c:1550::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:70:27:c9:0d:6b:f0:ce:f5:45:6b:93:82:88:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd Validity Not Before: Jan 2 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47053dcd6b61c9f48e516bafb1696c561a4c6e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:e3:97:21:42:e1:4f:3a:4f:e0:56:c3:c6: f6:95:f7:4a:c6:d9:a9:9b:5c:f8:6b:d7:cf:4e:1e: 3d:e9:1e:91:e1:9a:9a:d1:3c:e0:75:06:ed:8a:ab: a6:b2:e3:3c:82:96:9d:e1:71:1a:a9:ef:2c:3c:8a: 34:fb:a3:d0:e7:28:a8:3b:7c:f6:eb:b1:ae:d5:2a: 7e:f4:e2:d0:60:71:a9:e9:33:5c:b5:cf:e2:b7:04: 4c:9c:e6:64:8b:a8:4f:22:a9:c0:89:fb:d0:e1:ad: b0:73:f8:4b:47:f0:bd:72:0d:04:11:b5:a1:3d:79: 93:cf:e1:64:33:a5:86:c6:86:ce:42:6d:10:72:07: 04:e8:ff:ca:ce:d3:de:e2:e9:f6:2f:21:df:01:4c: 6b:76:2e:33:df:63:a1:23:5c:fa:31:a4:da:b6:89: 93:2c:be:7d:66:94:f9:5b:39:b5:4b:1d:a6:33:65: 57:92:51:66:0e:f3:53:de:f1:a4:4c:71:c3:89:24: cb:7c:af:f1:42:ab:ce:e6:ac:21:75:a3:c5:b6:3f: ca:8c:1f:d8:3d:8f:e0:4c:45:9a:71:b5:b1:a8:0b: 72:14:49:a4:fb:9e:91:d3:d2:19:13:39:3b:2c:a1: 86:69:3e:5d:36:61:90:0d:ae:25:18:ff:0e:e8:bf: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:05:3D:CD:6B:61:C9:F4:8E:51:6B:AF:B1:69:6C:56:1A:4C:6E:64 X509v3 Authority Key Identifier: keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1550::/48 Signature Algorithm: sha256WithRSAEncryption 72:46:a7:2f:97:54:4b:28:39:f2:ee:34:8c:fb:cc:9c:7f:62: b8:fd:76:26:6d:3b:b3:2e:2a:7c:8f:b9:12:cc:bb:42:86:c4: bf:17:8a:95:d6:9b:5f:4f:20:98:f4:d8:ff:64:0f:7f:fc:43: 0f:4c:58:cb:44:9e:6b:78:14:e6:38:78:6b:2d:1c:c9:26:86: eb:74:2b:02:ce:f0:31:5d:c7:37:e0:f2:6c:0e:88:71:cc:f8: a5:7c:bf:4d:c3:87:9c:a2:13:b8:6d:19:ef:71:e5:d2:cc:af: c0:64:a1:3b:a7:6b:96:48:90:b1:77:65:03:6b:bd:3c:24:29: 7f:12:74:3e:94:98:b6:69:3d:22:22:a1:fe:1a:f1:bb:22:33: e9:0a:08:24:02:a0:82:7f:c1:11:72:74:ec:fc:84:4b:2f:a1: 36:31:d2:46:50:77:94:e4:c5:c5:ff:af:17:ef:b8:05:42:a1: 39:93:e9:ba:9b:d3:46:2e:6a:93:a1:5b:2f:60:cc:d3:35:97: 8e:50:02:15:08:df:cb:82:d0:50:ac:4c:e9:3c:c8:52:10:1f: 66:fd:86:4e:02:11:7c:0c:ed:08:4b:64:05:43:e4:0e:f1:45: 41:94:33:7f:26:21:57:42:29:f5:be:e6:b2:30:77:58:38:86: 4d:13:6f:5c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EXAnyQ1r8M71RWuTgoi1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMzFhMDU0ZmM5ZmI0YjE0N2U4YTk4YmRhN2U3MWM4MWFm MGJjZmQwHhcNMjYwMTAyMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzA1M2RjZDZiNjFjOWY0OGU1MTZiYWZiMTY5NmM1NjFhNGM2ZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgPjlyFC4U86T+BWw8b2lfdKxtmp m1z4a9fPTh496R6R4Zqa0TzgdQbtiqumsuM8gpad4XEaqe8sPIo0+6PQ5yioO3z2 67Gu1Sp+9OLQYHGp6TNctc/itwRMnOZki6hPIqnAifvQ4a2wc/hLR/C9cg0EEbWh PXmTz+FkM6WGxobOQm0QcgcE6P/KztPe4un2LyHfAUxrdi4z32OhI1z6MaTatomT LL59ZpT5Wzm1Sx2mM2VXklFmDvNT3vGkTHHDiSTLfK/xQqvO5qwhdaPFtj/KjB/Y PY/gTEWacbWxqAtyFEmk+56R09IZEzk7LKGGaT5dNmGQDa4lGP8O6L+ZYwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEcFPc1rYcn0jlFrr7FpbFYaTG5kMB8GA1UdIwQY MBaAFO8xoFT8n7SxR+ipi9p+ccga8Lz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3pHZ1ZQeWZ0TEZINkttTDJuNXh5QnJ3dlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80YTkyMjQtMzdkNC00YjIzLWE0Mjct MjcxMzYyZTNmMjVhLzEvUndVOXpXdGh5ZlNPVVd1dnNXbHNWaHBNYm1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80YTkyMjQtMzdkNC00YjIzLWE0MjctMjcxMzYyZTNmMjVh LzEvN3pHZ1ZQeWZ0TEZINkttTDJuNXh5QnJ3dlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBVQ MA0GCSqGSIb3DQEBCwUAA4IBAQByRqcvl1RLKDny7jSM+8ycf2K4/XYmbTuzLip8 j7kSzLtChsS/F4qV1ptfTyCY9Nj/ZA9//EMPTFjLRJ5reBTmOHhrLRzJJobrdCsC zvAxXcc34PJsDohxzPilfL9Nw4ecohO4bRnvceXSzK/AZKE7p2uWSJCxd2UDa708 JCl/EnQ+lJi2aT0iIqH+GvG7IjPpCggkAqCCf8ERcnTs/IRLL6E2MdJGUHeU5MXF /68X77gFQqE5k+m6m9NGLmqToVsvYMzTNZeOUAIVCN/LgtBQrEzpPMhSEB9m/YZO AhF8DO0IS2QFQ+QO8UVBlDN/JiFXQin1vuayMHdYOIZNE29c -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:29 2026 by rpki-client