This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/49CPBIX4EaMxdJyd3xYYFltrGoU.roa File: 49CPBIX4EaMxdJyd3xYYFltrGoU.roa (raw, json) Hash identifier: Ex0IMnX8TLJnPKPjJx+ZpKeCCZJl+8I3fLOLd7VY8do= Subject key identifier: E3:D0:8F:04:85:F8:11:A3:31:74:9C:9D:DF:16:18:16:5B:6B:1A:85 Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc Certificate serial: 019B7FF25B6DC9361872C215FFD695D7B6E0 Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/49CPBIX4EaMxdJyd3xYYFltrGoU.roa Signing time: Fri 02 Jan 2026 18:22:28 +0000 ROA not before: Fri 02 Jan 2026 18:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 2a02:11f8:170::/48 maxlen: 48 2a02:11f8:171::/48 maxlen: 48 2a02:11f8:172::/48 maxlen: 48 2a02:11f8:173::/48 maxlen: 48 2a02:11f8:174::/48 maxlen: 48 2a02:11f8:175::/48 maxlen: 48 2a02:11f8:176::/48 maxlen: 48 2a02:11f8:177::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:5b:6d:c9:36:18:72:c2:15:ff:d6:95:d7:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc Validity Not Before: Jan 2 18:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3d08f0485f811a331749c9ddf1618165b6b1a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:81:38:4a:7e:26:ef:48:2f:f3:a4:25:33: 39:18:0b:4c:75:d8:c1:90:dd:fa:13:db:91:47:2a: 90:45:19:22:35:b6:4b:71:36:28:05:3c:5b:3a:c3: a7:09:16:a8:78:03:ac:c9:8e:93:ee:79:ec:21:13: 30:a1:22:55:94:9c:bf:77:12:c7:84:28:6c:e0:74: 1b:d6:e2:8e:18:fb:62:d8:20:b3:4e:c4:a9:2f:f6: 08:32:35:9c:44:51:26:bb:1d:36:a8:e5:15:85:1a: 85:e7:b8:57:42:ba:f9:8b:96:a2:28:91:b2:e1:20: 08:35:bf:dc:0d:23:8a:36:c3:14:8a:b2:7d:0e:c4: 61:eb:23:38:42:31:37:4e:ef:76:5c:ba:3e:c5:8d: 73:e4:5e:6f:cf:ff:ed:5e:04:29:a3:23:0a:01:16: da:f4:38:29:26:cb:23:90:b0:b0:e2:0e:72:16:63: df:db:25:da:51:f3:d1:eb:7f:4b:ce:23:d7:25:dc: a3:80:9d:0b:ed:cc:d7:a1:55:5d:a2:a1:6d:db:3f: d2:d6:fe:48:d6:71:6c:29:bb:d8:8f:3f:cb:b7:97: 0c:25:b7:5d:68:6b:fc:2b:98:af:e9:d5:6f:95:de: 95:49:de:7b:0c:cd:02:64:47:76:eb:14:10:52:39: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D0:8F:04:85:F8:11:A3:31:74:9C:9D:DF:16:18:16:5B:6B:1A:85 X509v3 Authority Key Identifier: keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/49CPBIX4EaMxdJyd3xYYFltrGoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:11f8:170::/45 Signature Algorithm: sha256WithRSAEncryption 70:bb:9c:5c:d9:25:3a:7f:b9:7e:43:0f:e1:ae:ba:b5:a8:b2: b0:c3:2f:c7:09:07:39:7c:be:dc:26:a8:cb:a6:35:4f:f4:71: 8d:30:3d:46:be:8d:87:20:67:e3:e5:5a:53:e6:e8:68:cf:d3: d2:70:12:ad:d2:fd:7e:18:18:81:01:73:cc:f4:d6:48:1c:ea: 3c:b3:92:68:71:30:91:d2:f5:98:6c:bc:4b:c9:ec:65:74:21: a2:e8:fe:68:2a:d9:c1:e4:12:66:53:1a:09:e9:59:33:98:14: 3c:2c:ae:28:8d:db:fb:3c:79:11:fd:c9:57:4d:36:33:a8:9f: f7:cd:b9:58:60:58:0e:60:f5:9d:28:22:21:ee:c5:51:07:4e: b7:10:ad:69:ca:f0:d7:2a:fd:17:9e:75:cf:29:a4:69:a0:20: 1a:f0:28:43:b7:e6:85:92:4b:51:29:37:9c:9b:fc:ec:19:85: 55:81:02:59:5a:91:a5:51:7d:f0:61:fb:39:36:22:10:8e:ab: 1c:9d:43:47:39:66:35:bb:a7:6b:36:6c:07:e0:a5:46:85:09: 8c:4b:f6:a6:4a:dd:0e:35:bf:99:47:ef:d1:a1:bf:2a:08:8b: 25:a2:71:a0:9a:28:a8:9d:ef:67:18:db:1e:ef:fd:7b:12:4d: ab:2e:a0:78 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8lttyTYYcsIV/9aV17bgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl OTc3YmMwHhcNMjYwMTAyMTgyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2QwOGYwNDg1ZjgxMWEzMzE3NDljOWRkZjE2MTgxNjViNmIxYTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnWBOEp+Ju9IL/OkJTM5GAtMddjB kN36E9uRRyqQRRkiNbZLcTYoBTxbOsOnCRaoeAOsyY6T7nnsIRMwoSJVlJy/dxLH hChs4HQb1uKOGPti2CCzTsSpL/YIMjWcRFEmux02qOUVhRqF57hXQrr5i5aiKJGy 4SAINb/cDSOKNsMUirJ9DsRh6yM4QjE3Tu92XLo+xY1z5F5vz//tXgQpoyMKARba 9DgpJssjkLCw4g5yFmPf2yXaUfPR639LziPXJdyjgJ0L7czXoVVdoqFt2z/S1v5I 1nFsKbvYjz/Lt5cMJbddaGv8K5iv6dVvld6VSd57DM0CZEd26xQQUjl4KQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOPQjwSF+BGjMXScnd8WGBZbaxqFMB8GA1UdIwQY MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt YTk2YzYyNjZhYmRiLzEvNDlDUEJJWDRFYU14ZEp5ZDN4WVlGbHRyR29VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKgIR+AFw MA0GCSqGSIb3DQEBCwUAA4IBAQBwu5xc2SU6f7l+Qw/hrrq1qLKwwy/HCQc5fL7c JqjLpjVP9HGNMD1Gvo2HIGfj5VpT5uhoz9PScBKt0v1+GBiBAXPM9NZIHOo8s5Jo cTCR0vWYbLxLyexldCGi6P5oKtnB5BJmUxoJ6VkzmBQ8LK4ojdv7PHkR/clXTTYz qJ/3zblYYFgOYPWdKCIh7sVRB063EK1pyvDXKv0XnnXPKaRpoCAa8ChDt+aFkktR KTecm/zsGYVVgQJZWpGlUX3wYfs5NiIQjqscnUNHOWY1u6drNmwH4KVGhQmMS/am St0ONb+ZR+/Rob8qCIslonGgmiione9nGNse7/17Ek2rLqB4 -----END CERTIFICATE-----Generated at Wed Jan 21 15:04:52 2026 by rpki-client