This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa File: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (raw, json) Hash identifier: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg= Subject key identifier: 35:3B:FB:2D:00:12:FC:BC:16:15:7A:5F:4F:8A:69:D6:94:73:A5:4A Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA712DA9470CDF6AA8239416EF49EEA Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24940 IP address blocks: 2a0d:2146:8180::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:12:da:94:70:cd:f6:aa:82:39:41:6e:f4:9e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=353bfb2d0012fcbc16157a5f4f8a69d69473a54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:60:1c:14:90:bb:55:09:c2:4a:6c:02:22: 53:33:42:28:80:a0:84:4f:3e:3b:37:f8:93:df:69: 5e:82:82:8f:75:50:f3:93:ae:03:47:a9:8b:91:f1: 7a:0a:14:d0:6d:00:df:02:f7:e5:0c:fa:6b:1c:30: 62:c6:05:4d:72:47:0d:b3:35:1b:b9:1b:a1:18:64: 2e:25:f3:13:ce:19:c9:7b:65:c5:6a:1e:4a:6e:e7: ef:b7:6b:d3:8b:a4:72:34:90:7d:4d:13:32:99:41: 24:fc:94:c5:e5:91:ed:86:95:16:76:72:9d:f7:c4: db:8b:10:57:a4:0e:de:25:c6:d0:f7:d4:7e:f3:e0: 0e:a7:e5:b2:fb:25:09:b7:15:5e:ba:07:03:1e:0c: f6:b6:7d:00:7e:29:7f:37:85:ff:1b:fc:fb:52:ea: 4a:95:1b:e6:34:88:e9:92:6e:f9:0b:2a:7d:70:df: f5:ef:9f:89:dc:16:f5:4d:27:96:83:d4:fb:8d:aa: 96:ba:95:c8:a6:63:60:5f:e4:e5:dc:8f:d6:cd:ca: a8:0c:9a:f6:6d:46:68:05:13:fd:c0:ad:bb:68:d3: b9:48:46:79:85:77:09:1f:55:1d:1c:ea:44:af:a9: b6:4f:5e:e0:81:25:d7:fe:31:f4:46:71:c3:c3:cc: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3B:FB:2D:00:12:FC:BC:16:15:7A:5F:4F:8A:69:D6:94:73:A5:4A X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2146:8180::/44 Signature Algorithm: sha256WithRSAEncryption 14:ea:d5:84:e3:58:44:d5:88:45:b8:f9:89:2f:a6:e4:c9:a1: 4b:79:ab:5f:8c:a9:74:3c:af:2c:e4:85:a7:ce:00:f9:54:61: 30:35:b5:c4:60:4c:b6:3f:9d:22:39:b0:00:89:a4:4e:32:85: d4:ae:3e:69:71:9d:d7:37:16:88:38:95:83:96:d8:9f:d5:69: 0d:be:a7:71:91:cb:2b:e8:9f:9f:b5:ce:fe:e1:2e:eb:42:15: 57:b7:10:ae:2d:4f:55:eb:a7:95:6c:3b:ed:da:a5:38:b6:39: 78:d1:fb:97:d8:5b:2f:c5:40:e3:ba:2b:54:f7:32:45:69:5e: 8e:27:99:f3:93:17:0c:27:4e:ce:96:0f:e7:66:e6:ef:93:d6: 98:e6:d3:db:19:b4:5b:c4:75:59:93:bd:c3:4f:21:1e:4f:6e: a2:43:5e:6e:fd:9b:c0:9d:16:00:59:87:74:c0:05:98:57:81: 67:dd:96:86:72:49:8b:f7:f1:92:01:69:20:e7:b7:a8:a7:67: 86:ee:56:d3:b9:80:a8:3e:8b:dd:52:57:2b:f3:c8:3f:00:e6: 10:fb:b0:15:68:8c:34:11:92:66:d2:bf:44:51:f5:d3:f9:59: 7d:df:f1:cc:9b:77:d4:54:30:6c:2a:d9:33:17:c5:9c:f4:6e: a2:38:c1:6b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxLalHDN9qqCOUFu9J7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTNiZmIyZDAwMTJmY2JjMTYxNTdhNWY0ZjhhNjlkNjk0NzNhNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNZgHBSQu1UJwkpsAiJTM0IogKCE Tz47N/iT32legoKPdVDzk64DR6mLkfF6ChTQbQDfAvflDPprHDBixgVNckcNszUb uRuhGGQuJfMTzhnJe2XFah5Kbufvt2vTi6RyNJB9TRMymUEk/JTF5ZHthpUWdnKd 98TbixBXpA7eJcbQ99R+8+AOp+Wy+yUJtxVeugcDHgz2tn0Afil/N4X/G/z7UupK lRvmNIjpkm75Cyp9cN/175+J3Bb1TSeWg9T7jaqWupXIpmNgX+Tl3I/WzcqoDJr2 bUZoBRP9wK27aNO5SEZ5hXcJH1UdHOpEr6m2T17ggSXX/jH0RnHDw8wMdQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDU7+y0AEvy8FhV6X0+KadaUc6VKMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvTlR2N0xRQVNfTHdXRlhwZlQ0cHAxcFJ6cFVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRoGA MA0GCSqGSIb3DQEBCwUAA4IBAQAU6tWE41hE1YhFuPmJL6bkyaFLeatfjKl0PK8s 5IWnzgD5VGEwNbXEYEy2P50iObAAiaROMoXUrj5pcZ3XNxaIOJWDltif1WkNvqdx kcsr6J+ftc7+4S7rQhVXtxCuLU9V66eVbDvt2qU4tjl40fuX2FsvxUDjuitU9zJF aV6OJ5nzkxcMJ07Olg/nZubvk9aY5tPbGbRbxHVZk73DTyEeT26iQ15u/ZvAnRYA WYd0wAWYV4Fn3ZaGckmL9/GSAWkg57eop2eG7lbTuYCoPovdUlcr88g/AOYQ+7AV aIw0EZJm0r9EUfXT+Vl93/HMm3fUVDBsKtkzF8Wc9G6iOMFr -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:28 2026 by rpki-client