This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/RnRCh1Xrb9yuwaris6_5MCtF1KE.roa File: RnRCh1Xrb9yuwaris6_5MCtF1KE.roa (raw, json) Hash identifier: 80wSt9zZDVoZeJMwPuaJTAz1yifqf1crCsttUVlJAD4= Subject key identifier: 46:74:42:87:55:EB:6F:DC:AE:C1:AA:E2:B3:AF:F9:30:2B:45:D4:A1 Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a Certificate serial: 019B77C714BBB3891FB6C4B6AE5948BEC9F9 Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/RnRCh1Xrb9yuwaris6_5MCtF1KE.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13445 IP address blocks: 2a05:4200:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:14:bb:b3:89:1f:b6:c4:b6:ae:59:48:be:c9:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4674428755eb6fdcaec1aae2b3aff9302b45d4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:09:b0:0d:77:2e:d9:af:09:79:21:69:c6: db:b6:d0:04:a3:a5:67:68:a9:99:ee:84:15:ef:0c: cd:5a:a1:f3:9d:c3:b7:0b:3f:ac:d3:29:bc:27:6f: 60:7b:08:f3:33:43:ef:06:bc:df:a2:03:4f:b8:fc: 41:f7:26:59:c5:79:e7:2d:1a:0a:31:79:68:09:2f: d5:82:ce:7a:8f:b5:11:ff:47:2f:13:ca:1f:26:fb: 2e:78:d6:3a:98:80:6d:fc:ce:85:a8:70:dd:4c:9d: 3f:06:4e:c8:56:0d:95:ec:f5:de:27:41:5e:36:a8: 5a:8f:f9:45:ea:9d:ce:5c:a9:6f:60:0b:41:f2:bb: c3:99:11:b6:85:2c:47:e6:02:6b:42:61:ae:5a:7d: 2b:81:14:de:a7:49:a3:11:5f:fc:c4:aa:b0:0c:b1: 00:76:bc:84:28:3d:65:45:5a:ac:5d:17:a5:a5:07: a1:c7:3e:28:5c:ff:fc:89:54:a3:8b:33:a2:8d:91: 12:f4:ac:f2:0c:a1:1f:0b:86:33:00:5c:e7:ae:74: be:ef:b9:a2:68:35:de:28:ed:0b:c9:92:54:25:d3: 8f:a3:d0:4d:5c:9d:2a:b9:d7:37:d6:7e:ec:e8:8f: 9b:12:eb:78:12:99:38:5e:4f:a4:5e:54:d1:26:2c: 33:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:74:42:87:55:EB:6F:DC:AE:C1:AA:E2:B3:AF:F9:30:2B:45:D4:A1 X509v3 Authority Key Identifier: keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/RnRCh1Xrb9yuwaris6_5MCtF1KE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4200:7::/48 Signature Algorithm: sha256WithRSAEncryption 0b:3c:c8:7e:64:3d:12:09:c3:55:f5:f2:95:9b:8b:8e:f9:39: cd:62:03:39:c4:f0:fe:06:67:f6:51:64:14:d5:71:43:2b:6a: 88:4d:a6:04:5e:1e:2b:5f:45:b0:83:16:83:76:de:ee:c3:75: b5:f8:77:c4:f4:7a:48:3d:0e:9e:db:6b:b4:4b:2b:38:7f:fa: 87:ef:94:4c:61:78:19:46:ee:6b:f2:79:b8:5e:53:33:ac:2c: a2:9b:20:09:e8:53:df:b1:37:db:0e:d3:b8:3b:79:df:de:df: 78:29:81:10:43:c7:7e:8f:f3:41:cc:6b:0c:a9:1f:72:c6:a2: 47:72:2d:4d:72:95:c6:50:87:ef:34:f2:d6:6a:f8:86:20:06: 77:05:51:2b:55:74:3d:96:f6:7e:52:df:08:c7:d1:10:96:d1: 08:f9:e5:a6:a5:5c:48:01:38:2f:c2:b3:df:64:85:1d:ce:13: fb:a8:8a:84:a6:d4:08:2d:1c:3b:9d:72:9c:1a:73:9d:ba:0c: 3b:80:20:bc:6e:e9:6d:62:49:a0:73:03:e1:86:04:b8:8f:c3: 68:fa:04:c3:fb:47:16:0f:37:03:cd:6f:81:e2:7f:24:74:9e: 51:b4:e5:26:cd:03:74:53:f5:46:66:cb:60:e2:c6:15:d3:7f: 07:de:1b:fd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xxS7s4kftsS2rllIvsn5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MDU2ZGFiYjlhNDcwMTBjZDFiNGVmMjc0YmMzZDJmNGE1 OWU5M2EwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Njc0NDI4NzU1ZWI2ZmRjYWVjMWFhZTJiM2FmZjkzMDJiNDVkNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU0JsA13LtmvCXkhacbbttAEo6Vn aKmZ7oQV7wzNWqHzncO3Cz+s0ym8J29gewjzM0PvBrzfogNPuPxB9yZZxXnnLRoK MXloCS/Vgs56j7UR/0cvE8ofJvsueNY6mIBt/M6FqHDdTJ0/Bk7IVg2V7PXeJ0Fe Nqhaj/lF6p3OXKlvYAtB8rvDmRG2hSxH5gJrQmGuWn0rgRTep0mjEV/8xKqwDLEA dryEKD1lRVqsXRelpQehxz4oXP/8iVSjizOijZES9KzyDKEfC4YzAFznrnS+77mi aDXeKO0LyZJUJdOPo9BNXJ0qudc31n7s6I+bEut4Epk4Xk+kXlTRJiwzlQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEZ0QodV62/crsGq4rOv+TArRdShMB8GA1UdIwQY MBaAFPUFbau5pHAQzRtO8nS8PS9KWek6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMt ZGUwZWM3NmE0NjcyLzEvUm5SQ2gxWHJiOXl1d2FyaXM2XzVNQ3RGMUtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMtZGUwZWM3NmE0Njcy LzEvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgVCAAAH MA0GCSqGSIb3DQEBCwUAA4IBAQALPMh+ZD0SCcNV9fKVm4uO+TnNYgM5xPD+Bmf2 UWQU1XFDK2qITaYEXh4rX0WwgxaDdt7uw3W1+HfE9HpIPQ6e22u0Sys4f/qH75RM YXgZRu5r8nm4XlMzrCyimyAJ6FPfsTfbDtO4O3nf3t94KYEQQ8d+j/NBzGsMqR9y xqJHci1NcpXGUIfvNPLWaviGIAZ3BVErVXQ9lvZ+Ut8Ix9EQltEI+eWmpVxIATgv wrPfZIUdzhP7qIqEptQILRw7nXKcGnOdugw7gCC8bultYkmgcwPhhgS4j8No+gTD +0cWDzcDzW+B4n8kdJ5RtOUmzQN0U/VGZstg4sYV038H3hv9 -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:52 2026 by rpki-client