This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/0sWjJb905jqzQqAPMLxDrrjWBMk.roa File: 0sWjJb905jqzQqAPMLxDrrjWBMk.roa (raw, json) Hash identifier: Zma9KLmjg5EV1eKmRL4soE5jPO+CVQlU/IWoQZY27PQ= Subject key identifier: D2:C5:A3:25:BF:74:E6:3A:B3:42:A0:0F:30:BC:43:AE:B8:D6:04:C9 Certificate issuer: /CN=40f75d327761b90c0899638f430eb614c87c3106 Certificate serial: 019B79ECB44329576B4C3F66BCC19A5D2C18 Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/0sWjJb905jqzQqAPMLxDrrjWBMk.roa Signing time: Thu 01 Jan 2026 14:18:34 +0000 ROA not before: Thu 01 Jan 2026 14:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2001:678:2cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b4:43:29:57:6b:4c:3f:66:bc:c1:9a:5d:2c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2c5a325bf74e63ab342a00f30bc43aeb8d604c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:23:98:78:6b:b4:7a:9b:0b:df:a8:f4:72: 23:63:9c:8d:30:49:33:89:73:99:c3:1d:d4:8c:55: a1:88:fb:5e:ba:03:22:ff:1a:d5:25:7d:22:08:d8: 95:e5:f5:6c:59:42:84:1c:71:c8:16:7b:64:67:11: cc:8d:e8:33:e5:fa:83:a4:4e:bc:15:0c:dd:6f:19: 9a:93:f5:05:d8:e4:e3:c7:10:d0:a3:16:33:2e:c9: 36:ca:5a:8c:bb:d5:1e:e5:5a:c5:2d:cd:3b:ff:d9: f2:dc:69:3a:4a:07:13:c3:ac:d9:a6:84:31:3c:f8: 53:4b:9d:4b:e0:92:b2:f4:93:e0:e3:71:72:fd:20: 47:d3:bc:58:a4:8d:98:af:cd:7d:f1:c4:e9:da:cd: 67:fc:2b:7d:4f:7e:68:e0:5d:3f:c0:32:83:63:3d: eb:91:38:0a:0e:bf:d9:2a:58:3d:ff:81:b9:a5:d1: 2f:67:b6:1b:08:30:01:33:14:f1:0d:cc:f3:e8:de: c6:1a:0b:4a:2f:ba:06:d3:7b:91:a4:cc:38:42:ab: 6e:b3:dd:73:b3:93:7b:5f:60:40:40:79:cd:d0:d6: 73:53:91:ef:f6:e2:62:55:b1:fd:a2:77:17:de:75: 31:41:d4:a0:7d:ba:86:8c:57:53:d7:9c:04:29:54: f8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C5:A3:25:BF:74:E6:3A:B3:42:A0:0F:30:BC:43:AE:B8:D6:04:C9 X509v3 Authority Key Identifier: keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/0sWjJb905jqzQqAPMLxDrrjWBMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:2cc::/48 Signature Algorithm: sha256WithRSAEncryption 5e:52:ff:ba:eb:a6:89:34:c4:9d:d7:f9:0f:36:2f:7f:fe:15: 34:f1:fe:2e:18:f4:7e:fe:32:93:cb:d6:9d:2a:2f:c5:06:b4: 59:22:61:36:20:e2:67:db:91:f9:da:83:9a:8b:4c:04:7e:18: 9b:9e:3e:c0:8d:dc:b5:72:5c:8b:0f:39:40:18:96:96:5d:96: 57:9d:b5:7c:ac:16:be:db:9e:a6:91:55:90:62:23:bf:f9:1e: 27:35:13:8a:a8:61:f0:4d:fb:90:81:97:7b:64:46:c7:40:fe: 2d:d4:b4:35:91:e9:f7:a6:39:4e:5b:fb:d8:6a:ec:90:71:62: ff:f5:84:ca:d7:8a:af:f3:6d:d4:a8:a6:e4:83:55:70:f7:87: 83:61:07:33:03:88:a5:66:a7:fd:b5:72:04:36:16:28:42:73: 5f:ab:8d:99:52:ab:22:c8:08:34:46:cd:1b:2e:a7:b8:af:9b: bc:00:ed:05:69:7b:5a:86:e0:ad:a9:fb:4b:63:79:85:50:ae: 9c:39:37:fa:01:5c:f5:be:3f:55:cf:f9:76:7b:a5:e8:1e:14: ea:12:64:41:28:00:46:ad:3a:44:54:46:61:11:5e:95:3c:3f: f8:c2:c1:7a:c9:c9:a2:d2:21:e9:01:b4:d6:bd:d6:9f:d3:51: a0:43:27:c0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57LRDKVdrTD9mvMGaXSwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZjc1ZDMyNzc2MWI5MGMwODk5NjM4ZjQzMGViNjE0Yzg3 YzMxMDYwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmM1YTMyNWJmNzRlNjNhYjM0MmEwMGYzMGJjNDNhZWI4ZDYwNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAMjmHhrtHqbC9+o9HIjY5yNMEkz iXOZwx3UjFWhiPteugMi/xrVJX0iCNiV5fVsWUKEHHHIFntkZxHMjegz5fqDpE68 FQzdbxmak/UF2OTjxxDQoxYzLsk2ylqMu9Ue5VrFLc07/9ny3Gk6SgcTw6zZpoQx PPhTS51L4JKy9JPg43Fy/SBH07xYpI2Yr8198cTp2s1n/Ct9T35o4F0/wDKDYz3r kTgKDr/ZKlg9/4G5pdEvZ7YbCDABMxTxDczz6N7GGgtKL7oG03uRpMw4Qqtus91z s5N7X2BAQHnN0NZzU5Hv9uJiVbH9oncX3nUxQdSgfbqGjFdT15wEKVT4xwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNLFoyW/dOY6s0KgDzC8Q6641gTJMB8GA1UdIwQY MBaAFED3XTJ3YbkMCJljj0MOthTIfDEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAt MjlhYzQ1ZTJlY2ZmLzEvMHNXakpiOTA1anF6UXFBUE1MeERycmpXQk1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAtMjlhYzQ1ZTJlY2Zm LzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeALM MA0GCSqGSIb3DQEBCwUAA4IBAQBeUv+666aJNMSd1/kPNi9//hU08f4uGPR+/jKT y9adKi/FBrRZImE2IOJn25H52oOai0wEfhibnj7Ajdy1clyLDzlAGJaWXZZXnbV8 rBa+256mkVWQYiO/+R4nNROKqGHwTfuQgZd7ZEbHQP4t1LQ1ken3pjlOW/vYauyQ cWL/9YTK14qv823UqKbkg1Vw94eDYQczA4ilZqf9tXIENhYoQnNfq42ZUqsiyAg0 Rs0bLqe4r5u8AO0FaXtahuCtqftLY3mFUK6cOTf6AVz1vj9Vz/l2e6XoHhTqEmRB KABGrTpEVEZhEV6VPD/4wsF6ycmi0iHpAbTWvdaf01GgQyfA -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:17 2026 by rpki-client