This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/m_rKth0WblNoPGrjkNfcn6MmMxc.roa File: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (raw, json) Hash identifier: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ= Subject key identifier: 9B:FA:CA:B6:1D:16:6E:53:68:3C:6A:E3:90:D7:DC:9F:A3:26:33:17 Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c Certificate serial: 019B7CEE317D25A04B6D8A11F93371B96518 Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/m_rKth0WblNoPGrjkNfcn6MmMxc.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 2001:678:1084::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:31:7d:25:a0:4b:6d:8a:11:f9:33:71:b9:65:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bfacab61d166e53683c6ae390d7dc9fa3263317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:58:ec:a8:09:cc:da:7a:9c:06:51:41:51: a2:3f:20:4b:ea:d8:ed:97:c1:af:8d:dd:c6:60:25: 96:46:36:35:ae:a0:20:45:7b:2f:5d:ef:c8:92:84: ec:0c:f9:3e:31:0c:0a:66:de:c1:91:1b:68:45:89: 7c:25:93:33:d5:25:bb:1d:59:4b:4d:12:f5:43:91: 97:f2:a4:e4:40:cf:2f:71:fe:a2:a0:6b:0f:54:26: fb:55:9b:1e:c5:c6:ec:c8:81:05:8d:f6:e0:f5:9e: 7a:7c:b9:ac:59:39:ff:04:98:e3:18:ee:4b:50:7f: 18:0d:b6:45:f3:bb:73:cc:7d:9d:19:9a:2a:a2:a7: e0:3f:e2:7c:53:ca:99:c5:82:8c:46:ee:c1:28:20: bb:5f:f5:3a:ae:64:6c:1b:2c:90:96:7f:7f:02:33: 8e:a2:79:08:9f:85:2b:6a:0d:15:2d:5c:76:8e:44: 2a:93:30:7a:9e:dd:9e:78:88:1b:56:0f:dc:9c:82: ff:03:fb:41:87:1a:b5:f8:9d:7b:dd:a2:96:c6:65: 2a:c7:9d:e2:55:3d:65:99:64:9e:55:ab:4e:0c:06: df:b3:53:47:52:75:ef:bc:32:9d:46:cb:bf:97:fb: 43:37:ef:c9:87:66:97:3a:09:f2:75:47:68:b0:25: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FA:CA:B6:1D:16:6E:53:68:3C:6A:E3:90:D7:DC:9F:A3:26:33:17 X509v3 Authority Key Identifier: keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/m_rKth0WblNoPGrjkNfcn6MmMxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1084::/48 Signature Algorithm: sha256WithRSAEncryption 63:16:6a:8a:a9:0e:c4:e7:da:9a:a0:73:23:b9:7c:53:78:41: c5:60:6e:38:53:e6:62:12:25:48:e8:bf:3a:a4:6e:52:65:c5: ee:0f:a5:46:15:ce:7c:b4:a0:85:54:96:bc:35:7d:25:2d:27: 15:1f:5c:cc:46:89:74:61:13:8e:ca:a9:bf:04:27:25:ba:97: fb:86:7a:ab:8c:12:db:fa:40:ba:c2:0e:21:e7:ad:13:f3:86: da:b6:b6:a6:a7:13:67:6f:2d:cc:87:be:b2:be:fd:e6:72:e1: 0b:5d:3b:84:6b:db:90:3a:f3:3d:24:ea:6d:7d:7a:c5:ff:ec: ca:25:fa:cb:f9:dc:ab:99:94:af:da:52:5f:71:40:56:dc:3e: 85:b7:98:40:bd:29:4c:98:e6:82:6b:44:7a:fc:3a:6e:e3:db: ec:92:8e:88:c0:7b:c0:61:44:d5:42:ba:5c:15:79:a5:d9:ba: 61:25:a8:a1:96:38:94:f8:71:8b:ba:20:4d:3d:7b:01:e0:11: b0:85:71:a5:f0:64:34:63:55:45:cc:17:d1:cc:a5:36:cf:3c: 13:7a:ff:a2:74:f2:b6:36:f6:de:57:5c:7d:fe:35:58:9b:24: 7c:8b:4a:a8:18:7e:25:08:74:f1:fa:51:70:7e:38:c2:33:cb: 9f:d6:02:6d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87jF9JaBLbYoR+TNxuWUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDA5NjUzODRkYzQ0NDg3YTgzMTcxYTZkNWQwNWE5NGE2 YWQ2N2MwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmZhY2FiNjFkMTY2ZTUzNjgzYzZhZTM5MGQ3ZGM5ZmEzMjYzMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ9Y7KgJzNp6nAZRQVGiPyBL6tjt l8Gvjd3GYCWWRjY1rqAgRXsvXe/IkoTsDPk+MQwKZt7BkRtoRYl8JZMz1SW7HVlL TRL1Q5GX8qTkQM8vcf6ioGsPVCb7VZsexcbsyIEFjfbg9Z56fLmsWTn/BJjjGO5L UH8YDbZF87tzzH2dGZoqoqfgP+J8U8qZxYKMRu7BKCC7X/U6rmRsGyyQln9/AjOO onkIn4Urag0VLVx2jkQqkzB6nt2eeIgbVg/cnIL/A/tBhxq1+J173aKWxmUqx53i VT1lmWSeVatODAbfs1NHUnXvvDKdRsu/l/tDN+/Jh2aXOgnydUdosCVfZwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJv6yrYdFm5TaDxq45DX3J+jJjMXMB8GA1UdIwQY MBaAFEPQllOE3ERIeoMXGm1dBalKatZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYt ODFhNzgzMTlmZDZhLzEvbV9yS3RoMFdibE5vUEdyamtOZmNuNk1tTXhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYtODFhNzgzMTlmZDZh LzEvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBCE MA0GCSqGSIb3DQEBCwUAA4IBAQBjFmqKqQ7E59qaoHMjuXxTeEHFYG44U+ZiEiVI 6L86pG5SZcXuD6VGFc58tKCFVJa8NX0lLScVH1zMRol0YROOyqm/BCclupf7hnqr jBLb+kC6wg4h560T84batrampxNnby3Mh76yvv3mcuELXTuEa9uQOvM9JOptfXrF /+zKJfrL+dyrmZSv2lJfcUBW3D6Ft5hAvSlMmOaCa0R6/Dpu49vsko6IwHvAYUTV QrpcFXml2bphJaihljiU+HGLuiBNPXsB4BGwhXGl8GQ0Y1VFzBfRzKU2zzwTev+i dPK2NvbeV1x9/jVYmyR8i0qoGH4lCHTx+lFwfjjCM8uf1gJt -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:45 2026 by rpki-client