This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/RNcEVKn_YGokJaou-FFvGOIS8ag.roa File: RNcEVKn_YGokJaou-FFvGOIS8ag.roa (raw, json) Hash identifier: +QqLk1UMMwGnBKT5dxNl032oE64z8hg1X5YrO9LqWdo= Subject key identifier: 44:D7:04:54:A9:FF:60:6A:24:25:AA:2E:F8:51:6F:18:E2:12:F1:A8 Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f Certificate serial: 019B7AC83C5BFF992BF8A43651A235080CEB Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/RNcEVKn_YGokJaou-FFvGOIS8ag.roa Signing time: Thu 01 Jan 2026 18:18:21 +0000 ROA not before: Thu 01 Jan 2026 18:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a0a:144::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 06:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3c:5b:ff:99:2b:f8:a4:36:51:a2:35:08:0c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f Validity Not Before: Jan 1 18:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44d70454a9ff606a2425aa2ef8516f18e212f1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:18:92:bf:50:27:36:8f:68:a4:84:9f:03: 6f:f8:04:f1:8d:3a:84:ac:b2:29:f2:7e:18:0a:de: 34:39:4c:a2:6f:ea:ae:8c:fe:7e:d3:d7:8c:d2:39: a0:8a:6e:a0:e1:f9:e1:57:8c:df:9b:54:6e:b3:6b: ef:5a:c9:8c:32:c7:39:d6:2b:09:69:8a:70:30:96: f0:c0:c0:b7:d2:90:00:c1:4a:07:d1:f1:24:b5:0c: 1c:ec:5c:f3:7d:23:13:fc:75:87:9c:f8:c9:14:fe: 6c:f8:93:02:cb:a9:75:46:9a:9b:69:74:c3:af:3e: 99:d4:8f:fc:92:b9:2c:7c:02:3f:23:df:ee:2a:11: d0:1b:25:aa:ee:53:e6:c7:b3:f0:ac:fc:27:32:40: f9:2c:42:01:2f:1c:19:23:fd:36:10:bd:5a:86:3e: cf:ca:ff:0e:b4:41:c6:d9:6f:00:37:fd:9e:4e:1b: ec:06:f8:71:20:49:ba:a1:3e:d0:db:66:0e:d7:52: aa:00:c1:5f:2d:68:e3:5b:40:94:33:f5:9f:19:2d: f0:d5:21:cb:61:74:61:e7:aa:67:2d:f6:02:0a:5d: 56:79:ce:b0:8d:9f:9c:47:8e:54:8e:9f:a3:7d:5d: 1e:47:55:59:25:d7:84:cd:bf:ce:6c:db:21:f8:8d: 3f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D7:04:54:A9:FF:60:6A:24:25:AA:2E:F8:51:6F:18:E2:12:F1:A8 X509v3 Authority Key Identifier: keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/RNcEVKn_YGokJaou-FFvGOIS8ag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:144::/35 Signature Algorithm: sha256WithRSAEncryption 73:50:f4:15:7e:45:9b:f3:40:e6:21:ed:2e:23:42:e8:99:ac: 64:fa:82:95:82:ba:e3:3a:46:13:ea:76:be:12:7c:45:69:76: 6b:d1:47:84:4b:3a:13:15:72:93:09:3a:3c:dd:47:03:40:68: e9:de:1d:de:fc:9e:7c:82:d9:4f:06:85:0b:b5:4a:c4:30:61: d4:9c:81:59:0c:b8:52:a5:a8:95:d3:cc:a8:a2:4e:27:0b:fe: 51:ee:63:20:29:35:f5:84:f5:de:a7:dc:df:a2:d9:38:12:49: c7:77:a7:c1:69:17:93:87:3b:24:4b:14:5e:83:c0:ac:33:34: 83:64:5d:6e:5a:6f:3c:27:6e:07:b6:05:62:9b:9b:81:9c:a0: ae:21:e4:19:c7:fa:61:b6:ed:e2:99:ad:41:ba:e6:30:9e:90: 43:43:2b:65:0d:0b:5a:ad:b0:95:c8:7f:5e:a8:87:b3:28:9d: ee:9b:b4:16:de:de:09:5b:e1:0a:53:25:5a:f7:97:1e:ed:0d: c1:f7:0e:c8:45:b3:f5:e3:e0:f9:1a:39:ae:ba:c6:f9:c3:4a: 9a:b1:04:71:f3:d5:ae:e1:2e:73:04:9d:28:8f:83:82:94:a2: ce:84:6c:6f:55:aa:2e:54:f7:5b:64:b4:72:2a:cd:87:7a:a8: 4f:7b:88:b9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6yDxb/5kr+KQ2UaI1CAzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmM2JmNTExNzc0YjZlMWQ3MDZiYjI3MjdiM2QzMTI1Nzc1 YTkxMmYwHhcNMjYwMTAxMTgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGQ3MDQ1NGE5ZmY2MDZhMjQyNWFhMmVmODUxNmYxOGUyMTJmMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqoYkr9QJzaPaKSEnwNv+ATxjTqE rLIp8n4YCt40OUyib+qujP5+09eM0jmgim6g4fnhV4zfm1Rus2vvWsmMMsc51isJ aYpwMJbwwMC30pAAwUoH0fEktQwc7FzzfSMT/HWHnPjJFP5s+JMCy6l1RpqbaXTD rz6Z1I/8krksfAI/I9/uKhHQGyWq7lPmx7PwrPwnMkD5LEIBLxwZI/02EL1ahj7P yv8OtEHG2W8AN/2eThvsBvhxIEm6oT7Q22YO11KqAMFfLWjjW0CUM/WfGS3w1SHL YXRh56pnLfYCCl1Wec6wjZ+cR45Ujp+jfV0eR1VZJdeEzb/ObNsh+I0/0QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFETXBFSp/2BqJCWqLvhRbxjiEvGoMB8GA1UdIwQY MBaAFD879RF3S24dcGuycns9MSV3WpEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWIt YTBkNmRiZmFjNmViLzEvUk5jRVZLbl9ZR29rSmFvdS1GRnZHT0lTOGFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWItYTBkNmRiZmFjNmVi LzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKgoBRAAw DQYJKoZIhvcNAQELBQADggEBAHNQ9BV+RZvzQOYh7S4jQuiZrGT6gpWCuuM6RhPq dr4SfEVpdmvRR4RLOhMVcpMJOjzdRwNAaOneHd78nnyC2U8GhQu1SsQwYdScgVkM uFKlqJXTzKiiTicL/lHuYyApNfWE9d6n3N+i2TgSScd3p8FpF5OHOyRLFF6DwKwz NINkXW5abzwnbge2BWKbm4GcoK4h5BnH+mG27eKZrUG65jCekENDK2UNC1qtsJXI f16oh7Mone6btBbe3glb4QpTJVr3lx7tDcH3DshFs/Xj4PkaOa66xvnDSpqxBHHz 1a7hLnMEnSiPg4KUos6EbG9Vqi5U91tktHIqzYd6qE97iLk= -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:36 2026 by rpki-client