This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/CwetFI0nN6--2kCpFkHMhH-CJlc.roa File: CwetFI0nN6--2kCpFkHMhH-CJlc.roa (raw, json) Hash identifier: rXAQ9kaG8ynqJWIu4AhLpt65KJtJkWOBPv1XZTD1hY8= Subject key identifier: 0B:07:AD:14:8D:27:37:AF:BE:DA:40:A9:16:41:CC:84:7F:82:26:57 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EBF402B7B3FDB9F897317C21B4B8D Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/CwetFI0nN6--2kCpFkHMhH-CJlc.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214899 IP address blocks: 2a0e:aa07:e1e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bf:40:2b:7b:3f:db:9f:89:73:17:c2:1b:4b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b07ad148d2737afbeda40a91641cc847f822657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:58:46:6d:f2:12:3a:d8:0f:ac:b3:ac:e5:f0: 54:12:c2:de:f5:b0:73:e9:df:ef:aa:15:96:04:7c: bd:ca:e2:d6:28:3f:50:fc:77:d6:e1:96:80:a5:15: c8:b9:2b:14:ff:7c:45:ed:56:9a:e8:57:da:8f:cf: a5:5e:17:7e:a8:b5:60:c4:26:4e:4e:31:f9:04:0b: 41:89:31:cf:0b:48:b2:4c:84:02:0f:d6:7b:4e:35: 86:56:f5:28:61:d7:d5:a3:7e:8b:08:ed:b1:4c:98: e8:34:50:0b:28:ec:9e:15:04:57:1b:45:33:69:57: 25:22:32:02:4b:8c:df:08:cd:81:21:d1:43:8c:90: b9:1b:e8:97:80:e7:75:c1:9b:7c:96:db:93:92:81: 37:0f:e2:db:c5:51:0a:cf:18:a1:90:5f:31:d1:f2: 3c:f0:08:3c:41:ae:48:a1:da:80:66:63:cc:ba:84: 3f:0e:27:1f:39:f2:dc:35:91:c6:aa:6a:a9:04:ac: df:19:2c:97:18:57:c5:1c:43:ee:3e:20:8c:07:05: 36:ae:3a:f1:65:73:9c:63:1d:b1:4f:7e:3e:ad:4f: d5:fb:d8:ca:d3:ba:c4:6a:9c:80:b7:d2:97:48:63: 95:1d:64:cc:09:f3:de:45:66:34:7a:36:a2:64:d1: 16:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:07:AD:14:8D:27:37:AF:BE:DA:40:A9:16:41:CC:84:7F:82:26:57 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/CwetFI0nN6--2kCpFkHMhH-CJlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e1e0::/44 Signature Algorithm: sha256WithRSAEncryption 76:45:c5:f5:a8:6b:71:46:bf:1c:92:6b:13:0b:6a:b2:d5:18: 02:66:27:5b:ec:c1:a5:fd:b6:e2:2f:c1:b4:2b:0c:b8:4f:31: 35:b7:95:ab:bc:6f:f5:c3:2d:8b:e7:7d:d0:1a:b4:27:70:8e: ce:03:b6:35:cc:f2:5f:18:c6:49:2e:5f:9f:68:87:3e:07:98: 62:a1:a5:d5:8d:d0:62:3b:43:e5:d3:5c:0d:51:22:53:b0:9b: 79:a7:72:d0:22:dc:9e:77:2b:16:ac:4f:ed:b3:6d:4b:06:80: 46:27:3e:bd:24:32:dd:09:4c:9c:c0:35:b6:be:91:8e:e6:88: 77:bb:21:89:8d:dd:5c:35:cd:2c:9f:8c:14:c9:b8:29:e3:1a: ed:b2:96:c3:6c:7b:c7:66:73:94:4c:ed:3c:69:05:3d:9f:b4: 01:b3:ab:65:74:20:2c:f1:d3:5c:43:03:e9:15:9c:56:ae:8f: 11:a4:ce:3d:ec:30:27:b0:01:94:06:9e:01:cc:ea:18:09:bf: 02:25:aa:08:8a:72:90:08:4f:04:2c:c3:77:81:7f:08:82:df: f7:be:b6:5e:f3:3e:03:4d:ab:e2:43:33:b1:9c:03:6f:6d:64: 2b:76:06:c2:de:ed:43:a4:b0:bd:41:c1:e5:c6:77:82:94:8a: 72:2c:7d:74 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fr9AK3s/25+JcxfCG0uNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjA3YWQxNDhkMjczN2FmYmVkYTQwYTkxNjQxY2M4NDdmODIyNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllhGbfISOtgPrLOs5fBUEsLe9bBz 6d/vqhWWBHy9yuLWKD9Q/HfW4ZaApRXIuSsU/3xF7Vaa6Ffaj8+lXhd+qLVgxCZO TjH5BAtBiTHPC0iyTIQCD9Z7TjWGVvUoYdfVo36LCO2xTJjoNFALKOyeFQRXG0Uz aVclIjICS4zfCM2BIdFDjJC5G+iXgOd1wZt8ltuTkoE3D+LbxVEKzxihkF8x0fI8 8Ag8Qa5IodqAZmPMuoQ/DicfOfLcNZHGqmqpBKzfGSyXGFfFHEPuPiCMBwU2rjrx ZXOcYx2xT34+rU/V+9jK07rEapyAt9KXSGOVHWTMCfPeRWY0ejaiZNEWJwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAsHrRSNJzevvtpAqRZBzIR/giZXMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvQ3dldEZJMG5ONi0tMmtDcEZrSE1oSC1DSmxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Hg MA0GCSqGSIb3DQEBCwUAA4IBAQB2RcX1qGtxRr8ckmsTC2qy1RgCZidb7MGl/bbi L8G0Kwy4TzE1t5WrvG/1wy2L533QGrQncI7OA7Y1zPJfGMZJLl+faIc+B5hioaXV jdBiO0Pl01wNUSJTsJt5p3LQItyedysWrE/ts21LBoBGJz69JDLdCUycwDW2vpGO 5oh3uyGJjd1cNc0sn4wUybgp4xrtspbDbHvHZnOUTO08aQU9n7QBs6tldCAs8dNc QwPpFZxWro8RpM497DAnsAGUBp4BzOoYCb8CJaoIinKQCE8ELMN3gX8Igt/3vrZe 8z4DTaviQzOxnANvbWQrdgbC3u1DpLC9QcHlxneClIpyLH10 -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:04 2026 by rpki-client