This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/NVmR8SLnsWJmOtHmQD77L3ydy_g.roa File: NVmR8SLnsWJmOtHmQD77L3ydy_g.roa (raw, json) Hash identifier: gul58bNSNA/dLY883axm3ey7Q1DEI9GtKpYlNW7IBfQ= Subject key identifier: 35:59:91:F1:22:E7:B1:62:66:3A:D1:E6:40:3E:FB:2F:7C:9D:CB:F8 Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64 Certificate serial: 019B76EADCA6DA1E8D2EEF0A05E44B765AAD Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/NVmR8SLnsWJmOtHmQD77L3ydy_g.roa Signing time: Thu 01 Jan 2026 00:17:41 +0000 ROA not before: Thu 01 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31169 IP address blocks: 2001:67c:2d68::/48 maxlen: 48 2a06:11c0:1::/48 maxlen: 48 2a06:11c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:dc:a6:da:1e:8d:2e:ef:0a:05:e4:4b:76:5a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=355991f122e7b162663ad1e6403efb2f7c9dcbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:69:cd:11:c3:59:b3:f3:49:8c:df:a2:d4: 34:9d:bb:c8:4d:ba:06:dc:bb:c5:68:1b:43:d0:13: a3:61:e1:9f:bf:49:64:3b:4d:94:27:d6:1a:e2:8c: 08:01:ee:2f:d5:3f:2d:3b:e6:d3:3e:4f:28:73:6d: 4f:62:d8:b7:c8:bd:db:8b:8e:5c:75:ef:c1:9d:fd: 84:03:90:9c:e8:d7:39:d5:1e:3b:58:5e:bb:20:16: ec:e9:ca:9a:d6:60:54:74:35:f4:5c:5a:c8:e2:25: c0:40:c8:ec:65:34:ac:a5:99:c4:73:ae:91:4d:3e: a9:15:41:a6:4e:ac:22:5b:6b:2c:c0:6c:29:ab:cf: 29:18:ec:cf:93:62:87:a2:4c:8e:e5:54:f3:c7:61: 0d:3b:99:4a:f6:59:8a:36:a7:8e:6d:ea:b3:ae:1d: 1e:58:03:04:34:6c:88:ac:fe:f4:d0:ef:25:f7:1a: b8:35:b2:60:ba:33:55:92:c6:e2:ef:3f:cc:12:b3: ea:ab:7c:8f:f4:c3:41:89:d7:d9:22:41:b1:41:b1: a5:7e:df:3e:18:8a:20:46:14:d8:92:b0:66:fd:31: 02:38:b3:8c:b5:c3:09:71:d1:3d:18:4b:b4:15:a8: 97:ed:60:6e:a8:2a:bf:45:80:f7:0e:2b:5e:8c:77: f5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:59:91:F1:22:E7:B1:62:66:3A:D1:E6:40:3E:FB:2F:7C:9D:CB:F8 X509v3 Authority Key Identifier: keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/NVmR8SLnsWJmOtHmQD77L3ydy_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2d68::/48 2a06:11c0:1::-2a06:11c0:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 42:c9:d5:65:23:9f:fc:cc:92:10:20:17:11:0c:36:3f:7c:93: 8c:40:6a:19:93:9f:32:79:3e:44:2c:71:a3:c6:c6:65:eb:70: 9e:8f:c1:d1:45:a6:cd:d7:27:d6:0c:64:7c:ec:5d:c1:9a:74: 31:f4:15:a4:ed:c8:b6:97:45:b0:27:f6:c8:6a:2e:74:33:88: 06:89:c9:8a:54:c5:c4:0d:a2:09:a0:12:0e:02:06:ca:63:07: da:fb:95:7d:08:a8:5e:34:35:25:85:f1:fd:f7:d2:5b:3b:c8: 4c:47:5d:05:5e:f6:b8:c4:bb:e5:55:27:93:11:9e:d1:a1:ff: 36:e6:e6:e3:fc:86:2c:82:d0:71:3d:7f:00:77:ea:01:de:46: 20:ff:2d:31:21:75:59:b6:7c:49:a8:a9:d8:c6:49:f0:f9:ba: ba:fe:29:a6:51:f5:d3:6a:b3:9a:90:db:1b:25:ae:24:10:ce: 19:c2:90:10:61:d7:25:f6:5e:47:58:4d:06:ee:d3:ea:87:05: 52:28:99:a4:9f:d8:f9:cb:28:fd:73:80:e7:03:91:ef:48:17: 75:25:06:5e:40:5f:55:b9:2d:4d:12:2a:d0:af:47:b0:f2:16: 92:d1:e4:62:9c:fb:64:a2:31:9f:6d:ee:2b:88:ad:cc:89:ee: dd:0d:55:2c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt26tym2h6NLu8KBeRLdlqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZmFkZmUyOTFkZWZjNTZmOTQ3OWUyZTdkMjFiNTM5N2Nm YTJiNjQwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTU5OTFmMTIyZTdiMTYyNjYzYWQxZTY0MDNlZmIyZjdjOWRjYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP1pzRHDWbPzSYzfotQ0nbvITboG 3LvFaBtD0BOjYeGfv0lkO02UJ9Ya4owIAe4v1T8tO+bTPk8oc21PYti3yL3bi45c de/Bnf2EA5Cc6Nc51R47WF67IBbs6cqa1mBUdDX0XFrI4iXAQMjsZTSspZnEc66R TT6pFUGmTqwiW2sswGwpq88pGOzPk2KHokyO5VTzx2ENO5lK9lmKNqeObeqzrh0e WAMENGyIrP700O8l9xq4NbJgujNVksbi7z/MErPqq3yP9MNBidfZIkGxQbGlft8+ GIogRhTYkrBm/TECOLOMtcMJcdE9GEu0FaiX7WBuqCq/RYD3DitejHf11QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFDVZkfEi57FiZjrR5kA++y98ncv4MB8GA1UdIwQY MBaAFBL63+KR3vxW+UeeLn0htTl8+itkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84MWRlMDctODQ4MS00ZDgzLTgyZTkt YTM0NzE3NzQxNTdiLzEvTlZtUjhTTG5zV0ptT3RIbVFENzdMM3lkeV9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84MWRlMDctODQ4MS00ZDgzLTgyZTktYTM0NzE3NzQxNTdi LzEvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAIAEGfC1o MBIDBwAqBhHAAAEDBwAqBhHAAAIwDQYJKoZIhvcNAQELBQADggEBAELJ1WUjn/zM khAgFxEMNj98k4xAahmTnzJ5PkQscaPGxmXrcJ6PwdFFps3XJ9YMZHzsXcGadDH0 FaTtyLaXRbAn9shqLnQziAaJyYpUxcQNogmgEg4CBspjB9r7lX0IqF40NSWF8f33 0ls7yExHXQVe9rjEu+VVJ5MRntGh/zbm5uP8hiyC0HE9fwB36gHeRiD/LTEhdVm2 fEmoqdjGSfD5urr+KaZR9dNqs5qQ2xslriQQzhnCkBBh1yX2XkdYTQbu0+qHBVIo maSf2PnLKP1zgOcDke9IF3UlBl5AX1W5LU0SKtCvR7DyFpLR5GKc+2SiMZ9t7iuI rcyJ7t0NVSw= -----END CERTIFICATE-----Generated at Tue Jan 27 03:05:47 2026 by rpki-client