This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/cNpxALxay8V-uBlVjwREUEXf1i4.roa File: cNpxALxay8V-uBlVjwREUEXf1i4.roa (raw, json) Hash identifier: udI7jSlS3Z4S4WPCd9ytfUu5RBJnrvydq+XTr27uAMA= Subject key identifier: 70:DA:71:00:BC:5A:CB:C5:7E:B8:19:55:8F:04:44:50:45:DF:D6:2E Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B791098370920E573E96AE87E724879A3 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/cNpxALxay8V-uBlVjwREUEXf1i4.roa Signing time: Thu 01 Jan 2026 10:18:09 +0000 ROA not before: Thu 01 Jan 2026 10:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199695 IP address blocks: 2a12:bec4:1620::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:98:37:09:20:e5:73:e9:6a:e8:7e:72:48:79:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70da7100bc5acbc57eb819558f04445045dfd62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:57:a7:d0:e9:dd:bf:82:eb:bb:56:f0:f6: d9:a4:d5:bc:47:d5:8a:52:31:b1:57:f6:72:9f:fe: ea:17:b5:f4:f9:1a:ee:13:94:1b:4c:9b:e6:e1:3a: 82:13:db:f8:35:d1:a8:3c:d2:f0:ad:36:a5:0e:41: a5:27:07:62:eb:9a:c1:b5:f7:5c:f2:20:fd:bb:7e: f3:a0:ae:6d:e3:73:5a:f1:af:e8:c2:b6:c0:15:65: 10:91:de:c4:65:a1:c7:92:08:be:53:92:cf:e3:73: 61:f9:59:64:1d:a9:e6:a6:ca:17:84:e3:47:23:7a: 57:3c:4d:e4:7f:02:d7:70:01:ce:d0:6b:95:6c:cf: 46:ae:bb:29:01:e2:19:81:14:29:b5:11:18:ec:4a: a8:39:a0:be:e4:fb:0c:e9:25:ec:bf:07:8d:e5:d8: 60:ca:d8:94:3b:1d:54:4d:83:5d:c3:21:5c:74:21: 90:5e:da:ce:e2:7f:2d:82:1f:a5:93:fa:06:ac:6d: 89:6c:0b:b6:7c:2e:6e:f8:6b:dc:c5:4b:cd:66:a2: cc:cf:e1:c2:7f:c7:80:1b:d5:3c:1d:a5:00:53:ec: 7c:e0:74:3f:19:b6:23:e6:79:37:7e:b0:8c:79:08: 1c:c4:86:25:04:2b:92:a3:4e:61:fc:11:ac:79:83: 40:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DA:71:00:BC:5A:CB:C5:7E:B8:19:55:8F:04:44:50:45:DF:D6:2E X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/cNpxALxay8V-uBlVjwREUEXf1i4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1620::/48 Signature Algorithm: sha256WithRSAEncryption 71:53:19:f3:bf:12:db:f1:27:f7:75:67:e0:16:cc:28:36:e1: 84:1a:e2:17:df:7a:f2:ad:93:08:04:8c:b7:6d:55:44:a8:3e: f2:06:29:6f:46:e1:0e:34:1d:32:df:a4:06:01:15:77:49:b3: 85:22:17:cb:c1:16:5c:bc:72:b6:31:e2:2a:5c:ab:71:ed:ed: d4:52:09:3d:eb:b7:e3:f8:48:7a:9b:e1:44:3d:91:a3:38:86: fe:d0:0c:6f:5c:a0:11:b5:b1:58:63:3c:58:91:25:cf:93:ae: de:af:a0:37:aa:9f:3c:5d:03:fb:18:93:89:bd:87:8f:39:42: 2a:61:00:11:ea:30:3b:0e:36:e9:ff:db:67:ec:2c:28:04:96: 5b:61:09:35:76:97:09:25:2a:af:23:c3:d9:27:64:c0:f4:7f: 88:3f:02:1e:c9:b7:e9:4a:cc:c2:8b:2e:27:6c:80:04:2a:53: fc:ed:71:ff:39:49:86:52:f2:24:0f:ca:df:a1:14:df:53:f9: 3c:09:26:e8:41:cb:5f:a4:83:99:04:68:b1:2b:01:9b:71:b7: fa:d6:8c:d7:a6:a1:3f:9d:4c:ef:47:07:99:07:80:7c:4a:af: 91:32:fe:13:20:4e:26:f9:d2:4b:a6:76:7e:c3:89:1c:b5:5f: ea:b2:0e:9c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJg3CSDlc+lq6H5ySHmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGRhNzEwMGJjNWFjYmM1N2ViODE5NTU4ZjA0NDQ1MDQ1ZGZkNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGtXp9Dp3b+C67tW8PbZpNW8R9WK UjGxV/Zyn/7qF7X0+RruE5QbTJvm4TqCE9v4NdGoPNLwrTalDkGlJwdi65rBtfdc 8iD9u37zoK5t43Na8a/owrbAFWUQkd7EZaHHkgi+U5LP43Nh+VlkHanmpsoXhONH I3pXPE3kfwLXcAHO0GuVbM9GrrspAeIZgRQptREY7EqoOaC+5PsM6SXsvweN5dhg ytiUOx1UTYNdwyFcdCGQXtrO4n8tgh+lk/oGrG2JbAu2fC5u+GvcxUvNZqLMz+HC f8eAG9U8HaUAU+x84HQ/GbYj5nk3frCMeQgcxIYlBCuSo05h/BGseYNA9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHDacQC8WsvFfrgZVY8ERFBF39YuMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvY05weEFMeGF5OFYtdUJsVmp3UkVVRVhmMWk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhK+xBYg MA0GCSqGSIb3DQEBCwUAA4IBAQBxUxnzvxLb8Sf3dWfgFswoNuGEGuIX33ryrZMI BIy3bVVEqD7yBilvRuEONB0y36QGARV3SbOFIhfLwRZcvHK2MeIqXKtx7e3UUgk9 67fj+Eh6m+FEPZGjOIb+0AxvXKARtbFYYzxYkSXPk67er6A3qp88XQP7GJOJvYeP OUIqYQAR6jA7Djbp/9tn7CwoBJZbYQk1dpcJJSqvI8PZJ2TA9H+IPwIeybfpSszC iy4nbIAEKlP87XH/OUmGUvIkD8rfoRTfU/k8CSboQctfpIOZBGixKwGbcbf61ozX pqE/nUzvRweZB4B8Sq+RMv4TIE4m+dJLpnZ+w4kctV/qsg6c -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:54 2026 by rpki-client