This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/CNoCP1YN8cdhGGN4I6sLN_VvgdA.roa File: CNoCP1YN8cdhGGN4I6sLN_VvgdA.roa (raw, json) Hash identifier: vIYD2QmKCCcl2cPrbpCszILN4qcJki+gKUGX8mIKIhM= Subject key identifier: 08:DA:02:3F:56:0D:F1:C7:61:18:63:78:23:AB:0B:37:F5:6F:81:D0 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F151A9C7996C1AD374175B4714A4DE4 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/CNoCP1YN8cdhGGN4I6sLN_VvgdA.roa Signing time: Fri 02 Jan 2026 14:20:48 +0000 ROA not before: Fri 02 Jan 2026 14:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215916 IP address blocks: 2a14:c380:c60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1a:9c:79:96:c1:ad:37:41:75:b4:71:4a:4d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08da023f560df1c76118637823ab0b37f56f81d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:a3:04:cf:56:e0:da:19:ce:c0:a2:74:18: af:6a:e7:34:5a:d6:fe:e3:87:cb:41:34:68:40:39: 70:05:39:1e:f3:b0:38:33:65:66:1a:5c:47:87:06: 13:78:94:e8:60:bb:62:6e:02:4a:6a:b2:4c:10:40: e4:2e:e8:eb:fe:e7:96:d4:cb:9e:a2:02:c1:d0:31: 6d:65:90:c1:20:a0:ed:47:29:dd:de:4b:78:0e:89: 62:13:9e:32:45:b1:71:83:54:88:d6:6c:e5:13:84: 60:0c:02:ab:20:c9:f4:88:50:0c:32:e3:60:4f:9b: 70:19:71:cc:be:fd:c1:3b:d2:8d:b7:25:bc:40:88: 0b:b9:78:68:54:22:23:cb:2b:97:4c:19:fa:31:4d: 56:65:13:c1:15:dc:77:8e:0a:f2:29:0d:63:e3:f3: 20:c5:0b:3b:c6:24:76:a7:a8:8f:65:32:25:2b:20: 43:9a:85:d3:a9:64:30:fc:f6:a2:3d:29:41:22:a2: 0a:0b:ac:f2:97:0c:e1:f1:f0:10:04:11:e2:da:de: bd:4f:16:55:e0:11:72:21:24:ea:4b:fa:5d:4d:54: b1:43:e7:a3:ed:87:f8:f2:b4:31:98:bd:f1:14:9b: 44:6c:af:a3:0c:99:dc:ad:e3:e6:a7:cd:d2:35:d4: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DA:02:3F:56:0D:F1:C7:61:18:63:78:23:AB:0B:37:F5:6F:81:D0 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/CNoCP1YN8cdhGGN4I6sLN_VvgdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:c60::/44 Signature Algorithm: sha256WithRSAEncryption 2b:f5:65:e1:2f:57:ca:f6:9b:5f:c7:4a:34:ad:af:11:69:60: 3f:91:b8:5c:58:af:93:5c:89:0e:c0:c3:70:80:4b:8d:15:04: e7:e3:08:d6:d9:6d:62:c8:fb:ae:74:67:e3:a5:2d:d3:60:66: e2:3b:45:25:fc:8b:58:d5:eb:11:a9:b0:e1:80:34:7a:c8:ae: 7c:46:86:9d:28:01:b6:35:47:b1:e8:4b:c7:88:cb:3d:6f:f3: 1a:95:d1:7d:e7:8a:14:34:a4:70:40:a4:76:6c:72:48:e7:c9: 19:52:c4:ce:fe:0c:1d:a3:6b:a2:86:44:6b:49:7e:9d:f9:5f: 55:b7:64:c3:11:fd:1f:d9:5f:35:05:fd:90:60:86:9d:8e:d5: 2a:d3:9b:de:91:41:7f:d5:9c:70:92:b7:9e:25:27:15:12:b1: ff:d8:e6:3f:bf:07:66:1b:e4:2e:61:00:e8:8a:84:8d:c7:60: 52:93:e2:f1:ee:c6:3d:3c:37:e5:b4:7c:41:3b:2b:80:70:39: 35:aa:0f:15:ef:54:eb:0d:e2:78:02:c9:0b:cc:b6:e5:8f:03: 7f:d5:05:d2:47:35:98:8a:e8:05:81:ce:69:08:b0:fc:05:7a: c7:79:80:6a:7d:46:db:a9:e0:3f:6c:ee:d2:be:a0:26:2f:47: 9e:3b:d7:ad -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FRqceZbBrTdBdbRxSk3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGRhMDIzZjU2MGRmMWM3NjExODYzNzgyM2FiMGIzN2Y1NmY4MWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO2jBM9W4NoZzsCidBivauc0Wtb+ 44fLQTRoQDlwBTke87A4M2VmGlxHhwYTeJToYLtibgJKarJMEEDkLujr/ueW1Mue ogLB0DFtZZDBIKDtRynd3kt4DoliE54yRbFxg1SI1mzlE4RgDAKrIMn0iFAMMuNg T5twGXHMvv3BO9KNtyW8QIgLuXhoVCIjyyuXTBn6MU1WZRPBFdx3jgryKQ1j4/Mg xQs7xiR2p6iPZTIlKyBDmoXTqWQw/PaiPSlBIqIKC6zylwzh8fAQBBHi2t69TxZV 4BFyISTqS/pdTVSxQ+ej7Yf48rQxmL3xFJtEbK+jDJncrePmp83SNdQeQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAjaAj9WDfHHYRhjeCOrCzf1b4HQMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvQ05vQ1AxWU44Y2RoR0dONEk2c0xOX1Z2Z2RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgAxg MA0GCSqGSIb3DQEBCwUAA4IBAQAr9WXhL1fK9ptfx0o0ra8RaWA/kbhcWK+TXIkO wMNwgEuNFQTn4wjW2W1iyPuudGfjpS3TYGbiO0Ul/ItY1esRqbDhgDR6yK58Road KAG2NUex6EvHiMs9b/MaldF954oUNKRwQKR2bHJI58kZUsTO/gwdo2uihkRrSX6d +V9Vt2TDEf0f2V81Bf2QYIadjtUq05vekUF/1ZxwkreeJScVErH/2OY/vwdmG+Qu YQDoioSNx2BSk+Lx7sY9PDfltHxBOyuAcDk1qg8V71TrDeJ4AskLzLbljwN/1QXS RzWYiugFgc5pCLD8BXrHeYBqfUbbqeA/bO7SvqAmL0eeO9et -----END CERTIFICATE-----Generated at Sun Jan 11 13:06:31 2026 by rpki-client