This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/CF3c0K2gtt1WUm-O6kkQLEd6JYQ.roa File: CF3c0K2gtt1WUm-O6kkQLEd6JYQ.roa (raw, json) Hash identifier: 5ttQMFlBuHqp4mBzNOycaLf8j5C57Lnf42hbj8hxe2g= Subject key identifier: 08:5D:DC:D0:AD:A0:B6:DD:56:52:6F:8E:EA:49:10:2C:47:7A:25:84 Certificate issuer: /CN=13ff23caba7e01f681e73dfab1743ff6478ddced Certificate serial: 019B79ED5A40B88A4C6CBD2E092FB04A96F4 Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/CF3c0K2gtt1WUm-O6kkQLEd6JYQ.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13235 IP address blocks: 2a03:55e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5a:40:b8:8a:4c:6c:bd:2e:09:2f:b0:4a:96:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=085ddcd0ada0b6dd56526f8eea49102c477a2584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:fe:1f:fb:2e:ca:18:43:00:1e:fc:fc:88: 9e:11:5e:16:dd:d8:4c:61:a1:8a:92:55:8a:ff:39: 45:95:e4:52:33:d3:6c:aa:49:7d:aa:b3:b6:94:46: 37:b7:29:90:24:63:a2:f3:50:a9:68:59:82:ad:83: 6c:6f:3e:59:21:7f:15:6f:9a:45:82:72:8f:cb:d2: 44:45:6e:e5:8b:77:46:72:82:80:1f:94:a1:26:da: 77:23:9d:5c:be:3c:c9:00:cc:2d:a8:d6:85:9c:e8: 01:db:a4:87:a2:47:ab:aa:f9:b6:2c:01:d8:08:20: 7e:4f:ad:28:65:cf:4d:4f:7b:68:c5:3b:60:24:00: f8:93:26:68:b7:60:f8:f2:2e:8f:de:db:4f:6b:2b: 4a:d1:ec:74:a6:33:04:c2:ec:c5:df:da:c3:2f:f5: e6:e2:2c:2f:eb:cb:88:b7:6b:c0:b0:b9:ed:e1:a1: b4:c8:a1:c9:33:f8:ff:85:64:07:5d:19:6d:e5:de: 13:04:66:ac:b2:93:86:34:05:46:36:7a:52:d9:32: 31:44:c2:2e:f9:c8:5b:72:49:a7:c5:14:55:26:71: a1:b5:8f:86:f3:cd:7b:fe:43:d5:2b:2e:ec:cb:c9: 37:39:dd:18:46:de:1b:33:f1:35:62:82:1a:08:77: 98:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5D:DC:D0:AD:A0:B6:DD:56:52:6F:8E:EA:49:10:2C:47:7A:25:84 X509v3 Authority Key Identifier: keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/CF3c0K2gtt1WUm-O6kkQLEd6JYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:55e0::/32 Signature Algorithm: sha256WithRSAEncryption 76:db:f7:72:76:20:c7:2b:68:42:c5:5a:10:3d:83:39:71:07: b6:bb:ff:a3:64:5b:a4:71:ee:3e:f8:2e:64:7d:f8:18:60:ac: f0:01:9c:7a:77:1e:9f:fe:75:13:e9:04:78:ca:dc:42:1a:9e: 40:b5:af:b2:60:90:cd:6e:bd:0a:d7:a1:ec:c2:b5:d1:c4:de: e8:62:1b:8f:16:22:5e:fe:18:d3:d7:15:64:b6:2d:b1:5e:88: e7:2b:1e:05:b0:2c:19:d9:c8:b0:77:ff:03:91:e5:3e:c1:c0: 85:fd:dc:b1:fc:6f:d7:66:c6:bf:a8:32:51:60:de:a9:66:b1: 49:d5:1d:ea:45:d7:73:fe:64:46:b5:10:be:9b:20:7f:a0:76: 4e:17:76:5d:08:d1:04:03:54:82:2a:aa:05:7b:f2:0e:b6:e4: 98:5e:af:7b:66:39:c1:2e:87:03:72:63:9c:25:08:e8:c2:82: 29:ee:8c:c0:31:91:1b:75:6b:68:8c:0b:62:30:77:f3:85:c1: a9:1d:73:67:2b:26:97:bb:8f:c8:f6:22:07:ec:5f:51:ed:ce: 9a:76:f7:1a:58:57:3c:ad:e3:d9:02:01:49:47:58:f3:2b:d1: 3d:95:ed:16:4e:f5:52:b3:c7:85:ef:d3:41:43:1e:bd:ed:5c: 2c:e3:c1:42 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57VpAuIpMbL0uCS+wSpb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZmYyM2NhYmE3ZTAxZjY4MWU3M2RmYWIxNzQzZmY2NDc4 ZGRjZWQwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODVkZGNkMGFkYTBiNmRkNTY1MjZmOGVlYTQ5MTAyYzQ3N2EyNTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxej+H/suyhhDAB78/IieEV4W3dhM YaGKklWK/zlFleRSM9Nsqkl9qrO2lEY3tymQJGOi81CpaFmCrYNsbz5ZIX8Vb5pF gnKPy9JERW7li3dGcoKAH5ShJtp3I51cvjzJAMwtqNaFnOgB26SHokerqvm2LAHY CCB+T60oZc9NT3toxTtgJAD4kyZot2D48i6P3ttPaytK0ex0pjMEwuzF39rDL/Xm 4iwv68uIt2vAsLnt4aG0yKHJM/j/hWQHXRlt5d4TBGasspOGNAVGNnpS2TIxRMIu +chbckmnxRRVJnGhtY+G8817/kPVKy7sy8k3Od0YRt4bM/E1YoIaCHeYVwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAhd3NCtoLbdVlJvjupJECxHeiWEMB8GA1UdIwQY MBaAFBP/I8q6fgH2gec9+rF0P/ZHjdztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRV84anlycC1BZmFCNXozNnNYUV85a2VOM08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yOGE2OGMtZmI1ZS00ODYwLTk0YjQt NjM5NzgwZTkzOWU1LzEvQ0YzYzBLMmd0dDFXVW0tTzZra1FMRWQ2SllRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8yOGE2OGMtZmI1ZS00ODYwLTk0YjQtNjM5NzgwZTkzOWU1 LzEvRV84anlycC1BZmFCNXozNnNYUV85a2VOM08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgNV4DAN BgkqhkiG9w0BAQsFAAOCAQEAdtv3cnYgxytoQsVaED2DOXEHtrv/o2RbpHHuPvgu ZH34GGCs8AGcencen/51E+kEeMrcQhqeQLWvsmCQzW69Cteh7MK10cTe6GIbjxYi Xv4Y09cVZLYtsV6I5yseBbAsGdnIsHf/A5HlPsHAhf3csfxv12bGv6gyUWDeqWax SdUd6kXXc/5kRrUQvpsgf6B2Thd2XQjRBANUgiqqBXvyDrbkmF6ve2Y5wS6HA3Jj nCUI6MKCKe6MwDGRG3VraIwLYjB384XBqR1zZysml7uPyPYiB+xfUe3Omnb3GlhX PK3j2QIBSUdY8yvRPZXtFk71UrPHhe/TQUMeve1cLOPBQg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:03 2026 by rpki-client