This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/nBxToIyQbLD03aHgRpkeeNieOPw.roa File: nBxToIyQbLD03aHgRpkeeNieOPw.roa (raw, json) Hash identifier: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk= Subject key identifier: 9C:1C:53:A0:8C:90:6C:B0:F4:DD:A1:E0:46:99:1E:78:D8:9E:38:FC Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019B797F1722BF1F9668B119A5884DF0F65B Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/nBxToIyQbLD03aHgRpkeeNieOPw.roa Signing time: Thu 01 Jan 2026 12:18:50 +0000 ROA not before: Thu 01 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203061 IP address blocks: 2a14:c881::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:17:22:bf:1f:96:68:b1:19:a5:88:4d:f0:f6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c1c53a08c906cb0f4dda1e046991e78d89e38fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:53:4e:54:4d:c0:35:62:15:eb:7b:4d:da: cb:b4:30:a9:4b:8a:b8:43:99:e2:1d:e9:11:4b:d2: 38:9c:3c:c9:ac:76:d1:09:44:c0:72:27:94:1e:7a: c1:61:68:ef:96:af:4a:80:ed:55:6a:8d:3d:92:08: 06:60:27:04:07:37:c3:f8:91:e2:eb:11:45:12:e2: 3b:b0:15:e5:23:84:52:94:be:db:88:70:32:93:a3: 7a:f4:c4:4a:f0:b6:05:a2:c4:4a:4a:2e:3c:89:10: 75:cc:6e:c7:40:0e:9e:ea:76:04:96:b1:0f:78:10: 01:a5:a4:34:e3:fb:03:13:37:7b:ba:f4:c8:3d:c9: d2:97:38:df:f9:7c:05:23:38:d3:55:76:5f:80:cc: 18:b8:dd:2f:be:8b:4d:f3:b4:fb:f0:80:43:a3:7e: 67:4b:b0:03:d5:9f:00:e6:6b:25:7e:6c:a1:62:a4: 61:01:29:c0:5d:fb:06:c6:fc:78:1e:1f:34:20:9c: 6e:e4:06:bd:f1:61:d6:90:b8:c9:5b:c2:9d:2b:25: 5a:8c:10:f1:b5:f2:0f:bf:d0:17:b3:49:1a:e6:04: 33:6e:78:bc:3b:e3:0b:c8:30:e9:b5:d6:62:62:e3: 37:02:e2:ce:18:41:ea:06:16:e2:e0:6e:a3:ef:4b: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1C:53:A0:8C:90:6C:B0:F4:DD:A1:E0:46:99:1E:78:D8:9E:38:FC X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/nBxToIyQbLD03aHgRpkeeNieOPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c881::/33 Signature Algorithm: sha256WithRSAEncryption 9a:2b:f7:34:04:f5:70:a9:14:92:30:91:1b:35:cd:96:b4:c2: e1:16:3b:72:fd:8c:0f:4f:63:7a:46:a8:2c:6b:50:5b:da:61: 16:a4:fc:73:95:ed:89:35:a3:97:1a:34:31:cd:e1:79:0a:18: 49:0c:4f:44:e0:53:76:9b:ed:47:e4:78:10:ad:fa:26:da:31: 78:ce:1d:f1:27:89:34:3c:c0:a1:64:98:7b:b4:ad:67:37:af: f0:b7:43:aa:46:39:dd:fe:35:db:09:87:f3:29:f6:7c:cc:99: b4:ef:76:b9:bf:5e:65:a3:5f:36:cb:75:b2:92:4a:6f:c9:64: 28:83:5f:9a:bd:c5:48:57:5a:1b:fc:9f:84:d6:15:48:24:c9: 67:c6:52:7a:a3:9d:b3:4f:11:d1:85:0a:84:42:80:09:23:71: 0f:be:14:a6:45:14:69:e7:24:b6:5c:6f:e2:b8:19:18:14:81: 38:38:61:93:e9:66:db:f1:55:1a:29:68:cf:de:81:6a:50:9b: 83:c0:81:5c:42:d9:0f:34:85:5d:c7:54:9c:71:1a:28:24:90: 4f:16:f4:7c:a7:b6:3f:f7:cd:f3:f5:00:b0:2a:3b:93:94:ee: 4b:b5:da:49:29:20:b4:a3:ae:65:81:2c:e4:0c:2c:7d:e1:cc: aa:b4:11:2f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fxcivx+WaLEZpYhN8PZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzFjNTNhMDhjOTA2Y2IwZjRkZGExZTA0Njk5MWU3OGQ4OWUzOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QtTTlRNwDViFet7TdrLtDCpS4q4 Q5niHekRS9I4nDzJrHbRCUTAcieUHnrBYWjvlq9KgO1Vao09kggGYCcEBzfD+JHi 6xFFEuI7sBXlI4RSlL7biHAyk6N69MRK8LYFosRKSi48iRB1zG7HQA6e6nYElrEP eBABpaQ04/sDEzd7uvTIPcnSlzjf+XwFIzjTVXZfgMwYuN0vvotN87T78IBDo35n S7AD1Z8A5mslfmyhYqRhASnAXfsGxvx4Hh80IJxu5Aa98WHWkLjJW8KdKyVajBDx tfIPv9AXs0ka5gQzbni8O+MLyDDptdZiYuM3AuLOGEHqBhbi4G6j70s66wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJwcU6CMkGyw9N2h4EaZHnjYnjj8MB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvbkJ4VG9JeVFiTEQwM2FIZ1Jwa2VlTmllT1B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKhTIgQAw DQYJKoZIhvcNAQELBQADggEBAJor9zQE9XCpFJIwkRs1zZa0wuEWO3L9jA9PY3pG qCxrUFvaYRak/HOV7Yk1o5caNDHN4XkKGEkMT0TgU3ab7UfkeBCt+ibaMXjOHfEn iTQ8wKFkmHu0rWc3r/C3Q6pGOd3+NdsJh/Mp9nzMmbTvdrm/XmWjXzbLdbKSSm/J ZCiDX5q9xUhXWhv8n4TWFUgkyWfGUnqjnbNPEdGFCoRCgAkjcQ++FKZFFGnnJLZc b+K4GRgUgTg4YZPpZtvxVRopaM/egWpQm4PAgVxC2Q80hV3HVJxxGigkkE8W9Hyn tj/3zfP1ALAqO5OU7ku12kkpILSjrmWBLOQMLH3hzKq0ES8= -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:54 2026 by rpki-client