This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/CdSvxh-qsouaR9D0nMWLFmlP_7c.roa File: CdSvxh-qsouaR9D0nMWLFmlP_7c.roa (raw, json) Hash identifier: w2S9yeJgNzOTOHLkky2uOaSMYllBxEErLoohZYBuiDw= Subject key identifier: 09:D4:AF:C6:1F:AA:B2:8B:9A:47:D0:F4:9C:C5:8B:16:69:4F:FF:B7 Certificate issuer: /CN=f91d20c92c6539ad66da87c7cfe65a9faacca063 Certificate serial: 019B7B3580C9EC4ABF6EC9797E4485E3745E Authority key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/CdSvxh-qsouaR9D0nMWLFmlP_7c.roa Signing time: Thu 01 Jan 2026 20:17:42 +0000 ROA not before: Thu 01 Jan 2026 20:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201929 IP address blocks: 2a02:65a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:80:c9:ec:4a:bf:6e:c9:79:7e:44:85:e3:74:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063 Validity Not Before: Jan 1 20:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09d4afc61faab28b9a47d0f49cc58b16694fffb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:e1:7a:68:55:ef:66:a7:93:7f:bd:3f:d0: 6d:ca:23:fc:32:aa:63:f0:21:70:dd:f5:ff:29:f0: 7e:87:76:d9:2e:af:28:d2:f9:39:0b:c8:12:fa:f7: 69:10:5e:e4:f0:64:a1:bb:5e:29:b9:17:22:92:2d: bc:18:56:0c:2a:1d:c4:48:9f:69:e3:65:7e:e1:da: 94:be:57:fb:6f:a4:37:b6:45:60:6e:49:23:c9:23: 4d:fa:ec:c8:7e:a7:eb:91:bc:77:8a:3c:1f:48:b7: 8f:14:27:36:af:31:44:3b:84:3e:5d:12:94:5e:03: 61:9f:47:a7:7a:82:c5:e0:fc:28:e6:e8:25:dd:cb: 7c:8f:51:56:a4:bc:a1:87:3e:3e:b1:79:ba:a1:f2: 66:4b:a5:0c:a6:e4:4f:e0:64:32:5a:c8:f8:f9:1d: 50:7a:6a:23:ac:95:db:8a:48:88:cf:96:20:30:eb: f8:05:b3:71:32:99:78:fd:55:04:23:0c:e4:25:33: 62:5c:20:ce:5b:44:5c:4d:c6:8b:ba:78:a2:10:fa: ed:2e:ef:7d:85:d9:e5:de:47:22:78:2f:7a:71:10: da:e7:4c:5b:4d:c0:10:47:2d:2a:3d:b5:0b:7c:8c: a6:65:d4:e6:43:a0:90:3c:ac:44:f1:b6:02:65:c6: 61:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D4:AF:C6:1F:AA:B2:8B:9A:47:D0:F4:9C:C5:8B:16:69:4F:FF:B7 X509v3 Authority Key Identifier: keyid:F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/CdSvxh-qsouaR9D0nMWLFmlP_7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:65a0::/32 Signature Algorithm: sha256WithRSAEncryption 3e:fa:87:a7:1a:3d:da:65:83:65:74:71:88:d2:fa:e1:a6:ec: 1d:82:d8:35:b8:2e:15:f1:9a:b8:51:a9:0a:30:b7:28:38:5d: b9:3a:94:3a:66:0c:3c:2e:af:24:2c:45:3a:46:ce:a1:48:20: 47:cc:0c:4e:6a:3e:af:32:e5:3f:03:74:32:99:4c:61:25:2e: 08:6e:4a:1b:d9:07:e8:a8:86:26:62:14:8e:9f:06:8f:10:89: 9f:3d:95:d2:93:3a:bd:a7:91:f8:b8:18:5d:8f:06:3d:b2:be: fe:7a:a1:46:3c:3a:0d:47:29:ae:14:cf:d9:e7:31:8f:47:f7: 8d:86:d3:0f:dc:9e:76:c2:24:1c:05:c4:a3:2d:bb:a6:76:f3: 6f:41:1c:92:2b:5e:0a:1a:dd:c5:91:03:51:3f:98:2b:1a:c6: 43:5a:4f:41:5d:a1:49:68:d4:87:94:cd:94:59:88:9a:78:74: 42:00:99:75:c0:8c:7f:c8:9e:79:73:9a:29:c7:c6:e8:f8:19: 21:78:0c:3a:2a:db:e8:9f:78:39:c4:c7:e6:7c:3e:0d:1d:b1: 59:a8:be:c3:5c:2e:6e:0e:b4:3a:f7:89:5b:77:66:c5:72:73: 1b:6c:76:9d:53:11:85:ac:4c:3d:40:93:00:46:fd:dd:df:d3: bf:83:30:a8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NYDJ7Eq/bsl5fkSF43ReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MWQyMGM5MmM2NTM5YWQ2NmRhODdjN2NmZTY1YTlmYWFj Y2EwNjMwHhcNMjYwMTAxMjAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWQ0YWZjNjFmYWFiMjhiOWE0N2QwZjQ5Y2M1OGIxNjY5NGZmZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuLhemhV72ank3+9P9BtyiP8Mqpj 8CFw3fX/KfB+h3bZLq8o0vk5C8gS+vdpEF7k8GShu14puRciki28GFYMKh3ESJ9p 42V+4dqUvlf7b6Q3tkVgbkkjySNN+uzIfqfrkbx3ijwfSLePFCc2rzFEO4Q+XRKU XgNhn0eneoLF4Pwo5ugl3ct8j1FWpLyhhz4+sXm6ofJmS6UMpuRP4GQyWsj4+R1Q emojrJXbikiIz5YgMOv4BbNxMpl4/VUEIwzkJTNiXCDOW0RcTcaLuniiEPrtLu99 hdnl3kcieC96cRDa50xbTcAQRy0qPbULfIymZdTmQ6CQPKxE8bYCZcZhGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAnUr8YfqrKLmkfQ9JzFixZpT/+3MB8GA1UdIwQY MBaAFPkdIMksZTmtZtqHx8/mWp+qzKBjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SMGd5U3hsT2ExbTJvZkh6LVphbjZyTW9HTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvZTY1MTNmLTcxNzUtNDYzYi1hZTg1 LWMxOGU0N2JkOWM2NC8xL0NkU3Z4aC1xc291YVI5RDBuTVdMRm1sUF83Yy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjUvZTY1MTNmLTcxNzUtNDYzYi1hZTg1LWMxOGU0N2JkOWM2 NC8xLzEtUjBneVN4bE9hMW0yb2ZIei1aYW42ck1vR00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqAmWg MA0GCSqGSIb3DQEBCwUAA4IBAQA++oenGj3aZYNldHGI0vrhpuwdgtg1uC4V8Zq4 UakKMLcoOF25OpQ6Zgw8Lq8kLEU6Rs6hSCBHzAxOaj6vMuU/A3QymUxhJS4Ibkob 2QfoqIYmYhSOnwaPEImfPZXSkzq9p5H4uBhdjwY9sr7+eqFGPDoNRymuFM/Z5zGP R/eNhtMP3J52wiQcBcSjLbumdvNvQRySK14KGt3FkQNRP5grGsZDWk9BXaFJaNSH lM2UWYiaeHRCAJl1wIx/yJ55c5opx8bo+BkheAw6Ktvon3g5xMfmfD4NHbFZqL7D XC5uDrQ694lbd2bFcnMbbHadUxGFrEw9QJMARv3d39O/gzCo -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:29 2026 by rpki-client