This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-npOfcrVrwih5Taj9Du_RhrK2lI.roa File: 1-npOfcrVrwih5Taj9Du_RhrK2lI.roa (raw, json) Hash identifier: P7eMvrfEIigBA1LzRAoOvg6ZaXmxB8J0QUqzvpruPx0= Subject key identifier: FA:7A:4E:7D:CA:D5:AF:08:A1:E5:36:A3:F4:3B:BF:46:1A:CA:DA:52 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BBC5C39BEFEC3111299ABF7C3F43390EF Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-npOfcrVrwih5Taj9Du_RhrK2lI.roa Signing time: Wed 14 Jan 2026 11:55:19 +0000 ROA not before: Wed 14 Jan 2026 11:55:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205486 IP address blocks: 2a0f:ea45::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:5c:39:be:fe:c3:11:12:99:ab:f7:c3:f4:33:90:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 14 11:55:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa7a4e7dcad5af08a1e536a3f43bbf461acada52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:ca:2e:1c:c5:e7:02:4a:ff:a2:76:4c:2d: 98:fb:02:fd:51:c9:04:6a:7a:14:df:61:c6:7c:09: 47:bc:b8:f4:b6:5c:06:6b:60:52:03:88:d6:bd:34: 02:08:0b:80:e6:ca:91:fa:14:ce:b0:f6:cb:1c:bd: a2:57:a9:b6:a4:50:32:1f:a7:4c:23:e6:79:b2:a4: 6f:0d:90:d3:b1:79:b9:6f:08:a8:81:a7:9e:f2:35: 26:2e:2c:36:5a:74:3e:4d:f7:bf:4d:91:be:6e:ca: b7:d3:79:ec:9a:8d:8d:a3:b6:5f:c1:1c:9a:ea:33: cb:36:2f:bf:c2:41:31:d1:49:3a:84:01:85:4b:2b: 22:a1:d1:82:34:b2:f9:07:e5:de:6e:31:ec:5c:4e: 55:c8:0c:ca:53:f6:6e:4c:c8:b4:59:57:7b:1b:e1: c8:3a:c5:36:c1:ee:ae:dc:21:e4:aa:de:2e:0e:99: 00:6a:59:1c:4e:b2:72:1a:69:92:41:c2:da:16:fe: aa:53:f3:3e:16:8b:20:d1:91:fc:6d:10:5c:a1:0a: 4e:03:d7:87:b6:d6:1f:76:ac:fd:ca:42:a5:48:c5: 0e:ed:a7:f5:3a:60:fa:28:ab:30:91:8d:67:d6:13: 4c:a1:85:c5:b1:4a:2a:93:89:b2:ac:9f:7d:16:66: 4a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7A:4E:7D:CA:D5:AF:08:A1:E5:36:A3:F4:3B:BF:46:1A:CA:DA:52 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-npOfcrVrwih5Taj9Du_RhrK2lI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ea45::/32 Signature Algorithm: sha256WithRSAEncryption 5e:d5:bb:10:ca:4e:2f:1e:47:7d:18:c3:54:58:b7:54:8a:ae: 08:cf:5a:72:ba:48:8c:10:9b:30:dd:7f:21:89:1a:63:a0:9c: 63:60:f0:74:8d:d5:ff:e1:5e:bd:0e:3b:64:95:0d:fd:4f:75: 24:b9:9b:72:2c:67:8a:33:a8:cc:08:b6:0d:be:21:1a:41:45: 21:a2:19:4f:63:a0:6e:9c:18:05:03:b8:df:88:d2:cf:33:2d: 31:de:14:7f:aa:f0:38:85:ae:f7:f9:0b:8d:40:2a:9d:52:4d: 62:f8:12:b6:ce:45:0a:f6:b5:95:4b:75:90:45:68:63:08:ef: d5:7c:b4:52:e3:54:e6:18:58:03:7d:a9:66:85:a5:ac:33:ed: 37:ca:72:a4:b6:fc:89:91:1a:67:95:d3:85:32:2a:96:47:b3: 30:31:64:62:f9:7f:f3:a8:1f:63:22:42:35:10:fc:2f:49:4b: 29:dd:1c:fe:97:a8:ba:6f:06:11:84:6f:90:51:5a:5e:16:0d: 41:7a:4b:72:54:c1:04:fb:c7:09:5a:32:70:0a:32:cf:6b:e0: 56:53:a5:44:d8:13:6c:de:28:af:52:6e:d1:eb:44:df:5b:da: 94:58:71:46:a8:0f:74:3e:cc:93:e4:76:c7:47:31:3d:56:01: 49:6e:7c:bc -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZu8XDm+/sMREpmr98P0M5DvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTE0MTE1NTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTdhNGU3ZGNhZDVhZjA4YTFlNTM2YTNmNDNiYmY0NjFhY2FkYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK/KLhzF5wJK/6J2TC2Y+wL9UckE anoU32HGfAlHvLj0tlwGa2BSA4jWvTQCCAuA5sqR+hTOsPbLHL2iV6m2pFAyH6dM I+Z5sqRvDZDTsXm5bwiogaee8jUmLiw2WnQ+Tfe/TZG+bsq303nsmo2No7ZfwRya 6jPLNi+/wkEx0Uk6hAGFSysiodGCNLL5B+XebjHsXE5VyAzKU/ZuTMi0WVd7G+HI OsU2we6u3CHkqt4uDpkAalkcTrJyGmmSQcLaFv6qU/M+Fosg0ZH8bRBcoQpOA9eH ttYfdqz9ykKlSMUO7af1OmD6KKswkY1n1hNMoYXFsUoqk4myrJ99FmZKpwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPp6Tn3K1a8IoeU2o/Q7v0YaytpSMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMS1ucE9mY3JWcndpaDVUYWo5RHVfUmhySzJsSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRi Ni8xL2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoP6kUw DQYJKoZIhvcNAQELBQADggEBAF7VuxDKTi8eR30Yw1RYt1SKrgjPWnK6SIwQmzDd fyGJGmOgnGNg8HSN1f/hXr0OO2SVDf1PdSS5m3IsZ4ozqMwItg2+IRpBRSGiGU9j oG6cGAUDuN+I0s8zLTHeFH+q8DiFrvf5C41AKp1STWL4ErbORQr2tZVLdZBFaGMI 79V8tFLjVOYYWAN9qWaFpawz7TfKcqS2/ImRGmeV04UyKpZHszAxZGL5f/OoH2Mi QjUQ/C9JSyndHP6XqLpvBhGEb5BRWl4WDUF6S3JUwQT7xwlaMnAKMs9r4FZTpUTY E2zeKK9SbtHrRN9b2pRYcUaoD3Q+zJPkdsdHMT1WAUlufLw= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:07 2026 by rpki-client