This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KeXwBIhdac2Ug8u0FNWCXnkBiSU.roa File: KeXwBIhdac2Ug8u0FNWCXnkBiSU.roa (raw, json) Hash identifier: 4YmtFdYfBrK/97ypSCwp2Q6056IseHbQ/eLbeJ1GVhc= Subject key identifier: 29:E5:F0:04:88:5D:69:CD:94:83:CB:B4:14:D5:82:5E:79:01:89:25 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1B538BC0ECA3DA0F8FB14F1C49F21 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KeXwBIhdac2Ug8u0FNWCXnkBiSU.roa Signing time: Fri 02 Jan 2026 18:21:45 +0000 ROA not before: Fri 02 Jan 2026 18:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50340 IP address blocks: 2a10:3840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b5:38:bc:0e:ca:3d:a0:f8:fb:14:f1:c4:9f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29e5f004885d69cd9483cbb414d5825e79018925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:69:c6:7d:5c:73:13:71:55:da:d9:a7:d0:73: de:43:8e:fa:da:c9:51:09:f8:8e:bc:25:71:d7:2e: d4:ca:37:d8:72:0c:53:ea:7e:99:0e:cb:3e:22:91: 89:e2:86:e7:64:d1:26:36:98:b5:90:22:17:4a:df: b1:9f:bc:b0:3c:66:68:f5:70:db:54:f4:75:38:f2: 90:bb:3a:30:3b:b7:bd:e0:6e:e1:a9:6c:7c:8a:41: 7d:54:32:f9:d9:5d:ec:af:31:af:f3:ae:8a:9b:3f: da:91:98:50:ae:f8:d4:53:21:95:95:c2:a4:b2:9f: 99:d9:a3:95:a3:0b:2e:89:14:f1:5e:7f:9d:21:72: cd:1e:65:c0:10:96:60:ef:5d:a8:55:ed:5d:ea:1f: 1f:e0:b1:5c:8b:15:84:a3:d6:70:0c:d6:8d:09:77: 1c:07:1d:49:85:7b:fe:a4:83:fe:e0:1a:0e:71:bb: b7:34:4e:40:f9:62:5d:ac:6f:78:66:89:b9:70:cf: 48:44:b2:5e:ab:ab:fa:97:c9:2c:85:72:2c:9f:2f: f3:34:d5:fb:9c:d4:c2:35:72:3c:f5:f4:f5:b5:ab: ec:3a:73:98:fb:2a:05:ed:5a:82:05:5a:51:17:4f: c5:57:63:ee:3c:10:da:fc:25:ca:35:6d:33:83:2c: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:F0:04:88:5D:69:CD:94:83:CB:B4:14:D5:82:5E:79:01:89:25 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KeXwBIhdac2Ug8u0FNWCXnkBiSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:3840::/29 Signature Algorithm: sha256WithRSAEncryption 5f:34:f4:8b:e3:8c:86:cb:01:4f:af:f7:5d:9f:d8:7a:da:ae: 94:a5:d5:44:e6:35:b3:a4:a3:f5:3b:5b:72:fa:dc:a8:a7:c4: da:55:52:66:3c:2d:3d:78:03:35:b4:48:0f:3c:b8:cf:e9:5e: ba:7c:98:c5:48:a6:65:69:7d:9e:54:91:a8:08:8e:06:9e:e3: 49:0a:7a:86:ef:3f:b9:82:77:32:2c:a0:14:57:f6:45:34:89: 45:e5:a1:7c:a8:ac:3f:8e:50:9f:74:b4:30:a1:bd:ae:b1:de: 9e:a8:72:36:b2:75:e9:fe:b0:27:b1:49:b8:0d:05:59:d2:2e: cb:36:61:3d:4b:4b:2a:7a:a9:e8:15:61:c0:ba:39:d8:a0:9c: a9:fe:eb:b1:12:f4:c7:04:5c:02:c4:94:2d:57:18:28:1a:c4: d9:66:fd:fe:8f:7d:34:af:e3:0b:03:73:05:17:1b:a3:fe:a4: 02:77:d4:bc:18:42:a0:ea:22:84:e8:6e:f8:b5:9f:7f:9c:95: 86:99:0a:18:db:93:50:18:44:0d:60:3e:3c:22:e5:a1:53:15: c8:aa:44:7a:dd:a1:12:bd:97:11:2c:48:02:f2:ef:13:5e:60: 0f:ad:90:06:26:e1:d4:32:57:6c:1c:62:46:70:35:d3:3c:0c: 2d:f5:23:f4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8bU4vA7KPaD4+xTxxJ8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWU1ZjAwNDg4NWQ2OWNkOTQ4M2NiYjQxNGQ1ODI1ZTc5MDE4OTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mnGfVxzE3FV2tmn0HPeQ4762slR CfiOvCVx1y7UyjfYcgxT6n6ZDss+IpGJ4obnZNEmNpi1kCIXSt+xn7ywPGZo9XDb VPR1OPKQuzowO7e94G7hqWx8ikF9VDL52V3srzGv866Kmz/akZhQrvjUUyGVlcKk sp+Z2aOVowsuiRTxXn+dIXLNHmXAEJZg712oVe1d6h8f4LFcixWEo9ZwDNaNCXcc Bx1JhXv+pIP+4BoOcbu3NE5A+WJdrG94Zom5cM9IRLJeq6v6l8kshXIsny/zNNX7 nNTCNXI89fT1tavsOnOY+yoF7VqCBVpRF0/FV2PuPBDa/CXKNW0zgyzYEwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCnl8ASIXWnNlIPLtBTVgl55AYklMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvS2VYd0JJaGRhYzJVZzh1MEZOV0NYbmtCaVNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhA4QDAN BgkqhkiG9w0BAQsFAAOCAQEAXzT0i+OMhssBT6/3XZ/YetqulKXVROY1s6Sj9Ttb cvrcqKfE2lVSZjwtPXgDNbRIDzy4z+leunyYxUimZWl9nlSRqAiOBp7jSQp6hu8/ uYJ3MiygFFf2RTSJReWhfKisP45Qn3S0MKG9rrHenqhyNrJ16f6wJ7FJuA0FWdIu yzZhPUtLKnqp6BVhwLo52KCcqf7rsRL0xwRcAsSULVcYKBrE2Wb9/o99NK/jCwNz BRcbo/6kAnfUvBhCoOoihOhu+LWff5yVhpkKGNuTUBhEDWA+PCLloVMVyKpEet2h Er2XESxIAvLvE15gD62QBibh1DJXbBxiRnA10zwMLfUj9A== -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:40 2026 by rpki-client