This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NxpqQ-i3tajkFVYXBRtGN3pm7dM.roa File: NxpqQ-i3tajkFVYXBRtGN3pm7dM.roa (raw, json) Hash identifier: eqc8wZ4UfJGPG7TagMeYE7X2IISmRcP0Sv9lWlsQA6s= Subject key identifier: 37:1A:6A:43:E8:B7:B5:A8:E4:15:56:17:05:1B:46:37:7A:66:ED:D3 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1D0DC2828CFB0E7170ABCEA81DE35 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NxpqQ-i3tajkFVYXBRtGN3pm7dM.roa Signing time: Fri 02 Jan 2026 18:21:52 +0000 ROA not before: Fri 02 Jan 2026 18:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214652 IP address blocks: 2a13:c902::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d0:dc:28:28:cf:b0:e7:17:0a:bc:ea:81:de:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=371a6a43e8b7b5a8e4155617051b46377a66edd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:3d:66:02:79:24:55:df:4f:cb:5d:fe:b5: f0:e9:17:ed:69:49:4f:24:f3:27:1f:19:8f:3c:cc: 4b:cf:c5:ff:a9:30:31:04:68:49:02:30:ab:81:e8: a1:82:5a:ed:7b:c2:21:e6:56:47:87:bf:e7:87:e9: b0:d7:7b:1a:d0:44:37:6b:c2:30:13:52:84:47:6f: 4c:38:0a:5d:16:31:15:46:7f:cb:44:b6:15:be:8a: bf:cf:f1:92:14:7e:da:8d:7f:6e:ce:97:ff:9c:09: c5:7a:6d:2f:1e:be:f5:a7:77:d0:40:69:d0:ae:04: 04:d6:bd:50:bb:ec:fa:4c:6a:32:08:96:56:50:ea: e0:8f:c2:a8:93:1d:a0:18:fc:ab:02:a8:b3:25:3a: 92:0c:ea:c6:d1:80:35:29:9e:25:6f:f3:3c:e6:53: 43:0e:02:e6:4e:e9:8b:d1:80:e2:ae:28:22:1e:d7: e9:49:fa:00:f0:f3:80:2f:1c:74:94:a7:36:07:b4: 0f:39:8a:7d:e2:e9:76:a9:e8:ce:55:cb:a4:b1:fc: ca:13:55:9f:19:62:71:ab:6d:55:62:33:b9:8f:ba: fb:4b:32:f5:fc:ca:8b:aa:46:da:33:f9:f3:eb:03: 61:30:5d:7c:20:ee:68:7c:34:1c:e3:b7:e7:73:18: 64:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1A:6A:43:E8:B7:B5:A8:E4:15:56:17:05:1B:46:37:7A:66:ED:D3 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NxpqQ-i3tajkFVYXBRtGN3pm7dM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c902::/32 Signature Algorithm: sha256WithRSAEncryption 57:aa:4f:65:dc:a5:dc:90:78:a9:58:a2:94:0d:86:42:55:17: 12:16:ad:cd:81:7c:c0:8a:b0:97:ac:c8:f3:7c:69:78:3d:4e: 11:65:65:62:40:c6:ef:20:7c:f2:45:f4:b5:5c:dd:fc:54:cc: 51:ea:b1:70:1d:16:81:0c:da:07:af:7e:af:3c:be:22:f1:04: 75:a4:d9:9f:a8:a2:44:f5:9f:08:87:76:b6:bf:fd:af:4d:16: b2:3d:bc:2d:b5:f7:cb:db:2f:f9:70:b8:25:5a:79:c8:17:5e: 7f:17:1c:49:bf:29:6a:60:d9:d3:2c:0e:d8:5d:e1:85:87:6b: d9:bd:47:c3:a6:72:03:53:41:52:92:39:a7:33:f1:57:26:77: 33:bb:46:04:ce:8a:c3:07:4b:97:2f:23:6a:be:86:98:fd:24: 8e:1c:aa:79:b9:74:39:2a:ca:db:53:b8:71:b8:7f:61:e0:5c: 4b:6f:56:52:64:83:a5:7f:ca:0a:f0:45:17:ac:64:b5:5c:bc: aa:66:3c:07:64:31:22:b0:f8:36:b5:c7:58:d3:39:89:9c:c0: 41:3c:4d:b9:ef:b9:65:c1:eb:8e:cd:12:b7:fc:03:04:db:80: c7:4f:a9:97:fd:9e:42:0d:95:19:56:ca:c3:3a:f2:6e:d2:57: 84:ef:b0:29 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8dDcKCjPsOcXCrzqgd41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzFhNmE0M2U4YjdiNWE4ZTQxNTU2MTcwNTFiNDYzNzdhNjZlZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsas9ZgJ5JFXfT8td/rXw6RftaUlP JPMnHxmPPMxLz8X/qTAxBGhJAjCrgeihglrte8Ih5lZHh7/nh+mw13sa0EQ3a8Iw E1KER29MOApdFjEVRn/LRLYVvoq/z/GSFH7ajX9uzpf/nAnFem0vHr71p3fQQGnQ rgQE1r1Qu+z6TGoyCJZWUOrgj8Kokx2gGPyrAqizJTqSDOrG0YA1KZ4lb/M85lND DgLmTumL0YDirigiHtfpSfoA8POALxx0lKc2B7QPOYp94ul2qejOVcuksfzKE1Wf GWJxq21VYjO5j7r7SzL1/MqLqkbaM/nz6wNhMF18IO5ofDQc47fncxhkzwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDcaakPot7Wo5BVWFwUbRjd6Zu3TMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvTnhwcVEtaTN0YWprRlZZWEJSdEdOM3BtN2RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPJAjAN BgkqhkiG9w0BAQsFAAOCAQEAV6pPZdyl3JB4qViilA2GQlUXEhatzYF8wIqwl6zI 83xpeD1OEWVlYkDG7yB88kX0tVzd/FTMUeqxcB0WgQzaB69+rzy+IvEEdaTZn6ii RPWfCId2tr/9r00Wsj28LbX3y9sv+XC4JVp5yBdefxccSb8pamDZ0ywO2F3hhYdr 2b1Hw6ZyA1NBUpI5pzPxVyZ3M7tGBM6KwwdLly8jar6GmP0kjhyqebl0OSrK21O4 cbh/YeBcS29WUmSDpX/KCvBFF6xktVy8qmY8B2QxIrD4NrXHWNM5iZzAQTxNue+5 ZcHrjs0St/wDBNuAx0+pl/2eQg2VGVbKwzrybtJXhO+wKQ== -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:41 2026 by rpki-client