This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cTF1NLBntsuE8mC47wQjtkYEMCc.roa File: cTF1NLBntsuE8mC47wQjtkYEMCc.roa (raw, json) Hash identifier: KhsLppTA4uZrrDHEu7j6ysGHsJ76IOafWMCEoIyp+U0= Subject key identifier: 71:31:75:34:B0:67:B6:CB:84:F2:60:B8:EF:04:23:B6:46:04:30:27 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1CD003FDD06DB9CD52AE1A36497D3 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cTF1NLBntsuE8mC47wQjtkYEMCc.roa Signing time: Fri 02 Jan 2026 18:21:51 +0000 ROA not before: Fri 02 Jan 2026 18:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213542 IP address blocks: 2a0f:df45:25b::/48 maxlen: 48 2a0f:df45:fe5e::/48 maxlen: 48 2a0f:e7c3:1::/48 maxlen: 48 2a0f:ea43:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:cd:00:3f:dd:06:db:9c:d5:2a:e1:a3:64:97:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71317534b067b6cb84f260b8ef0423b646043027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:66:07:fc:3d:a0:9a:9f:0d:2c:46:68:23: 28:40:dc:6f:1c:52:f3:f1:0c:4c:ce:dd:a6:ff:49: 1d:7c:d7:25:89:17:bf:ee:99:bd:5f:71:91:10:60: 4d:f6:2f:68:50:29:e0:e0:92:35:00:94:d1:99:18: 30:a5:ee:95:c8:99:bd:f0:d5:b3:ec:66:dd:f3:18: ef:f9:81:db:87:e0:27:0b:a5:6b:a9:1c:55:8b:f4: 77:a2:26:0f:f9:d9:7a:1f:c8:4e:4c:c1:f4:93:38: d1:a9:ce:c0:1e:67:ac:dc:14:75:82:5e:45:85:80: fe:4f:eb:e4:d1:13:6d:a2:b1:69:2b:fa:26:fd:67: 78:d9:ab:91:81:73:e1:c6:78:38:e7:ac:ab:5d:43: 19:cc:4a:e8:d7:4f:e5:fa:57:81:ed:b3:7f:2f:08: 1b:45:97:0d:ad:2e:f1:ff:7d:25:e7:39:93:f4:3c: a1:52:89:1a:a9:aa:7a:78:5f:37:f7:ab:99:98:2b: f7:4e:15:1d:e5:45:35:1d:20:e6:e4:b8:d8:5d:6e: 1f:05:91:a1:94:2c:4a:93:75:b3:0f:cc:d7:67:8f: b3:4b:b1:a8:9e:c1:92:30:ee:2f:55:85:96:81:7a: ca:f0:b3:3a:1a:05:a2:b0:a7:0b:27:f3:46:bc:00: 71:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:31:75:34:B0:67:B6:CB:84:F2:60:B8:EF:04:23:B6:46:04:30:27 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cTF1NLBntsuE8mC47wQjtkYEMCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:df45:25b::/48 2a0f:df45:fe5e::/48 2a0f:e7c3:1::/48 2a0f:ea43:1::/48 Signature Algorithm: sha256WithRSAEncryption 2c:6c:94:68:8d:b7:ee:31:97:0b:67:fa:8e:91:11:21:0d:f4: 2e:4c:32:89:e8:87:ca:1d:25:cd:e9:32:e7:00:b0:b2:35:39: 54:d0:9f:13:d2:15:76:da:9b:61:a3:10:c1:a7:c6:42:02:9e: 86:68:94:05:07:96:f9:47:96:0b:3c:49:1b:a6:75:87:ae:f4: 63:66:48:ff:7c:1b:a6:74:02:ae:ab:ab:94:5a:87:46:7b:6b: 76:fc:46:a3:12:59:36:6b:6d:8f:9b:d9:fb:f0:1c:7e:55:b9: 6c:a9:3d:3a:66:9c:5e:1e:f6:f7:28:e4:c9:75:5d:9c:2f:8f: f2:a7:15:94:02:f0:f5:6a:e1:a3:83:7d:08:c9:5a:5f:17:a5: 14:88:f7:86:92:e3:25:9d:01:92:4c:5a:e2:7a:e4:b1:92:54: e4:4c:74:f4:f9:ce:17:f3:60:80:85:f1:eb:df:a3:d8:f1:9f: fc:2e:87:c1:23:53:b2:17:a0:1c:2a:4f:e0:38:f4:47:25:b1: 3d:56:de:74:2f:61:b9:77:d2:26:ed:3e:aa:b8:cf:5b:e0:ee: 30:33:80:d4:5a:a8:cb:1b:b5:7c:bd:b3:f0:4b:79:f4:f4:e1: 8b:a2:bf:43:85:37:69:81:8d:31:6d:4f:a5:08:03:27:44:ab: 0d:50:8d:b6 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/8c0AP90G25zVKuGjZJfTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTMxNzUzNGIwNjdiNmNiODRmMjYwYjhlZjA0MjNiNjQ2MDQzMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2lmB/w9oJqfDSxGaCMoQNxvHFLz 8QxMzt2m/0kdfNcliRe/7pm9X3GREGBN9i9oUCng4JI1AJTRmRgwpe6VyJm98NWz 7Gbd8xjv+YHbh+AnC6VrqRxVi/R3oiYP+dl6H8hOTMH0kzjRqc7AHmes3BR1gl5F hYD+T+vk0RNtorFpK/om/Wd42auRgXPhxng456yrXUMZzEro10/l+leB7bN/Lwgb RZcNrS7x/30l5zmT9DyhUokaqap6eF8396uZmCv3ThUd5UU1HSDm5LjYXW4fBZGh lCxKk3WzD8zXZ4+zS7GonsGSMO4vVYWWgXrK8LM6GgWisKcLJ/NGvABxKwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHExdTSwZ7bLhPJguO8EI7ZGBDAnMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvY1RGMU5MQm50c3VFOG1DNDd3UWp0a1lFTUNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKg/fRQJb AwcAKg/fRf5eAwcAKg/nwwABAwcAKg/qQwABMA0GCSqGSIb3DQEBCwUAA4IBAQAs bJRojbfuMZcLZ/qOkREhDfQuTDKJ6IfKHSXN6TLnALCyNTlU0J8T0hV22pthoxDB p8ZCAp6GaJQFB5b5R5YLPEkbpnWHrvRjZkj/fBumdAKuq6uUWodGe2t2/EajElk2 a22Pm9n78Bx+VblsqT06ZpxeHvb3KOTJdV2cL4/ypxWUAvD1auGjg30IyVpfF6UU iPeGkuMlnQGSTFrieuSxklTkTHT0+c4X82CAhfHr36PY8Z/8LofBI1OyF6AcKk/g OPRHJbE9Vt50L2G5d9Im7T6quM9b4O4wM4DUWqjLG7V8vbPwS3n09OGLor9DhTdp gY0xbU+lCAMnRKsNUI22 -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:42 2026 by rpki-client