This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/RXw5HOumOUEDzsRrCnX0-IiFeGQ.roa File: RXw5HOumOUEDzsRrCnX0-IiFeGQ.roa (raw, json) Hash identifier: cSvUFisrXwewCy+BWd29O2pySJA/1anHp4ZmSXl9JVU= Subject key identifier: 45:7C:39:1C:EB:A6:39:41:03:CE:C4:6B:0A:75:F4:F8:88:85:78:64 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758FBF8CFF609753651006D12A33C08 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/RXw5HOumOUEDzsRrCnX0-IiFeGQ.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 2a09:e1c1:f100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fb:f8:cf:f6:09:75:36:51:00:6d:12:a3:3c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=457c391ceba6394103cec46b0a75f4f888857864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:9c:6a:e5:e7:29:2c:f8:b2:b0:11:e4:d5: f3:87:a4:4b:3b:09:ad:f8:13:23:38:4a:be:cf:ff: b8:ac:99:59:38:fc:19:13:a6:87:ac:97:79:b0:dc: 71:46:6a:8a:4f:96:6c:bc:36:1d:90:7c:52:08:a7: 05:f8:96:7d:14:ba:c7:1f:97:36:4b:fb:17:e2:b7: f9:57:8d:2e:4d:72:22:1c:2d:8f:1a:93:08:b9:8d: 52:23:8a:99:12:3f:73:dc:5e:28:24:1d:53:c8:41: 46:e5:6a:6b:d1:d5:a7:90:1a:34:b4:ec:42:de:a9: 98:83:03:cc:1c:ee:15:fc:be:a7:8e:f6:52:94:48: 6b:d0:0f:cc:c4:f8:37:b8:f8:39:21:d4:d0:21:2e: b2:88:36:44:9e:16:5b:15:db:ec:3e:a8:b6:da:de: 0f:26:ef:b8:a0:62:0a:5d:3b:15:8d:ee:c1:c0:64: a0:e7:c1:03:f2:1b:c0:1e:b6:5d:7e:53:a5:bb:74: 03:90:6c:5f:87:2b:84:af:fa:ad:ea:d2:5d:1e:24: 3f:46:03:20:0c:0a:5c:5a:d0:1e:b3:ae:64:05:89: 35:4c:8e:65:ec:da:3a:68:6b:20:36:b4:71:0c:16: 2d:25:8f:18:30:63:14:25:29:e9:12:6a:75:1c:73: f9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7C:39:1C:EB:A6:39:41:03:CE:C4:6B:0A:75:F4:F8:88:85:78:64 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/RXw5HOumOUEDzsRrCnX0-IiFeGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:e1c1:f100::/48 Signature Algorithm: sha256WithRSAEncryption 90:50:02:57:10:ae:5d:e9:10:af:84:3a:46:2d:0a:11:7b:03: eb:a0:6b:e1:47:eb:a5:dd:7c:a8:97:51:82:1b:9d:c0:32:01: 8d:90:cd:ba:eb:0c:16:75:32:2e:d9:7d:15:df:97:53:9b:9a: 1f:43:bf:25:c9:b0:6c:ae:b0:25:70:b5:07:44:61:10:cf:92: fe:5d:79:cc:22:2b:8f:08:5b:68:23:96:ec:da:b2:f3:59:e3: d9:7d:21:cc:86:9c:30:cc:02:8a:69:e0:fd:67:ae:e9:a3:9c: 2c:51:65:3b:ce:35:58:7f:e3:25:3e:c9:2d:c8:00:14:7f:2d: 04:b5:45:72:66:bc:af:61:99:bf:d4:42:89:0d:86:3d:7f:89: 1f:e7:92:67:7b:e5:f9:7d:34:da:e3:fe:eb:21:bd:e3:da:af: a5:96:f4:9a:b1:58:e2:bb:44:bd:21:56:e7:22:a3:f5:8e:92: 91:6c:35:d0:6c:96:af:0e:ea:5a:8c:d1:ce:77:fb:0e:dc:74: d0:2b:c0:44:0b:b4:61:0d:eb:82:00:c9:1d:e0:db:c8:93:4c: d1:9e:26:b5:b1:1f:42:ed:fc:71:6c:94:94:ed:a0:1c:1e:23: a0:f7:4f:dc:d0:0d:6d:18:ab:e2:cb:39:9c:77:03:15:db:5e: 90:20:97:63 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WPv4z/YJdTZRAG0SozwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTdjMzkxY2ViYTYzOTQxMDNjZWM0NmIwYTc1ZjRmODg4ODU3ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyOcauXnKSz4srAR5NXzh6RLOwmt +BMjOEq+z/+4rJlZOPwZE6aHrJd5sNxxRmqKT5ZsvDYdkHxSCKcF+JZ9FLrHH5c2 S/sX4rf5V40uTXIiHC2PGpMIuY1SI4qZEj9z3F4oJB1TyEFG5Wpr0dWnkBo0tOxC 3qmYgwPMHO4V/L6njvZSlEhr0A/MxPg3uPg5IdTQIS6yiDZEnhZbFdvsPqi22t4P Ju+4oGIKXTsVje7BwGSg58ED8hvAHrZdflOlu3QDkGxfhyuEr/qt6tJdHiQ/RgMg DApcWtAes65kBYk1TI5l7No6aGsgNrRxDBYtJY8YMGMUJSnpEmp1HHP5dwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEV8ORzrpjlBA87Eawp19PiIhXhkMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvUlh3NUhPdW1PVUVEenNSckNuWDAtSWlGZUdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgnhwfEA MA0GCSqGSIb3DQEBCwUAA4IBAQCQUAJXEK5d6RCvhDpGLQoRewProGvhR+ul3Xyo l1GCG53AMgGNkM266wwWdTIu2X0V35dTm5ofQ78lybBsrrAlcLUHRGEQz5L+XXnM IiuPCFtoI5bs2rLzWePZfSHMhpwwzAKKaeD9Z67po5wsUWU7zjVYf+MlPsktyAAU fy0EtUVyZryvYZm/1EKJDYY9f4kf55Jne+X5fTTa4/7rIb3j2q+llvSasVjiu0S9 IVbnIqP1jpKRbDXQbJavDupajNHOd/sO3HTQK8BEC7RhDeuCAMkd4NvIk0zRnia1 sR9C7fxxbJSU7aAcHiOg90/c0A1tGKviyzmcdwMV216QIJdj -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:38 2026 by rpki-client