This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/11d6BoxD65TMg25gg8qYFL4Twho.roa File: 11d6BoxD65TMg25gg8qYFL4Twho.roa (raw, json) Hash identifier: wHYAbRxtMGb1a8YF9YlUN2l/aLqLv+d7Z84qrXztslU= Subject key identifier: D7:57:7A:06:8C:43:EB:94:CC:83:6E:60:83:CA:98:14:BE:13:C2:1A Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802FD25B1258DC6B03E3A6B4213116 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/11d6BoxD65TMg25gg8qYFL4Twho.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214747 IP address blocks: 2a0f:7803:faa0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2f:d2:5b:12:58:dc:6b:03:e3:a6:b4:21:31:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7577a068c43eb94cc836e6083ca9814be13c21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:09:18:67:04:44:af:8e:e8:55:c0:4e:bd: e5:8e:b7:c3:2e:6b:56:e9:f5:ea:5c:44:fd:38:09: f8:d4:8c:31:12:a9:49:e0:34:e2:13:56:de:e7:18: 04:c1:c0:aa:42:94:83:e8:30:26:56:85:21:93:8f: bf:e4:18:41:24:cf:1a:48:57:e0:55:5b:67:e3:cb: 79:0b:45:4b:ea:d1:d1:81:85:ef:a4:ee:29:cf:e1: ee:d5:9a:34:cb:c8:02:df:99:8a:74:6a:d5:85:66: cf:0c:a7:e3:07:19:ab:47:82:95:32:a9:b7:91:be: 0c:51:07:01:54:cc:ab:73:89:f6:8b:1a:72:f1:f6: e0:65:f2:f5:7f:76:8c:60:11:f9:5c:47:6e:b8:a3: a2:81:64:f1:c6:2d:bf:51:c9:8b:af:ab:c1:09:02: dd:b3:78:74:76:79:d8:a3:2a:7f:e7:8b:db:0e:f5: f3:2a:66:24:3b:03:73:e8:ac:31:6d:00:87:ee:f6: 0d:ea:71:77:00:03:41:5c:68:5f:1e:0e:52:b2:45: 62:28:0f:e3:ed:a5:e5:f0:d5:9a:80:8d:5d:ba:2b: 0c:a8:ee:32:94:73:d6:b8:3e:6c:9d:59:51:ef:58: 15:e8:9a:cc:a4:5e:61:5b:e6:97:5e:64:27:80:44: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:57:7A:06:8C:43:EB:94:CC:83:6E:60:83:CA:98:14:BE:13:C2:1A X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/11d6BoxD65TMg25gg8qYFL4Twho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:faa0::/44 Signature Algorithm: sha256WithRSAEncryption ae:b8:8d:90:71:97:cd:ec:e1:b4:db:08:8a:66:76:4f:f5:6f: c9:9e:96:81:43:59:ab:c2:74:66:aa:d2:c3:38:75:b4:5d:4b: b2:c4:28:1a:09:c8:0a:28:5f:99:16:69:cc:32:cd:bf:e5:61: 4c:8e:cb:48:d4:10:03:00:ad:dc:c2:ec:d2:a2:42:c0:c0:20: e0:0e:0c:45:ab:9f:88:06:a1:ab:b6:aa:71:bb:eb:e7:9c:a7: 29:1e:3d:7e:49:0c:51:14:58:a4:63:d8:b7:f4:ae:f2:06:0e: de:43:f2:eb:09:17:cb:52:be:0b:71:a3:6a:f3:76:c8:ce:74: c6:b9:17:34:55:f0:b9:e8:78:c1:dd:06:8a:95:8e:96:e3:e1: 76:00:d4:69:31:8a:54:c2:4b:70:42:18:b0:b6:79:9c:f5:3e: b2:08:08:02:4f:14:26:30:30:94:4d:eb:0e:c6:53:c2:15:80: 5c:40:e5:d4:20:ac:b3:1f:50:59:19:2a:13:9d:a5:6a:86:28: 11:78:71:97:29:46:6f:29:e5:9b:aa:64:94:7c:70:ea:6b:eb: c5:77:15:29:98:15:44:34:c2:71:3a:fc:e9:e2:3e:5d:55:d4: 03:3a:36:78:f4:e9:65:d6:39:27:54:e6:9b:67:92:95:ae:d7: 4b:67:16:11 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gC/SWxJY3GsD46a0ITEWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzU3N2EwNjhjNDNlYjk0Y2M4MzZlNjA4M2NhOTgxNGJlMTNjMjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxgJGGcERK+O6FXATr3ljrfDLmtW 6fXqXET9OAn41IwxEqlJ4DTiE1be5xgEwcCqQpSD6DAmVoUhk4+/5BhBJM8aSFfg VVtn48t5C0VL6tHRgYXvpO4pz+Hu1Zo0y8gC35mKdGrVhWbPDKfjBxmrR4KVMqm3 kb4MUQcBVMyrc4n2ixpy8fbgZfL1f3aMYBH5XEduuKOigWTxxi2/UcmLr6vBCQLd s3h0dnnYoyp/54vbDvXzKmYkOwNz6KwxbQCH7vYN6nF3AANBXGhfHg5SskViKA/j 7aXl8NWagI1duisMqO4ylHPWuD5snVlR71gV6JrMpF5hW+aXXmQngETx+QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNdXegaMQ+uUzINuYIPKmBS+E8IaMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvMTFkNkJveEQ2NVRNZzI1Z2c4cVlGTDRUd2hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/qg MA0GCSqGSIb3DQEBCwUAA4IBAQCuuI2QcZfN7OG02wiKZnZP9W/JnpaBQ1mrwnRm qtLDOHW0XUuyxCgaCcgKKF+ZFmnMMs2/5WFMjstI1BADAK3cwuzSokLAwCDgDgxF q5+IBqGrtqpxu+vnnKcpHj1+SQxRFFikY9i39K7yBg7eQ/LrCRfLUr4LcaNq83bI znTGuRc0VfC56HjB3QaKlY6W4+F2ANRpMYpUwktwQhiwtnmc9T6yCAgCTxQmMDCU TesOxlPCFYBcQOXUIKyzH1BZGSoTnaVqhigReHGXKUZvKeWbqmSUfHDqa+vFdxUp mBVENMJxOvzp4j5dVdQDOjZ49Oll1jknVOabZ5KVrtdLZxYR -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:57 2026 by rpki-client