This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/NROqyuqZrgkc-l2rIzkJcuAkz5o.roa File: NROqyuqZrgkc-l2rIzkJcuAkz5o.roa (raw, json) Hash identifier: m/kaEyOT6UaD0mwf9f/ZTklIxcr8PhB6emD41tiijlM= Subject key identifier: 35:13:AA:CA:EA:99:AE:09:1C:FA:5D:AB:23:39:09:72:E0:24:CF:9A Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8029DA5B37FBD8D470C10784091860 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/NROqyuqZrgkc-l2rIzkJcuAkz5o.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214549 IP address blocks: 2a0f:7805::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:29:da:5b:37:fb:d8:d4:70:c1:07:84:09:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3513aacaea99ae091cfa5dab23390972e024cf9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:ba:b4:c5:44:54:7f:b2:fa:b7:8c:55:d0: 47:d6:e2:f3:0b:15:f8:f3:e9:68:cb:1b:86:45:db: 02:aa:e3:44:ca:81:2d:38:86:8e:db:2a:6c:e8:ba: b8:a1:4f:8e:19:55:da:82:ff:26:95:5c:1c:48:a6: 28:13:be:b5:a7:f3:9f:57:1b:65:aa:37:e4:77:05: 4c:5d:9a:bf:ff:2c:f7:2d:af:26:7a:97:71:8b:a5: 86:22:bf:f1:66:de:e5:b9:b0:49:5d:b9:a9:e3:23: cc:e4:bb:c4:91:b1:1d:68:51:1d:77:4a:19:57:03: fd:63:1f:9b:33:10:03:24:e7:59:88:e7:fc:e3:a6: f1:5f:f3:70:e2:89:fa:81:f6:9f:61:56:24:74:9b: 95:71:98:ca:5b:81:b4:8b:90:2d:b7:72:1d:99:fb: e6:43:b5:0b:f8:b8:64:a1:05:8c:28:c0:fb:5f:aa: ce:5a:5e:01:91:8e:9b:8b:37:11:45:e5:7e:e5:6b: 76:cc:0a:74:04:92:35:57:39:db:d9:02:b1:e9:4c: da:81:34:21:e6:8e:b9:e2:24:a3:e2:65:53:ea:1c: 27:64:c4:ea:73:8a:42:df:3f:2e:25:e5:12:4b:fa: 57:89:59:3f:31:97:90:3f:b8:3e:60:e6:10:c7:20: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:13:AA:CA:EA:99:AE:09:1C:FA:5D:AB:23:39:09:72:E0:24:CF:9A X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/NROqyuqZrgkc-l2rIzkJcuAkz5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7805::/32 Signature Algorithm: sha256WithRSAEncryption 1d:a6:07:f9:b2:93:e0:6c:0f:d1:12:e4:85:64:81:62:f6:82: 7d:8e:cb:49:0a:41:6a:67:a6:b4:ee:6b:5e:a7:40:dd:4f:d6: b5:75:97:40:58:7e:51:e9:d0:1e:9f:27:ab:4d:35:f8:5e:fe: 0b:2a:e4:d0:b5:e5:7f:5e:35:b5:64:92:bd:a8:7a:ca:bf:d7: 20:ad:f2:e9:80:43:77:1c:ed:97:69:0e:cd:fe:f8:57:1f:5b: bf:37:b1:69:e5:a8:a9:ce:2f:d3:50:3f:2e:53:e1:4a:8c:74: b0:37:e6:9e:5b:22:49:b9:d9:2c:18:c4:31:bc:71:f6:40:4b: 87:df:aa:30:3f:6c:9a:5f:c6:4d:8f:10:39:3d:93:67:9a:d1: 76:be:8f:9d:bd:60:59:00:5b:3f:90:78:da:63:0e:c9:88:f1: 62:60:77:4e:be:e6:73:a1:05:63:86:b5:cd:22:3d:4f:ef:f5: a4:b3:91:4f:57:12:fe:18:73:7e:cc:78:b5:84:aa:61:a8:d5: 91:1f:5b:ee:ae:99:e9:28:0f:65:44:47:ae:88:f2:63:56:5f: b3:6d:f8:88:d5:ef:c8:6c:cd:44:5b:28:74:37:ee:0b:2e:fc: a4:97:9a:0e:e3:d0:21:ac:cc:c9:7a:2d:b1:90:fc:53:72:00: 2e:28:df:9f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gCnaWzf72NRwwQeECRhgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTEzYWFjYWVhOTlhZTA5MWNmYTVkYWIyMzM5MDk3MmUwMjRjZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpS6tMVEVH+y+reMVdBH1uLzCxX4 8+loyxuGRdsCquNEyoEtOIaO2yps6Lq4oU+OGVXagv8mlVwcSKYoE761p/OfVxtl qjfkdwVMXZq//yz3La8mepdxi6WGIr/xZt7lubBJXbmp4yPM5LvEkbEdaFEdd0oZ VwP9Yx+bMxADJOdZiOf846bxX/Nw4on6gfafYVYkdJuVcZjKW4G0i5Att3Idmfvm Q7UL+LhkoQWMKMD7X6rOWl4BkY6bizcRReV+5Wt2zAp0BJI1Vznb2QKx6UzagTQh 5o654iSj4mVT6hwnZMTqc4pC3z8uJeUSS/pXiVk/MZeQP7g+YOYQxyDBEQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDUTqsrqma4JHPpdqyM5CXLgJM+aMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvTlJPcXl1cVpyZ2tjLWwyckl6a0pjdUFrejVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg94BTAN BgkqhkiG9w0BAQsFAAOCAQEAHaYH+bKT4GwP0RLkhWSBYvaCfY7LSQpBamemtO5r XqdA3U/WtXWXQFh+UenQHp8nq001+F7+Cyrk0LXlf141tWSSvah6yr/XIK3y6YBD dxztl2kOzf74Vx9bvzexaeWoqc4v01A/LlPhSox0sDfmnlsiSbnZLBjEMbxx9kBL h9+qMD9sml/GTY8QOT2TZ5rRdr6Pnb1gWQBbP5B42mMOyYjxYmB3Tr7mc6EFY4a1 zSI9T+/1pLORT1cS/hhzfsx4tYSqYajVkR9b7q6Z6SgPZURHrojyY1Zfs234iNXv yGzNRFsodDfuCy78pJeaDuPQIazMyXotsZD8U3IALijfnw== -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:26 2026 by rpki-client