This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/RgwUUVDRZpfGdebgNAdzUIoIxjM.roa File: RgwUUVDRZpfGdebgNAdzUIoIxjM.roa (raw, json) Hash identifier: bEeiyVTEKmhGTgTihmQZwb9PKUhEaNbIirD4ZjRTiVY= Subject key identifier: 46:0C:14:51:50:D1:66:97:C6:75:E6:E0:34:07:73:50:8A:08:C6:33 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8023DA218ED51D1B285AE4D0A32590 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/RgwUUVDRZpfGdebgNAdzUIoIxjM.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200827 IP address blocks: 2a0f:7802:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:23:da:21:8e:d5:1d:1b:28:5a:e4:d0:a3:25:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=460c145150d16697c675e6e0340773508a08c633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:9b:df:77:1b:fb:7b:27:c5:68:e7:cf:d0: 35:47:f4:34:d8:82:5b:d8:9e:d4:64:54:87:9e:32: 6d:9a:8d:4b:b7:49:c4:7e:86:ea:8d:15:aa:0a:ac: dd:03:9f:b4:24:90:a9:03:9b:f2:a9:a5:ef:45:fe: 65:c1:2d:49:a4:49:d2:1a:6e:32:30:e0:06:b4:1b: 14:57:1d:e6:31:70:5b:45:44:d3:ac:49:c8:41:e9: 73:61:61:bc:c7:ea:56:ae:41:ab:ac:6f:2b:fb:d7: a6:39:2e:7a:5d:57:03:52:25:06:cf:ff:09:2f:12: 71:83:dd:0c:44:d9:05:78:2e:65:69:e7:8b:63:ed: 1e:fc:24:a9:f5:f0:a1:80:dd:9a:33:f3:cf:d0:2d: c7:55:ef:bf:47:70:c5:8b:52:3a:c2:54:83:f1:f0: 7b:05:ad:41:4a:ef:97:72:30:61:e8:fb:e9:c4:21: e8:74:f2:5e:64:ab:3a:93:46:54:3d:ea:ad:0a:9e: e9:f7:47:48:bf:3c:25:26:4a:0e:8a:60:3c:3c:b4: 77:71:05:32:bf:91:53:7c:25:f6:ba:2e:af:6c:55: 91:bc:f9:ea:b0:2e:3e:af:23:63:2a:7a:3e:ce:d8: ac:f6:04:cb:8a:2b:7e:cd:ab:49:17:ec:e7:35:72: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0C:14:51:50:D1:66:97:C6:75:E6:E0:34:07:73:50:8A:08:C6:33 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/RgwUUVDRZpfGdebgNAdzUIoIxjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:f000::/36 Signature Algorithm: sha256WithRSAEncryption 5d:59:0f:b0:dd:ac:87:d6:07:37:cd:73:c9:38:13:93:ee:8c: 71:db:10:e5:b2:7a:6f:19:75:2a:dc:ab:53:ed:a8:5e:73:2a: 5e:a1:26:7b:9f:f3:b4:59:61:82:86:17:2e:31:7e:c4:92:44: dc:15:a4:24:2f:3e:40:57:d3:6b:d1:c8:09:51:51:7d:df:7e: 37:fe:f6:54:17:df:4c:17:7a:0c:3f:e4:d6:6a:1c:7f:55:10: 7e:3a:43:30:ce:cd:c0:57:c2:e8:b9:e5:c9:36:4f:5e:ca:b0: ad:23:52:a9:30:f1:f7:b2:3b:b5:9d:4a:54:88:07:a3:5d:85: 6e:c3:81:94:34:59:a9:5d:a1:d8:f5:22:5d:b6:8d:36:dc:6f: 9f:2f:a3:37:5d:97:73:f3:f4:4a:f0:0f:fd:87:79:3a:ba:03: 61:be:a2:f4:9b:9b:4c:bd:88:90:af:1a:56:f2:45:b8:01:13: 28:ef:2a:59:94:fc:98:f5:57:9a:45:86:51:05:56:a4:c2:62: 02:24:81:65:12:aa:af:30:8e:51:0a:5e:bb:ad:3d:a9:57:a1: 63:1f:15:e0:2f:b6:55:46:49:ba:b8:7c:18:0e:0a:de:40:15: ad:f3:31:2a:b7:4a:2c:b1:67:9d:6f:9f:46:f0:16:2d:a2:cc: 61:9d:b9:9f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gCPaIY7VHRsoWuTQoyWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjBjMTQ1MTUwZDE2Njk3YzY3NWU2ZTAzNDA3NzM1MDhhMDhjNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaub33cb+3snxWjnz9A1R/Q02IJb 2J7UZFSHnjJtmo1Lt0nEfobqjRWqCqzdA5+0JJCpA5vyqaXvRf5lwS1JpEnSGm4y MOAGtBsUVx3mMXBbRUTTrEnIQelzYWG8x+pWrkGrrG8r+9emOS56XVcDUiUGz/8J LxJxg90MRNkFeC5laeeLY+0e/CSp9fChgN2aM/PP0C3HVe+/R3DFi1I6wlSD8fB7 Ba1BSu+XcjBh6PvpxCHodPJeZKs6k0ZUPeqtCp7p90dIvzwlJkoOimA8PLR3cQUy v5FTfCX2ui6vbFWRvPnqsC4+ryNjKno+ztis9gTLiit+zatJF+znNXIdcQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEYMFFFQ0WaXxnXm4DQHc1CKCMYzMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvUmd3VVVWRFJacGZHZGViZ05BZHpVSW9JeGpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKg94AvAw DQYJKoZIhvcNAQELBQADggEBAF1ZD7DdrIfWBzfNc8k4E5PujHHbEOWyem8ZdSrc q1PtqF5zKl6hJnuf87RZYYKGFy4xfsSSRNwVpCQvPkBX02vRyAlRUX3ffjf+9lQX 30wXegw/5NZqHH9VEH46QzDOzcBXwui55ck2T17KsK0jUqkw8feyO7WdSlSIB6Nd hW7DgZQ0Waldodj1Il22jTbcb58vozddl3Pz9ErwD/2HeTq6A2G+ovSbm0y9iJCv GlbyRbgBEyjvKlmU/Jj1V5pFhlEFVqTCYgIkgWUSqq8wjlEKXrutPalXoWMfFeAv tlVGSbq4fBgOCt5AFa3zMSq3SiyxZ51vn0bwFi2izGGduZ8= -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:22 2026 by rpki-client