This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/T9UytsQ_ovn9dnK1mCXbVOb_JCA.roa File: T9UytsQ_ovn9dnK1mCXbVOb_JCA.roa (raw, json) Hash identifier: BRpYfJBCVF7pecyReSZ8iiYDaJaTUGj8okiMAZ1JaOk= Subject key identifier: 4F:D5:32:B6:C4:3F:A2:F9:FD:76:72:B5:98:25:DB:54:E6:FF:24:20 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C80384D76084B0FE83457532FF570B7 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/T9UytsQ_ovn9dnK1mCXbVOb_JCA.roa Signing time: Fri 02 Jan 2026 02:18:56 +0000 ROA not before: Fri 02 Jan 2026 02:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216438 IP address blocks: 2a0f:7803:fee0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:38:4d:76:08:4b:0f:e8:34:57:53:2f:f5:70:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fd532b6c43fa2f9fd7672b59825db54e6ff2420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:68:da:fc:38:92:87:fa:19:36:86:70:19: 85:19:30:a4:5f:7c:28:5b:2a:88:02:5d:5d:41:94: 66:9d:e5:e2:20:36:b5:05:87:84:c5:67:9e:5d:35: 92:4b:d3:5f:bf:a2:7f:d5:a8:81:36:c2:73:04:1e: af:19:fa:16:91:a6:71:6b:72:bf:2e:fa:c6:aa:5d: 4f:38:1f:64:f1:66:bd:d3:9a:dd:34:38:f5:c7:b4: 09:37:f3:26:40:14:40:f9:9c:25:64:e5:7f:2e:e5: 4d:1b:48:47:65:4f:43:53:5e:e5:a7:c4:b4:ce:20: 3f:16:04:7e:9c:42:8d:59:ff:82:8b:7e:ba:ca:ee: ab:0b:2f:1e:8a:9c:a1:71:36:67:40:35:88:fa:75: 57:26:15:1a:66:cf:75:50:d7:8f:bd:e0:37:c5:a7: d8:52:66:b9:6f:f4:89:d2:5d:52:9d:c9:2f:28:f0: 4a:56:ca:5f:dd:64:74:6b:02:a9:8e:dc:51:49:39: 86:62:f2:95:52:35:f3:e9:49:51:71:fc:14:90:98: a0:db:15:7f:e1:c7:e8:b8:58:5f:b1:66:45:e9:a8: 76:89:1d:5d:b2:76:1e:1e:52:95:4e:cb:2b:9a:91: 73:c9:e1:f2:00:42:b8:5f:4d:dd:ed:77:b5:4e:8a: ba:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D5:32:B6:C4:3F:A2:F9:FD:76:72:B5:98:25:DB:54:E6:FF:24:20 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/T9UytsQ_ovn9dnK1mCXbVOb_JCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fee0::/44 Signature Algorithm: sha256WithRSAEncryption 7e:6c:97:43:16:83:e3:38:c4:fc:b5:39:12:1d:53:66:4c:da: 92:46:e9:ce:82:49:ea:8b:ad:f5:d0:54:31:08:91:29:ff:19: f3:a1:72:46:c3:a6:94:c3:70:86:ee:a0:8d:9b:7b:e7:39:d1: eb:74:d8:ad:2d:cf:40:3f:37:20:d8:be:53:e3:48:6b:76:f2: 28:69:49:64:8a:f1:db:3a:d6:bf:3f:12:57:b1:15:2f:7c:bb: ff:9d:6e:12:f0:2f:a3:e3:77:44:44:bb:2e:98:e4:e0:e2:2e: 6e:ce:93:1f:17:76:4b:1a:2c:5f:52:9c:de:61:e3:61:9e:2e: 33:7a:22:dd:a5:a4:a9:be:6b:f2:77:7b:97:cf:cf:5f:1d:25: 25:e2:98:45:87:e5:f4:ab:02:00:be:2c:66:2b:06:5c:57:f7: 4c:db:a3:41:a2:70:01:6b:e8:b8:21:e4:9f:73:d8:6f:e4:81: ab:f4:d5:3f:ae:c5:ee:d5:e9:eb:79:f6:65:21:67:07:6b:87: 0b:f2:4b:67:48:57:4f:4f:f0:d9:70:dc:32:73:e4:1b:1c:8c: 39:21:da:eb:9e:a9:1c:14:c4:26:06:93:22:f8:0c:28:bd:bc: 83:7b:b5:a2:5f:dd:c0:5e:91:c7:ca:4a:87:ee:97:86:83:0b: ed:2c:9f:3e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gDhNdghLD+g0V1Mv9XC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmQ1MzJiNmM0M2ZhMmY5ZmQ3NjcyYjU5ODI1ZGI1NGU2ZmYyNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFto2vw4kof6GTaGcBmFGTCkX3wo WyqIAl1dQZRmneXiIDa1BYeExWeeXTWSS9Nfv6J/1aiBNsJzBB6vGfoWkaZxa3K/ LvrGql1POB9k8Wa905rdNDj1x7QJN/MmQBRA+ZwlZOV/LuVNG0hHZU9DU17lp8S0 ziA/FgR+nEKNWf+Ci366yu6rCy8eipyhcTZnQDWI+nVXJhUaZs91UNePveA3xafY Uma5b/SJ0l1SnckvKPBKVspf3WR0awKpjtxRSTmGYvKVUjXz6UlRcfwUkJig2xV/ 4cfouFhfsWZF6ah2iR1dsnYeHlKVTssrmpFzyeHyAEK4X03d7Xe1Toq6qQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE/VMrbEP6L5/XZytZgl21Tm/yQgMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvVDlVeXRzUV9vdm45ZG5LMW1DWGJWT2JfSkNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/7g MA0GCSqGSIb3DQEBCwUAA4IBAQB+bJdDFoPjOMT8tTkSHVNmTNqSRunOgknqi631 0FQxCJEp/xnzoXJGw6aUw3CG7qCNm3vnOdHrdNitLc9APzcg2L5T40hrdvIoaUlk ivHbOta/PxJXsRUvfLv/nW4S8C+j43dERLsumOTg4i5uzpMfF3ZLGixfUpzeYeNh ni4zeiLdpaSpvmvyd3uXz89fHSUl4phFh+X0qwIAvixmKwZcV/dM26NBonABa+i4 IeSfc9hv5IGr9NU/rsXu1enrefZlIWcHa4cL8ktnSFdPT/DZcNwyc+QbHIw5Idrr nqkcFMQmBpMi+AwovbyDe7WiX93AXpHHykqH7peGgwvtLJ8+ -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:55 2026 by rpki-client