This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/V7xta30KUq9-uLLK5ZtxoRx6PnM.roa File: V7xta30KUq9-uLLK5ZtxoRx6PnM.roa (raw, json) Hash identifier: gXwSqpEVFfDAB3soCN0VDeQIWXpsu4I2bz6Cxqa+vT4= Subject key identifier: 57:BC:6D:6B:7D:0A:52:AF:7E:B8:B2:CA:E5:9B:71:A1:1C:7A:3E:73 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8022DAD37D1919ADF31B2594FB14C6 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/V7xta30KUq9-uLLK5ZtxoRx6PnM.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199436 IP address blocks: 2a0f:7802:e000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:22:da:d3:7d:19:19:ad:f3:1b:25:94:fb:14:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57bc6d6b7d0a52af7eb8b2cae59b71a11c7a3e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:bc:bc:40:4b:0e:4b:4c:66:00:8e:46:30: bc:66:d5:55:b0:5a:27:7e:b3:84:a4:aa:dc:04:36: ad:1a:3a:58:ce:66:1a:e7:00:e6:15:9b:f5:4a:14: 0a:04:62:47:67:27:49:89:3a:55:e8:6a:28:13:10: 01:c9:a5:43:61:6a:49:f5:d0:10:de:78:8e:a4:85: 9e:07:92:5a:5f:cf:43:f3:eb:c9:f0:04:66:5e:2e: 6e:ff:2b:79:44:70:6c:ab:1f:a8:1c:2b:db:1f:94: f7:be:df:5d:ee:47:e2:46:e9:78:30:73:58:e1:90: 4f:4e:92:49:a9:4a:26:5c:02:99:73:34:ba:39:33: 98:1f:46:bf:84:35:2e:4c:aa:9b:e1:06:07:6a:2d: f1:df:34:2b:d7:7c:c9:82:00:14:68:d9:1e:2c:1f: a4:07:a1:12:b5:d5:99:04:f0:36:01:58:7b:b8:45: d7:4f:fb:bf:ec:2e:de:ef:ab:16:d3:8c:3f:d9:1f: 02:99:5e:4f:44:77:b8:b1:6f:ce:a0:2c:08:be:4c: 10:c1:ec:4d:67:fb:76:0a:d6:73:2a:ab:c5:71:f8: a8:3a:34:a5:6c:e9:36:0b:e8:5c:d0:1e:ba:20:72: 5a:e1:26:42:d8:0f:c1:d3:fd:b1:09:f4:b4:42:e2: 5a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BC:6D:6B:7D:0A:52:AF:7E:B8:B2:CA:E5:9B:71:A1:1C:7A:3E:73 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/V7xta30KUq9-uLLK5ZtxoRx6PnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e000::/39 Signature Algorithm: sha256WithRSAEncryption a4:ca:5d:29:88:0f:43:ab:e2:76:68:12:1d:26:9f:d5:86:26: 8f:2e:c8:8c:e4:53:78:25:37:6c:60:6e:3b:92:5d:c8:da:fc: e8:de:6b:31:47:09:cf:a8:a5:cc:56:dc:4c:ff:47:52:e8:4e: 24:2b:a0:e9:a8:ae:92:b9:64:d8:44:c2:bf:38:94:00:f5:00: 7a:91:5c:d7:8b:73:c9:bc:9f:c0:b1:03:7d:01:fc:a9:72:d1: c2:5b:00:43:b2:e3:fb:e9:72:3b:ef:80:c2:47:7f:a9:d3:d1: 01:57:de:96:3c:05:c3:14:de:80:a7:ff:15:58:55:84:c6:56: 20:c2:e9:15:89:80:2a:db:2f:52:8b:12:ce:3c:95:c3:b4:df: be:ad:e6:1f:77:d3:dd:69:5c:e2:f6:e2:bd:d2:48:ec:4f:f5: 1c:b0:a9:36:9e:9b:c9:3a:11:0d:fd:87:b0:f9:42:cc:a2:be: c3:70:de:34:ac:34:95:b4:28:bd:32:82:3c:af:21:1d:f8:7d: 1e:cd:e5:e2:75:04:3a:ae:ad:71:72:c9:5d:60:6a:e2:90:bd: 4a:1b:37:f4:47:1b:6f:1b:ed:eb:7b:18:9c:5c:ce:ba:3a:e8: ee:e8:91:4d:1b:dc:81:e9:05:da:00:cd:f1:c8:f8:db:6c:c9: 3c:a0:7b:fc -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gCLa030ZGa3zGyWU+xTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2JjNmQ2YjdkMGE1MmFmN2ViOGIyY2FlNTliNzFhMTFjN2EzZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhK8vEBLDktMZgCORjC8ZtVVsFon frOEpKrcBDatGjpYzmYa5wDmFZv1ShQKBGJHZydJiTpV6GooExAByaVDYWpJ9dAQ 3niOpIWeB5JaX89D8+vJ8ARmXi5u/yt5RHBsqx+oHCvbH5T3vt9d7kfiRul4MHNY 4ZBPTpJJqUomXAKZczS6OTOYH0a/hDUuTKqb4QYHai3x3zQr13zJggAUaNkeLB+k B6EStdWZBPA2AVh7uEXXT/u/7C7e76sW04w/2R8CmV5PRHe4sW/OoCwIvkwQwexN Z/t2CtZzKqvFcfioOjSlbOk2C+hc0B66IHJa4SZC2A/B0/2xCfS0QuJaewIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFe8bWt9ClKvfriyyuWbcaEcej5zMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvVjd4dGEzMEtVcTktdUxMSzVadHhvUng2UG5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKg94AuAw DQYJKoZIhvcNAQELBQADggEBAKTKXSmID0Or4nZoEh0mn9WGJo8uyIzkU3glN2xg bjuSXcja/OjeazFHCc+opcxW3Ez/R1LoTiQroOmorpK5ZNhEwr84lAD1AHqRXNeL c8m8n8CxA30B/Kly0cJbAEOy4/vpcjvvgMJHf6nT0QFX3pY8BcMU3oCn/xVYVYTG ViDC6RWJgCrbL1KLEs48lcO0376t5h93091pXOL24r3SSOxP9RywqTaem8k6EQ39 h7D5QsyivsNw3jSsNJW0KL0ygjyvIR34fR7N5eJ1BDqurXFyyV1gauKQvUobN/RH G28b7et7GJxczro66O7okU0b3IHpBdoAzfHI+NtsyTyge/w= -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:19 2026 by rpki-client