This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/_WJEdBvc6wQSm9mOOAdsgrUmQpg.roa File: _WJEdBvc6wQSm9mOOAdsgrUmQpg.roa (raw, json) Hash identifier: xsZqFLb0UqyjblP1SsXFAr+L+dUV0JJpQcpddsOlBu0= Subject key identifier: FD:62:44:74:1B:DC:EB:04:12:9B:D9:8E:38:07:6C:82:B5:26:42:98 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C80265BB9D55B72E3AD892D3FF1B5C5 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/_WJEdBvc6wQSm9mOOAdsgrUmQpg.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204921 IP address blocks: 2a0f:7800:900::/40 maxlen: 48 2a0f:7803:f4b0::/44 maxlen: 48 2a0f:7806:fff0::/48 maxlen: 48 2a0f:7807::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:26:5b:b9:d5:5b:72:e3:ad:89:2d:3f:f1:b5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd6244741bdceb04129bd98e38076c82b5264298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:be:6d:ac:bc:ac:d7:3d:cc:51:75:03:7e: b4:01:6a:6d:a6:83:e9:e1:ae:78:3e:b5:6b:e9:8a: 9a:c3:6c:9a:96:e1:b0:a3:a8:9c:72:84:70:9e:4e: f5:55:33:87:4d:8b:fa:6b:a8:3e:76:ec:2b:7e:29: b4:15:2d:30:f4:11:5e:40:3a:80:1b:39:55:41:e9: cd:cd:68:0c:a3:04:e0:57:36:75:29:e4:ca:c4:cc: 7d:61:1e:41:de:27:a4:e8:be:93:17:71:dd:ad:ec: d2:2c:ed:75:92:38:ef:20:33:bc:6f:a3:a7:01:30: 7a:42:f9:7c:3a:85:2e:40:1a:b7:da:92:48:a3:7d: 5e:de:c1:07:9d:56:c9:d5:64:17:44:79:ee:60:84: 54:c4:dc:03:57:1f:bd:37:a7:a2:e9:95:f6:01:6f: a7:39:05:80:32:67:fd:75:5b:66:3d:ac:de:a3:7a: 2f:25:b8:b2:dd:75:83:3d:35:ad:88:db:1e:98:15: a4:b7:e1:c5:d8:c2:47:a4:b9:d5:18:9e:b3:0b:7f: 26:84:d1:6d:c8:a7:25:9a:9b:b5:29:9e:f5:c6:cb: 2c:d1:7f:70:cf:f8:88:77:3c:3b:37:4c:e2:07:e2: 65:69:39:d5:70:7a:b6:7b:63:5e:db:9a:68:6e:ec: 89:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:62:44:74:1B:DC:EB:04:12:9B:D9:8E:38:07:6C:82:B5:26:42:98 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/_WJEdBvc6wQSm9mOOAdsgrUmQpg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7800:900::/40 2a0f:7803:f4b0::/44 2a0f:7806:fff0::/48 2a0f:7807::/32 Signature Algorithm: sha256WithRSAEncryption 84:37:5d:94:95:1a:19:08:d2:28:92:3b:49:ba:2f:74:7b:7e: c1:2c:6d:09:d0:35:72:59:6c:58:b9:d0:25:09:0e:9c:67:96: 5b:a3:9c:c6:e6:9c:0a:4c:5b:19:cd:1e:a2:5d:f5:cb:1f:58: 25:13:76:69:81:6e:33:f7:9e:7b:18:4c:dc:b3:db:eb:f1:e1: 97:b1:54:37:3c:35:7d:f2:a1:51:07:ae:0c:77:bf:e5:a7:5b: 9e:e0:20:42:ac:1e:19:fc:ea:09:e2:90:72:5c:46:14:1e:c2: 7e:6f:32:a1:75:8a:33:de:70:13:dd:71:a6:f8:3b:cf:2d:73: 96:4e:45:3d:43:05:b4:e3:a1:4b:d8:fd:3d:9d:14:73:87:cc: ca:d5:6e:28:f9:8f:0d:f0:9a:e6:08:a8:6d:db:af:0e:f1:9c: f4:d2:c4:88:a5:ca:d7:63:67:20:cf:0e:e5:a7:97:8b:49:7c: 1d:0a:5a:b3:ef:c5:a2:b6:15:2b:6a:da:76:d7:82:54:30:70: 18:8f:bc:0f:22:ac:3b:c6:5b:a9:ce:9b:60:3c:dd:a4:04:39: d1:70:bd:41:dd:f1:65:7a:b2:6f:b1:89:8b:2a:8d:fe:1f:c1: 54:a9:47:b1:b1:ee:32:38:3f:f3:08:bd:48:c0:e0:ae:47:45: ef:2f:09:7d -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8gCZbudVbcuOtiS0/8bXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDYyNDQ3NDFiZGNlYjA0MTI5YmQ5OGUzODA3NmM4MmI1MjY0Mjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo2+bay8rNc9zFF1A360AWptpoPp 4a54PrVr6Yqaw2yaluGwo6iccoRwnk71VTOHTYv6a6g+duwrfim0FS0w9BFeQDqA GzlVQenNzWgMowTgVzZ1KeTKxMx9YR5B3iek6L6TF3HdrezSLO11kjjvIDO8b6On ATB6Qvl8OoUuQBq32pJIo31e3sEHnVbJ1WQXRHnuYIRUxNwDVx+9N6ei6ZX2AW+n OQWAMmf9dVtmPazeo3ovJbiy3XWDPTWtiNsemBWkt+HF2MJHpLnVGJ6zC38mhNFt yKclmpu1KZ71xsss0X9wz/iIdzw7N0ziB+JlaTnVcHq2e2Ne25pobuyJRQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFP1iRHQb3OsEEpvZjjgHbIK1JkKYMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvX1dKRWRCdmM2d1FTbTltT09BZHNnclVtUXBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAAjAhAwYAKg94AAkD BwQqD3gD9LADBwAqD3gG//ADBQAqD3gHMA0GCSqGSIb3DQEBCwUAA4IBAQCEN12U lRoZCNIokjtJui90e37BLG0J0DVyWWxYudAlCQ6cZ5Zbo5zG5pwKTFsZzR6iXfXL H1glE3ZpgW4z9557GEzcs9vr8eGXsVQ3PDV98qFRB64Md7/lp1ue4CBCrB4Z/OoJ 4pByXEYUHsJ+bzKhdYoz3nAT3XGm+DvPLXOWTkU9QwW046FL2P09nRRzh8zK1W4o +Y8N8JrmCKht268O8Zz00sSIpcrXY2cgzw7lp5eLSXwdClqz78WithUratp214JU MHAYj7wPIqw7xlupzptgPN2kBDnRcL1B3fFlerJvsYmLKo3+H8FUqUexse4yOD/z CL1IwOCuR0XvLwl9 -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:23 2026 by rpki-client