This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/bL9gQIhDiD73g918vkVl-JVxTsE.roa File: bL9gQIhDiD73g918vkVl-JVxTsE.roa (raw, json) Hash identifier: s7mJpH+VTK3e4a73cCTKcrUBUThYROxDCJqlhiT1Gc0= Subject key identifier: 6C:BF:60:40:88:43:88:3E:F7:83:DD:7C:BE:45:65:F8:95:71:4E:C1 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C803543862FCA6F52C2899BEE87B558 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/bL9gQIhDiD73g918vkVl-JVxTsE.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215595 IP address blocks: 2a0f:7803:fe30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:35:43:86:2f:ca:6f:52:c2:89:9b:ee:87:b5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cbf60408843883ef783dd7cbe4565f895714ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:63:4c:e3:5b:96:a2:38:b4:c1:fa:b8:b7: 23:27:4c:75:d3:cc:04:05:6e:e4:68:ef:38:f1:94: 0b:e8:b1:06:a8:f2:93:ee:e1:03:d4:a3:c5:af:74: 1e:55:7c:47:22:57:89:94:6d:3b:92:24:31:03:c2: 1b:13:68:93:8e:a7:49:da:72:32:e5:bb:8c:71:89: 43:4b:1d:1c:bb:2f:0e:11:be:b0:87:fb:75:98:7d: 04:4b:fa:fd:33:26:cd:11:dc:43:fb:9e:d7:1d:eb: d4:15:20:a5:7f:ce:b1:09:a8:10:34:f2:80:0a:6c: 16:6f:c4:a9:94:42:6c:86:6f:79:63:27:b0:b2:be: 4d:70:6a:26:f6:e3:6c:4d:44:b1:90:4e:ac:81:88: 2e:0c:18:14:c8:8a:26:1e:79:6d:22:0d:a6:f8:8a: 0e:84:dc:e4:3e:71:82:30:b2:5b:15:86:e5:46:03: fd:85:d4:c0:58:13:1a:78:02:80:da:fe:4b:3c:94: e5:33:87:41:47:bb:05:31:60:b9:52:76:1b:fe:fc: aa:af:6f:18:67:69:7e:8b:17:8c:93:a8:e2:10:a9: 1f:dc:ab:df:f6:78:4f:81:01:d1:48:87:8e:33:98: e4:3a:58:fa:ce:f5:00:6e:7b:7a:1e:17:df:dc:38: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BF:60:40:88:43:88:3E:F7:83:DD:7C:BE:45:65:F8:95:71:4E:C1 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/bL9gQIhDiD73g918vkVl-JVxTsE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fe30::/44 Signature Algorithm: sha256WithRSAEncryption 2a:8d:f4:47:10:dd:47:fd:4b:16:6e:f9:19:a1:c4:9f:38:ce: 5c:d7:66:06:57:c6:04:92:a4:d1:b0:e4:3a:25:80:ec:5a:5c: 1c:80:0e:94:ab:e4:c7:c9:eb:1c:c8:ec:ce:9c:8d:81:cb:ad: 3b:b8:73:5e:9b:66:04:ff:1e:a9:ec:a6:23:66:9e:a1:64:ef: 18:49:0e:f1:00:49:0c:0a:35:e8:7f:e9:4f:5f:73:c4:a9:08: 18:76:d9:fb:2d:06:9c:bf:03:90:e0:c2:0a:ac:10:d0:1b:ad: 86:d3:f7:89:6c:44:62:eb:da:29:5e:1c:b8:2f:30:77:a1:ab: b2:77:fa:c5:38:56:ac:53:92:c3:83:db:d8:0a:d5:8d:27:21: a4:af:a7:95:08:0b:49:70:46:3c:1d:df:f9:82:e0:c6:44:dd: c3:f9:13:94:1e:c5:61:30:63:2a:cf:ff:9c:ab:00:43:89:29: d0:33:eb:1c:a8:6d:2e:c5:88:52:83:84:f0:ad:63:d7:03:a2: 3d:c4:64:35:ed:51:e2:f4:58:63:94:0a:43:ef:c2:94:fc:3d: eb:47:57:a8:64:63:e5:de:e3:04:d0:d8:a2:bf:76:d1:cb:2c: e0:c7:48:2f:7f:e1:55:34:5e:c5:9c:2f:1a:53:4c:14:a2:89: f3:75:f6:d9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gDVDhi/Kb1LCiZvuh7VYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2JmNjA0MDg4NDM4ODNlZjc4M2RkN2NiZTQ1NjVmODk1NzE0ZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4djTONblqI4tMH6uLcjJ0x108wE BW7kaO848ZQL6LEGqPKT7uED1KPFr3QeVXxHIleJlG07kiQxA8IbE2iTjqdJ2nIy 5buMcYlDSx0cuy8OEb6wh/t1mH0ES/r9MybNEdxD+57XHevUFSClf86xCagQNPKA CmwWb8SplEJshm95Yyewsr5NcGom9uNsTUSxkE6sgYguDBgUyIomHnltIg2m+IoO hNzkPnGCMLJbFYblRgP9hdTAWBMaeAKA2v5LPJTlM4dBR7sFMWC5UnYb/vyqr28Y Z2l+ixeMk6jiEKkf3Kvf9nhPgQHRSIeOM5jkOlj6zvUAbnt6Hhff3DgG/wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGy/YECIQ4g+94PdfL5FZfiVcU7BMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvYkw5Z1FJaERpRDczZzkxOHZrVmwtSlZ4VHNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/4w MA0GCSqGSIb3DQEBCwUAA4IBAQAqjfRHEN1H/UsWbvkZocSfOM5c12YGV8YEkqTR sOQ6JYDsWlwcgA6Uq+THyescyOzOnI2By607uHNem2YE/x6p7KYjZp6hZO8YSQ7x AEkMCjXof+lPX3PEqQgYdtn7LQacvwOQ4MIKrBDQG62G0/eJbERi69opXhy4LzB3 oauyd/rFOFasU5LDg9vYCtWNJyGkr6eVCAtJcEY8Hd/5guDGRN3D+ROUHsVhMGMq z/+cqwBDiSnQM+scqG0uxYhSg4TwrWPXA6I9xGQ17VHi9FhjlApD78KU/D3rR1eo ZGPl3uME0Niiv3bRyyzgx0gvf+FVNF7FnC8aU0wUoonzdfbZ -----END CERTIFICATE-----Generated at Thu Jan 8 11:28:11 2026 by rpki-client