This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/c0vHcQJnW-amu0d6fFqONTyEgjs.roa File: c0vHcQJnW-amu0d6fFqONTyEgjs.roa (raw, json) Hash identifier: S5Qlqq+BiHg5R0+cePVqJp08G/Fniwua0u0odBjsYZk= Subject key identifier: 73:4B:C7:71:02:67:5B:E6:A6:BB:47:7A:7C:5A:8E:35:3C:84:82:3B Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C80346AD2A356DA0131D1C65FA0F607 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/c0vHcQJnW-amu0d6fFqONTyEgjs.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215575 IP address blocks: 2a0f:7803:fa90::/44 maxlen: 48 2a0f:7803:fb20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:34:6a:d2:a3:56:da:01:31:d1:c6:5f:a0:f6:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=734bc77102675be6a6bb477a7c5a8e353c84823b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:af:cf:fb:43:46:e7:68:f0:15:e7:b3:77:ef: f2:b7:33:36:48:d4:a6:38:d3:50:79:73:93:75:a1: 18:1e:c8:eb:ab:87:a3:d7:21:ab:2d:91:66:38:3b: 1b:d4:ac:6c:01:94:19:7d:62:aa:5d:18:95:7a:b8: 7a:d6:97:8a:40:ab:8f:8f:ef:3f:e7:14:20:01:48: 1a:2c:72:b2:7f:34:40:e9:40:5e:9a:c2:37:be:2f: ae:ab:09:c9:1d:3c:93:ff:34:d2:ee:d3:4a:e7:be: 03:e8:3f:4d:09:46:79:93:23:7c:08:a1:2b:a7:d9: b2:51:96:ca:af:e4:27:0b:14:75:07:c2:e1:ad:51: b3:d7:1a:7b:ed:c8:67:2c:ee:69:41:1c:b5:1f:bb: 4f:16:fe:be:82:b0:51:71:c9:07:77:ee:7e:4f:0b: c7:7a:c9:cd:84:b3:30:bf:22:f3:24:23:7c:db:59: dc:01:3c:9a:f8:b5:5e:b5:9e:ca:b6:bc:00:12:23: 7f:70:66:96:ab:b9:04:ac:f4:7d:52:b3:c0:77:03: 04:34:7c:19:3e:d8:3e:51:a9:a7:c9:13:67:39:97: 2f:49:ed:9d:40:9d:91:2d:5b:8e:b7:c4:92:a2:36: 30:a2:00:c0:ce:10:2f:f0:1a:52:1a:b0:b2:05:cd: 40:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4B:C7:71:02:67:5B:E6:A6:BB:47:7A:7C:5A:8E:35:3C:84:82:3B X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/c0vHcQJnW-amu0d6fFqONTyEgjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fa90::/44 2a0f:7803:fb20::/44 Signature Algorithm: sha256WithRSAEncryption 51:b2:9d:48:34:05:d6:e8:dc:41:43:e0:43:20:7b:a8:e4:93: c4:86:5b:30:db:39:69:ca:5f:86:03:97:92:37:fd:39:cd:64: 3c:a9:cf:c2:f8:49:30:f6:c6:80:6d:6b:13:86:4c:49:89:5e: 09:6d:55:12:7c:5d:b2:c0:6f:80:39:65:39:64:f5:28:14:db: 37:77:62:3f:cb:39:f1:c8:43:d8:f6:e6:d9:41:0a:32:a1:a5: 61:2b:bb:7c:33:ff:c3:ea:9c:18:3d:37:5f:95:af:0b:07:0c: 52:00:63:ee:c1:7a:73:ce:ee:f7:e8:da:b3:fc:e1:3e:50:48: 35:ec:11:e6:7b:cd:f9:11:ca:bb:62:11:0f:7e:35:3d:d6:ea: 8a:b7:e1:1a:fb:63:91:b8:75:ae:fb:a3:b5:07:1a:17:70:2a: 74:1a:82:2c:22:17:5c:90:84:1f:db:b5:99:a0:e8:8e:2b:58: bd:36:a0:ea:4a:24:9b:c9:64:fb:88:e2:75:11:d7:bc:a2:5d: aa:35:23:25:07:20:dd:46:48:17:cd:34:ef:cd:a7:69:6f:6a: 31:72:34:46:01:24:19:c5:7d:e4:e2:4a:75:3d:39:aa:6d:72: 9d:38:f4:d2:39:4c:bf:3d:35:d3:3c:6c:d4:f7:4e:79:ed:5e: 3e:77:2d:9b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gDRq0qNW2gEx0cZfoPYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzRiYzc3MTAyNjc1YmU2YTZiYjQ3N2E3YzVhOGUzNTNjODQ4MjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K/P+0NG52jwFeezd+/ytzM2SNSm ONNQeXOTdaEYHsjrq4ej1yGrLZFmODsb1KxsAZQZfWKqXRiVerh61peKQKuPj+8/ 5xQgAUgaLHKyfzRA6UBemsI3vi+uqwnJHTyT/zTS7tNK574D6D9NCUZ5kyN8CKEr p9myUZbKr+QnCxR1B8LhrVGz1xp77chnLO5pQRy1H7tPFv6+grBRcckHd+5+TwvH esnNhLMwvyLzJCN821ncATya+LVetZ7KtrwAEiN/cGaWq7kErPR9UrPAdwMENHwZ Ptg+UamnyRNnOZcvSe2dQJ2RLVuOt8SSojYwogDAzhAv8BpSGrCyBc1ASQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHNLx3ECZ1vmprtHenxajjU8hII7MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvYzB2SGNRSm5XLWFtdTBkNmZGcU9OVHlFZ2pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg94A/qQ AwcEKg94A/sgMA0GCSqGSIb3DQEBCwUAA4IBAQBRsp1INAXW6NxBQ+BDIHuo5JPE hlsw2zlpyl+GA5eSN/05zWQ8qc/C+Ekw9saAbWsThkxJiV4JbVUSfF2ywG+AOWU5 ZPUoFNs3d2I/yznxyEPY9ubZQQoyoaVhK7t8M//D6pwYPTdfla8LBwxSAGPuwXpz zu736Nqz/OE+UEg17BHme835Ecq7YhEPfjU91uqKt+Ea+2ORuHWu+6O1BxoXcCp0 GoIsIhdckIQf27WZoOiOK1i9NqDqSiSbyWT7iOJ1Ede8ol2qNSMlByDdRkgXzTTv zadpb2oxcjRGASQZxX3k4kp1PTmqbXKdOPTSOUy/PTXTPGzU90557V4+dy2b -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:20 2026 by rpki-client