This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/c1D7zSiFCUNHnItmTknZQxRze8Q.roa File: c1D7zSiFCUNHnItmTknZQxRze8Q.roa (raw, json) Hash identifier: L3iGD0JFjiX4ZaELhx3VnnHrz/X4NZwFm02o+45OQpU= Subject key identifier: 73:50:FB:CD:28:85:09:43:47:9C:8B:66:4E:49:D9:43:14:73:7B:C4 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8024CBC41144E8DD01DBFBF8240360 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/c1D7zSiFCUNHnItmTknZQxRze8Q.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201386 IP address blocks: 2a0f:7803:f850::/44 maxlen: 48 2a0f:7803:f8a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:24:cb:c4:11:44:e8:dd:01:db:fb:f8:24:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7350fbcd28850943479c8b664e49d94314737bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3d:37:3b:ea:ef:e6:a3:20:15:a0:46:e9:df: ed:3c:ce:c9:2e:00:c5:a6:71:cf:d5:a5:10:dc:70: a9:88:2f:f4:a6:85:a6:8d:e6:86:22:5f:9b:4f:ff: fd:87:40:a9:0d:f0:b4:f3:d3:7e:1a:26:54:d7:31: 75:c2:de:7c:3b:61:7c:fa:d8:4d:40:91:ac:b6:91: 81:86:19:97:84:d2:8b:3d:92:a6:aa:c5:26:39:e1: a3:e5:52:70:9e:09:7d:d4:63:56:af:83:b9:44:28: 13:b3:7f:28:18:e0:ae:5f:1d:75:ab:d8:33:74:4e: 25:45:ce:a9:54:0b:9f:e3:0c:3f:d7:bc:3c:f1:24: 43:60:55:d9:7c:cc:a5:e2:14:b0:b9:52:a9:d2:29: 17:ff:11:46:75:33:e8:f8:66:90:4b:e1:87:8c:c6: b5:70:d0:76:ff:88:26:28:30:13:32:80:5a:1e:fb: c7:8a:df:d5:44:93:11:f3:38:d6:8e:02:db:e4:c2: 28:1a:64:e3:9f:6c:9e:00:7d:5c:c0:02:ee:ef:78: d9:ae:51:98:e5:95:5d:df:74:9c:ca:51:34:7d:bb: c1:91:33:62:ce:88:de:e6:3b:a5:0d:a8:c4:71:90: 0b:38:c8:14:9a:e0:e1:ae:cb:a5:48:9a:ed:af:64: e7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:50:FB:CD:28:85:09:43:47:9C:8B:66:4E:49:D9:43:14:73:7B:C4 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/c1D7zSiFCUNHnItmTknZQxRze8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:f850::/44 2a0f:7803:f8a0::/44 Signature Algorithm: sha256WithRSAEncryption 40:7b:58:9b:db:22:07:b1:b2:9b:78:24:72:83:71:7d:9d:95: e7:37:7d:d8:33:9f:c2:fc:15:2d:aa:b0:90:cb:2e:98:91:02: e1:5c:05:a7:bd:16:54:dd:b8:89:55:a8:0c:51:f2:d3:b3:32: 44:66:7e:31:81:6b:00:47:a6:39:fb:0a:d7:fa:50:1c:7e:7d: f5:cf:56:bf:3b:69:c5:73:e1:da:69:23:85:4a:b0:ba:29:21: cc:a0:28:02:38:86:7a:05:2a:2e:c1:df:64:c1:f1:66:70:89: ad:f5:36:6f:c0:c6:ab:75:cb:2f:21:d2:53:9e:08:59:0f:f2: f1:7d:75:32:c6:c3:dc:cf:64:cf:c0:63:c4:a1:38:13:98:d1: c1:d1:15:92:b0:d3:fc:f0:79:0a:17:d0:a7:d7:34:a0:36:e7: 29:12:fa:86:75:31:0f:e3:d1:b7:60:b3:11:6d:c3:b6:3a:81: 45:36:ce:9e:27:51:b2:d1:2f:a2:ab:49:86:49:e3:55:02:3b: 7c:4a:b4:10:3e:ea:c7:5d:6a:85:8f:9d:4a:ed:7e:1c:43:e7: 1f:19:8f:1f:c4:12:11:ab:4d:87:ea:ee:ff:b6:03:8c:6a:88: 7b:9e:23:32:d8:66:79:8e:2f:85:16:4d:14:f3:5b:dc:d3:b8: ca:1e:c3:bf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gCTLxBFE6N0B2/v4JANgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzUwZmJjZDI4ODUwOTQzNDc5YzhiNjY0ZTQ5ZDk0MzE0NzM3YmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8z03O+rv5qMgFaBG6d/tPM7JLgDF pnHP1aUQ3HCpiC/0poWmjeaGIl+bT//9h0CpDfC089N+GiZU1zF1wt58O2F8+thN QJGstpGBhhmXhNKLPZKmqsUmOeGj5VJwngl91GNWr4O5RCgTs38oGOCuXx11q9gz dE4lRc6pVAuf4ww/17w88SRDYFXZfMyl4hSwuVKp0ikX/xFGdTPo+GaQS+GHjMa1 cNB2/4gmKDATMoBaHvvHit/VRJMR8zjWjgLb5MIoGmTjn2yeAH1cwALu73jZrlGY 5ZVd33ScylE0fbvBkTNizoje5julDajEcZALOMgUmuDhrsulSJrtr2TnZwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHNQ+80ohQlDR5yLZk5J2UMUc3vEMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvYzFEN3pTaUZDVU5Ibkl0bVRrblpReFJ6ZThRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg94A/hQ AwcEKg94A/igMA0GCSqGSIb3DQEBCwUAA4IBAQBAe1ib2yIHsbKbeCRyg3F9nZXn N33YM5/C/BUtqrCQyy6YkQLhXAWnvRZU3biJVagMUfLTszJEZn4xgWsAR6Y5+wrX +lAcfn31z1a/O2nFc+HaaSOFSrC6KSHMoCgCOIZ6BSouwd9kwfFmcImt9TZvwMar dcsvIdJTnghZD/LxfXUyxsPcz2TPwGPEoTgTmNHB0RWSsNP88HkKF9Cn1zSgNucp EvqGdTEP49G3YLMRbcO2OoFFNs6eJ1Gy0S+iq0mGSeNVAjt8SrQQPurHXWqFj51K 7X4cQ+cfGY8fxBIRq02H6u7/tgOMaoh7niMy2GZ5ji+FFk0U81vc07jKHsO/ -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:19 2026 by rpki-client