This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/nLwYqJRUUCgSG15e1qaKw7z9Elc.roa File: nLwYqJRUUCgSG15e1qaKw7z9Elc.roa (raw, json) Hash identifier: 0SetU9lzudY9syG+55QsNrg9x2PnChGJFtTB1k2q3Yw= Subject key identifier: 9C:BC:18:A8:94:54:50:28:12:1B:5E:5E:D6:A6:8A:C3:BC:FD:12:57 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C801AE592510AC807B85E61C25A997F Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/nLwYqJRUUCgSG15e1qaKw7z9Elc.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51087 IP address blocks: 2a0f:7802:1000::/36 maxlen: 48 2a0f:7803:ff70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1a:e5:92:51:0a:c8:07:b8:5e:61:c2:5a:99:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cbc18a894545028121b5e5ed6a68ac3bcfd1257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:77:13:91:88:08:af:67:47:9b:6f:4b:17: 40:01:ae:7d:83:56:c9:ce:20:21:41:1d:9d:e8:e3: 65:6b:54:55:64:44:88:84:8b:29:27:db:dc:bf:c1: c2:49:e2:9e:32:cf:a6:66:b2:55:84:13:f8:63:b3: 86:98:b8:67:e3:43:ef:63:70:49:fa:84:ea:56:d1: 86:3e:31:55:56:85:44:c8:c9:24:fa:66:f5:71:44: a3:fd:96:da:cb:1e:ee:dc:a6:56:37:92:ff:f1:b6: 80:4d:62:37:cd:0f:e2:b0:75:7e:6e:a0:fb:51:a2: 95:0b:2c:c1:43:75:75:c6:dc:bf:00:86:0e:65:94: 64:e7:15:3a:cd:e3:02:ff:9f:25:59:07:8d:bc:2d: 4d:4c:2b:b4:7e:40:a5:3c:59:b5:d2:62:52:f1:c7: e5:a8:f4:0d:e7:2c:a7:27:bb:02:a9:54:32:93:94: 02:ad:a7:10:6e:3d:b9:f5:0f:e7:b2:3b:e2:57:ef: bc:78:75:f4:e0:ca:d6:7a:57:2b:ba:b3:f9:b9:db: 58:5f:68:b6:29:9b:22:63:74:25:b6:47:1d:00:31: 3f:dc:51:75:b1:8f:06:45:c3:e4:2d:75:29:10:01: 0d:12:3b:8d:cd:06:0d:c4:eb:9f:21:a6:6a:f5:5b: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BC:18:A8:94:54:50:28:12:1B:5E:5E:D6:A6:8A:C3:BC:FD:12:57 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/nLwYqJRUUCgSG15e1qaKw7z9Elc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:1000::/36 2a0f:7803:ff70::/44 Signature Algorithm: sha256WithRSAEncryption 33:8f:d2:c4:5d:6f:a4:a3:34:9b:08:17:f3:b8:7e:4f:ba:83: 0b:19:3e:53:33:55:1c:25:5e:53:09:47:09:3c:8f:28:84:ad: 17:6b:8f:83:f9:b7:69:72:06:62:83:98:bc:31:8c:ad:af:2e: f5:b3:4c:02:cc:19:5c:de:49:3b:45:4e:2d:ef:68:b4:bd:ee: 01:67:20:d3:07:cd:08:82:e9:d5:a4:09:7b:88:03:e2:09:16: 32:73:ca:9f:a5:a3:4e:2b:71:68:1f:85:45:38:23:6b:f7:7b: 97:f9:6c:65:24:c5:a3:71:37:8b:64:b4:17:66:10:62:18:90: 53:c6:31:20:80:ca:8c:07:e0:fd:ae:2b:e4:12:4e:59:5d:f1: fc:1e:fc:f7:54:64:39:99:d6:1c:5b:96:2e:02:3b:d0:15:4e: f6:5b:fd:01:89:9b:86:33:ec:09:8f:20:54:ec:7b:5b:c6:af: 77:be:18:56:93:d0:74:58:e6:5f:8b:55:34:e6:22:38:62:ec: cd:b4:00:0c:81:70:69:ae:01:96:a8:40:92:ce:23:0e:be:2d: 5d:f5:97:0c:e2:45:9c:9a:cf:0c:da:ad:6e:d9:24:35:95:c5: cf:9b:48:d2:59:38:4c:5a:3a:90:24:0f:05:a2:cc:f1:69:90: df:15:a6:72 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt8gBrlklEKyAe4XmHCWpl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2JjMThhODk0NTQ1MDI4MTIxYjVlNWVkNmE2OGFjM2JjZmQxMjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaZ3E5GICK9nR5tvSxdAAa59g1bJ ziAhQR2d6ONla1RVZESIhIspJ9vcv8HCSeKeMs+mZrJVhBP4Y7OGmLhn40PvY3BJ +oTqVtGGPjFVVoVEyMkk+mb1cUSj/Zbayx7u3KZWN5L/8baATWI3zQ/isHV+bqD7 UaKVCyzBQ3V1xty/AIYOZZRk5xU6zeMC/58lWQeNvC1NTCu0fkClPFm10mJS8cfl qPQN5yynJ7sCqVQyk5QCracQbj259Q/nsjviV++8eHX04MrWelcrurP5udtYX2i2 KZsiY3QltkcdADE/3FF1sY8GRcPkLXUpEAENEjuNzQYNxOufIaZq9VvpHwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFJy8GKiUVFAoEhteXtamisO8/RJXMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvbkx3WXFKUlVVQ2dTRzE1ZTFxYUt3N3o5RWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYEKg94AhAD BwQqD3gD/3AwDQYJKoZIhvcNAQELBQADggEBADOP0sRdb6SjNJsIF/O4fk+6gwsZ PlMzVRwlXlMJRwk8jyiErRdrj4P5t2lyBmKDmLwxjK2vLvWzTALMGVzeSTtFTi3v aLS97gFnINMHzQiC6dWkCXuIA+IJFjJzyp+lo04rcWgfhUU4I2v3e5f5bGUkxaNx N4tktBdmEGIYkFPGMSCAyowH4P2uK+QSTlld8fwe/PdUZDmZ1hxbli4CO9AVTvZb /QGJm4Yz7AmPIFTse1vGr3e+GFaT0HRY5l+LVTTmIjhi7M20AAyBcGmuAZaoQJLO Iw6+LV31lwziRZyazwzarW7ZJDWVxc+bSNJZOExaOpAkDwWizPFpkN8VpnI= -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:56 2026 by rpki-client