This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/nIyYdeauxUMdOnTvq_yeDAqz5o0.roa File: nIyYdeauxUMdOnTvq_yeDAqz5o0.roa (raw, json) Hash identifier: RmoW6FlHim4RZRdoT+aSklQlfLP3Q3vY6nxfYoRXdA8= Subject key identifier: 9C:8C:98:75:E6:AE:C5:43:1D:3A:74:EF:AB:FC:9E:0C:0A:B3:E6:8D Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C8085255C44FA2A86C5E2EBB867B12B Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/nIyYdeauxUMdOnTvq_yeDAqz5o0.roa Signing time: Fri 02 Jan 2026 02:19:16 +0000 ROA not before: Fri 02 Jan 2026 02:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204936 IP address blocks: 2a00:e460::/29 maxlen: 48 2a0b:d900::/29 maxlen: 48 2a0c:65c0::/29 maxlen: 48 2a0c:6980::/29 maxlen: 48 2a13:97c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:85:25:5c:44:fa:2a:86:c5:e2:eb:b8:67:b1:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c8c9875e6aec5431d3a74efabfc9e0c0ab3e68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:f0:f8:79:92:da:00:57:e9:98:b8:b9:d7: 73:1d:72:e9:9c:63:ba:15:80:7b:d3:6f:0e:60:c4: e6:3c:16:11:07:b2:ba:19:7d:5e:11:6c:83:33:8a: 4f:0b:78:db:75:06:b2:84:5c:71:73:25:c0:4f:67: b0:b5:ef:8d:30:8b:b5:f1:08:0e:e4:9d:f3:06:23: ee:fb:28:1e:58:3d:08:ba:3c:c2:70:e7:e1:2a:5e: 93:30:41:df:2d:f6:5a:04:91:37:7c:c6:7d:f5:61: 38:18:59:be:c7:dd:9f:2c:59:42:06:c2:0b:66:8e: 64:21:6a:89:9e:f0:20:9a:b4:9c:b9:82:b8:6a:cd: ac:c8:3b:24:c1:8f:6d:ac:1f:15:6c:8d:bf:83:4a: a7:6a:8c:90:6b:89:d3:cf:58:d9:ae:ea:96:a8:4c: 97:b8:57:ca:da:78:ea:b6:be:1f:c7:96:ac:1b:22: 27:97:ff:b9:f7:82:fa:8c:99:a8:b8:c6:d9:bf:1c: c5:5e:81:7c:8a:05:8d:db:33:bb:b4:b9:81:fa:20: d4:93:f9:aa:34:fb:4f:88:b7:ba:cf:ab:11:7b:86: f8:d1:c7:5e:1e:e7:bf:f1:2b:5c:f4:5f:dc:de:19: bb:83:b2:0c:40:68:24:8a:9f:b5:d7:17:d9:6a:b8: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8C:98:75:E6:AE:C5:43:1D:3A:74:EF:AB:FC:9E:0C:0A:B3:E6:8D X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/nIyYdeauxUMdOnTvq_yeDAqz5o0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:e460::/29 2a0b:d900::/29 2a0c:65c0::/29 2a0c:6980::/29 2a13:97c0::/29 Signature Algorithm: sha256WithRSAEncryption 47:04:70:b0:0b:fe:ba:5f:14:83:eb:6f:a7:34:eb:82:87:bf: 15:67:85:31:b4:bf:bc:c8:ab:0a:1a:80:9a:a6:f4:95:50:bf: 68:1e:22:32:a7:cc:5c:f5:3c:6c:12:5b:a7:e1:3f:bb:b9:66: 91:08:ce:4e:e9:f1:96:bd:9f:38:6b:05:23:60:b1:bc:fd:ba: 8d:f2:c1:09:23:12:37:8e:4d:d0:7f:10:3a:fd:6b:59:0b:f0: 9d:35:37:41:43:a8:e2:3d:a2:93:06:95:79:48:02:09:9e:d7: 31:a7:42:33:4c:9f:c5:b3:74:d6:2c:08:17:5d:06:74:11:04: a1:97:14:21:aa:4d:b0:28:4e:d1:9c:12:bb:f3:df:12:a7:d9: c0:0a:1a:c6:94:de:19:1d:bb:8d:97:9d:c8:1f:7b:8f:b2:35: 17:f4:51:ee:50:ca:8a:42:a7:de:9d:0e:50:c5:f2:9e:cc:fe: fc:7d:14:32:06:70:73:23:b4:35:d8:a7:44:93:c0:5d:35:30: 82:a7:a7:b0:5c:cd:0a:22:b2:f9:ea:1c:5a:88:5a:98:8b:d2: 7e:44:49:b5:65:60:a4:62:c5:a5:c6:f0:f2:e3:6d:c9:e4:f8: 0b:bd:bc:84:e0:a6:7a:b6:da:88:1f:86:83:b9:26:12:ff:f1: e8:77:60:2a -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8gIUlXET6KobF4uu4Z7ErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzhjOTg3NWU2YWVjNTQzMWQzYTc0ZWZhYmZjOWUwYzBhYjNlNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSvw+HmS2gBX6Zi4uddzHXLpnGO6 FYB7028OYMTmPBYRB7K6GX1eEWyDM4pPC3jbdQayhFxxcyXAT2ewte+NMIu18QgO 5J3zBiPu+ygeWD0IujzCcOfhKl6TMEHfLfZaBJE3fMZ99WE4GFm+x92fLFlCBsIL Zo5kIWqJnvAgmrScuYK4as2syDskwY9trB8VbI2/g0qnaoyQa4nTz1jZruqWqEyX uFfK2njqtr4fx5asGyInl/+594L6jJmouMbZvxzFXoF8igWN2zO7tLmB+iDUk/mq NPtPiLe6z6sRe4b40cdeHue/8Stc9F/c3hm7g7IMQGgkip+11xfZarik5QIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJyMmHXmrsVDHTp076v8ngwKs+aNMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvbkl5WWRlYXV4VU1kT25UdnFfeWVEQXF6NW8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKgDkYAMF AyoL2QADBQMqDGXAAwUDKgxpgAMFAyoTl8AwDQYJKoZIhvcNAQELBQADggEBAEcE cLAL/rpfFIPrb6c064KHvxVnhTG0v7zIqwoagJqm9JVQv2geIjKnzFz1PGwSW6fh P7u5ZpEIzk7p8Za9nzhrBSNgsbz9uo3ywQkjEjeOTdB/EDr9a1kL8J01N0FDqOI9 opMGlXlIAgme1zGnQjNMn8WzdNYsCBddBnQRBKGXFCGqTbAoTtGcErvz3xKn2cAK GsaU3hkdu42Xncgfe4+yNRf0Ue5QyopCp96dDlDF8p7M/vx9FDIGcHMjtDXYp0ST wF01MIKnp7BczQoisvnqHFqIWpiL0n5ESbVlYKRixaXG8PLjbcnk+Au9vITgpnq2 2ogfhoO5JhL/8eh3YCo= -----END CERTIFICATE-----Generated at Wed Jan 21 08:05:29 2026 by rpki-client