This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/r0BUQ7cLwLOozzS9tcnwdkSQpk8.roa File: r0BUQ7cLwLOozzS9tcnwdkSQpk8.roa (raw, json) Hash identifier: LsqD8sHxhWsJklEqdtqIozewmKmHMCtNg5Hx5t9BjP8= Subject key identifier: AF:40:54:43:B7:0B:C0:B3:A8:CF:34:BD:B5:C9:F0:76:44:90:A6:4F Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C8081A63908B304757E0CAC4BE0B249 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/r0BUQ7cLwLOozzS9tcnwdkSQpk8.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 2a00:e460::/29 maxlen: 48 2a0b:d900::/29 maxlen: 48 2a0c:65c0::/29 maxlen: 48 2a0c:6980::/29 maxlen: 48 2a13:97c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:81:a6:39:08:b3:04:75:7e:0c:ac:4b:e0:b2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af405443b70bc0b3a8cf34bdb5c9f0764490a64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:20:6f:02:ce:75:98:6b:3b:a6:c4:d7:98: 72:6f:a4:d0:a0:3d:c6:e4:2c:6f:bd:f1:7f:06:62: 5e:8e:8a:46:47:b6:96:c2:b5:69:8c:a3:45:58:36: f0:2d:70:63:d4:5b:2a:cb:27:42:fb:be:13:07:0c: e4:28:da:d8:75:b5:4c:a7:38:99:e2:3d:0d:f3:b6: 0c:91:ae:df:c1:c7:e0:ee:c0:60:71:47:55:04:ae: 20:7b:54:e3:18:99:31:e0:0a:24:c0:52:63:65:8e: f8:ed:93:c9:5c:01:fb:51:f1:03:ad:b7:95:19:3f: a8:c7:90:62:be:b6:b8:01:4a:3a:0c:3c:bb:2c:5c: 57:1d:47:84:2d:4d:33:d3:c4:bc:e1:b7:0d:28:1b: f0:e7:4a:8b:6b:ca:7a:51:25:f9:79:0d:ee:2e:4b: 8b:16:16:e8:89:28:3c:1c:c9:d4:6b:63:55:79:2d: ec:26:8f:bc:45:a4:d7:66:54:7a:b5:76:56:0d:a3: 36:3a:8a:5b:7d:9d:13:d8:6e:53:52:ad:d9:e1:8a: 26:f6:7b:e2:b6:fd:82:f6:cd:21:15:64:09:1c:ac: 66:8c:28:9a:98:62:6e:72:15:39:f2:5d:53:eb:90: c9:7b:b1:74:82:b4:2c:98:45:70:3f:4a:f7:2f:11: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:40:54:43:B7:0B:C0:B3:A8:CF:34:BD:B5:C9:F0:76:44:90:A6:4F X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/r0BUQ7cLwLOozzS9tcnwdkSQpk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:e460::/29 2a0b:d900::/29 2a0c:65c0::/29 2a0c:6980::/29 2a13:97c0::/29 Signature Algorithm: sha256WithRSAEncryption 87:8e:bc:ff:b1:e6:39:de:5b:1d:77:79:7c:9b:49:9a:9d:aa: c8:25:b1:6b:73:e1:1e:2e:6d:ea:7f:fb:a7:b6:82:52:77:d9: 56:df:bb:f0:d8:09:1c:c5:25:6e:46:29:96:27:f8:00:35:e8: 4a:e5:78:a9:7c:c3:8b:73:10:d1:db:f0:62:3c:8b:dd:d9:96: ec:34:2f:16:70:8b:c5:39:29:4f:c7:4a:b1:4e:07:41:6c:c7: 51:46:f7:7d:7f:fa:2b:e7:76:5a:bc:0e:cd:3d:b0:c2:d8:f7: 2a:22:5c:fb:1d:08:5a:0d:02:5a:de:14:9f:83:78:36:6b:5a: ed:32:bb:d7:4f:18:5e:0d:95:a9:5e:75:a6:51:76:5d:e5:cc: 12:50:4f:23:ee:e5:44:81:17:33:55:80:90:fa:ef:6a:33:92: dd:62:8c:a4:db:3b:cc:3f:09:64:aa:50:7b:1a:05:57:29:cc: 62:32:6d:8f:f5:41:4c:05:1c:40:64:79:da:31:71:c3:e7:a5: 0d:fd:26:f8:0e:dd:a8:eb:fa:c9:d2:68:bd:98:81:57:6c:e9: e8:70:ba:37:68:b9:7a:5c:96:68:67:93:ab:c3:66:94:5f:25: f3:20:ce:b4:c2:cf:cb:ac:22:46:8f:8e:0c:ad:0f:fc:72:9f: fc:4a:2a:9f -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8gIGmOQizBHV+DKxL4LJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjQwNTQ0M2I3MGJjMGIzYThjZjM0YmRiNWM5ZjA3NjQ0OTBhNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolkgbwLOdZhrO6bE15hyb6TQoD3G 5CxvvfF/BmJejopGR7aWwrVpjKNFWDbwLXBj1FsqyydC+74TBwzkKNrYdbVMpziZ 4j0N87YMka7fwcfg7sBgcUdVBK4ge1TjGJkx4AokwFJjZY747ZPJXAH7UfEDrbeV GT+ox5Bivra4AUo6DDy7LFxXHUeELU0z08S84bcNKBvw50qLa8p6USX5eQ3uLkuL FhboiSg8HMnUa2NVeS3sJo+8RaTXZlR6tXZWDaM2OopbfZ0T2G5TUq3Z4Yom9nvi tv2C9s0hFWQJHKxmjCiamGJuchU58l1T65DJe7F0grQsmEVwP0r3LxE0bwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFK9AVEO3C8CzqM80vbXJ8HZEkKZPMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvcjBCVVE3Y0x3TE9venpTOXRjbndka1NRcGs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKgDkYAMF AyoL2QADBQMqDGXAAwUDKgxpgAMFAyoTl8AwDQYJKoZIhvcNAQELBQADggEBAIeO vP+x5jneWx13eXybSZqdqsglsWtz4R4ubep/+6e2glJ32Vbfu/DYCRzFJW5GKZYn +AA16ErleKl8w4tzENHb8GI8i93Zluw0LxZwi8U5KU/HSrFOB0Fsx1FG931/+ivn dlq8Ds09sMLY9yoiXPsdCFoNAlreFJ+DeDZrWu0yu9dPGF4NlaledaZRdl3lzBJQ TyPu5USBFzNVgJD672ozkt1ijKTbO8w/CWSqUHsaBVcpzGIybY/1QUwFHEBkedox ccPnpQ39JvgO3ajr+snSaL2YgVds6ehwujdouXpclmhnk6vDZpRfJfMgzrTCz8us IkaPjgytD/xyn/xKKp8= -----END CERTIFICATE-----Generated at Wed Jan 21 08:07:21 2026 by rpki-client