This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/rnFMD09DZ1HMR6vWqZUQ5hu7s-w.roa File: rnFMD09DZ1HMR6vWqZUQ5hu7s-w.roa (raw, json) Hash identifier: pf3KjrbfynbYILvF2rSPYfqN7RmaN/NiLuVg96VkZD8= Subject key identifier: AE:71:4C:0F:4F:43:67:51:CC:47:AB:D6:A9:95:10:E6:1B:BB:B3:EC Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C808BA921420D891779865B04227EC6 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/rnFMD09DZ1HMR6vWqZUQ5hu7s-w.roa Signing time: Fri 02 Jan 2026 02:19:17 +0000 ROA not before: Fri 02 Jan 2026 02:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214602 IP address blocks: 2a0c:f640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8b:a9:21:42:0d:89:17:79:86:5b:04:22:7e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae714c0f4f436751cc47abd6a99510e61bbbb3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:fa:a7:bb:67:1f:d9:5d:04:49:be:34:07: 93:44:6d:e8:c7:46:fa:ee:75:03:98:46:c8:80:b7: d6:15:4a:1e:de:d1:0e:cc:03:8c:c2:aa:12:d6:bd: 9e:b1:9c:81:a2:57:1b:b0:4d:cd:ea:47:9e:31:0c: c2:4b:33:4e:31:c3:fd:04:72:1b:11:10:ba:0d:2b: 66:f1:52:4e:27:3c:5f:b9:0d:28:3d:2f:c3:8f:e8: aa:6e:4a:e3:66:2c:61:7c:cc:29:40:e8:f7:bc:1a: 0f:16:58:d0:39:d4:be:cb:2d:48:16:bc:d0:75:9d: 06:1b:42:6d:ed:3d:ca:0d:97:e7:f3:7c:88:d2:0f: 11:fa:9b:3f:c6:44:2a:b5:e0:27:9c:db:73:86:c0: 6c:4d:15:b7:2f:aa:84:14:ed:41:97:2b:87:4b:6d: 28:74:14:c8:ea:ea:9e:23:54:0c:f4:0b:3e:b6:b9: 38:c3:4c:ed:98:e7:b3:bb:be:5a:28:b7:66:5f:9a: b3:c9:90:08:3f:38:cb:4f:d2:14:9c:c9:27:5a:27: 93:92:76:bb:4f:88:64:dc:5b:4f:fd:04:29:02:e2: e3:18:c4:06:5a:df:0f:c0:04:0b:e4:8e:19:48:8d: b9:2d:86:39:c5:3b:2e:45:51:fa:0b:7b:8f:89:dc: 4b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:71:4C:0F:4F:43:67:51:CC:47:AB:D6:A9:95:10:E6:1B:BB:B3:EC X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/rnFMD09DZ1HMR6vWqZUQ5hu7s-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:f640::/32 Signature Algorithm: sha256WithRSAEncryption a2:49:c0:d3:21:95:e5:60:7d:e5:e7:de:b6:02:b2:38:c1:2c: 87:9a:db:fe:ba:bc:1d:89:1a:f7:69:ad:ee:8b:6f:5e:be:73: ba:d2:29:60:a3:e4:06:a4:71:c6:1a:69:ef:f3:f5:4a:0a:b6: 6b:6f:f1:d5:47:6d:47:e4:f5:74:89:77:b3:b4:c2:6b:8d:39: ab:65:ff:c0:0b:10:5f:24:49:55:7b:ba:10:c5:0c:94:61:23: bf:4d:05:c6:a4:0a:93:8e:85:24:7b:2b:2a:e4:00:b7:d7:14: b9:ca:0a:0f:86:3e:3d:4a:55:78:c8:78:46:e0:85:24:fa:92: 44:92:df:4c:ab:b7:c4:e1:b4:a6:66:74:d0:88:c7:ad:ef:b4: 56:5b:78:7c:9a:a7:0a:c0:ea:50:7d:55:38:cf:77:3d:8e:76: a9:54:8d:7b:b9:9a:ad:82:e3:62:9f:cc:14:58:cb:18:6c:3e: 19:4b:fa:ba:17:6e:65:41:0c:01:dc:21:ca:69:db:5d:c2:1e: 38:8a:7d:d8:d6:ef:e5:3a:4c:2e:72:ef:d0:5f:12:fe:9a:8d: f3:24:d9:42:69:86:ac:52:78:63:61:8c:c5:4f:70:50:89:24: dc:cf:f9:3a:5c:fd:8e:c6:19:7f:7e:63:cb:5d:bf:08:a4:ec: 40:49:dc:bd -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gIupIUINiRd5hlsEIn7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTcxNGMwZjRmNDM2NzUxY2M0N2FiZDZhOTk1MTBlNjFiYmJiM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuL6p7tnH9ldBEm+NAeTRG3ox0b6 7nUDmEbIgLfWFUoe3tEOzAOMwqoS1r2esZyBolcbsE3N6keeMQzCSzNOMcP9BHIb ERC6DStm8VJOJzxfuQ0oPS/Dj+iqbkrjZixhfMwpQOj3vBoPFljQOdS+yy1IFrzQ dZ0GG0Jt7T3KDZfn83yI0g8R+ps/xkQqteAnnNtzhsBsTRW3L6qEFO1BlyuHS20o dBTI6uqeI1QM9As+trk4w0ztmOezu75aKLdmX5qzyZAIPzjLT9IUnMknWieTkna7 T4hk3FtP/QQpAuLjGMQGWt8PwAQL5I4ZSI25LYY5xTsuRVH6C3uPidxL9QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFK5xTA9PQ2dRzEer1qmVEOYbu7PsMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvcm5GTUQwOURaMUhNUjZ2V3FaVVE1aHU3cy13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgz2QDAN BgkqhkiG9w0BAQsFAAOCAQEAoknA0yGV5WB95efetgKyOMEsh5rb/rq8HYka92mt 7otvXr5zutIpYKPkBqRxxhpp7/P1Sgq2a2/x1UdtR+T1dIl3s7TCa405q2X/wAsQ XyRJVXu6EMUMlGEjv00FxqQKk46FJHsrKuQAt9cUucoKD4Y+PUpVeMh4RuCFJPqS RJLfTKu3xOG0pmZ00IjHre+0Vlt4fJqnCsDqUH1VOM93PY52qVSNe7marYLjYp/M FFjLGGw+GUv6uhduZUEMAdwhymnbXcIeOIp92Nbv5TpMLnLv0F8S/pqN8yTZQmmG rFJ4Y2GMxU9wUIkk3M/5Olz9jsYZf35jy12/CKTsQEncvQ== -----END CERTIFICATE-----Generated at Wed Jan 21 08:07:00 2026 by rpki-client