This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa File: rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa (raw, json) Hash identifier: 7pkGwTQxoCILPcgqkjDlu2UDM7lXD5BJiZpj+8CPoC8= Subject key identifier: AF:07:C2:DA:2F:B2:85:FE:14:B4:F3:F2:69:7A:88:07:83:91:D9:CF Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374 Certificate serial: 019B7835447D9533DD229CB52259A12E6C23 Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa Signing time: Thu 01 Jan 2026 06:18:35 +0000 ROA not before: Thu 01 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41887 IP address blocks: 2a04:ab80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:44:7d:95:33:dd:22:9c:b5:22:59:a1:2e:6c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374 Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af07c2da2fb285fe14b4f3f2697a88078391d9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:08:6e:b2:de:11:cf:b9:59:d8:a3:74:42: ac:93:67:21:ac:7f:5d:ce:3b:1d:4f:02:8f:83:36: 10:e0:27:3f:70:79:53:73:84:3d:9f:ee:1d:2a:d2: f3:c7:68:02:e6:d8:14:cd:c0:98:27:26:7f:c5:bd: ce:0a:49:12:97:51:de:a7:db:d7:c0:db:a1:6f:b1: 0e:06:60:3a:d8:4c:02:15:9f:75:51:a5:a8:68:53: 65:cd:0d:4f:00:f9:24:84:f8:67:0f:04:bb:c6:4c: 44:e9:6d:e5:79:f9:6b:5e:58:79:a7:12:92:6a:16: 86:1d:17:77:fe:25:29:5a:ae:5b:b5:c9:67:00:a7: fe:17:de:af:32:a6:87:75:41:39:16:6e:bf:bb:a6: e5:97:33:0c:1f:af:a1:22:92:f6:ae:35:f0:9b:0e: 40:b6:65:8b:01:2a:6c:9f:06:a6:87:f7:1f:ea:80: e0:ea:cd:1b:12:4c:15:06:f3:be:61:db:d5:17:f9: e1:4a:65:27:1e:e1:e7:47:0e:2b:c2:19:7c:a6:39: 26:60:b8:9d:b0:72:86:5e:2a:7d:02:b8:84:1a:83: 7c:30:44:c0:e7:a1:e6:78:da:9a:33:12:56:b6:2e: 7d:53:af:76:da:c1:96:92:ba:76:30:57:1d:3b:84: 92:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:07:C2:DA:2F:B2:85:FE:14:B4:F3:F2:69:7A:88:07:83:91:D9:CF X509v3 Authority Key Identifier: keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:ab80::/29 Signature Algorithm: sha256WithRSAEncryption 98:36:17:e4:ba:09:95:1a:9b:92:f3:90:4b:ff:76:86:72:11: 09:0d:79:25:00:4d:8c:24:28:15:86:2a:fa:cf:c2:cb:f4:ab: bf:c9:97:66:b1:11:36:7b:c3:0d:0b:da:7c:94:6b:1f:83:50: e9:cd:d5:f5:9a:a1:bc:a1:fa:d8:f6:5c:9b:41:3b:e6:7c:42: 50:ff:19:ab:79:58:8e:d0:da:78:98:9d:6e:79:db:fa:c3:d4: 2b:b6:c4:ea:69:36:6a:38:e9:db:64:e9:5b:32:ac:ed:89:f1: e0:3e:45:68:79:d4:ec:a5:fd:f2:0a:45:6b:5f:71:20:55:2c: aa:96:a9:7b:17:ec:35:43:04:be:ab:dd:e0:64:15:b8:30:77: 6a:6b:8c:26:47:6f:eb:1b:2b:09:f3:00:f5:f9:04:b4:68:11: 4d:0c:69:a4:77:70:c6:a3:88:a1:c4:22:9e:58:8e:5b:36:bd: 34:a3:ca:ee:63:a6:39:6d:61:85:cd:ff:d3:77:0a:57:b1:06: 60:ac:3d:92:6a:c9:01:2f:2b:b1:a3:10:ce:f9:aa:c4:bb:0a: 6b:98:69:3a:9b:86:b7:3f:fe:98:e2:da:c6:27:83:c8:15:0d: 54:d2:3b:c0:ad:c5:54:af:1a:e8:f0:db:3e:e5:27:2a:3c:ad: e8:29:8a:ed -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NUR9lTPdIpy1IlmhLmwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlY2NiN2NkMWI5ZDZmYzM5ZDcxNThmMmZlOWNmNTIxN2Ex MmQzNzQwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjA3YzJkYTJmYjI4NWZlMTRiNGYzZjI2OTdhODgwNzgzOTFkOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGoIbrLeEc+5WdijdEKsk2chrH9d zjsdTwKPgzYQ4Cc/cHlTc4Q9n+4dKtLzx2gC5tgUzcCYJyZ/xb3OCkkSl1Hep9vX wNuhb7EOBmA62EwCFZ91UaWoaFNlzQ1PAPkkhPhnDwS7xkxE6W3leflrXlh5pxKS ahaGHRd3/iUpWq5btclnAKf+F96vMqaHdUE5Fm6/u6bllzMMH6+hIpL2rjXwmw5A tmWLASpsnwamh/cf6oDg6s0bEkwVBvO+YdvVF/nhSmUnHuHnRw4rwhl8pjkmYLid sHKGXip9AriEGoN8META56HmeNqaMxJWti59U6922sGWkrp2MFcdO4SSXwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFK8HwtovsoX+FLTz8ml6iAeDkdnPMB8GA1UdIwQY MBaAFF7Mt80bnW/DnXFY8v6c9SF6EtN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQt ZDIyOTY3ZTIyZWYwLzEvcndmQzJpLXloZjRVdFBQeWFYcUlCNE9SMmM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQtZDIyOTY3ZTIyZWYw LzEvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgSrgDAN BgkqhkiG9w0BAQsFAAOCAQEAmDYX5LoJlRqbkvOQS/92hnIRCQ15JQBNjCQoFYYq +s/Cy/Srv8mXZrERNnvDDQvafJRrH4NQ6c3V9ZqhvKH62PZcm0E75nxCUP8Zq3lY jtDaeJidbnnb+sPUK7bE6mk2ajjp22TpWzKs7Ynx4D5FaHnU7KX98gpFa19xIFUs qpapexfsNUMEvqvd4GQVuDB3amuMJkdv6xsrCfMA9fkEtGgRTQxppHdwxqOIocQi nliOWza9NKPK7mOmOW1hhc3/03cKV7EGYKw9kmrJAS8rsaMQzvmqxLsKa5hpOpuG tz/+mOLaxieDyBUNVNI7wK3FVK8a6PDbPuUnKjyt6CmK7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:46 2026 by rpki-client