This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/_wcF9jM9pkn5W8HUmqNyP2YzoVE.roa File: _wcF9jM9pkn5W8HUmqNyP2YzoVE.roa (raw, json) Hash identifier: YR4TzWwhbeU41La1eRUFtaH6lftYq8CO9g5moHbgBbI= Subject key identifier: FF:07:05:F6:33:3D:A6:49:F9:5B:C1:D4:9A:A3:72:3F:66:33:A1:51 Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30 Certificate serial: 019B7C128C98FF3D4C8D3AF91F79E520062E Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/_wcF9jM9pkn5W8HUmqNyP2YzoVE.roa Signing time: Fri 02 Jan 2026 00:19:09 +0000 ROA not before: Fri 02 Jan 2026 00:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211696 IP address blocks: 2001:67c:2724::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8c:98:ff:3d:4c:8d:3a:f9:1f:79:e5:20:06:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30 Validity Not Before: Jan 2 00:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff0705f6333da649f95bc1d49aa3723f6633a151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:b0:ab:79:dc:f0:ab:a8:fb:15:9d:78:2f: 4f:1b:90:11:a1:ba:3d:88:95:6d:22:43:cb:b3:b2: ce:5c:c9:35:89:01:23:15:d4:09:9d:d2:d3:6a:1a: dc:37:25:49:59:7b:c3:82:19:b2:55:0b:a7:30:03: aa:4e:e8:d5:02:ac:22:d6:ee:74:bd:82:0e:fd:3a: 2d:5b:17:2a:b1:3b:63:cc:a8:fc:c4:e3:15:62:77: 52:29:d2:ae:48:1e:c7:2d:79:7d:78:10:fb:0d:18: 24:cc:6f:c0:9d:ac:73:56:29:28:4e:09:ac:11:52: 2c:41:fc:17:18:77:2e:46:46:d3:6b:8c:02:91:c1: 8b:7a:b8:c9:b6:a1:ec:33:49:a6:05:52:d7:c5:f4: e8:82:cd:b3:08:b5:68:91:ae:13:54:12:bb:27:b2: f2:5c:0e:05:43:24:a2:2d:68:53:83:a8:70:31:d7: 88:90:b4:54:0c:eb:cf:d5:86:08:6c:2f:df:1e:8b: f5:90:6b:b0:56:af:db:db:3a:32:db:20:f0:b4:55: 3c:89:65:2a:b4:e5:2d:0b:03:93:ff:17:0d:06:5d: de:01:9d:c2:42:90:20:42:8b:48:9c:e0:0a:86:a4: 77:52:89:d2:44:3d:43:39:7a:78:da:60:aa:57:41: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:07:05:F6:33:3D:A6:49:F9:5B:C1:D4:9A:A3:72:3F:66:33:A1:51 X509v3 Authority Key Identifier: keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/_wcF9jM9pkn5W8HUmqNyP2YzoVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2724::/48 Signature Algorithm: sha256WithRSAEncryption 0c:1d:02:5d:3b:d8:b3:11:c6:78:d3:c1:c6:ad:e0:71:95:f5: 9b:e2:cd:46:60:72:21:67:03:1d:79:c5:5a:c5:02:60:3e:41: b8:05:ff:98:a2:7d:b4:aa:d6:af:d5:40:85:08:d7:12:81:06: 16:5f:9c:66:03:60:20:70:f7:4c:eb:2f:ba:31:de:4c:4b:b5: b0:e4:70:44:49:cb:a3:cf:0a:35:b4:19:88:fc:91:5f:39:da: 47:e4:f6:7c:46:63:b3:bb:15:68:e3:d4:b4:c9:be:02:79:3a: 1f:50:c7:7e:a5:40:f5:d0:88:5e:3a:32:02:98:97:d2:6f:1d: c5:2a:5c:f6:bb:d2:07:7c:2a:25:60:ef:96:41:13:93:2c:7e: e6:ae:a1:5c:5f:00:52:39:50:e8:32:ea:57:fa:f4:52:bd:e5: e9:c9:05:a0:e1:35:fd:83:6e:f5:44:8f:28:a4:0d:03:55:cd: 82:30:8e:a6:c0:36:6c:e8:8d:c1:51:cb:11:e1:bf:00:73:11: d0:3b:48:8f:49:f1:86:1c:0c:3a:48:75:c2:ef:14:10:b7:ae: 66:1e:87:57:ee:5f:70:8f:83:31:33:e3:d4:d9:7c:e8:df:b2: 1b:aa:10:1e:a6:15:6c:6b:9d:5b:6a:d5:ed:1b:f2:0d:a1:5f: eb:19:8d:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EoyY/z1MjTr5H3nlIAYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMDExZjA4NTlkMDZhMDg0OTc1ZjRlOGJkMmI1NTY3MTBk ZDhjMzAwHhcNMjYwMTAyMDAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjA3MDVmNjMzM2RhNjQ5Zjk1YmMxZDQ5YWEzNzIzZjY2MzNhMTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJCwq3nc8Kuo+xWdeC9PG5ARobo9 iJVtIkPLs7LOXMk1iQEjFdQJndLTahrcNyVJWXvDghmyVQunMAOqTujVAqwi1u50 vYIO/TotWxcqsTtjzKj8xOMVYndSKdKuSB7HLXl9eBD7DRgkzG/AnaxzVikoTgms EVIsQfwXGHcuRkbTa4wCkcGLerjJtqHsM0mmBVLXxfTogs2zCLVoka4TVBK7J7Ly XA4FQySiLWhTg6hwMdeIkLRUDOvP1YYIbC/fHov1kGuwVq/b2zoy2yDwtFU8iWUq tOUtCwOT/xcNBl3eAZ3CQpAgQotInOAKhqR3UonSRD1DOXp42mCqV0EHjQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP8HBfYzPaZJ+VvB1Jqjcj9mM6FRMB8GA1UdIwQY MBaAFOMBHwhZ0GoISXX06L0rVWcQ3YwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDIt ZDQ4YjdkMjYyNGRiLzEvX3djRjlqTTlwa241VzhIVW1xTnlQMll6b1ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDItZDQ4YjdkMjYyNGRi LzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCck MA0GCSqGSIb3DQEBCwUAA4IBAQAMHQJdO9izEcZ408HGreBxlfWb4s1GYHIhZwMd ecVaxQJgPkG4Bf+Yon20qtav1UCFCNcSgQYWX5xmA2AgcPdM6y+6Md5MS7Ww5HBE Scujzwo1tBmI/JFfOdpH5PZ8RmOzuxVo49S0yb4CeTofUMd+pUD10IheOjICmJfS bx3FKlz2u9IHfColYO+WQROTLH7mrqFcXwBSOVDoMupX+vRSveXpyQWg4TX9g271 RI8opA0DVc2CMI6mwDZs6I3BUcsR4b8AcxHQO0iPSfGGHAw6SHXC7xQQt65mHodX 7l9wj4MxM+PU2Xzo37IbqhAephVsa51batXtG/INoV/rGY1z -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:46 2026 by rpki-client