This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/V4awU416NdKWqSEhx0pKd4Dy2Xs.roa File: V4awU416NdKWqSEhx0pKd4Dy2Xs.roa (raw, json) Hash identifier: sHQn1RdsThojWX4t8ioY7M8sO+pX5hQoHqvVLBAXHMA= Subject key identifier: 57:86:B0:53:8D:7A:35:D2:96:A9:21:21:C7:4A:4A:77:80:F2:D9:7B Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811 Certificate serial: 019B7D5C560D7F924515665564CC30D37AA0 Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/V4awU416NdKWqSEhx0pKd4Dy2Xs.roa Signing time: Fri 02 Jan 2026 06:19:21 +0000 ROA not before: Fri 02 Jan 2026 06:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35819 IP address blocks: 2a03:2887:ff0d::/48 maxlen: 48 2a03:2887:ff0f::/48 maxlen: 48 2a03:2887:ff10::/48 maxlen: 48 2a03:2887:ff11::/48 maxlen: 48 2a03:2887:ff13::/48 maxlen: 48 2a03:2887:ff15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:56:0d:7f:92:45:15:66:55:64:cc:30:d3:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375a064f301026bc3cf87666d6a820128212a811 Validity Not Before: Jan 2 06:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5786b0538d7a35d296a92121c74a4a7780f2d97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:0e:f1:37:ae:d2:67:86:cf:87:91:00:c9: bf:0c:f2:c9:42:eb:21:0f:7a:68:75:62:26:77:65: e2:32:6d:95:ec:c0:4b:3d:6b:93:a9:54:de:a3:75: c4:a6:ab:5d:a9:d6:1a:0a:68:e5:65:2d:6f:e6:97: c4:f0:63:fe:7e:62:86:44:09:ce:e4:77:c1:d1:9f: c4:04:64:6e:a4:e9:53:7f:29:5d:ae:47:48:20:66: 67:ae:ca:bf:c4:52:7d:e5:6c:b9:f0:b7:14:1c:62: 52:5a:bf:4a:15:87:d2:13:f5:a7:3a:a9:66:7c:d2: 03:ad:1f:d1:7e:07:cb:6c:b8:5b:da:77:67:fe:16: 81:89:4b:84:2e:03:37:34:5a:a0:02:fa:ea:1c:23: 99:70:40:39:05:55:87:60:a0:15:54:e2:47:e7:fb: 8f:ab:10:51:dc:9f:c3:32:e4:43:87:85:3d:04:3e: 35:95:83:d6:36:ad:9b:96:50:f4:c4:97:aa:36:98: 75:67:ee:d2:1b:c7:e6:4c:8e:7a:95:92:82:90:8e: d8:2a:90:3a:b3:02:41:70:e2:a5:b2:17:f9:05:7d: eb:08:14:63:7b:fd:7c:cb:cb:2d:6e:50:c4:c1:0a: 31:12:35:13:ca:c9:98:d8:15:f2:b2:df:6f:15:53: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:86:B0:53:8D:7A:35:D2:96:A9:21:21:C7:4A:4A:77:80:F2:D9:7B X509v3 Authority Key Identifier: keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/V4awU416NdKWqSEhx0pKd4Dy2Xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:2887:ff0d::/48 2a03:2887:ff0f::-2a03:2887:ff11:ffff:ffff:ffff:ffff:ffff 2a03:2887:ff13::/48 2a03:2887:ff15::/48 Signature Algorithm: sha256WithRSAEncryption 79:26:88:71:ad:7c:23:79:c2:79:68:cf:8e:4f:4a:51:ea:f1: 8d:6b:7c:cd:a3:bc:4c:62:67:ab:f5:fd:74:3a:72:88:78:76: 21:08:44:ad:ee:3b:80:7d:f2:64:da:8e:01:d2:47:d5:82:2f: 2c:4b:32:ad:55:2c:55:25:7a:f5:b6:98:12:e9:4e:56:ea:63: 3b:e1:c3:73:15:3a:23:d5:f3:6a:c5:5d:f7:52:f6:31:02:81: 23:82:fc:b1:11:b0:df:18:0c:b6:38:1a:34:77:b0:d7:0d:02: 37:e8:bb:62:1e:18:c4:a0:3e:5c:a3:55:76:0b:07:fc:81:38: 09:a0:c6:3f:71:26:02:93:0d:a7:eb:8c:0c:5e:88:ee:33:8b: 44:79:79:ba:fd:82:a3:43:03:ae:fc:43:b3:31:24:29:4a:b7: cf:32:67:d3:f5:17:d1:65:eb:43:cb:40:c1:1c:b2:9b:bc:ed: 34:2f:da:bb:2a:6a:be:82:55:8d:25:80:47:fc:79:ad:81:b4: 75:5d:d2:51:48:d9:6f:02:26:c7:1c:a7:03:c2:be:3c:a3:f3: 46:8b:8f:b9:3d:95:14:9f:f7:36:e0:d0:d4:79:eb:aa:2f:8c: 27:fc:15:97:c1:a5:f4:dc:fe:00:43:5e:82:6c:95:07:4e:a5: 68:c0:a6:1d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt9XFYNf5JFFWZVZMww03qgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWEwNjRmMzAxMDI2YmMzY2Y4NzY2NmQ2YTgyMDEyODIx MmE4MTEwHhcNMjYwMTAyMDYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Nzg2YjA1MzhkN2EzNWQyOTZhOTIxMjFjNzRhNGE3NzgwZjJkOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuioO8Teu0meGz4eRAMm/DPLJQush D3podWImd2XiMm2V7MBLPWuTqVTeo3XEpqtdqdYaCmjlZS1v5pfE8GP+fmKGRAnO 5HfB0Z/EBGRupOlTfyldrkdIIGZnrsq/xFJ95Wy58LcUHGJSWr9KFYfSE/WnOqlm fNIDrR/RfgfLbLhb2ndn/haBiUuELgM3NFqgAvrqHCOZcEA5BVWHYKAVVOJH5/uP qxBR3J/DMuRDh4U9BD41lYPWNq2bllD0xJeqNph1Z+7SG8fmTI56lZKCkI7YKpA6 swJBcOKlshf5BX3rCBRje/18y8stblDEwQoxEjUTysmY2BXyst9vFVOZJwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFFeGsFONejXSlqkhIcdKSneA8tl7MB8GA1UdIwQY MBaAFDdaBk8wECa8PPh2ZtaoIBKCEqgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTkt ZjQ0YTU3Y2VkNzNkLzEvVjRhd1U0MTZOZEtXcVNFaHgwcEtkNER5MlhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTktZjQ0YTU3Y2VkNzNk LzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvAwcAKgMoh/8N MBIDBwAqAyiH/w8DBwEqAyiH/xADBwAqAyiH/xMDBwAqAyiH/xUwDQYJKoZIhvcN AQELBQADggEBAHkmiHGtfCN5wnloz45PSlHq8Y1rfM2jvExiZ6v1/XQ6coh4diEI RK3uO4B98mTajgHSR9WCLyxLMq1VLFUlevW2mBLpTlbqYzvhw3MVOiPV82rFXfdS 9jECgSOC/LERsN8YDLY4GjR3sNcNAjfou2IeGMSgPlyjVXYLB/yBOAmgxj9xJgKT DafrjAxeiO4zi0R5ebr9gqNDA678Q7MxJClKt88yZ9P1F9Fl60PLQMEcspu87TQv 2rsqar6CVY0lgEf8ea2BtHVd0lFI2W8CJsccpwPCvjyj80aLj7k9lRSf9zbg0NR5 66ovjCf8FZfBpfTc/gBDXoJslQdOpWjAph0= -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:32 2026 by rpki-client