This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/c-719yS8qxXgAQfc5k5AVeBx00Y.roa File: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (raw, json) Hash identifier: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8= Subject key identifier: 73:EE:F5:F7:24:BC:AB:15:E0:01:07:DC:E6:4E:40:55:E0:71:D3:46 Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4 Certificate serial: 019B7B35CB0B7A5A1664577D51F9C4F3FC73 Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/c-719yS8qxXgAQfc5k5AVeBx00Y.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 328778 IP address blocks: 2a02:f406:fed0::/48 maxlen: 48 2a02:f406:ff50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cb:0b:7a:5a:16:64:57:7d:51:f9:c4:f3:fc:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73eef5f724bcab15e00107dce64e4055e071d346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:07:47:4e:40:d8:5e:d0:5f:c3:2a:a7:5d: ca:41:a0:69:72:23:8a:9b:c2:f5:84:d2:38:72:7b: 06:f2:2c:0f:fc:36:6e:4c:80:a9:e3:b3:09:49:9c: e5:ea:49:b6:f3:97:ef:df:2e:a0:cd:9c:c9:30:e1: 17:96:12:02:05:ea:30:b5:2d:9a:1e:9f:9b:c5:81: 37:b7:3a:7a:3b:f8:e2:47:a6:3e:ad:2e:ef:43:a3: e1:f6:ec:0b:c7:ce:0a:d4:fc:a2:b9:01:05:1f:e1: fb:bb:e7:a4:42:8d:a3:b9:36:46:41:a3:e8:e2:8d: 76:b3:33:ca:29:38:ea:26:4e:c5:94:7e:0c:96:9d: f4:3b:9a:8c:95:2c:ce:5b:22:ec:91:09:e6:9a:8a: 67:41:35:16:d3:06:b9:77:d2:b4:61:2f:eb:09:a0: 16:0d:16:f3:52:bf:a3:bb:89:6a:43:53:98:f5:44: d6:91:f9:df:9b:4f:3a:e9:7b:f3:84:7b:00:9b:9c: e6:ac:9f:99:86:de:bc:57:d3:92:1b:8f:73:b0:63: 91:bb:db:a0:76:66:dd:a3:16:db:d0:ea:47:9f:63: 41:f5:29:d0:0f:3d:04:4f:c4:06:f3:ed:e0:ad:77: c4:a6:75:f2:b5:87:be:e3:27:ac:ab:38:96:18:c4: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EE:F5:F7:24:BC:AB:15:E0:01:07:DC:E6:4E:40:55:E0:71:D3:46 X509v3 Authority Key Identifier: keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/c-719yS8qxXgAQfc5k5AVeBx00Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:f406:fed0::/48 2a02:f406:ff50::/48 Signature Algorithm: sha256WithRSAEncryption 12:46:5e:f6:e0:d8:65:0a:8f:34:74:04:bf:53:3a:ec:8b:26: 0b:e3:3c:05:19:26:6b:a3:de:c2:13:15:8f:b0:16:be:a3:1c: 0a:c8:99:ec:60:23:98:7a:46:16:95:f9:be:6a:cc:db:63:37: 5f:29:90:bb:f5:42:01:87:e8:ee:30:40:f2:d3:d2:74:74:ec: 00:27:4d:15:76:19:89:51:9b:33:1a:37:07:74:68:32:27:14: c6:69:f8:7a:cc:76:bb:4c:c8:ac:9c:e4:0b:73:8e:17:53:69: b1:ea:b1:fb:e9:e7:f8:66:c2:aa:97:c6:38:99:12:4d:01:60: 31:89:89:2d:7a:d7:b0:4c:57:c2:62:34:1f:1c:4d:10:9d:26: ea:e1:cc:16:39:3b:27:ed:4c:18:6d:ed:44:ac:02:81:8d:52: ea:eb:28:d5:49:c7:11:69:5f:eb:49:3f:84:2d:08:2f:78:04: ee:33:d5:78:5f:25:13:b8:8b:1d:21:fb:48:03:41:11:3f:e1: 21:c3:b0:c2:0e:9b:a6:51:c1:b9:54:52:ea:7b:a0:2f:34:04: d4:d8:b1:39:9b:64:88:3f:7b:e7:a6:53:e9:70:e5:64:91:79: 2c:82:e1:a0:dd:3a:69:61:1b:c0:b5:b5:4e:d9:85:9e:a0:ce: 76:d1:57:fb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NcsLeloWZFd9UfnE8/xzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk NGJjYTQwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2VlZjVmNzI0YmNhYjE1ZTAwMTA3ZGNlNjRlNDA1NWUwNzFkMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWAHR05A2F7QX8Mqp13KQaBpciOK m8L1hNI4cnsG8iwP/DZuTICp47MJSZzl6km285fv3y6gzZzJMOEXlhICBeowtS2a Hp+bxYE3tzp6O/jiR6Y+rS7vQ6Ph9uwLx84K1PyiuQEFH+H7u+ekQo2juTZGQaPo 4o12szPKKTjqJk7FlH4Mlp30O5qMlSzOWyLskQnmmopnQTUW0wa5d9K0YS/rCaAW DRbzUr+ju4lqQ1OY9UTWkfnfm0866XvzhHsAm5zmrJ+Zht68V9OSG49zsGORu9ug dmbdoxbb0OpHn2NB9SnQDz0ET8QG8+3grXfEpnXytYe+4yesqziWGMSkMQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHPu9fckvKsV4AEH3OZOQFXgcdNGMB8GA1UdIwQY MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt MGEwZjNlNzhhNDkzLzEvYy03MTl5UzhxeFhnQVFmYzVrNUFWZUJ4MDBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgL0Bv7Q AwcAKgL0Bv9QMA0GCSqGSIb3DQEBCwUAA4IBAQASRl724NhlCo80dAS/UzrsiyYL 4zwFGSZro97CExWPsBa+oxwKyJnsYCOYekYWlfm+aszbYzdfKZC79UIBh+juMEDy 09J0dOwAJ00VdhmJUZszGjcHdGgyJxTGafh6zHa7TMisnOQLc44XU2mx6rH76ef4 ZsKql8Y4mRJNAWAxiYktetewTFfCYjQfHE0QnSbq4cwWOTsn7UwYbe1ErAKBjVLq 6yjVSccRaV/rST+ELQgveATuM9V4XyUTuIsdIftIA0ERP+Ehw7DCDpumUcG5VFLq e6AvNATU2LE5m2SIP3vnplPpcOVkkXksguGg3TppYRvAtbVO2YWeoM520Vf7 -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:45 2026 by rpki-client