This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/CPZG4XxfF0vIUqKLlml-DnAhI78.roa File: CPZG4XxfF0vIUqKLlml-DnAhI78.roa (raw, json) Hash identifier: yghX+xOCfCSz2UxV0M4ErScOYQQ+0s+V03bXtP9h8Jg= Subject key identifier: 08:F6:46:E1:7C:5F:17:4B:C8:52:A2:8B:96:69:7E:0E:70:21:23:BF Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019B7D5CC2A5EC215EF547C7259C9ED51823 Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/CPZG4XxfF0vIUqKLlml-DnAhI78.roa Signing time: Fri 02 Jan 2026 06:19:49 +0000 ROA not before: Fri 02 Jan 2026 06:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62349 IP address blocks: 2a0a:6b40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c2:a5:ec:21:5e:f5:47:c7:25:9c:9e:d5:18:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08f646e17c5f174bc852a28b96697e0e702123bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7d:d5:5d:d1:35:50:8e:00:87:50:82:02:5a: 79:46:bc:4d:be:65:17:f1:26:a9:c0:1b:54:39:f0: 2b:7e:1e:8a:b5:ec:48:6c:0d:4b:9e:95:93:af:8a: 82:da:62:9d:36:46:4a:0c:49:8e:ea:c0:0a:f6:a9: 99:03:fe:3c:1e:43:ce:9a:44:94:ed:b9:29:a9:03: 7e:cb:3b:21:25:0b:34:b2:00:3f:a6:26:3c:8c:4f: 9b:d3:74:79:cf:5a:e4:d9:89:af:29:bc:89:7f:53: 05:00:a9:1e:2e:55:f5:f1:23:4d:84:f2:74:d6:04: 74:b4:26:30:8d:53:ee:1b:a7:fc:db:8d:4c:be:07: 2e:3a:bc:b5:a5:c4:2b:68:35:2e:e8:80:6e:61:1a: 06:79:56:fc:fe:93:7f:4a:8e:ec:b4:1b:e2:a5:67: 27:50:be:2b:a3:7e:e0:48:01:c5:76:ef:8b:7c:15: 13:35:e5:c5:ae:f2:ba:4e:64:83:2f:7c:8d:9f:fe: 01:2e:ae:ab:f6:e0:22:25:fc:6a:ce:79:b3:ab:09: ea:33:0e:67:50:0d:a5:f9:3c:fe:63:cc:b1:7e:cb: 5e:8b:04:c6:12:46:8a:ba:0f:05:df:5d:4e:f6:f4: 7e:12:e6:37:8d:55:3c:c1:3f:65:14:07:d2:60:9f: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F6:46:E1:7C:5F:17:4B:C8:52:A2:8B:96:69:7E:0E:70:21:23:BF X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/CPZG4XxfF0vIUqKLlml-DnAhI78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6b40::/29 Signature Algorithm: sha256WithRSAEncryption 06:ae:e2:13:fc:d7:58:e8:c8:70:ab:32:c2:cf:ab:99:dd:a1: a1:35:9a:10:f8:ef:61:a0:36:b3:23:d7:6b:c1:dc:fc:ad:b6: e3:49:8a:6c:db:34:d4:ca:f0:66:96:a1:58:71:05:9c:23:6f: a6:e9:18:ec:10:4f:7c:35:b9:86:a2:2b:5b:92:57:21:0e:85: 84:03:d5:5b:d3:5f:f0:7b:a9:45:ca:e3:9f:ee:0f:c2:58:ff: a9:3b:ac:eb:d7:af:df:aa:c7:22:49:fb:d4:fb:0d:6a:4a:e9: 9b:40:d8:c7:f1:3a:e8:50:18:91:9d:1a:f2:c0:23:3d:58:8a: 64:5b:f3:a0:e2:50:56:57:fd:5f:8e:90:c7:42:a6:25:0d:af: 94:07:56:fd:af:90:c6:5a:d2:eb:2b:5f:12:1c:46:3f:8e:bb: 8d:da:6d:00:97:ab:e2:22:1f:ac:1a:cb:c2:53:f3:bc:b7:41: 52:24:f5:7c:d5:83:59:ac:b5:62:d3:f3:68:f1:5a:a4:64:eb: 85:40:72:cd:65:3b:82:71:a0:95:b9:54:ce:b5:05:52:36:fa: a2:6d:39:87:a7:19:db:de:af:ff:7c:39:a7:22:b6:3b:38:08: 5f:80:51:15:25:62:dc:7e:ef:05:ab:f8:72:c5:f6:9f:f2:6d: b9:99:22:73 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XMKl7CFe9UfHJZye1RgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGY2NDZlMTdjNWYxNzRiYzg1MmEyOGI5NjY5N2UwZTcwMjEyM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH3VXdE1UI4Ah1CCAlp5RrxNvmUX 8SapwBtUOfArfh6KtexIbA1LnpWTr4qC2mKdNkZKDEmO6sAK9qmZA/48HkPOmkSU 7bkpqQN+yzshJQs0sgA/piY8jE+b03R5z1rk2YmvKbyJf1MFAKkeLlX18SNNhPJ0 1gR0tCYwjVPuG6f8241MvgcuOry1pcQraDUu6IBuYRoGeVb8/pN/So7stBvipWcn UL4ro37gSAHFdu+LfBUTNeXFrvK6TmSDL3yNn/4BLq6r9uAiJfxqznmzqwnqMw5n UA2l+Tz+Y8yxfsteiwTGEkaKug8F311O9vR+EuY3jVU8wT9lFAfSYJ87EQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAj2RuF8XxdLyFKii5Zpfg5wISO/MB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvQ1BaRzRYeGZGMHZJVXFLTGxtbC1EbkFoSTc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgprQDAN BgkqhkiG9w0BAQsFAAOCAQEABq7iE/zXWOjIcKsyws+rmd2hoTWaEPjvYaA2syPX a8Hc/K2240mKbNs01MrwZpahWHEFnCNvpukY7BBPfDW5hqIrW5JXIQ6FhAPVW9Nf 8HupRcrjn+4Pwlj/qTus69ev36rHIkn71PsNakrpm0DYx/E66FAYkZ0a8sAjPViK ZFvzoOJQVlf9X46Qx0KmJQ2vlAdW/a+QxlrS6ytfEhxGP467jdptAJer4iIfrBrL wlPzvLdBUiT1fNWDWay1YtPzaPFapGTrhUByzWU7gnGglblUzrUFUjb6om05h6cZ 296v/3w5pyK2OzgIX4BRFSVi3H7vBav4csX2n/JtuZkicw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:05 2026 by rpki-client