This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/32Nopwa7iDrMzQvWR2AiGUXyxqI.roa File: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (raw, json) Hash identifier: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8= Subject key identifier: DF:63:68:A7:06:BB:88:3A:CC:CD:0B:D6:47:60:22:19:45:F2:C6:A2 Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b Certificate serial: 019B7EA56AEE19FBCC8C326083F88A1A94F4 Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/32Nopwa7iDrMzQvWR2AiGUXyxqI.roa Signing time: Fri 02 Jan 2026 12:18:48 +0000 ROA not before: Fri 02 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43289 IP address blocks: 2a02:e00:ffe8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:6a:ee:19:fb:cc:8c:32:60:83:f8:8a:1a:94:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494d7873416510a2fb2346ef342280155522713b Validity Not Before: Jan 2 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df6368a706bb883acccd0bd64760221945f2c6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:09:78:34:53:fa:e0:a2:5a:4c:7a:16:d0: 14:62:ec:e8:c7:75:70:e0:96:2b:3f:a4:86:9b:44: e4:15:16:5d:47:99:7f:a3:0f:57:1e:34:be:bc:04: ff:81:5a:b4:5a:f3:15:ac:f3:dd:e9:f8:cd:f6:aa: 17:73:00:b3:47:90:04:1d:77:35:c2:1b:89:ac:86: 51:95:b3:4f:e1:6f:60:75:98:58:a9:78:9b:a9:53: 7c:7c:59:b3:dc:e2:88:51:a2:30:0f:89:d9:04:17: c5:22:45:28:4e:70:75:d7:8e:42:9e:ff:f7:87:9e: 5f:cf:a5:3f:66:d2:89:ce:ac:8a:36:d1:14:8a:25: ff:af:ec:7f:63:7b:2e:04:76:05:b3:cd:58:4a:01: af:da:55:63:e0:fa:e6:9e:c1:6d:fd:26:98:99:04: ff:80:73:58:84:ce:83:22:42:d4:61:00:20:06:46: d4:84:27:a3:ea:c2:95:91:dc:76:e7:2b:b3:cb:82: 74:41:f1:1d:ef:40:10:e7:e7:28:0f:80:44:d2:6d: c5:bc:ac:53:e8:51:1e:a0:48:b5:ca:7d:67:e0:7f: f8:0d:8f:3b:40:fb:db:3e:25:8b:57:c8:eb:3a:4f: 1a:db:cd:33:fa:4e:4b:54:e3:8d:14:97:d5:e0:fc: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:63:68:A7:06:BB:88:3A:CC:CD:0B:D6:47:60:22:19:45:F2:C6:A2 X509v3 Authority Key Identifier: keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/32Nopwa7iDrMzQvWR2AiGUXyxqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:e00:ffe8::/48 Signature Algorithm: sha256WithRSAEncryption 3b:29:2b:68:9c:61:12:d5:2a:e9:08:93:89:cd:2b:b7:c3:2a: 6a:95:45:f0:ab:8d:9c:49:0d:44:8c:bd:29:78:17:41:f4:3f: 2d:95:e4:6f:4a:40:0c:04:5a:3b:11:af:33:5b:ba:2d:3e:8b: 26:ee:17:99:79:6d:4a:f4:4f:38:5a:58:56:19:83:33:41:ef: a5:f4:30:46:05:6c:e8:dc:11:b0:62:67:63:86:cb:9f:06:47: 20:ad:82:1b:2a:27:f0:a7:08:9f:9e:ca:96:5d:2f:1a:e7:b8: a1:9b:b3:2f:88:52:34:e8:13:35:90:2b:59:28:0f:47:b1:e6: f5:d3:71:9a:df:6a:67:6a:e7:27:49:b7:3a:0e:77:57:03:7f: 22:00:0d:32:21:03:07:c1:cc:b1:da:13:61:5a:c9:99:c4:43: 34:5d:1a:a8:77:5b:00:1d:6f:00:18:4f:bb:0d:7a:60:7a:4b: 58:d2:bd:44:4b:0e:08:a8:26:6f:ab:70:39:18:c1:61:13:bc: 2e:c4:83:06:12:2d:ed:20:75:4e:fc:54:d9:da:38:62:3d:60: db:2b:6c:7c:bb:7b:e0:53:6a:7b:0b:73:94:78:71:f3:2c:96: 7f:7b:83:23:bc:9b:64:1a:fa:c6:e7:70:f2:9e:7d:2f:4e:60: ca:ab:2e:72 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pWruGfvMjDJgg/iKGpT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NGQ3ODczNDE2NTEwYTJmYjIzNDZlZjM0MjI4MDE1NTUy MjcxM2IwHhcNMjYwMTAyMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjYzNjhhNzA2YmI4ODNhY2NjZDBiZDY0NzYwMjIxOTQ1ZjJjNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3IJeDRT+uCiWkx6FtAUYuzox3Vw 4JYrP6SGm0TkFRZdR5l/ow9XHjS+vAT/gVq0WvMVrPPd6fjN9qoXcwCzR5AEHXc1 whuJrIZRlbNP4W9gdZhYqXibqVN8fFmz3OKIUaIwD4nZBBfFIkUoTnB1145Cnv/3 h55fz6U/ZtKJzqyKNtEUiiX/r+x/Y3suBHYFs81YSgGv2lVj4PrmnsFt/SaYmQT/ gHNYhM6DIkLUYQAgBkbUhCej6sKVkdx25yuzy4J0QfEd70AQ5+coD4BE0m3FvKxT 6FEeoEi1yn1n4H/4DY87QPvbPiWLV8jrOk8a280z+k5LVOONFJfV4PzQMQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN9jaKcGu4g6zM0L1kdgIhlF8saiMB8GA1UdIwQY MBaAFElNeHNBZRCi+yNG7zQigBVVInE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjIt ZTE4ZTdiMmFjNTM2LzEvMzJOb3B3YTdpRHJNelF2V1IyQWlHVVh5eHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjItZTE4ZTdiMmFjNTM2 LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIOAP/o MA0GCSqGSIb3DQEBCwUAA4IBAQA7KStonGES1SrpCJOJzSu3wypqlUXwq42cSQ1E jL0peBdB9D8tleRvSkAMBFo7Ea8zW7otPosm7heZeW1K9E84WlhWGYMzQe+l9DBG BWzo3BGwYmdjhsufBkcgrYIbKifwpwifnsqWXS8a57ihm7MviFI06BM1kCtZKA9H seb103Ga32pnaucnSbc6DndXA38iAA0yIQMHwcyx2hNhWsmZxEM0XRqod1sAHW8A GE+7DXpgektY0r1ESw4IqCZvq3A5GMFhE7wuxIMGEi3tIHVO/FTZ2jhiPWDbK2x8 u3vgU2p7C3OUeHHzLJZ/e4MjvJtkGvrG53Dynn0vTmDKqy5y -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:45 2026 by rpki-client