This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/NTfOXNXZRUr1slwiC5jri_Pj3nE.roa File: NTfOXNXZRUr1slwiC5jri_Pj3nE.roa (raw, json) Hash identifier: 2cTeTvGq9Ma3xGEMix+i4fzR4v6Kuv41txoLWaf+1IU= Subject key identifier: 35:37:CE:5C:D5:D9:45:4A:F5:B2:5C:22:0B:98:EB:8B:F3:E3:DE:71 Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465 Certificate serial: 019B77C72DB7A33A6980C3B4328C8B45700A Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/NTfOXNXZRUr1slwiC5jri_Pj3nE.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210818 IP address blocks: 2a11:8a85::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2d:b7:a3:3a:69:80:c3:b4:32:8c:8b:45:70:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3537ce5cd5d9454af5b25c220b98eb8bf3e3de71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:0d:75:60:cf:9a:4b:51:ce:4b:f7:a6:b5: 8c:51:3b:a0:95:ca:0e:db:2f:ff:bb:7b:12:dd:24: f4:40:77:0d:2c:7e:f2:93:14:40:68:96:4c:ed:2b: c8:7e:e7:00:3c:71:0c:b3:3a:f5:63:47:41:c2:c2: 9e:c2:7b:6b:ce:4d:fc:42:1e:a7:e1:27:5f:55:f6: 0c:49:84:8a:19:0a:9e:52:06:f6:d9:be:e5:11:7c: af:3d:5b:8d:2c:07:f4:e1:f8:e2:36:7a:69:ed:dc: fe:73:4b:45:93:71:94:a4:1a:c5:1b:65:58:29:d6: b4:4f:68:2a:39:9c:60:8f:b0:b0:1e:88:e0:5b:39: bb:90:14:cd:f5:5e:09:e6:3d:14:59:d7:87:44:16: d7:75:81:ce:e3:c5:76:2f:19:b3:5b:60:4f:6e:08: 48:d9:02:18:1e:c9:51:e1:3c:10:78:00:1d:5c:7c: 57:81:b1:e7:cd:7b:c4:f3:97:93:17:19:51:2b:83: 0e:78:1a:d7:27:f6:34:9f:f1:79:8d:3b:b6:21:13: 0f:b6:a3:eb:86:16:08:1e:64:5f:c9:eb:ed:e0:76: c7:d6:e9:5b:6a:ff:5e:3b:2b:e7:58:df:c8:9e:54: c3:10:65:fb:38:ef:58:e7:2a:5c:58:72:a3:d5:fc: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:37:CE:5C:D5:D9:45:4A:F5:B2:5C:22:0B:98:EB:8B:F3:E3:DE:71 X509v3 Authority Key Identifier: keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/NTfOXNXZRUr1slwiC5jri_Pj3nE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:8a85::/38 Signature Algorithm: sha256WithRSAEncryption 04:00:d5:36:d3:27:71:25:e3:2f:7b:4d:ba:d1:63:b7:ea:ef: 76:fb:71:59:2b:99:22:4a:98:d2:ba:94:dd:09:91:ef:c4:3a: ba:e4:b2:b8:02:16:72:bd:56:ef:d8:3e:e8:e5:a7:6e:c3:ee: 51:86:2a:2f:77:7b:60:63:fb:37:b4:e8:aa:b7:ed:29:8c:b9: 9d:10:96:06:84:7e:87:97:73:4b:7b:7e:3b:d2:d1:a1:0b:20: 24:0b:d7:cf:72:bd:1a:5e:54:83:01:31:6f:81:35:45:12:87: b0:b6:0b:6c:7b:06:57:91:dd:54:3b:e5:e6:11:95:a3:be:8c: fd:a8:e5:4b:cd:aa:f0:1f:f0:be:87:75:9a:f7:54:b7:ac:60: f0:83:1f:ed:3d:33:15:d4:37:21:b6:74:b7:34:cd:29:36:1d: b2:58:83:ee:94:d4:ff:db:4e:18:e4:30:a4:40:a0:a7:b3:05: 74:0d:16:fd:87:f5:9e:15:48:a4:4c:b0:5e:44:c1:23:e1:f4: 67:e9:1a:fb:66:e0:8a:28:65:b2:85:06:fa:80:71:3c:c5:70: 7b:85:2c:ac:f0:f6:50:bd:c1:a5:73:d5:92:ca:8e:7b:8b:bf: a3:d8:a3:d2:08:d2:b6:51:09:ea:51:2b:07:d6:fc:fa:5d:f6: 3e:67:42:c1 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xy23ozppgMO0MoyLRXAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YWJmMjlmZGVmODU3MDUwMmY0YjUxYmU1ZmZjMDVjNGQ5 YjM0NjUwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTM3Y2U1Y2Q1ZDk0NTRhZjViMjVjMjIwYjk4ZWI4YmYzZTNkZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjkNdWDPmktRzkv3prWMUTuglcoO 2y//u3sS3ST0QHcNLH7ykxRAaJZM7SvIfucAPHEMszr1Y0dBwsKewntrzk38Qh6n 4SdfVfYMSYSKGQqeUgb22b7lEXyvPVuNLAf04fjiNnpp7dz+c0tFk3GUpBrFG2VY Kda0T2gqOZxgj7CwHojgWzm7kBTN9V4J5j0UWdeHRBbXdYHO48V2LxmzW2BPbghI 2QIYHslR4TwQeAAdXHxXgbHnzXvE85eTFxlRK4MOeBrXJ/Y0n/F5jTu2IRMPtqPr hhYIHmRfyevt4HbH1ulbav9eOyvnWN/InlTDEGX7OO9Y5ypcWHKj1fz+uQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDU3zlzV2UVK9bJcIguY64vz495xMB8GA1UdIwQY MBaAFEir8p/e+FcFAvS1G+X/wFxNmzRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQt YWJhMTEzZjNlM2FlLzEvTlRmT1hOWFpSVXIxc2x3aUM1anJpX1BqM25FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQtYWJhMTEzZjNlM2Fl LzEvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKhGKhQAw DQYJKoZIhvcNAQELBQADggEBAAQA1TbTJ3El4y97TbrRY7fq73b7cVkrmSJKmNK6 lN0Jke/EOrrksrgCFnK9Vu/YPujlp27D7lGGKi93e2Bj+ze06Kq37SmMuZ0QlgaE foeXc0t7fjvS0aELICQL189yvRpeVIMBMW+BNUUSh7C2C2x7BleR3VQ75eYRlaO+ jP2o5UvNqvAf8L6HdZr3VLesYPCDH+09MxXUNyG2dLc0zSk2HbJYg+6U1P/bThjk MKRAoKezBXQNFv2H9Z4VSKRMsF5EwSPh9GfpGvtm4IooZbKFBvqAcTzFcHuFLKzw 9lC9waVz1ZLKjnuLv6PYo9II0rZRCepRKwfW/Ppd9j5nQsE= -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:30 2026 by rpki-client