This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/30puVpgFRN4YwWi8xzX_Z-3HoMc.roa File: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (raw, json) Hash identifier: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0= Subject key identifier: DF:4A:6E:56:98:05:44:DE:18:C1:68:BC:C7:35:FF:67:ED:C7:A0:C7 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019B79ED38BBC3C63A6F75D4FB31284F7F2E Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/30puVpgFRN4YwWi8xzX_Z-3HoMc.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49762 IP address blocks: 2001:998:82::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:38:bb:c3:c6:3a:6f:75:d4:fb:31:28:4f:7f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df4a6e56980544de18c168bcc735ff67edc7a0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:25:b9:74:ae:ad:c0:11:69:da:ab:d5:c8: d4:77:a8:43:f2:32:3d:a6:d5:bd:07:03:3c:97:fc: 39:ce:b3:16:58:7d:33:06:ab:2f:ed:8e:de:62:82: b3:b4:a5:8c:66:f5:96:e9:8c:1a:17:ae:54:b0:ef: 0c:06:a7:bd:b6:02:87:1c:fe:4b:16:5b:bc:cf:9b: 52:c0:51:79:4b:a1:79:8a:bf:7b:ce:79:36:a7:77: 17:b6:c7:c1:6f:85:16:30:5d:40:51:f7:ac:e2:ae: a5:39:a5:a3:7f:bc:6b:fa:1d:3b:e6:ee:5f:a8:fc: ab:32:67:46:72:9f:d8:89:96:63:20:44:2f:70:22: 0e:88:71:8a:c0:85:fd:19:ed:16:f6:6f:de:b2:69: a1:a7:f4:8b:9f:4a:b0:f8:db:4c:e7:cb:aa:04:18: 5e:7b:9f:2e:3a:a2:51:6c:1b:f0:1d:27:7c:d8:61: f2:ac:f9:ab:3d:37:a0:50:3c:fb:d5:8d:cd:4e:b4: 78:c2:31:1c:ab:7f:c2:9a:0d:5a:43:c9:65:46:c1: bb:97:cd:a8:7e:87:34:9a:5c:61:bc:0a:68:c4:6d: 58:97:cd:35:99:18:2f:ab:9b:93:88:50:ae:36:72: f2:e5:5b:e3:3f:7d:b2:b9:3f:d5:02:81:58:28:26: b6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4A:6E:56:98:05:44:DE:18:C1:68:BC:C7:35:FF:67:ED:C7:A0:C7 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/30puVpgFRN4YwWi8xzX_Z-3HoMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:998:82::/48 Signature Algorithm: sha256WithRSAEncryption 43:3a:8e:c9:60:99:12:9a:da:6e:89:eb:49:93:dd:90:e0:76: 55:14:58:d2:cd:1f:e9:d3:01:fc:b8:4c:ea:81:63:30:26:09: 72:f5:ac:5c:de:cf:bc:f6:7f:22:4d:cf:a6:47:6b:85:f1:85: 9f:2f:88:c7:43:91:a5:14:cf:e6:0d:62:31:dc:b2:3a:e9:3d: 12:ce:df:ac:e3:1e:d3:13:1f:44:a8:be:93:95:36:e4:b8:7e: cb:cb:dc:00:73:1c:f1:e5:e8:8d:d2:91:2d:40:ea:51:56:ae: 1b:2e:9e:0b:6a:db:f4:53:fb:cb:d3:51:a7:98:c7:71:14:f8: ac:db:3f:ba:c8:0e:fb:87:84:50:56:88:35:be:c9:a6:d1:50: 83:ef:18:a4:5c:1e:99:18:85:e5:9b:1d:1c:c3:b8:3f:83:70: e9:d4:a3:89:5c:93:5f:44:12:1e:a3:84:e4:03:8a:cb:9b:32: b1:9a:2c:28:c7:16:95:3b:c2:03:47:1d:48:da:33:ec:c6:18: f8:c8:2c:c8:83:3b:22:a4:c8:bb:10:4f:ef:05:ca:34:0a:62: 03:9f:9f:15:0e:19:e0:32:e6:d6:3b:86:a8:29:f6:5b:6f:eb: c5:64:90:48:62:23:16:8d:a4:fa:21:ca:b1:21:1b:26:12:0c: bc:39:3a:bb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57Ti7w8Y6b3XU+zEoT38uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjRhNmU1Njk4MDU0NGRlMThjMTY4YmNjNzM1ZmY2N2VkYzdhMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb8luXSurcARadqr1cjUd6hD8jI9 ptW9BwM8l/w5zrMWWH0zBqsv7Y7eYoKztKWMZvWW6YwaF65UsO8MBqe9tgKHHP5L Flu8z5tSwFF5S6F5ir97znk2p3cXtsfBb4UWMF1AUfes4q6lOaWjf7xr+h075u5f qPyrMmdGcp/YiZZjIEQvcCIOiHGKwIX9Ge0W9m/esmmhp/SLn0qw+NtM58uqBBhe e58uOqJRbBvwHSd82GHyrPmrPTegUDz71Y3NTrR4wjEcq3/Cmg1aQ8llRsG7l82o foc0mlxhvApoxG1Yl801mRgvq5uTiFCuNnLy5VvjP32yuT/VAoFYKCa2sQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN9KblaYBUTeGMFovMc1/2ftx6DHMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvMzBwdVZwZ0ZSTjRZd1dpOHh6WF9aLTNIb01jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEJmACC MA0GCSqGSIb3DQEBCwUAA4IBAQBDOo7JYJkSmtpuietJk92Q4HZVFFjSzR/p0wH8 uEzqgWMwJgly9axc3s+89n8iTc+mR2uF8YWfL4jHQ5GlFM/mDWIx3LI66T0Szt+s 4x7TEx9EqL6TlTbkuH7Ly9wAcxzx5eiN0pEtQOpRVq4bLp4Latv0U/vL01GnmMdx FPis2z+6yA77h4RQVog1vsmm0VCD7xikXB6ZGIXlmx0cw7g/g3Dp1KOJXJNfRBIe o4TkA4rLmzKxmiwoxxaVO8IDRx1I2jPsxhj4yCzIgzsipMi7EE/vBco0CmIDn58V DhngMubWO4aoKfZbb+vFZJBIYiMWjaT6IcqxIRsmEgy8OTq7 -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:10 2026 by rpki-client