This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/CP1700xQhoIo0eqZb96w49fwMZU.roa File: CP1700xQhoIo0eqZb96w49fwMZU.roa (raw, json) Hash identifier: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU= Subject key identifier: 08:FD:7B:D3:4C:50:86:82:28:D1:EA:99:6F:DE:B0:E3:D7:F0:31:95 Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019B7F15843A3B2E1F4E18F5DF6264402AA0 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/CP1700xQhoIo0eqZb96w49fwMZU.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58076 IP address blocks: 2a03:97c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:84:3a:3b:2e:1f:4e:18:f5:df:62:64:40:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08fd7bd34c50868228d1ea996fdeb0e3d7f03195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:4e:98:6c:dc:c4:b5:74:68:d6:c2:36:a0: 02:fe:3e:f7:6c:ab:c7:9c:a4:b6:6a:66:31:fc:e5: c2:22:47:3c:4c:c1:59:06:c4:d3:a9:4b:27:1e:60: 97:00:53:41:d8:d4:cf:4e:ef:c5:00:6e:20:55:a2: 7e:74:3c:46:a6:72:d1:32:fd:59:b2:0e:28:6b:9a: 4b:91:59:a7:0f:b6:f3:10:6d:9f:f2:b8:91:6a:b2: 7f:10:aa:2a:fe:3d:bb:c3:67:55:71:00:04:e2:ab: fd:56:f2:80:f4:11:3d:e5:d0:ec:b7:ec:b0:85:8a: 7c:bc:cb:27:e5:36:55:f4:85:7b:3a:d1:f6:cd:ae: 69:87:75:72:07:8e:71:6e:78:1c:57:be:17:ea:6f: 11:cf:fb:b0:d2:4c:0a:eb:e6:85:97:ec:10:ae:1b: 65:35:24:b9:63:84:77:5e:3c:36:5c:4f:8d:f3:a4: 3b:24:14:f0:98:71:52:c8:b3:3c:26:8c:9e:14:d2: f2:e9:ee:bf:31:e9:1c:9d:e4:e7:de:95:2d:31:91: 01:59:9c:30:8c:6a:fd:90:2a:45:79:0e:a2:08:f5: 0d:82:a1:2d:ed:30:f7:4c:a1:03:3b:44:77:4e:68: 8e:07:e0:3b:4b:d1:52:5b:a5:37:7d:3e:88:c8:ec: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FD:7B:D3:4C:50:86:82:28:D1:EA:99:6F:DE:B0:E3:D7:F0:31:95 X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/CP1700xQhoIo0eqZb96w49fwMZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:97c0:1::/48 Signature Algorithm: sha256WithRSAEncryption d3:0c:b7:cb:9e:e2:d4:ae:2a:8d:4b:fa:3e:d0:ad:3b:68:00: bc:69:11:33:c8:b3:b4:c3:ff:26:4c:5e:c5:cc:82:08:3e:54: 95:57:4d:bf:a1:0d:87:80:37:a7:50:08:04:97:07:87:40:83: b4:92:b0:67:6e:97:c9:5d:c4:5a:26:0c:9c:43:4a:43:04:e8: ec:52:10:ac:fe:38:33:3a:9c:fa:19:48:d9:52:95:04:14:9b: a8:00:81:cc:3f:49:bb:bc:d7:60:0a:92:60:7e:8f:ce:f1:8d: 93:9b:94:d1:b2:00:7d:6a:fe:a4:f7:ac:c6:fc:65:a7:d4:c4: 40:f5:0a:43:09:39:26:93:55:59:41:45:2c:a8:51:37:6b:a0: 26:94:a7:7f:b7:24:23:62:dd:b6:f6:c1:05:f9:16:4a:61:60: 25:c7:96:f8:65:46:f6:2a:01:23:07:ea:b4:a9:40:49:cc:5c: e0:d7:8b:25:2e:0f:da:49:9a:3f:71:65:8d:eb:08:9e:30:c3: 5a:fa:fb:74:9e:6b:d8:d5:82:1f:4e:d9:8a:8a:67:44:dd:06: 7b:99:85:63:03:39:2c:f6:7a:04:4f:ed:f4:4f:66:31:32:8a: 7e:55:02:a2:f9:c5:1f:c4:73:a9:eb:11:41:4f:52:8a:6e:51: 60:31:31:b9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FYQ6Oy4fThj132JkQCqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGZkN2JkMzRjNTA4NjgyMjhkMWVhOTk2ZmRlYjBlM2Q3ZjAzMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF1OmGzcxLV0aNbCNqAC/j73bKvH nKS2amYx/OXCIkc8TMFZBsTTqUsnHmCXAFNB2NTPTu/FAG4gVaJ+dDxGpnLRMv1Z sg4oa5pLkVmnD7bzEG2f8riRarJ/EKoq/j27w2dVcQAE4qv9VvKA9BE95dDst+yw hYp8vMsn5TZV9IV7OtH2za5ph3VyB45xbngcV74X6m8Rz/uw0kwK6+aFl+wQrhtl NSS5Y4R3Xjw2XE+N86Q7JBTwmHFSyLM8JoyeFNLy6e6/MekcneTn3pUtMZEBWZww jGr9kCpFeQ6iCPUNgqEt7TD3TKEDO0R3TmiOB+A7S9FSW6U3fT6IyOx6cwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAj9e9NMUIaCKNHqmW/esOPX8DGVMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQ1AxNzAweFFob0lvMGVxWmI5Nnc0OWZ3TVpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgOXwAAB MA0GCSqGSIb3DQEBCwUAA4IBAQDTDLfLnuLUriqNS/o+0K07aAC8aREzyLO0w/8m TF7FzIIIPlSVV02/oQ2HgDenUAgElweHQIO0krBnbpfJXcRaJgycQ0pDBOjsUhCs /jgzOpz6GUjZUpUEFJuoAIHMP0m7vNdgCpJgfo/O8Y2Tm5TRsgB9av6k96zG/GWn 1MRA9QpDCTkmk1VZQUUsqFE3a6AmlKd/tyQjYt229sEF+RZKYWAlx5b4ZUb2KgEj B+q0qUBJzFzg14slLg/aSZo/cWWN6wieMMNa+vt0nmvY1YIfTtmKimdE3QZ7mYVj Azks9noET+30T2YxMop+VQKi+cUfxHOp6xFBT1KKblFgMTG5 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:47 2026 by rpki-client