This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/cP1lvMExnryf8cpW14P-YTW6oFM.roa File: cP1lvMExnryf8cpW14P-YTW6oFM.roa (raw, json) Hash identifier: 1i/eVOAe4LzQ+ZGAHO4PSAx1yAI1zK27WYnYn0/9SC0= Subject key identifier: 70:FD:65:BC:C1:31:9E:BC:9F:F1:CA:56:D7:83:FE:61:35:BA:A0:53 Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096 Certificate serial: 019B7A5B764A8FE46B9380399F5C488F8F17 Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/cP1lvMExnryf8cpW14P-YTW6oFM.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8309 IP address blocks: 2a13:7505:2::/48 maxlen: 48 2a13:7505:8002::/48 maxlen: 48 2a13:7505:8003::/48 maxlen: 48 2a13:7506:1002::/48 maxlen: 48 2a13:7506:9002::/48 maxlen: 48 2a13:7506:9003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:76:4a:8f:e4:6b:93:80:39:9f:5c:48:8f:8f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70fd65bcc1319ebc9ff1ca56d783fe6135baa053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:87:1a:83:94:17:ad:5d:a3:f8:c2:98:9f: 48:2e:10:3f:74:44:4d:36:9a:2b:c8:f7:f3:d3:cb: 6f:52:c2:4e:a6:21:b0:61:05:f6:7c:f9:be:d7:6b: 6c:cf:d7:5f:66:68:c3:2f:93:2a:ef:4d:23:e5:ea: ba:3c:73:9d:62:a1:c9:0c:bc:36:c4:e2:a5:5d:09: 43:70:79:0d:a6:d7:67:5f:71:79:61:03:b3:3d:41: b6:b8:20:52:e1:ce:6e:ca:b8:9c:2d:c0:bc:a0:7d: 95:fb:af:48:ee:9b:20:09:23:61:51:c2:54:02:9f: 2a:7b:d9:96:7a:17:51:89:1b:e6:17:f1:ef:ec:72: 12:48:b1:62:7f:d9:3f:98:a3:f7:ee:9e:99:e9:5c: 47:29:87:ca:25:ee:12:93:ea:d2:bb:13:ce:c5:3e: 75:53:c9:2d:fd:3c:5c:9c:a5:e7:f3:da:1e:00:c5: 0f:b2:f3:24:5d:24:5c:46:c0:4a:6a:79:4e:7b:06: 06:77:ab:92:6d:95:48:6b:3d:84:b1:84:2d:fe:af: c4:62:22:47:43:96:ee:dc:31:8c:f3:36:99:2c:9c: 49:fd:50:82:df:fb:51:54:84:42:29:a7:bb:16:0c: f3:f2:90:57:8e:68:9b:cb:9f:00:9f:a5:82:2b:32: e7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FD:65:BC:C1:31:9E:BC:9F:F1:CA:56:D7:83:FE:61:35:BA:A0:53 X509v3 Authority Key Identifier: keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/cP1lvMExnryf8cpW14P-YTW6oFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:7505:2::/48 2a13:7505:8002::/47 2a13:7506:1002::/48 2a13:7506:9002::/47 Signature Algorithm: sha256WithRSAEncryption 9d:a9:e4:50:b4:c6:12:42:1b:7e:1f:ae:7f:8f:73:21:90:31: ed:1d:d8:12:69:0d:fb:1d:cc:7a:7f:b3:98:12:7f:74:3d:c7: 54:93:d4:0b:ec:1b:ec:df:91:fb:de:15:14:46:96:6c:a7:48: 1b:fd:f4:30:9b:d4:49:ce:22:8f:b1:63:9a:55:e4:48:34:d7: 75:5d:01:bc:15:a8:5f:9f:7c:a4:b8:56:80:64:1e:b5:51:8f: 6f:2e:00:5d:8e:c3:90:a7:68:23:b0:4e:08:37:5b:f8:94:ef: c5:91:9a:fe:b3:9f:bb:4f:9f:f5:64:53:79:7b:ae:05:87:f8: 75:7f:63:34:78:4f:92:63:91:54:b9:f3:d9:a8:dd:c7:34:e7: 73:ad:c5:83:c5:08:d9:d4:88:0f:90:68:73:9e:74:ef:ab:e0: 07:c1:80:ae:22:d8:21:a2:c9:1d:7a:8f:c7:be:c5:f6:fd:66: 5c:9e:83:41:0b:95:c0:1b:df:cc:b0:82:33:42:1d:96:fd:0e: 46:4e:84:1c:61:20:39:a0:a9:72:b2:79:06:25:fb:4a:10:af: b6:9c:56:08:58:ce:50:83:81:f8:85:b7:57:51:83:8e:16:8d: 25:7c:3d:70:84:e9:74:7b:2d:1e:9f:36:d3:b5:43:bf:21:e1: b2:82:5e:bf -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6W3ZKj+Rrk4A5n1xIj48XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDU4OWRjZTYzOTgxODcwYTE4NTA5MDZjOGMyZDFkOTY3 NDAwOTYwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGZkNjViY2MxMzE5ZWJjOWZmMWNhNTZkNzgzZmU2MTM1YmFhMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmruHGoOUF61do/jCmJ9ILhA/dERN NporyPfz08tvUsJOpiGwYQX2fPm+12tsz9dfZmjDL5Mq700j5eq6PHOdYqHJDLw2 xOKlXQlDcHkNptdnX3F5YQOzPUG2uCBS4c5uyricLcC8oH2V+69I7psgCSNhUcJU Ap8qe9mWehdRiRvmF/Hv7HISSLFif9k/mKP37p6Z6VxHKYfKJe4Sk+rSuxPOxT51 U8kt/TxcnKXn89oeAMUPsvMkXSRcRsBKanlOewYGd6uSbZVIaz2EsYQt/q/EYiJH Q5bu3DGM8zaZLJxJ/VCC3/tRVIRCKae7Fgzz8pBXjmiby58An6WCKzLnfwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHD9ZbzBMZ68n/HKVteD/mE1uqBTMB8GA1UdIwQY MBaAFNoFidzmOYGHChhQkGyMLR2WdACWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYt MTRlM2MyMDE3OTY5LzEvY1AxbHZNRXhucnlmOGNwVzE0UC1ZVFc2b0ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYtMTRlM2MyMDE3OTY5 LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKhN1BQAC AwcBKhN1BYACAwcAKhN1BhACAwcBKhN1BpACMA0GCSqGSIb3DQEBCwUAA4IBAQCd qeRQtMYSQht+H65/j3MhkDHtHdgSaQ37Hcx6f7OYEn90PcdUk9QL7Bvs35H73hUU RpZsp0gb/fQwm9RJziKPsWOaVeRINNd1XQG8Fahfn3ykuFaAZB61UY9vLgBdjsOQ p2gjsE4IN1v4lO/FkZr+s5+7T5/1ZFN5e64Fh/h1f2M0eE+SY5FUufPZqN3HNOdz rcWDxQjZ1IgPkGhznnTvq+AHwYCuItghoskdeo/HvsX2/WZcnoNBC5XAG9/MsIIz Qh2W/Q5GToQcYSA5oKlysnkGJftKEK+2nFYIWM5Qg4H4hbdXUYOOFo0lfD1whOl0 ey0enzbTtUO/IeGygl6/ -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:22 2026 by rpki-client