This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Rk3iX8TpkaQgD3TF-fnI9o7W7O8.roa File: Rk3iX8TpkaQgD3TF-fnI9o7W7O8.roa (raw, json) Hash identifier: bofsGduriRhR/R/BQsCSeddnTYoQ+RMoW3f7cBT+4OE= Subject key identifier: 46:4D:E2:5F:C4:E9:91:A4:20:0F:74:C5:F9:F9:C8:F6:8E:D6:EC:EF Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6CEE61C9308A97CA479708075C02A Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Rk3iX8TpkaQgD3TF-fnI9o7W7O8.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214354 IP address blocks: 2a01:e281:ac00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ce:e6:1c:93:08:a9:7c:a4:79:70:80:75:c0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=464de25fc4e991a4200f74c5f9f9c8f68ed6ecef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:22:a4:8b:b0:91:fb:cc:59:2a:2b:a1:7f: c6:71:d4:45:1f:5e:55:85:17:f2:b4:ee:fd:c5:4b: f8:2c:4f:35:3a:03:f1:a6:37:29:d5:79:f1:d0:91: 88:d6:e7:7d:52:34:66:a4:49:75:3e:b2:7c:01:23: 0c:39:bc:87:b2:8d:5d:d4:98:d8:33:b8:43:36:3d: fd:e4:e3:65:8f:b4:6a:73:ea:0f:35:2e:f4:98:08: 93:7f:07:12:d6:67:93:97:47:ec:6e:20:13:d4:69: ba:1b:a6:ba:5a:3c:ff:ed:82:86:27:dd:c3:c9:03: 6e:76:8a:07:75:e8:f6:e1:57:87:5e:45:9e:89:0c: f3:37:93:2f:67:61:1f:76:9a:bd:09:62:98:d1:64: 3c:94:e1:f1:5f:41:2d:e0:89:cd:3c:87:ea:23:cb: cb:13:54:cf:39:f3:ea:f3:5d:4a:4f:e6:31:cb:36: 81:59:19:31:a3:78:a6:36:b9:32:c9:31:61:bd:c7: 4d:22:92:ce:bb:d1:f0:e0:0e:43:0a:18:19:66:aa: 7b:29:7b:83:21:9e:d5:50:98:5f:00:24:f8:32:05: 5d:58:7e:72:eb:50:9f:ea:1b:3f:c4:03:24:84:7e: 1b:5d:e7:61:c6:37:08:3e:ea:9b:dd:7b:f0:f6:c5: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4D:E2:5F:C4:E9:91:A4:20:0F:74:C5:F9:F9:C8:F6:8E:D6:EC:EF X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Rk3iX8TpkaQgD3TF-fnI9o7W7O8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e281:ac00::/40 Signature Algorithm: sha256WithRSAEncryption 63:c1:10:3d:40:af:64:6b:cc:91:e0:85:f6:71:ca:46:f4:1f: 08:6d:ac:d2:e2:35:6c:7c:3d:cf:4d:b8:56:2d:9d:c9:c5:c0: d3:e3:96:40:71:d2:94:bc:02:b1:43:ab:9a:5a:5b:b8:4f:aa: 55:37:24:2a:ef:01:bf:7e:d9:55:df:c4:96:4d:ee:a9:de:d6: db:4e:9b:8a:6d:15:90:f4:b9:92:06:2b:ee:1e:83:52:5b:60: f5:0c:98:96:7c:e8:dc:41:f4:fd:82:1a:50:da:70:f6:7d:63: 2e:ee:53:d6:f0:83:02:a6:e0:42:60:15:c3:8e:12:1f:8e:4f: 21:47:bb:e7:90:2e:c0:c4:3b:d5:f7:db:d2:89:59:80:ea:42: 8e:97:4a:99:07:7f:3e:73:37:e9:32:fa:44:4c:13:7d:e9:62: d8:93:47:52:a2:ec:43:62:71:9b:2d:e1:64:85:e8:f2:d0:c7: 56:ef:44:e1:6d:6d:6e:4a:45:9d:d5:0c:da:46:0f:4f:69:5c: c4:b1:46:63:f1:c1:43:50:7b:72:30:5f:13:8a:29:c3:01:b4: e8:b6:89:0c:fd:eb:cf:ca:b3:ad:37:00:63:bb:6e:20:25:e0: 57:75:a0:13:0b:21:c8:f0:a8:de:05:89:e4:c2:26:44:91:48: 38:ff:88:76 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+ps7mHJMIqXykeXCAdcAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjRkZTI1ZmM0ZTk5MWE0MjAwZjc0YzVmOWY5YzhmNjhlZDZlY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvUipIuwkfvMWSoroX/GcdRFH15V hRfytO79xUv4LE81OgPxpjcp1Xnx0JGI1ud9UjRmpEl1PrJ8ASMMObyHso1d1JjY M7hDNj395ONlj7Rqc+oPNS70mAiTfwcS1meTl0fsbiAT1Gm6G6a6Wjz/7YKGJ93D yQNudooHdej24VeHXkWeiQzzN5MvZ2Efdpq9CWKY0WQ8lOHxX0Et4InNPIfqI8vL E1TPOfPq811KT+YxyzaBWRkxo3imNrkyyTFhvcdNIpLOu9Hw4A5DChgZZqp7KXuD IZ7VUJhfACT4MgVdWH5y61Cf6hs/xAMkhH4bXedhxjcIPuqb3Xvw9sUJ5wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEZN4l/E6ZGkIA90xfn5yPaO1uzvMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvUmszaVg4VHBrYVFnRDNURi1mbkk5bzdXN084LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHigaww DQYJKoZIhvcNAQELBQADggEBAGPBED1Ar2RrzJHghfZxykb0HwhtrNLiNWx8Pc9N uFYtncnFwNPjlkBx0pS8ArFDq5paW7hPqlU3JCrvAb9+2VXfxJZN7qne1ttOm4pt FZD0uZIGK+4eg1JbYPUMmJZ86NxB9P2CGlDacPZ9Yy7uU9bwgwKm4EJgFcOOEh+O TyFHu+eQLsDEO9X329KJWYDqQo6XSpkHfz5zN+ky+kRME33pYtiTR1Ki7ENicZst 4WSF6PLQx1bvROFtbW5KRZ3VDNpGD09pXMSxRmPxwUNQe3IwXxOKKcMBtOi2iQz9 68/Ks603AGO7biAl4Fd1oBMLIcjwqN4FieTCJkSRSDj/iHY= -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:27 2026 by rpki-client