This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa File: mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa (raw, json) Hash identifier: buVxIPz10EIVfwpYwh+P1ZYqWF3K+n7bUAR0sR0jGqU= Subject key identifier: 98:81:0A:7E:A7:30:CC:A1:A7:52:A3:3D:B3:83:9D:3E:CE:D8:AD:B0 Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6 Certificate serial: 019BE0DD2EEAF857B44881B8B10E66ED01BB Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa Signing time: Wed 21 Jan 2026 14:02:30 +0000 ROA not before: Wed 21 Jan 2026 14:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214427 IP address blocks: 2a01:fa00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:dd:2e:ea:f8:57:b4:48:81:b8:b1:0e:66:ed:01:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6 Validity Not Before: Jan 21 14:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98810a7ea730cca1a752a33db3839d3eced8adb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:ce:b3:a7:31:eb:1e:dc:92:61:e1:ef:60: 2c:27:f0:48:0b:c9:f4:7a:ac:6a:45:03:25:bc:b2: b7:4b:3d:98:90:d2:71:f9:d3:bf:e7:81:1c:43:c8: ed:9a:63:e4:91:5b:4c:70:bd:0b:b3:64:0b:f2:06: ed:0a:f5:df:9d:2d:cd:91:35:3c:05:d4:c4:94:fe: c3:f3:c0:cc:6d:f1:3d:e5:2f:da:94:88:45:5a:42: b3:93:a8:9c:1f:a2:1b:ba:4b:f2:67:9a:ce:cb:b8: 26:fb:4a:6b:de:34:d1:35:83:c7:ca:ff:09:bc:66: f7:c0:1a:40:84:a7:a2:2b:7d:ba:67:f9:74:f0:c4: d3:37:5b:59:8d:ce:19:ef:f4:b1:e6:fe:75:81:49: 3b:97:77:e5:8d:48:f3:f1:61:0a:8d:0d:55:f2:7c: 5e:c5:7d:e6:92:f3:ad:2e:4c:81:f2:df:cb:5f:c1: bd:17:2a:2f:48:f2:1d:dc:72:d4:01:74:c4:ae:42: c2:59:4d:0a:10:cf:9c:9c:b7:98:3b:fc:65:49:6b: 71:ac:96:be:ca:2f:5e:1a:cd:45:35:06:5a:eb:d3: d7:37:df:82:53:6d:6b:24:22:a1:4b:25:cf:75:7a: f6:86:b8:42:02:84:cc:cf:fd:84:b6:e1:e1:78:fe: c3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:81:0A:7E:A7:30:CC:A1:A7:52:A3:3D:B3:83:9D:3E:CE:D8:AD:B0 X509v3 Authority Key Identifier: keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:fa00::/29 Signature Algorithm: sha256WithRSAEncryption 78:b2:f5:ff:fc:00:82:f1:23:75:bb:10:3a:d9:2a:22:b2:e7: 91:a6:62:72:5b:05:bd:31:29:a8:3f:c2:71:75:0f:be:7c:91: 7a:7b:fb:21:db:17:b5:3b:a5:24:dd:01:a4:e6:35:d5:29:2c: 8f:c1:99:cb:26:ae:31:aa:90:22:df:b6:fa:cc:78:19:eb:0b: 44:82:da:3a:ab:5c:0e:d7:80:54:36:af:7a:7e:8f:70:29:4a: b1:29:eb:3e:70:68:35:83:fe:c1:68:5e:5a:79:fd:21:9f:ea: 5a:c4:52:f4:7a:86:8f:1a:ed:f6:12:bb:8e:1d:47:cc:38:01: 2b:6f:7b:61:3e:d5:15:2e:d8:1a:7e:08:76:d1:80:f5:19:76: 67:d5:70:e8:c9:6a:5f:45:80:42:e6:9e:46:09:19:e9:3a:4f: cf:80:cc:77:f2:f7:61:3f:d0:3d:f6:92:27:25:0e:3e:d4:d3: ae:52:e8:43:cc:b6:4d:64:25:a3:21:5b:02:35:31:fc:6d:e4: 6d:8a:09:ac:33:e6:e1:8b:18:b3:89:a9:d3:43:ab:bc:c7:45: 9b:30:79:19:03:eb:2d:fd:70:4e:3d:4e:22:56:65:3e:67:c7: ee:3c:99:15:f5:00:47:f3:33:6b:c7:31:fd:12:ab:4d:82:99: 72:ba:9f:08 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvg3S7q+Fe0SIG4sQ5m7QG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMWM1N2UxOTIxZDMxYTM0YWViZDEyZTUwN2ExMzZmZTA0 NTk4YzYwHhcNMjYwMTIxMTQwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODgxMGE3ZWE3MzBjY2ExYTc1MmEzM2RiMzgzOWQzZWNlZDhhZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC3Os6cx6x7ckmHh72AsJ/BIC8n0 eqxqRQMlvLK3Sz2YkNJx+dO/54EcQ8jtmmPkkVtMcL0Ls2QL8gbtCvXfnS3NkTU8 BdTElP7D88DMbfE95S/alIhFWkKzk6icH6IbukvyZ5rOy7gm+0pr3jTRNYPHyv8J vGb3wBpAhKeiK326Z/l08MTTN1tZjc4Z7/Sx5v51gUk7l3fljUjz8WEKjQ1V8nxe xX3mkvOtLkyB8t/LX8G9FyovSPId3HLUAXTErkLCWU0KEM+cnLeYO/xlSWtxrJa+ yi9eGs1FNQZa69PXN9+CU21rJCKhSyXPdXr2hrhCAoTMz/2EtuHheP7DqQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJiBCn6nMMyhp1KjPbODnT7O2K2wMB8GA1UdIwQY MBaAFEMcV+GSHTGjSuvRLlB6E2/gRZjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXh4WDRaSWRNYU5LNjlFdVVIb1RiLUJGbU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZjFhYWYtYjE3My00Y2UxLWJjYmEt Y2MzNTNlYmFjYmE2LzEvbUlFS2ZxY3d6S0duVXFNOXM0T2RQczdZcmJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wZjFhYWYtYjE3My00Y2UxLWJjYmEtY2MzNTNlYmFjYmE2 LzEvUXh4WDRaSWRNYU5LNjlFdVVIb1RiLUJGbU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgH6ADAN BgkqhkiG9w0BAQsFAAOCAQEAeLL1//wAgvEjdbsQOtkqIrLnkaZiclsFvTEpqD/C cXUPvnyRenv7IdsXtTulJN0BpOY11Sksj8GZyyauMaqQIt+2+sx4GesLRILaOqtc DteAVDaven6PcClKsSnrPnBoNYP+wWheWnn9IZ/qWsRS9HqGjxrt9hK7jh1HzDgB K297YT7VFS7YGn4IdtGA9Rl2Z9Vw6MlqX0WAQuaeRgkZ6TpPz4DMd/L3YT/QPfaS JyUOPtTTrlLoQ8y2TWQloyFbAjUx/G3kbYoJrDPm4YsYs4mp00OrvMdFmzB5GQPr Lf1wTj1OIlZlPmfH7jyZFfUAR/Mza8cx/RKrTYKZcrqfCA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:22:43 2026 by rpki-client