This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/465Kcfdz-gCkfuGZh8doO_u-oWc.roa File: 465Kcfdz-gCkfuGZh8doO_u-oWc.roa (raw, json) Hash identifier: +omro3YFQE2sJ1eByZhKP6jW3x+UZ2ptJKtI+7UVFM8= Subject key identifier: E3:AE:4A:71:F7:73:FA:00:A4:7E:E1:99:87:C7:68:3B:FB:BE:A1:67 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019B7D5D1BE2FA876243C911CCA72FE5037A Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/465Kcfdz-gCkfuGZh8doO_u-oWc.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29063 IP address blocks: 2a01:8180:3000::/36 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1b:e2:fa:87:62:43:c9:11:cc:a7:2f:e5:03:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3ae4a71f773fa00a47ee19987c7683bfbbea167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:f0:e9:6b:32:04:a3:ab:78:b9:4e:77:37: d4:30:ad:b2:3b:3e:6a:99:9e:4c:6c:0b:0a:28:23: 1e:0d:11:aa:38:e8:7a:9f:eb:1a:ed:ae:8b:c1:22: 69:25:f8:d5:7d:9a:1b:e3:6a:2f:5d:cb:52:1b:ac: c5:0a:88:b3:07:02:df:7a:9a:17:12:fd:2e:f9:68: 68:f7:3e:62:28:6b:7d:71:3f:d6:16:a8:43:0e:6c: 62:63:4b:e2:f1:4f:dc:bb:76:d3:32:e8:17:a1:30: 1a:3d:cf:7c:66:aa:f7:ff:d5:f9:c7:2b:b8:dc:7e: cc:6c:83:14:ab:42:70:94:bd:e8:d8:53:21:21:3c: ef:0f:02:7d:c3:a5:af:f6:45:fc:08:4c:0c:cc:c5: ac:e5:89:e4:94:53:68:d4:64:99:fd:73:f9:ed:f0: 9c:16:70:78:a5:4d:46:97:42:fc:07:72:a2:61:ae: 23:96:06:1a:47:6e:49:0e:2f:ca:8b:48:99:8f:1f: 46:8a:6e:b8:04:3b:80:23:b9:58:b9:8a:e7:46:df: e2:aa:59:cf:a8:8a:4d:6c:ee:57:b6:e8:0c:93:2c: 8b:fc:e4:19:db:d2:cf:d8:14:1d:8b:c8:76:08:9e: 32:f4:23:e1:79:d3:13:a5:e8:5e:59:8d:14:a1:86: 9f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AE:4A:71:F7:73:FA:00:A4:7E:E1:99:87:C7:68:3B:FB:BE:A1:67 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/465Kcfdz-gCkfuGZh8doO_u-oWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:8180:3000::/36 Signature Algorithm: sha256WithRSAEncryption 6b:c8:10:1a:10:41:16:91:36:f2:da:38:e1:ed:01:60:5b:70: 70:01:90:a6:ca:09:1f:68:bb:59:18:6f:76:2e:45:e7:15:ce: d3:4e:a9:17:dc:ab:ad:6b:d1:0d:4c:25:1a:ae:88:ee:15:ba: d1:06:7b:2a:7a:de:b8:2c:fe:27:38:9f:07:f1:c6:c0:d8:c7: 57:51:91:b6:41:36:39:5d:4f:3b:d8:68:5b:ec:d1:79:b3:98: 77:3c:52:b0:cc:2e:ac:80:ea:c8:0d:44:56:d2:a3:6c:7a:88: 28:f2:e8:b0:ed:b4:61:91:fc:e7:ea:49:f4:d9:ad:51:27:e5: a7:22:be:a0:92:5c:ea:c9:35:2e:bc:12:cd:4e:4e:39:cb:50: 11:8c:25:d4:d6:99:91:f3:fa:51:24:eb:60:03:ca:2e:0c:0c: 8e:b2:d6:71:b7:d0:5b:da:7a:bd:fb:d1:94:93:fb:83:8a:c5: cc:d9:68:a5:37:b1:4c:37:44:25:d1:25:55:a8:4a:59:ae:cd: 53:d6:3d:51:6f:34:7e:79:32:ff:16:13:1e:e9:ce:a4:22:70: 33:f0:36:59:17:23:ba:59:f6:dc:84:15:00:55:5e:5e:8f:83: 94:44:8a:7e:a7:2b:7f:ee:7b:a7:20:8c:db:16:d1:2b:a7:d7: 0e:57:42:49 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XRvi+odiQ8kRzKcv5QN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2FlNGE3MWY3NzNmYTAwYTQ3ZWUxOTk4N2M3NjgzYmZiYmVhMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH7w6WsyBKOreLlOdzfUMK2yOz5q mZ5MbAsKKCMeDRGqOOh6n+sa7a6LwSJpJfjVfZob42ovXctSG6zFCoizBwLfepoX Ev0u+Who9z5iKGt9cT/WFqhDDmxiY0vi8U/cu3bTMugXoTAaPc98Zqr3/9X5xyu4 3H7MbIMUq0JwlL3o2FMhITzvDwJ9w6Wv9kX8CEwMzMWs5YnklFNo1GSZ/XP57fCc FnB4pU1Gl0L8B3KiYa4jlgYaR25JDi/Ki0iZjx9Gim64BDuAI7lYuYrnRt/iqlnP qIpNbO5XtugMkyyL/OQZ29LP2BQdi8h2CJ4y9CPhedMTpeheWY0UoYafnwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOOuSnH3c/oApH7hmYfHaDv7vqFnMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvNDY1S2NmZHotZ0NrZnVHWmg4ZG9PX3Utb1djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgGBgDAw DQYJKoZIhvcNAQELBQADggEBAGvIEBoQQRaRNvLaOOHtAWBbcHABkKbKCR9ou1kY b3YuRecVztNOqRfcq61r0Q1MJRquiO4VutEGeyp63rgs/ic4nwfxxsDYx1dRkbZB NjldTzvYaFvs0XmzmHc8UrDMLqyA6sgNRFbSo2x6iCjy6LDttGGR/OfqSfTZrVEn 5acivqCSXOrJNS68Es1OTjnLUBGMJdTWmZHz+lEk62ADyi4MDI6y1nG30Fvaer37 0ZST+4OKxczZaKU3sUw3RCXRJVWoSlmuzVPWPVFvNH55Mv8WEx7pzqQicDPwNlkX I7pZ9tyEFQBVXl6Pg5REin6nK3/ue6cgjNsW0Sun1w5XQkk= -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:29 2026 by rpki-client