This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/RfF_v-9FmIipQG47sMLeSIwsCwA.roa File: RfF_v-9FmIipQG47sMLeSIwsCwA.roa (raw, json) Hash identifier: CvFjyOB2OKSAf0EIN8oLCwNbtih0Yd+Yc2x40ZJ9uxE= Subject key identifier: 45:F1:7F:BF:EF:45:98:88:A9:40:6E:3B:B0:C2:DE:48:8C:2C:0B:00 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019B7D5D1A63451BBA17BACC11F8A0260FDE Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/RfF_v-9FmIipQG47sMLeSIwsCwA.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21150 IP address blocks: 2a01:8180:1000::/36 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1a:63:45:1b:ba:17:ba:cc:11:f8:a0:26:0f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45f17fbfef459888a9406e3bb0c2de488c2c0b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0d:a7:d8:76:f1:95:d3:3f:bb:e7:32:c0:35: 36:96:d7:4a:b1:3f:73:5c:cc:ed:3f:a7:a7:9d:a3: 26:c5:eb:a7:a4:70:62:7e:9d:4b:2a:8b:2c:8a:c4: 8e:6a:f9:b7:73:54:9e:95:7f:b3:7c:bf:91:dd:07: ef:8d:16:95:b1:7e:ec:69:78:d1:be:ed:22:99:03: 1c:82:dd:af:0e:1c:9d:bb:54:24:64:fe:cc:ad:52: d5:23:46:99:57:91:84:05:ae:a2:d6:31:86:0a:71: 4a:f6:cd:6b:d2:4f:45:f2:95:59:32:2a:4b:9d:c6: f4:e2:fe:61:0d:56:d4:45:3c:ac:28:28:ff:a4:d9: 4a:57:47:10:72:ab:af:fa:f7:15:0c:f0:47:4c:e3: 8e:5a:20:57:37:69:6a:0a:f2:61:0e:68:97:8d:42: 72:9d:f4:bd:35:9f:11:6e:92:78:b9:2e:f2:fe:ce: 78:3e:d4:13:9b:b4:b4:75:2f:15:f9:4f:22:33:64: 24:f1:c9:48:1f:9e:b9:3d:5f:a5:fc:12:0c:fe:66: f9:c7:84:a2:03:85:67:46:e2:23:f0:64:ea:df:3e: f8:57:1a:47:bd:08:bc:66:7f:9a:01:1a:54:0a:20: b5:de:6e:f6:9c:d7:25:0c:51:02:1a:2d:de:8a:e2: fc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F1:7F:BF:EF:45:98:88:A9:40:6E:3B:B0:C2:DE:48:8C:2C:0B:00 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/RfF_v-9FmIipQG47sMLeSIwsCwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:8180:1000::/36 Signature Algorithm: sha256WithRSAEncryption 28:c1:d8:c3:98:f6:c6:7b:c6:a2:df:1a:bb:6a:ba:c6:a6:ef: 9c:8e:72:d1:e9:d7:24:3e:fb:3e:03:55:f1:a4:35:4f:5b:0c: 20:f0:0a:01:ff:75:4f:11:a2:01:8b:69:04:cc:44:7a:5a:d6: fc:47:e1:26:d5:60:ee:20:ff:9b:4a:2c:64:98:9f:23:1f:1a: fb:53:3a:2c:2c:92:f3:ac:d9:bc:f8:b7:6d:6f:2c:13:d5:c4: b0:c1:4b:83:2c:41:14:53:93:ed:0d:29:71:7a:38:26:35:80: 82:8d:12:74:57:32:f6:4d:c8:60:f3:6e:72:a1:18:42:cc:4e: 7b:e8:9b:da:46:07:ea:59:20:a3:49:23:82:c0:36:c1:c5:f5: b8:21:a1:e5:93:bd:e6:0b:32:64:c7:13:f3:d0:63:23:43:53: c5:40:15:c3:cd:9e:ca:c0:a9:70:3f:d7:c5:65:75:61:b1:b4: 9a:50:9e:a1:1a:6e:9e:55:6d:0b:93:6f:dc:fd:9b:35:05:34: 84:4d:ae:6f:bc:af:17:f4:a1:e2:e9:1c:77:de:7f:46:17:30: c4:c7:54:ee:f1:45:40:d8:91:7b:1d:db:35:40:ba:9b:86:0f: 57:a9:b2:dc:97:68:67:f8:56:ac:7d:a6:f6:26:82:62:5c:bb: 73:74:d1:a3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XRpjRRu6F7rMEfigJg/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWYxN2ZiZmVmNDU5ODg4YTk0MDZlM2JiMGMyZGU0ODhjMmMwYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w2n2HbxldM/u+cywDU2ltdKsT9z XMztP6ennaMmxeunpHBifp1LKossisSOavm3c1SelX+zfL+R3QfvjRaVsX7saXjR vu0imQMcgt2vDhydu1QkZP7MrVLVI0aZV5GEBa6i1jGGCnFK9s1r0k9F8pVZMipL ncb04v5hDVbURTysKCj/pNlKV0cQcquv+vcVDPBHTOOOWiBXN2lqCvJhDmiXjUJy nfS9NZ8RbpJ4uS7y/s54PtQTm7S0dS8V+U8iM2Qk8clIH565PV+l/BIM/mb5x4Si A4VnRuIj8GTq3z74VxpHvQi8Zn+aARpUCiC13m72nNclDFECGi3eiuL86wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEXxf7/vRZiIqUBuO7DC3kiMLAsAMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvUmZGX3YtOUZtSWlwUUc0N3NNTGVTSXdzQ3dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgGBgBAw DQYJKoZIhvcNAQELBQADggEBACjB2MOY9sZ7xqLfGrtqusam75yOctHp1yQ++z4D VfGkNU9bDCDwCgH/dU8RogGLaQTMRHpa1vxH4SbVYO4g/5tKLGSYnyMfGvtTOiws kvOs2bz4t21vLBPVxLDBS4MsQRRTk+0NKXF6OCY1gIKNEnRXMvZNyGDzbnKhGELM Tnvom9pGB+pZIKNJI4LANsHF9bghoeWTveYLMmTHE/PQYyNDU8VAFcPNnsrAqXA/ 18VldWGxtJpQnqEabp5VbQuTb9z9mzUFNIRNrm+8rxf0oeLpHHfef0YXMMTHVO7x RUDYkXsd2zVAupuGD1epstyXaGf4Vqx9pvYmgmJcu3N00aM= -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:38 2026 by rpki-client