This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/Cow__epxr4IeLApXgQJT_ozp_JI.roa File: Cow__epxr4IeLApXgQJT_ozp_JI.roa (raw, json) Hash identifier: +jTTHpcJ2/matk09UTCfY2qQyNuNZXRYvt74bFoFj4U= Subject key identifier: 0A:8C:3F:FD:EA:71:AF:82:1E:2C:0A:57:81:02:53:FE:8C:E9:FC:92 Certificate issuer: /CN=e1257eaabbf604d4570055c2cd8ac249bb29c106 Certificate serial: 019B7E39366A9B4FECB0BFBFF867578CA508 Authority key identifier: E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/Cow__epxr4IeLApXgQJT_ozp_JI.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214759 IP address blocks: 2a14:4c41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:36:6a:9b:4f:ec:b0:bf:bf:f8:67:57:8c:a5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1257eaabbf604d4570055c2cd8ac249bb29c106 Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a8c3ffdea71af821e2c0a57810253fe8ce9fc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:39:fc:4f:d2:4b:6f:86:bc:11:45:d3:6c:d6: 10:40:c0:c8:82:cf:e5:67:58:66:4a:10:bc:51:80: 65:d2:78:5b:4f:6f:64:ef:bf:e9:a1:d6:f1:00:48: a7:98:1f:79:2c:fc:fc:5e:83:51:13:c1:47:2f:22: 5e:87:d4:1b:18:cd:f1:b5:c3:ec:40:69:8c:b1:39: f1:fa:31:6e:ea:5e:fe:0d:2c:ba:a3:21:3b:ce:42: 2d:24:57:92:85:64:e3:15:bf:83:1c:7a:f2:1b:62: 5f:7f:32:a8:44:38:d3:5e:e5:1e:b8:7a:96:47:98: 48:85:b3:c0:fd:18:92:49:63:85:bd:69:a7:44:ac: 97:5d:1a:d6:2d:ad:35:7f:e5:c7:20:72:3e:83:cf: 0d:74:7f:e7:81:a0:49:d8:a9:1e:af:c8:34:7d:34: fb:ad:d3:fe:d4:cd:84:66:4b:fa:f7:5e:fc:eb:e3: db:69:e7:3a:0f:36:4a:fe:82:ba:4d:af:e2:b0:94: f4:bf:97:84:fe:f8:d5:b2:c8:71:3d:21:0d:35:8c: 02:14:e8:90:de:94:b2:ac:98:1b:f9:e5:a9:6d:61: 10:90:79:9f:ec:e1:ee:2c:74:66:43:e9:d4:95:e4: 0c:db:85:69:0c:23:fc:d9:2d:fb:97:a4:7c:5e:3e: 27:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8C:3F:FD:EA:71:AF:82:1E:2C:0A:57:81:02:53:FE:8C:E9:FC:92 X509v3 Authority Key Identifier: keyid:E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/Cow__epxr4IeLApXgQJT_ozp_JI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:4c41::/32 Signature Algorithm: sha256WithRSAEncryption 7a:ce:79:8b:76:6d:4d:10:08:ec:ba:84:d6:9b:8d:b2:25:a6: 1e:8d:7c:d1:ec:5b:88:af:7e:f2:8b:98:19:d7:3b:5e:da:6c: 6e:37:7e:aa:47:27:af:14:fa:84:cd:4b:b5:8f:8d:b1:0e:94: dd:2d:c5:06:91:3c:d0:d9:df:1f:53:ed:4e:90:f4:56:9d:ce: 36:22:ac:f4:30:92:68:d7:df:4c:01:c5:6b:a0:8f:32:75:f3: d8:e3:39:b7:47:c8:05:1a:21:f2:84:d6:6c:0e:6f:cd:48:e3: cb:0e:5a:38:1d:88:80:12:76:6b:0a:10:0d:f9:1c:20:00:ec: 31:2a:f3:b9:67:ac:46:27:03:de:26:18:2d:2c:17:c9:79:6f: a1:5d:3f:85:13:e9:82:43:df:a5:b1:43:f6:df:68:ff:0e:6a: 38:18:00:f8:76:a3:19:91:cd:cc:1a:be:5c:8c:15:32:fa:e7: 8c:13:d2:e5:e4:a0:c1:23:29:df:9d:1c:3d:1d:8e:f1:7f:5e: 34:82:df:bf:15:21:bd:6f:94:16:09:e9:97:f6:95:ec:53:1e: 68:2d:62:df:94:8e:ed:17:44:8d:19:7e:8a:c0:ef:6a:57:f8: 94:00:43:cf:e4:86:52:49:6f:e6:27:59:48:d9:c2:35:26:9d: 62:e7:d8:14 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OTZqm0/ssL+/+GdXjKUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjU3ZWFhYmJmNjA0ZDQ1NzAwNTVjMmNkOGFjMjQ5YmIy OWMxMDYwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYThjM2ZmZGVhNzFhZjgyMWUyYzBhNTc4MTAyNTNmZThjZTlmYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDn8T9JLb4a8EUXTbNYQQMDIgs/l Z1hmShC8UYBl0nhbT29k77/podbxAEinmB95LPz8XoNRE8FHLyJeh9QbGM3xtcPs QGmMsTnx+jFu6l7+DSy6oyE7zkItJFeShWTjFb+DHHryG2JffzKoRDjTXuUeuHqW R5hIhbPA/RiSSWOFvWmnRKyXXRrWLa01f+XHIHI+g88NdH/ngaBJ2Kker8g0fTT7 rdP+1M2EZkv691786+Pbaec6DzZK/oK6Ta/isJT0v5eE/vjVsshxPSENNYwCFOiQ 3pSyrJgb+eWpbWEQkHmf7OHuLHRmQ+nUleQM24VpDCP82S37l6R8Xj4nOQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAqMP/3qca+CHiwKV4ECU/6M6fySMB8GA1UdIwQY MBaAFOElfqq79gTUVwBVws2Kwkm7KcEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNWLXFydjJCTlJYQUZYQ3pZckNTYnNwd1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80OWJiZDItZmUzNi00NWQ3LThkZWYt ODFmYTg3NGVlMmVkLzEvQ293X19lcHhyNEllTEFwWGdRSlRfb3pwX0pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS80OWJiZDItZmUzNi00NWQ3LThkZWYtODFmYTg3NGVlMmVk LzEvNFNWLXFydjJCTlJYQUZYQ3pZckNTYnNwd1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhRMQTAN BgkqhkiG9w0BAQsFAAOCAQEAes55i3ZtTRAI7LqE1puNsiWmHo180exbiK9+8ouY Gdc7Xtpsbjd+qkcnrxT6hM1LtY+NsQ6U3S3FBpE80NnfH1PtTpD0Vp3ONiKs9DCS aNffTAHFa6CPMnXz2OM5t0fIBRoh8oTWbA5vzUjjyw5aOB2IgBJ2awoQDfkcIADs MSrzuWesRicD3iYYLSwXyXlvoV0/hRPpgkPfpbFD9t9o/w5qOBgA+HajGZHNzBq+ XIwVMvrnjBPS5eSgwSMp350cPR2O8X9eNILfvxUhvW+UFgnpl/aV7FMeaC1i35SO 7RdEjRl+isDvalf4lABDz+SGUklv5idZSNnCNSadYufYFA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:04 2026 by rpki-client