This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/CXpfYBeROwqKk6wPP8obU4SkW0c.roa File: CXpfYBeROwqKk6wPP8obU4SkW0c.roa (raw, json) Hash identifier: eH5Dz/cn97xfby/TCzcXeuSIcb3N3axo2YR3ovzvm14= Subject key identifier: 09:7A:5F:60:17:91:3B:0A:8A:93:AC:0F:3F:CA:1B:53:84:A4:5B:47 Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95 Certificate serial: 019B78347A4767A755C730A6F4CC3BBFA722 Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/CXpfYBeROwqKk6wPP8obU4SkW0c.roa Signing time: Thu 01 Jan 2026 06:17:43 +0000 ROA not before: Thu 01 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 2a00:adc0:1a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7a:47:67:a7:55:c7:30:a6:f4:cc:3b:bf:a7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95 Validity Not Before: Jan 1 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=097a5f6017913b0a8a93ac0f3fca1b5384a45b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:9d:25:60:ab:88:50:7d:a7:90:de:f4:80: d2:48:ab:65:e7:cb:39:0f:ae:c3:de:6f:19:3a:85: 6b:0f:63:1f:19:c1:06:f6:d8:00:52:6c:03:83:61: 68:a0:b1:d2:da:8b:60:b9:f1:b1:fa:60:45:b0:99: 73:c2:7e:09:e7:31:c4:fd:41:87:33:d5:76:8c:90: 1f:1a:6c:3d:b9:72:c0:f0:f9:0c:bb:ba:2c:d8:ae: ce:5e:1a:65:e3:82:63:35:db:b1:88:11:e7:5c:15: 9a:1a:8b:02:8c:1f:28:24:db:19:81:e6:fb:db:d3: dc:2c:a3:35:7f:e5:69:46:81:5b:cb:56:e6:2f:2a: fc:67:40:aa:b1:45:88:91:04:8d:b2:da:61:27:87: 34:f1:0d:9f:1d:20:34:ae:0d:5e:d7:86:74:3d:72: a3:d1:f8:26:c8:46:9d:81:8d:73:39:90:28:c2:6f: 17:a3:b6:88:c7:53:58:8b:54:e3:07:b9:d4:d1:ef: 98:3a:ae:5d:ff:90:78:4a:fb:f5:86:cf:39:d3:40: 55:2d:03:3c:81:f0:8f:09:80:00:d3:33:2f:85:7b: 1d:91:34:e2:73:60:22:9e:ff:c8:9f:ab:b2:45:a5: 86:0b:8a:eb:13:c7:57:8e:f4:c5:09:f8:84:f5:82: 60:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7A:5F:60:17:91:3B:0A:8A:93:AC:0F:3F:CA:1B:53:84:A4:5B:47 X509v3 Authority Key Identifier: keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/CXpfYBeROwqKk6wPP8obU4SkW0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:adc0:1a00::/40 Signature Algorithm: sha256WithRSAEncryption 5b:77:5d:53:9d:07:71:50:77:9d:2c:32:1b:ec:0d:4f:44:4a: f9:43:82:0c:b1:eb:42:dd:32:19:15:8b:a1:ff:d9:78:6f:df: 3f:90:83:0b:d8:28:62:66:97:89:0a:13:af:90:96:ee:6e:ee: 3c:77:db:c0:ef:ff:09:dc:29:f8:88:35:6a:cc:52:88:57:a9: 22:85:b2:e2:da:db:b5:b9:0c:a0:6b:70:94:7d:ab:fc:bc:a3: 69:4e:16:37:75:49:93:11:2a:55:af:87:43:da:b0:a8:2e:02: 8c:8a:02:bd:c8:f1:b9:70:5b:fc:b3:20:23:f0:34:99:26:60: 4d:29:b2:58:ef:c3:a2:7e:81:90:1b:45:1a:34:1e:c7:9a:db: 1e:38:d2:c9:3b:cd:a2:6b:1a:26:5f:ff:4e:30:6e:85:ab:da: cc:5b:48:77:f8:41:94:a1:98:25:c0:5b:83:11:9a:cf:46:0d: d7:2e:b7:c8:7c:b1:7e:17:53:23:0f:1a:df:ae:37:3a:1d:47: c6:b5:91:46:52:88:30:bb:34:5c:4d:a7:53:92:97:00:65:c3: 7b:88:5f:81:b4:df:ef:6f:11:18:55:99:f6:17:88:63:e9:02: cd:f1:8e:f1:19:28:89:15:28:f3:3e:27:80:2b:a3:5a:50:93: 71:30:98:45 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4NHpHZ6dVxzCm9Mw7v6ciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YjQxOWZhNGEwYTE2MDUxODgzMThjZGY0YTIwNDQ5OTI4 NTNiOTUwHhcNMjYwMTAxMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTdhNWY2MDE3OTEzYjBhOGE5M2FjMGYzZmNhMWI1Mzg0YTQ1YjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEidJWCriFB9p5De9IDSSKtl58s5 D67D3m8ZOoVrD2MfGcEG9tgAUmwDg2FooLHS2otgufGx+mBFsJlzwn4J5zHE/UGH M9V2jJAfGmw9uXLA8PkMu7os2K7OXhpl44JjNduxiBHnXBWaGosCjB8oJNsZgeb7 29PcLKM1f+VpRoFby1bmLyr8Z0CqsUWIkQSNstphJ4c08Q2fHSA0rg1e14Z0PXKj 0fgmyEadgY1zOZAowm8Xo7aIx1NYi1TjB7nU0e+YOq5d/5B4Svv1hs8500BVLQM8 gfCPCYAA0zMvhXsdkTTic2Ainv/In6uyRaWGC4rrE8dXjvTFCfiE9YJg/wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAl6X2AXkTsKipOsDz/KG1OEpFtHMB8GA1UdIwQY MBaAFDS0GfpKChYFGIMYzfSiBEmShTuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMt ODc3NzU0NGM5Mjc1LzEvQ1hwZllCZVJPd3FLazZ3UFA4b2JVNFNrVzBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMtODc3NzU0NGM5Mjc1 LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgCtwBow DQYJKoZIhvcNAQELBQADggEBAFt3XVOdB3FQd50sMhvsDU9ESvlDggyx60LdMhkV i6H/2Xhv3z+QgwvYKGJml4kKE6+Qlu5u7jx328Dv/wncKfiINWrMUohXqSKFsuLa 27W5DKBrcJR9q/y8o2lOFjd1SZMRKlWvh0PasKguAoyKAr3I8blwW/yzICPwNJkm YE0psljvw6J+gZAbRRo0Hsea2x440sk7zaJrGiZf/04wboWr2sxbSHf4QZShmCXA W4MRms9GDdcut8h8sX4XUyMPGt+uNzodR8a1kUZSiDC7NFxNp1OSlwBlw3uIX4G0 3+9vERhVmfYXiGPpAs3xjvEZKIkVKPM+J4Aro1pQk3EwmEU= -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:17 2026 by rpki-client