This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/nWemIk_PUFibWyxsMCHuSPNqyxE.roa File: nWemIk_PUFibWyxsMCHuSPNqyxE.roa (raw, json) Hash identifier: LfDaK0qO1xTJjSEUv9R58HxO4b8gyazqBrXpwSZbnWE= Subject key identifier: 9D:67:A6:22:4F:CF:50:58:9B:5B:2C:6C:30:21:EE:48:F3:6A:CB:11 Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84 Certificate serial: 019B79100FDC6553485D29F2B0D2FCC17126 Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/nWemIk_PUFibWyxsMCHuSPNqyxE.roa Signing time: Thu 01 Jan 2026 10:17:34 +0000 ROA not before: Thu 01 Jan 2026 10:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200881 IP address blocks: 2001:67c:2dd0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0f:dc:65:53:48:5d:29:f2:b0:d2:fc:c1:71:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc8df88054060df685bba9739123e8342d479e84 Validity Not Before: Jan 1 10:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d67a6224fcf50589b5b2c6c3021ee48f36acb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:8d:b3:a0:a8:65:9f:28:1b:a4:5f:b8:19: e6:57:08:cf:3f:72:20:ea:4b:e1:58:a1:82:e9:56: 57:df:d3:e1:ab:76:1f:91:13:bc:39:f0:bb:3d:71: be:1f:e2:a1:eb:79:20:84:8b:09:d2:fc:e0:5c:09: 28:11:a0:47:c3:a2:ff:49:1b:69:da:9a:c8:00:af: d8:12:3b:9a:37:e8:56:cd:7f:f9:8f:f9:11:c7:28: 6f:eb:62:3c:1b:3c:e9:b7:b7:6d:5b:e7:8c:54:21: dd:81:6a:57:8c:0e:ed:4a:61:e8:48:99:39:17:0b: 40:65:95:cd:de:b7:ad:58:b5:3b:17:f4:4e:ef:61: 80:66:39:5f:65:f1:11:94:1e:1b:a5:3f:2e:09:2c: bb:7e:2f:be:64:ee:a8:c5:a5:e1:e2:eb:f1:20:84: aa:0d:67:b6:8a:bc:74:1b:cf:7b:5f:7f:cd:78:fb: 5e:04:24:14:58:30:7b:7d:cc:8b:95:e7:78:fc:45: fa:85:be:b6:d5:ad:70:75:52:a8:6d:df:ab:0f:50: e8:9b:21:80:d9:e7:b2:65:80:15:38:51:fe:02:53: 6e:03:91:97:ea:6b:86:0c:d1:51:0e:32:c0:db:1d: 06:15:de:1f:ab:43:51:6e:74:e7:0b:9e:d9:0d:e6: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:67:A6:22:4F:CF:50:58:9B:5B:2C:6C:30:21:EE:48:F3:6A:CB:11 X509v3 Authority Key Identifier: keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/nWemIk_PUFibWyxsMCHuSPNqyxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2dd0::/48 Signature Algorithm: sha256WithRSAEncryption 4c:b0:5c:21:b2:d7:d2:82:9b:8b:bb:fd:d5:27:54:c7:09:d8: e9:52:c8:92:4f:15:fe:c5:21:cf:8d:3b:1b:f1:67:9d:1f:40: a2:5b:8e:05:2e:77:bf:bf:bd:17:e4:ee:61:b4:25:9d:f3:34: 83:e2:46:95:42:bf:eb:37:0a:3c:7f:4e:15:07:fc:ea:2e:47: 79:98:b9:de:1f:a2:b4:68:48:d3:c5:f7:62:cd:25:e3:fc:ab: 3a:bd:38:5d:04:ab:43:c8:80:ce:46:b9:df:63:bf:3a:62:a2: 48:a6:50:ed:c3:1e:19:27:54:d9:c4:33:74:b3:55:41:e5:67: 8b:78:85:b7:97:01:77:a0:22:49:4b:d2:9a:f3:eb:0a:d3:19: 88:75:27:72:8a:9b:57:2b:3c:5f:84:77:dd:8f:82:29:7f:75: a0:05:39:df:3c:1f:f1:5e:5e:fc:28:48:ac:4c:e4:1f:76:0b: 2c:11:87:1d:22:00:75:1a:a0:5e:c4:44:57:43:d9:82:8f:d2: d8:4a:92:d3:21:98:42:14:d8:10:55:47:c7:ca:3f:f1:f1:eb: f0:57:74:49:76:97:7f:15:db:f1:83:68:9f:e5:91:d2:7e:55: f7:35:f2:bf:be:91:45:83:ae:0e:ba:a5:66:d4:dc:e0:c0:71: 23:42:1e:91 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EA/cZVNIXSnysNL8wXEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOGRmODgwNTQwNjBkZjY4NWJiYTk3MzkxMjNlODM0MmQ0 NzllODQwHhcNMjYwMTAxMTAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDY3YTYyMjRmY2Y1MDU4OWI1YjJjNmMzMDIxZWU0OGYzNmFjYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSuNs6CoZZ8oG6RfuBnmVwjPP3Ig 6kvhWKGC6VZX39Phq3YfkRO8OfC7PXG+H+Kh63kghIsJ0vzgXAkoEaBHw6L/SRtp 2prIAK/YEjuaN+hWzX/5j/kRxyhv62I8Gzzpt7dtW+eMVCHdgWpXjA7tSmHoSJk5 FwtAZZXN3retWLU7F/RO72GAZjlfZfERlB4bpT8uCSy7fi++ZO6oxaXh4uvxIISq DWe2irx0G897X3/NePteBCQUWDB7fcyLled4/EX6hb621a1wdVKobd+rD1DomyGA 2eeyZYAVOFH+AlNuA5GX6muGDNFRDjLA2x0GFd4fq0NRbnTnC57ZDeZH5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ1npiJPz1BYm1ssbDAh7kjzassRMB8GA1UdIwQY MBaAFMyN+IBUBg32hbupc5Ej6DQtR56EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekkzNGdGUUdEZmFGdTZsemtTUG9OQzFIbm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYjhkMzgtMDc3Zi00ZDc3LTkzODMt ZGM3ODFjYzJhMjU4LzEvbldlbUlrX1BVRmliV3l4c01DSHVTUE5xeXhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kYjhkMzgtMDc3Zi00ZDc3LTkzODMtZGM3ODFjYzJhMjU4 LzEvekkzNGdGUUdEZmFGdTZsemtTUG9OQzFIbm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC3Q MA0GCSqGSIb3DQEBCwUAA4IBAQBMsFwhstfSgpuLu/3VJ1THCdjpUsiSTxX+xSHP jTsb8WedH0CiW44FLne/v70X5O5htCWd8zSD4kaVQr/rNwo8f04VB/zqLkd5mLne H6K0aEjTxfdizSXj/Ks6vThdBKtDyIDORrnfY786YqJIplDtwx4ZJ1TZxDN0s1VB 5WeLeIW3lwF3oCJJS9Ka8+sK0xmIdSdyiptXKzxfhHfdj4Ipf3WgBTnfPB/xXl78 KEisTOQfdgssEYcdIgB1GqBexERXQ9mCj9LYSpLTIZhCFNgQVUfHyj/x8evwV3RJ dpd/Fdvxg2if5ZHSflX3NfK/vpFFg64OuqVm1NzgwHEjQh6R -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:41 2026 by rpki-client