This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/CvoDRs9ZOBh_bflgzW3Wk3m15gw.roa File: CvoDRs9ZOBh_bflgzW3Wk3m15gw.roa (raw, json) Hash identifier: Q7shHzx8GTG5sM2BN1OSIIH9PJzefPdKh0nJr4813pg= Subject key identifier: 0A:FA:03:46:CF:59:38:18:7F:6D:F9:60:CD:6D:D6:93:79:B5:E6:0C Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F15168F5A3E63243847007C012F5DDE Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/CvoDRs9ZOBh_bflgzW3Wk3m15gw.roa Signing time: Fri 02 Jan 2026 14:20:47 +0000 ROA not before: Fri 02 Jan 2026 14:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213501 IP address blocks: 2a14:c380:14::/48 maxlen: 48 2a14:c380:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:16:8f:5a:3e:63:24:38:47:00:7c:01:2f:5d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0afa0346cf5938187f6df960cd6dd69379b5e60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:76:cf:35:3c:27:c1:94:82:10:be:d2:d0: a1:9c:d8:28:74:cf:89:0d:cb:68:fb:69:90:8f:6e: f7:26:86:90:b7:4b:a4:51:b3:4b:c9:76:28:2c:68: 4d:3e:fa:b8:ae:81:2b:d8:08:29:e1:1c:86:f6:f1: b1:0a:dc:a7:09:0a:2d:7f:d9:50:df:3e:9f:08:55: 8e:33:91:cb:dc:a6:ee:b5:67:39:fe:0a:76:93:4a: 34:3d:57:ef:dc:0a:ab:22:b8:f8:f0:eb:77:d2:84: 65:cf:8a:f2:b4:93:1c:7e:7c:ef:ae:c5:53:fd:db: 6c:76:3d:b8:7a:d6:62:3f:dc:01:a7:92:66:fe:ed: 04:d1:fd:63:cc:20:f2:5b:3b:a5:f7:4c:e6:e4:f0: 9f:f3:69:39:58:3c:b0:db:eb:fa:12:7f:0a:b5:75: 9a:86:cc:cc:a4:4f:04:de:7c:26:49:12:57:51:87: 16:48:03:f7:af:4c:c1:ce:17:49:59:d9:fc:6e:6a: 57:c4:11:21:4d:55:2f:8d:c4:7c:f1:2d:11:29:61: 29:7f:4b:90:34:be:68:14:7e:d0:4f:54:35:69:d1: 02:16:ef:d6:f2:a9:c0:0b:ee:56:28:1c:5a:ae:a7: 52:1a:f6:42:b8:c6:f0:62:26:ad:92:14:6c:3b:f8: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FA:03:46:CF:59:38:18:7F:6D:F9:60:CD:6D:D6:93:79:B5:E6:0C X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/CvoDRs9ZOBh_bflgzW3Wk3m15gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:14::/47 Signature Algorithm: sha256WithRSAEncryption 6f:4f:a7:cc:5d:eb:c7:d3:85:f2:ae:0e:36:ef:aa:d7:cf:82: 3e:01:ae:e1:21:f8:65:e2:f9:d6:4e:fe:94:0b:08:5e:31:40: 6c:b9:3c:37:93:82:29:34:a8:f0:13:33:09:fb:97:37:93:f5: 76:30:25:bc:5b:7e:01:99:63:83:4b:d9:f3:6d:0b:e0:c8:bc: e1:b3:96:a7:91:d7:c7:4c:38:9b:cc:14:9c:88:c5:27:7d:7b: 7e:d0:f2:de:03:cb:c2:22:7b:c7:96:77:c0:81:08:53:23:4b: 7b:1a:98:93:2e:11:67:16:ca:4e:91:b2:d9:4a:a8:58:2c:16: 6e:2a:25:fc:7e:9e:ee:d3:87:9d:1c:f5:55:cc:fa:30:ba:c0: f7:46:7c:e8:34:1f:7d:53:6b:ab:7e:4e:12:62:87:3d:a4:f6: 13:7e:e4:03:03:51:13:84:87:f9:8f:d4:69:fe:4f:74:b4:1b: 99:92:17:7e:97:03:ae:0f:70:5c:b8:80:55:c1:2c:08:d7:f8: 11:bc:af:4a:0a:d5:f4:bf:ee:f3:d2:2a:63:56:a0:2b:7d:28: 51:95:61:d7:ee:31:18:d5:a6:3a:46:3a:7d:49:d1:b8:5d:5b: 5c:36:17:e8:13:60:c0:1c:22:55:00:83:68:fb:dc:bd:ec:ca: e2:2a:03:62 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FRaPWj5jJDhHAHwBL13eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWZhMDM0NmNmNTkzODE4N2Y2ZGY5NjBjZDZkZDY5Mzc5YjVlNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3V2zzU8J8GUghC+0tChnNgodM+J Dcto+2mQj273JoaQt0ukUbNLyXYoLGhNPvq4roEr2Agp4RyG9vGxCtynCQotf9lQ 3z6fCFWOM5HL3KbutWc5/gp2k0o0PVfv3AqrIrj48Ot30oRlz4rytJMcfnzvrsVT /dtsdj24etZiP9wBp5Jm/u0E0f1jzCDyWzul90zm5PCf82k5WDyw2+v6En8KtXWa hszMpE8E3nwmSRJXUYcWSAP3r0zBzhdJWdn8bmpXxBEhTVUvjcR88S0RKWEpf0uQ NL5oFH7QT1Q1adECFu/W8qnAC+5WKBxarqdSGvZCuMbwYiatkhRsO/jveQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAr6A0bPWTgYf235YM1t1pN5teYMMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvQ3ZvRFJzOVpPQmhfYmZsZ3pXM1drM20xNWd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhTDgAAU MA0GCSqGSIb3DQEBCwUAA4IBAQBvT6fMXevH04Xyrg4276rXz4I+Aa7hIfhl4vnW Tv6UCwheMUBsuTw3k4IpNKjwEzMJ+5c3k/V2MCW8W34BmWODS9nzbQvgyLzhs5an kdfHTDibzBSciMUnfXt+0PLeA8vCInvHlnfAgQhTI0t7GpiTLhFnFspOkbLZSqhY LBZuKiX8fp7u04edHPVVzPowusD3RnzoNB99U2urfk4SYoc9pPYTfuQDA1EThIf5 j9Rp/k90tBuZkhd+lwOuD3BcuIBVwSwI1/gRvK9KCtX0v+7z0ipjVqArfShRlWHX 7jEY1aY6Rjp9SdG4XVtcNhfoE2DAHCJVAINo+9y97MriKgNi -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:47 2026 by rpki-client