This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/CpR7zdaWFgeP_a3JunXPR9g-kLM.roa File: CpR7zdaWFgeP_a3JunXPR9g-kLM.roa (raw, json) Hash identifier: +G+gW4DG9/VXzfDnCfnSWW4i5dWFOrWQai2m9hvQ4Jo= Subject key identifier: 0A:94:7B:CD:D6:96:16:07:8F:FD:AD:C9:BA:75:CF:47:D8:3E:90:B3 Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567 Certificate serial: 019B7BA4D96118C7806D493B7957DBC48230 Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/CpR7zdaWFgeP_a3JunXPR9g-kLM.roa Signing time: Thu 01 Jan 2026 22:19:19 +0000 ROA not before: Thu 01 Jan 2026 22:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 2001:1400:ffef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d9:61:18:c7:80:6d:49:3b:79:57:db:c4:82:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567 Validity Not Before: Jan 1 22:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a947bcdd69616078ffdadc9ba75cf47d83e90b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:93:b0:fd:6e:ed:f6:1a:8d:b1:e3:13:c6:fa: bd:9c:ac:64:41:6a:9d:37:70:2b:48:05:ad:ee:95: 11:eb:78:bb:ab:b9:69:63:7d:ac:00:e9:04:bb:82: 95:31:1d:e7:4d:1b:b0:19:dc:40:47:fc:e2:9b:84: 3d:e1:3d:aa:b0:f6:e7:68:da:9d:a4:6d:4f:1e:e5: 69:11:0d:e7:cd:96:0c:9d:8a:63:47:36:5a:00:7c: 6f:2c:5b:b4:b0:48:3c:62:35:a1:37:9b:12:86:12: d5:1c:0d:fa:76:4a:f7:a6:09:79:a8:8b:ea:0f:ef: b1:65:4a:21:90:1f:b1:80:da:98:6c:a1:88:43:ce: 0e:31:96:6c:1a:38:83:e1:32:a8:91:d1:c6:ba:85: b9:3c:53:00:52:97:f7:8c:e1:97:8c:43:fb:b6:07: f8:81:dd:62:ff:02:1b:b7:ab:62:2c:0d:05:ac:4b: 90:cf:f7:75:e4:6f:8a:18:b1:dc:eb:29:40:b1:c8: d7:aa:f2:c6:b8:7b:4d:20:62:00:9e:00:c3:fe:5f: 2b:76:f1:55:ba:6b:90:3d:ea:88:8a:3c:eb:6e:37: 80:8b:0e:78:6c:c7:6f:47:56:70:a4:31:cb:90:20: c1:0e:13:43:91:ac:5b:62:0f:b9:4d:6e:df:10:9c: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:94:7B:CD:D6:96:16:07:8F:FD:AD:C9:BA:75:CF:47:D8:3E:90:B3 X509v3 Authority Key Identifier: keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/CpR7zdaWFgeP_a3JunXPR9g-kLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1400:ffef::/48 Signature Algorithm: sha256WithRSAEncryption 3b:0b:eb:33:f3:44:f7:7e:74:20:77:29:e0:58:24:b1:3c:5a: f2:23:20:7d:f3:0a:0e:21:f9:f3:20:99:47:c0:4b:67:77:1d: 6d:3e:57:57:7f:57:13:f1:79:df:eb:74:d5:19:24:0e:94:a9: 62:2d:37:db:bf:9e:2d:95:fe:db:c1:6c:77:a7:97:f6:04:a7: 07:76:3e:ff:60:e4:a5:6c:a5:f1:10:80:ea:e5:4c:b0:bd:a4: cc:6d:9e:15:08:41:97:f6:45:bd:aa:b4:4e:30:41:a0:d6:31: 21:b3:f3:3c:bf:13:1e:c1:1e:d3:ae:2d:85:bd:32:b2:68:16: 2e:a3:ec:69:a6:27:10:03:18:36:40:c0:ee:7f:ea:dc:75:d7: 99:f5:63:c8:67:ca:6d:85:14:c5:07:2a:5e:36:f1:b2:6d:85: fb:a3:9e:85:f1:a8:be:93:28:38:14:d5:50:a4:7e:c8:51:45: ae:70:08:a6:9f:38:92:31:ad:17:76:62:d3:01:c8:96:f9:5a: 0e:34:3b:b4:8f:44:a8:9b:73:85:b4:37:bd:a8:dd:33:48:95: 56:41:63:eb:f4:01:0c:8d:1e:53:2b:ca:02:d2:28:24:47:7c: 70:d4:09:89:72:ef:1d:bd:0f:69:da:40:1c:41:d7:1b:22:02: ac:62:20:e8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pNlhGMeAbUk7eVfbxIIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmM5YmMyZDJkYWNmZDZmMTMwZDg1YTg0ZmVkZWFiZjE3 OWE1NjcwHhcNMjYwMTAxMjIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTk0N2JjZGQ2OTYxNjA3OGZmZGFkYzliYTc1Y2Y0N2Q4M2U5MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZOw/W7t9hqNseMTxvq9nKxkQWqd N3ArSAWt7pUR63i7q7lpY32sAOkEu4KVMR3nTRuwGdxAR/zim4Q94T2qsPbnaNqd pG1PHuVpEQ3nzZYMnYpjRzZaAHxvLFu0sEg8YjWhN5sShhLVHA36dkr3pgl5qIvq D++xZUohkB+xgNqYbKGIQ84OMZZsGjiD4TKokdHGuoW5PFMAUpf3jOGXjEP7tgf4 gd1i/wIbt6tiLA0FrEuQz/d15G+KGLHc6ylAscjXqvLGuHtNIGIAngDD/l8rdvFV umuQPeqIijzrbjeAiw54bMdvR1ZwpDHLkCDBDhNDkaxbYg+5TW7fEJz7OQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAqUe83WlhYHj/2tybp1z0fYPpCzMB8GA1UdIwQY MBaAFKgsm8LS2s/W8TDYWoT+3qvxeaVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgt NTVjMTQwYzlmNTRmLzEvQ3BSN3pkYVdGZ2VQX2EzSnVuWFBSOWcta0xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgtNTVjMTQwYzlmNTRm LzEvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEUAP/v MA0GCSqGSIb3DQEBCwUAA4IBAQA7C+sz80T3fnQgdyngWCSxPFryIyB98woOIfnz IJlHwEtndx1tPldXf1cT8Xnf63TVGSQOlKliLTfbv54tlf7bwWx3p5f2BKcHdj7/ YOSlbKXxEIDq5UywvaTMbZ4VCEGX9kW9qrROMEGg1jEhs/M8vxMewR7Tri2FvTKy aBYuo+xppicQAxg2QMDuf+rcddeZ9WPIZ8pthRTFBypeNvGybYX7o56F8ai+kyg4 FNVQpH7IUUWucAimnziSMa0XdmLTAciW+VoONDu0j0Som3OFtDe9qN0zSJVWQWPr 9AEMjR5TK8oC0igkR3xw1AmJcu8dvQ9p2kAcQdcbIgKsYiDo -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:13 2026 by rpki-client