This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/wI61Cef8mEMxC9M5YoDIPBvUfDY.roa File: wI61Cef8mEMxC9M5YoDIPBvUfDY.roa (raw, json) Hash identifier: 6Rq9TIx80zZlGFJ64ylvHjNBPFctFTtbcZGuHjcpDQo= Subject key identifier: C0:8E:B5:09:E7:FC:98:43:31:0B:D3:39:62:80:C8:3C:1B:D4:7C:36 Certificate issuer: /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe Certificate serial: 019B76EBA412B18302500AC3BCD36816295C Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/wI61Cef8mEMxC9M5YoDIPBvUfDY.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14789 IP address blocks: 2a09:bac0:439::/48 maxlen: 48 2a09:bac0:450::/48 maxlen: 48 2a09:bac0:477::/48 maxlen: 48 2a09:bac0:566::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a4:12:b1:83:02:50:0a:c3:bc:d3:68:16:29:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c08eb509e7fc9843310bd3396280c83c1bd47c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:1b:d5:d9:71:ad:f9:01:f9:3f:98:87:94: 33:82:86:5b:59:76:9d:e2:6b:09:c4:a9:c6:d9:91: 78:d7:f9:43:7a:fb:a0:53:0d:d4:cb:66:a2:d8:4a: e8:bc:1d:96:2e:13:10:1f:39:e5:68:8c:5a:27:30: c9:44:7f:ed:27:ef:31:3d:f4:01:4b:11:10:d2:09: 5a:42:7a:22:83:4c:d4:f6:1e:ca:31:db:ed:93:05: 94:aa:a6:0d:84:52:57:b8:3d:2f:0b:4d:86:ae:d1: 1f:27:a5:e9:25:63:1b:b3:e7:14:e0:05:28:dc:84: 0b:95:75:fc:95:2d:30:9a:07:cb:90:6d:37:27:d8: eb:80:82:86:f4:69:ee:6d:ee:6f:d1:3d:3d:47:6a: ff:dd:e8:52:d7:b1:9d:83:13:70:87:d1:6e:76:06: 10:a6:61:ae:c4:4a:de:04:64:3f:c8:ac:7c:8f:72: df:35:f8:aa:16:b7:b3:d2:89:00:12:d1:7a:7d:59: f2:f1:14:39:61:a5:15:65:df:86:8c:0b:00:4b:d2: b7:b0:0e:0e:44:0a:10:fc:d0:b6:07:6e:2d:15:58: cc:0d:3d:92:4a:6b:60:18:c7:ba:c3:22:d0:45:30: 64:62:32:e3:bf:61:b5:d1:2b:73:b0:86:90:7d:11: 54:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8E:B5:09:E7:FC:98:43:31:0B:D3:39:62:80:C8:3C:1B:D4:7C:36 X509v3 Authority Key Identifier: keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/wI61Cef8mEMxC9M5YoDIPBvUfDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:bac0:439::/48 2a09:bac0:450::/48 2a09:bac0:477::/48 2a09:bac0:566::/48 Signature Algorithm: sha256WithRSAEncryption 5a:c5:c4:b2:9d:2e:bf:1d:83:61:57:fb:8f:f6:b0:ec:01:1f: 0e:54:d6:c5:3e:61:e2:8d:4c:af:6c:1d:89:1c:d5:00:ef:cc: b3:17:8b:04:f4:26:e0:1a:b6:7c:79:b6:4d:d3:31:65:a7:f2: 4a:83:0c:39:0a:ca:a6:fc:2b:29:64:57:59:a2:5d:93:49:6e: 6e:63:e2:52:78:0a:64:b0:d1:ad:d1:93:37:73:66:7b:f8:61: 99:5c:a3:70:cf:4f:74:5e:e2:dc:cd:ab:91:48:23:a3:fb:4b: 34:3f:b7:d7:f9:e7:e4:20:db:98:a4:2f:05:af:4b:ff:b7:8d: b0:aa:e5:23:c3:14:4e:e9:10:4a:21:40:ca:e9:38:01:a6:94: 94:85:d9:60:e3:fe:94:60:b0:1d:97:07:85:b4:d9:65:ed:a9: 15:3a:ba:1f:bb:3b:ba:e4:7a:b3:59:9f:ee:7b:6e:61:14:15: f4:b9:50:d8:61:0a:af:81:64:48:2a:66:f0:1d:d1:dd:ae:b0: 51:75:4b:50:2b:08:08:07:4d:9e:99:5b:3c:47:7d:7d:21:9b: 2c:28:b1:1d:45:4b:3b:46:87:ff:e6:40:21:8b:57:c9:06:89: 56:16:d1:d6:7c:6d:4e:85:9c:06:8d:64:f1:8a:60:60:f8:fc: b2:9c:94:3a -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt266QSsYMCUArDvNNoFilcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTlmMTJjOTZiYTIwNjgzYWZmNWM5NThiZmFkOGU0YzU3 N2Y3ZmUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDhlYjUwOWU3ZmM5ODQzMzEwYmQzMzk2MjgwYzgzYzFiZDQ3YzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2cb1dlxrfkB+T+Yh5QzgoZbWXad 4msJxKnG2ZF41/lDevugUw3Uy2ai2ErovB2WLhMQHznlaIxaJzDJRH/tJ+8xPfQB SxEQ0glaQnoig0zU9h7KMdvtkwWUqqYNhFJXuD0vC02GrtEfJ6XpJWMbs+cU4AUo 3IQLlXX8lS0wmgfLkG03J9jrgIKG9Gnube5v0T09R2r/3ehS17GdgxNwh9FudgYQ pmGuxEreBGQ/yKx8j3LfNfiqFrez0okAEtF6fVny8RQ5YaUVZd+GjAsAS9K3sA4O RAoQ/NC2B24tFVjMDT2SSmtgGMe6wyLQRTBkYjLjv2G10StzsIaQfRFUeQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFMCOtQnn/JhDMQvTOWKAyDwb1Hw2MB8GA1UdIwQY MBaAFL/p8SyWuiBoOv9clYv62OTFd/f+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1ueExKYTZJR2c2XzF5Vmlfclk1TVYzOV80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80Y2U1NTgtNjNkNi00NjlhLWJiNWQt Zjc4MjBjNWU5NjZhLzEvd0k2MUNlZjhtRU14QzlNNVlvRElQQnZVZkRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80Y2U1NTgtNjNkNi00NjlhLWJiNWQtZjc4MjBjNWU5NjZh LzEvdi1ueExKYTZJR2c2XzF5Vmlfclk1TVYzOV80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKgm6wAQ5 AwcAKgm6wARQAwcAKgm6wAR3AwcAKgm6wAVmMA0GCSqGSIb3DQEBCwUAA4IBAQBa xcSynS6/HYNhV/uP9rDsAR8OVNbFPmHijUyvbB2JHNUA78yzF4sE9CbgGrZ8ebZN 0zFlp/JKgww5Csqm/CspZFdZol2TSW5uY+JSeApksNGt0ZM3c2Z7+GGZXKNwz090 XuLczauRSCOj+0s0P7fX+efkINuYpC8Fr0v/t42wquUjwxRO6RBKIUDK6TgBppSU hdlg4/6UYLAdlweFtNll7akVOrofuzu65HqzWZ/ue25hFBX0uVDYYQqvgWRIKmbw HdHdrrBRdUtQKwgIB02emVs8R319IZssKLEdRUs7Rof/5kAhi1fJBolWFtHWfG1O hZwGjWTximBg+PyynJQ6 -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:24 2026 by rpki-client