This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa File: 1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa (raw, json) Hash identifier: nATa+n5oWjMZXiwMho7tjE9Rx2x+4yb18TAu52HSqiY= Subject key identifier: FA:7C:4E:C1:CA:8A:25:3D:0A:FA:ED:17:0E:33:AD:C9:2D:0B:A1:8D Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b Certificate serial: 019B7A5B177B4566C1DB077E212BCD2C21A8 Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209638 IP address blocks: 2a07:900::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:17:7b:45:66:c1:db:07:7e:21:2b:cd:2c:21:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa7c4ec1ca8a253d0afaed170e33adc92d0ba18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:64:07:3c:c5:0e:6c:c3:97:0e:38:64:68: 44:5c:19:38:36:5d:fb:b0:d8:ef:8f:18:74:07:e6: ab:c2:6a:f7:43:23:ba:d8:d7:59:fa:66:ab:a8:38: ac:0a:78:69:b1:21:fe:8a:46:99:08:ac:d8:7e:06: ec:62:9a:b2:e2:1f:6b:38:26:e3:60:23:0b:52:3c: a9:6d:47:58:15:c4:61:c3:8f:62:8b:56:f2:6c:74: f1:6e:88:85:6f:88:54:d0:50:8d:ed:4d:59:21:26: af:02:a2:1f:ee:37:1b:65:a2:c0:3c:b1:63:82:92: 5a:61:96:a1:2f:85:38:aa:c7:80:d1:0e:f1:99:6e: 83:99:55:69:f9:1a:e1:c2:8f:1c:df:5b:80:0d:de: 67:06:28:f7:8b:60:1d:e1:10:b3:a8:c3:37:ab:96: 6d:43:e8:ef:2c:10:98:ad:86:be:54:11:0c:de:10: a8:ac:70:c9:dc:af:0a:9f:8e:4b:89:75:ee:0f:4d: aa:ba:e7:a9:d0:51:28:bf:e2:8c:5e:da:52:18:7d: 9c:45:2a:53:69:18:66:af:a7:c1:cd:c0:00:ee:1e: a8:56:18:67:c8:19:2d:0f:3b:b7:cc:a7:79:ce:26: 3f:92:29:c5:d8:3f:31:d8:79:5d:8a:70:91:a3:f0: d1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7C:4E:C1:CA:8A:25:3D:0A:FA:ED:17:0E:33:AD:C9:2D:0B:A1:8D X509v3 Authority Key Identifier: keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:900::/29 Signature Algorithm: sha256WithRSAEncryption 1d:3b:7f:33:90:3e:79:46:33:c1:5d:f0:4b:4a:ae:33:82:27: b8:19:07:7a:9c:f2:8c:f5:ab:57:a9:af:fa:af:81:f0:cb:23: 20:34:a3:e3:4d:3e:99:86:9a:91:d2:8a:08:16:06:e5:c9:76: 50:54:4c:0e:88:66:ae:83:85:ee:0e:57:38:a5:75:e3:69:70: 44:e3:0e:18:84:da:a1:ec:9f:10:54:b5:96:72:2f:27:40:e5: 96:d7:97:4f:29:13:93:96:ac:2c:67:11:2d:0c:a0:62:9e:41: 1e:26:58:5e:55:72:d3:87:6b:ac:4a:83:68:14:e3:fa:ae:01: 8e:48:3c:8c:89:cd:07:31:e0:cc:41:e4:58:63:90:41:56:67: df:6e:3a:f0:3d:e3:2f:f6:34:15:37:38:d9:d4:24:c1:8c:a7: e1:84:07:97:a4:18:b6:0f:46:dd:65:a1:43:c7:65:b9:a1:a7: a4:05:c7:b5:4e:52:6c:c1:d3:cb:60:25:93:96:5f:ab:46:83: a1:b3:fc:e2:6e:c0:af:7b:67:9c:ff:55:a0:5c:79:8a:10:55: 04:7e:ff:4e:a5:ea:fa:97:69:e1:1d:97:ae:52:92:af:5a:93: 5a:dd:78:69:d6:be:f9:48:65:30:ba:bd:8f:15:80:c5:3e:34: 28:1e:78:05 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6Wxd7RWbB2wd+ISvNLCGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNWRiNTY3ODEzOWUyZWVhY2U4OWI1ZWU5OTgyYzM1NDQ5 YzBiM2IwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTdjNGVjMWNhOGEyNTNkMGFmYWVkMTcwZTMzYWRjOTJkMGJhMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ZkBzzFDmzDlw44ZGhEXBk4Nl37 sNjvjxh0B+arwmr3QyO62NdZ+marqDisCnhpsSH+ikaZCKzYfgbsYpqy4h9rOCbj YCMLUjypbUdYFcRhw49ii1bybHTxboiFb4hU0FCN7U1ZISavAqIf7jcbZaLAPLFj gpJaYZahL4U4qseA0Q7xmW6DmVVp+Rrhwo8c31uADd5nBij3i2Ad4RCzqMM3q5Zt Q+jvLBCYrYa+VBEM3hCorHDJ3K8Kn45LiXXuD02quuep0FEov+KMXtpSGH2cRSpT aRhmr6fBzcAA7h6oVhhnyBktDzu3zKd5ziY/kinF2D8x2HldinCRo/DRZwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPp8TsHKiiU9CvrtFw4zrcktC6GNMB8GA1UdIwQY MBaAFIBdtWeBOeLurOibXumYLDVEnAs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDct OTIyOTIzZTg5OGU2LzEvMS1ueE93Y3FLSlQwSy11MFhEak90eVMwTG9ZMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvY2QvM2RkMDgyLWM1MDMtNDViOC05YjA3LTkyMjkyM2U4OThl Ni8xL2dGMjFaNEU1NHU2czZKdGU2WmdzTlVTY0N6cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoHCQAw DQYJKoZIhvcNAQELBQADggEBAB07fzOQPnlGM8Fd8EtKrjOCJ7gZB3qc8oz1q1ep r/qvgfDLIyA0o+NNPpmGmpHSiggWBuXJdlBUTA6IZq6Dhe4OVzildeNpcETjDhiE 2qHsnxBUtZZyLydA5ZbXl08pE5OWrCxnES0MoGKeQR4mWF5VctOHa6xKg2gU4/qu AY5IPIyJzQcx4MxB5FhjkEFWZ99uOvA94y/2NBU3ONnUJMGMp+GEB5ekGLYPRt1l oUPHZbmhp6QFx7VOUmzB08tgJZOWX6tGg6Gz/OJuwK97Z5z/VaBceYoQVQR+/06l 6vqXaeEdl65Skq9ak1rdeGnWvvlIZTC6vY8VgMU+NCgeeAU= -----END CERTIFICATE-----Generated at Tue Jan 27 03:54:02 2026 by rpki-client