This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/RNoONMgjC7AI9bUiPXHJnoNxdw4.roa File: RNoONMgjC7AI9bUiPXHJnoNxdw4.roa (raw, json) Hash identifier: EyX2BbVopJ5hjqPnGfS3gH2lJBH+hCeBYJzhz4A8ggc= Subject key identifier: 44:DA:0E:34:C8:23:0B:B0:08:F5:B5:22:3D:71:C9:9E:83:71:77:0E Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a Certificate serial: 019B79ED2D9E7D4959E58BD1DFDBBC3497CA Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/RNoONMgjC7AI9bUiPXHJnoNxdw4.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204497 IP address blocks: 2a09:7ac1:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2d:9e:7d:49:59:e5:8b:d1:df:db:bc:34:97:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44da0e34c8230bb008f5b5223d71c99e8371770e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:29:77:ef:41:2b:7b:db:78:2f:12:0b:21: 2b:b8:37:99:b8:71:55:d8:e5:cf:57:88:c3:fe:da: b1:8e:0a:da:08:27:1c:9e:3c:9b:a1:fb:93:a7:56: a5:7f:6f:f8:a4:84:88:c8:85:05:0c:fd:6e:48:e4: 79:84:da:8a:a1:40:72:c3:c1:05:e8:70:87:35:53: e5:7d:d1:af:89:19:6e:f0:70:9d:70:68:0b:6a:45: 2c:f6:7f:9e:8d:25:ee:4e:fd:e5:7e:39:50:2f:10: 3e:26:4b:5b:a9:b9:72:93:4e:88:05:7e:7e:c0:72: a4:2e:f0:a4:97:51:a8:5c:1c:44:c3:00:b6:ee:a2: d8:77:e9:3e:ef:ae:e9:70:42:4d:41:c1:e1:4b:b8: 12:e6:56:4b:b3:ff:a6:d5:3e:12:e9:c6:48:b0:fd: e2:19:c5:66:2b:01:73:bc:16:d1:17:70:6e:59:ef: 0e:6c:0b:85:13:be:f0:bb:01:d6:88:90:45:ef:d9: 34:4c:fe:c5:88:1a:8e:32:37:8e:04:c4:d3:f7:08: 43:ad:82:6d:c5:80:51:f7:c0:b0:26:a9:de:4a:7f: 14:41:3f:34:c1:17:0f:d2:05:7a:ec:18:8c:71:b9: 56:2c:b7:05:91:55:79:c9:68:9e:78:59:3b:c6:e7: cf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DA:0E:34:C8:23:0B:B0:08:F5:B5:22:3D:71:C9:9E:83:71:77:0E X509v3 Authority Key Identifier: keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/RNoONMgjC7AI9bUiPXHJnoNxdw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:7ac1:2::/48 Signature Algorithm: sha256WithRSAEncryption 7c:72:16:22:7e:f7:62:77:b0:54:24:43:4e:05:7e:aa:ee:11: b4:2a:22:1a:75:6f:7d:29:c3:71:0b:65:b5:03:47:20:cd:c2: 70:ce:b1:12:b1:a4:98:62:f3:10:17:e1:a8:f8:72:7e:bd:21: 6b:63:51:0a:ec:5a:c8:71:12:46:99:e3:e8:04:70:70:76:0c: e3:2c:11:46:a6:bd:da:68:7e:90:9b:2d:8b:8a:95:64:99:45: f1:48:af:32:21:69:92:e4:1b:74:23:cd:39:ac:79:9c:e2:b8: c5:68:f9:bd:a6:8c:c7:e7:8e:79:c1:00:52:81:86:7f:6b:e1: b2:47:7f:f0:8a:04:f3:41:88:47:aa:47:ce:e3:34:85:e2:10: 36:58:73:d2:8c:c2:f5:aa:35:ac:a3:b9:cd:1c:c7:4f:93:67: f3:0f:30:80:21:c3:7b:00:ec:f3:bb:77:71:f2:4f:19:16:2a: f8:69:50:a9:1e:5c:90:5d:90:b2:19:e5:63:4d:4b:c7:77:6f: e9:81:fe:44:e9:62:ba:ef:27:5f:cf:5d:2a:95:2b:f7:d2:ba: c2:80:f2:ea:b3:2b:4d:c4:02:4c:e5:a0:de:e2:d6:6f:5d:67: 42:68:b2:7d:84:bf:6e:c2:96:7b:5d:e7:fd:08:ff:f8:66:00: 38:b0:ad:0b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57S2efUlZ5YvR39u8NJfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDI3ZWE0OWY5NzJkMTljNTYzOTNhNjg5ZTdjYmViOTkw ZDVkN2EwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGRhMGUzNGM4MjMwYmIwMDhmNWI1MjIzZDcxYzk5ZTgzNzE3NzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKgpd+9BK3vbeC8SCyEruDeZuHFV 2OXPV4jD/tqxjgraCCccnjybofuTp1alf2/4pISIyIUFDP1uSOR5hNqKoUByw8EF 6HCHNVPlfdGviRlu8HCdcGgLakUs9n+ejSXuTv3lfjlQLxA+Jktbqblyk06IBX5+ wHKkLvCkl1GoXBxEwwC27qLYd+k+767pcEJNQcHhS7gS5lZLs/+m1T4S6cZIsP3i GcVmKwFzvBbRF3BuWe8ObAuFE77wuwHWiJBF79k0TP7FiBqOMjeOBMTT9whDrYJt xYBR98CwJqneSn8UQT80wRcP0gV67BiMcblWLLcFkVV5yWieeFk7xufPpwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFETaDjTIIwuwCPW1Ij1xyZ6DcXcOMB8GA1UdIwQY MBaAFLVCfqSfly0ZxWOTponny+uZDV16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1Mjgt MGM0OTU0NzdjYTEwLzEvUk5vT05NZ2pDN0FJOWJVaVBYSEpub054ZHc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1MjgtMGM0OTU0NzdjYTEw LzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgl6wQAC MA0GCSqGSIb3DQEBCwUAA4IBAQB8chYifvdid7BUJENOBX6q7hG0KiIadW99KcNx C2W1A0cgzcJwzrESsaSYYvMQF+Go+HJ+vSFrY1EK7FrIcRJGmePoBHBwdgzjLBFG pr3aaH6Qmy2LipVkmUXxSK8yIWmS5Bt0I805rHmc4rjFaPm9pozH5455wQBSgYZ/ a+GyR3/wigTzQYhHqkfO4zSF4hA2WHPSjML1qjWso7nNHMdPk2fzDzCAIcN7AOzz u3dx8k8ZFir4aVCpHlyQXZCyGeVjTUvHd2/pgf5E6WK67ydfz10qlSv30rrCgPLq sytNxAJM5aDe4tZvXWdCaLJ9hL9uwpZ7Xef9CP/4ZgA4sK0L -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:53 2026 by rpki-client