This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa File: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (raw, json) Hash identifier: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY= Subject key identifier: B4:0E:6B:73:8C:6F:60:96:A0:87:09:10:38:A9:FC:B4:7F:3F:88:B4 Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019B79ED612C77A5CA872C0EB929DF940238 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213935 IP address blocks: 2a0e:e704:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:61:2c:77:a5:ca:87:2c:0e:b9:29:df:94:02:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b40e6b738c6f6096a087091038a9fcb47f3f88b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:81:da:6b:15:c1:c4:1d:f8:34:8f:00:0e: 1f:68:7b:90:1c:ad:d1:6b:d1:e7:50:26:57:f1:98: 84:19:dc:3b:36:ef:a0:38:5f:7d:0f:51:58:31:71: 78:bf:4f:a4:09:5e:1a:8c:e9:6e:5e:ef:c1:b8:93: 49:b1:06:e3:7b:13:24:6f:95:42:35:57:bd:09:23: b3:6e:fe:0e:88:13:c2:30:60:b7:be:4d:e1:a3:de: 91:83:ca:ac:d4:51:ff:f2:d9:37:85:bb:d5:08:19: 79:a7:cb:d2:bc:5d:cd:81:31:6e:93:59:53:0b:11: 80:03:dd:42:69:66:fe:81:8d:c4:a1:f7:e2:0e:5f: 88:cf:ce:97:1d:85:07:fc:91:e8:42:f6:98:1b:71: 4e:9e:4c:12:f6:52:2c:e6:2c:29:69:99:21:73:ab: 61:48:2c:00:a8:26:b2:b4:62:7f:6c:83:3b:51:d0: 14:5b:d2:32:5e:a8:b9:8a:da:38:ef:cd:84:0c:5f: b1:9a:32:f0:6c:f9:b5:b3:8a:ed:2e:53:5d:af:f9: 65:c4:95:0b:8d:35:fe:4d:cc:80:c0:97:04:e5:04: 29:77:89:95:86:2c:d6:15:ed:17:ea:af:90:a5:23: bd:08:09:b2:9a:b2:2c:7a:83:ed:c4:2f:eb:c6:b8: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0E:6B:73:8C:6F:60:96:A0:87:09:10:38:A9:FC:B4:7F:3F:88:B4 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e704:48::/48 Signature Algorithm: sha256WithRSAEncryption 56:16:d0:ef:b6:38:61:32:26:7d:84:4f:cb:9e:08:85:8a:46: ea:47:9b:62:ea:43:4f:f6:f3:f4:a3:07:a5:1b:45:91:54:a5: 86:5b:6f:2d:b9:ae:5c:4d:82:93:21:8e:e5:58:a1:1b:6e:f4: 7e:89:73:30:30:4d:77:dd:50:28:82:76:3f:53:2f:e0:0f:9a: 6c:7b:80:09:94:5c:a5:98:00:5d:0b:17:b6:63:08:4c:bb:cb: 80:2f:b7:f2:17:1c:d6:0f:14:18:29:a4:ee:8c:07:68:75:c7: 0d:17:ff:42:77:98:63:fd:0d:5d:9e:76:67:a9:be:26:36:93: 3a:8d:cc:18:10:ca:96:c7:0f:7f:60:8c:57:15:c2:4c:7b:39: fe:32:63:91:ca:28:8e:cb:37:c8:de:69:08:f9:66:f8:2a:d0: 38:ee:bc:02:57:f4:2c:9b:70:50:45:78:ff:9b:32:ac:f4:ed: 13:3e:c0:f5:22:90:5d:f9:c8:90:12:ad:06:bb:eb:2f:97:7d: 69:3e:ea:43:5d:58:c0:93:0b:5b:ad:d0:05:95:bd:8f:cd:a4: ce:c8:ce:b6:e7:d8:f0:97:0a:c1:3a:e1:90:4d:1b:7f:4d:75: 43:25:b1:cf:f1:37:a4:18:5d:85:5b:f5:92:f4:7a:7d:c6:19: d0:d9:88:09 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57WEsd6XKhywOuSnflAI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDBlNmI3MzhjNmY2MDk2YTA4NzA5MTAzOGE5ZmNiNDdmM2Y4OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsleB2msVwcQd+DSPAA4faHuQHK3R a9HnUCZX8ZiEGdw7Nu+gOF99D1FYMXF4v0+kCV4ajOluXu/BuJNJsQbjexMkb5VC NVe9CSOzbv4OiBPCMGC3vk3ho96Rg8qs1FH/8tk3hbvVCBl5p8vSvF3NgTFuk1lT CxGAA91CaWb+gY3EoffiDl+Iz86XHYUH/JHoQvaYG3FOnkwS9lIs5iwpaZkhc6th SCwAqCaytGJ/bIM7UdAUW9IyXqi5ito4782EDF+xmjLwbPm1s4rtLlNdr/llxJUL jTX+TcyAwJcE5QQpd4mVhizWFe0X6q+QpSO9CAmymrIseoPtxC/rxrjO0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLQOa3OMb2CWoIcJEDip/LR/P4i0MB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvdEE1cmM0eHZZSmFnaHdrUU9Lbjh0SDhfaUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7nBABI MA0GCSqGSIb3DQEBCwUAA4IBAQBWFtDvtjhhMiZ9hE/LngiFikbqR5ti6kNP9vP0 owelG0WRVKWGW28tua5cTYKTIY7lWKEbbvR+iXMwME133VAognY/Uy/gD5pse4AJ lFylmABdCxe2YwhMu8uAL7fyFxzWDxQYKaTujAdodccNF/9Cd5hj/Q1dnnZnqb4m NpM6jcwYEMqWxw9/YIxXFcJMezn+MmORyiiOyzfI3mkI+Wb4KtA47rwCV/Qsm3BQ RXj/mzKs9O0TPsD1IpBd+ciQEq0Gu+svl31pPupDXVjAkwtbrdAFlb2PzaTOyM62 59jwlwrBOuGQTRt/TXVDJbHP8TekGF2FW/WS9Hp9xhnQ2YgJ -----END CERTIFICATE-----Generated at Mon Jan 26 10:16:12 2026 by rpki-client