This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/CpYXrnLvjR2OacRHrAwyXhQn-54.roa File: CpYXrnLvjR2OacRHrAwyXhQn-54.roa (raw, json) Hash identifier: QEMefUV+U9Y/lW0Jd6Vawm/+aN0QKHnAj1lMOhtlgXc= Subject key identifier: 0A:96:17:AE:72:EF:8D:1D:8E:69:C4:47:AC:0C:32:5E:14:27:FB:9E Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae Certificate serial: 019B7DCA47236DB469765E03434336121918 Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/CpYXrnLvjR2OacRHrAwyXhQn-54.roa Signing time: Fri 02 Jan 2026 08:19:26 +0000 ROA not before: Fri 02 Jan 2026 08:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57277 IP address blocks: 2001:678:74c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:47:23:6d:b4:69:76:5e:03:43:43:36:12:19:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a9617ae72ef8d1d8e69c447ac0c325e1427fb9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:10:b5:fa:d6:9a:b6:a4:33:c9:93:af:0c: e0:82:f5:a3:31:fa:0a:75:63:d3:85:bc:c7:f6:f7: 68:ff:e0:1d:9e:44:0f:12:b8:14:af:1a:6e:60:3d: 4e:35:3b:97:46:97:78:fe:57:0b:a0:87:16:ea:49: ab:60:da:58:97:e8:8b:a0:6c:ea:6e:40:61:7f:55: c3:0b:ed:bb:45:aa:a9:9b:29:2d:51:13:5e:1d:7a: 42:84:93:7f:dc:7d:08:1e:07:dd:32:a2:a7:0a:48: cc:22:6a:2c:1e:04:a9:04:1e:15:96:0d:78:cd:2c: ff:ed:70:3e:e0:f5:13:30:90:02:02:6a:ef:f6:64: 81:4f:03:11:de:cc:25:f1:eb:8d:f5:40:f2:40:30: 6f:84:68:63:4e:80:48:74:43:b6:54:d0:c2:74:41: aa:07:ee:08:4b:e0:f0:31:5a:5a:95:41:22:19:9d: 08:16:cc:27:cd:4b:4e:cf:30:f4:96:bd:92:c8:ed: 53:47:55:5f:b0:0d:af:9a:27:af:3e:c0:c8:37:fa: c7:b8:90:f5:3b:18:6e:44:71:76:64:f1:3d:bd:9e: e0:21:84:93:78:c7:c0:42:29:d0:f0:8c:80:60:53: 14:df:24:e9:38:b8:97:9a:cb:0b:50:92:aa:2c:fa: 2e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:96:17:AE:72:EF:8D:1D:8E:69:C4:47:AC:0C:32:5E:14:27:FB:9E X509v3 Authority Key Identifier: keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/CpYXrnLvjR2OacRHrAwyXhQn-54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:74c::/48 Signature Algorithm: sha256WithRSAEncryption 43:b5:ea:6f:09:9f:0e:71:83:2f:46:e9:30:9c:21:dd:9f:8c: 2d:ce:c0:ba:aa:f4:32:c3:28:11:c7:06:25:42:ce:5a:9f:7d: fe:f3:95:53:6f:7b:35:b6:76:ff:7e:27:6c:6c:30:e1:01:95: a9:3a:fa:0c:56:ec:73:20:0e:2d:b1:75:79:35:2e:1d:15:40: fa:27:c7:c1:d1:e8:e0:95:f0:0b:60:44:4d:b1:21:76:cf:d4: 54:a5:94:5b:4e:04:dc:19:e6:34:d9:e1:6f:a2:fa:e6:7c:71: 4e:78:55:3e:1a:59:06:d6:74:c6:75:b1:2d:77:a2:7b:61:c5: f1:c2:f0:3f:43:56:22:0e:b7:48:ab:9c:8d:f4:c0:9c:a9:28: a2:2f:b5:2a:e4:a7:17:44:46:46:00:ae:0f:b1:3b:fb:58:1a: 9f:2e:c3:1a:0f:37:33:7b:fa:96:9c:dd:82:79:4c:9e:f9:c9: ad:6c:74:95:e7:cc:38:6e:a1:57:b6:df:73:1d:22:8d:1a:9f: 6f:c3:10:47:5b:fb:6d:4a:79:3f:54:3d:b3:a6:82:fe:d8:a1: 66:c7:4c:6e:21:b5:d3:d4:20:bc:48:13:84:b0:ee:cc:6a:33: bd:63:ab:28:a3:12:9a:50:0c:ef:59:ae:dc:10:63:51:d7:ce: 77:c9:6c:f4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ykcjbbRpdl4DQ0M2EhkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNGMzMjA4NmUxZTk4NDUwNTY5MWIwMWY1OTg1ZGY3YTM2 YjI0YWUwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTk2MTdhZTcyZWY4ZDFkOGU2OWM0NDdhYzBjMzI1ZTE0MjdmYjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVcQtfrWmrakM8mTrwzggvWjMfoK dWPThbzH9vdo/+AdnkQPErgUrxpuYD1ONTuXRpd4/lcLoIcW6kmrYNpYl+iLoGzq bkBhf1XDC+27RaqpmyktURNeHXpChJN/3H0IHgfdMqKnCkjMImosHgSpBB4Vlg14 zSz/7XA+4PUTMJACAmrv9mSBTwMR3swl8euN9UDyQDBvhGhjToBIdEO2VNDCdEGq B+4IS+DwMVpalUEiGZ0IFswnzUtOzzD0lr2SyO1TR1VfsA2vmievPsDIN/rHuJD1 OxhuRHF2ZPE9vZ7gIYSTeMfAQinQ8IyAYFMU3yTpOLiXmssLUJKqLPouKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAqWF65y740djmnER6wMMl4UJ/ueMB8GA1UdIwQY MBaAFB5MMghuHphFBWkbAfWYXfejaySuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYt OThjZTE0NmYxODI0LzEvQ3BZWHJuTHZqUjJPYWNSSHJBd3lYaFFuLTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYtOThjZTE0NmYxODI0 LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAdM MA0GCSqGSIb3DQEBCwUAA4IBAQBDtepvCZ8OcYMvRukwnCHdn4wtzsC6qvQywygR xwYlQs5an33+85VTb3s1tnb/fidsbDDhAZWpOvoMVuxzIA4tsXV5NS4dFUD6J8fB 0ejglfALYERNsSF2z9RUpZRbTgTcGeY02eFvovrmfHFOeFU+GlkG1nTGdbEtd6J7 YcXxwvA/Q1YiDrdIq5yN9MCcqSiiL7Uq5KcXREZGAK4PsTv7WBqfLsMaDzcze/qW nN2CeUye+cmtbHSV58w4bqFXtt9zHSKNGp9vwxBHW/ttSnk/VD2zpoL+2KFmx0xu IbXT1CC8SBOEsO7MajO9Y6sooxKaUAzvWa7cEGNR1853yWz0 -----END CERTIFICATE-----Generated at Mon Jan 26 09:55:07 2026 by rpki-client