This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/0wCCvmzjxet4kKNp7yDwvGv0VLQ.roa File: 0wCCvmzjxet4kKNp7yDwvGv0VLQ.roa (raw, json) Hash identifier: FiAtQmKcOwpUIkdQfF4gJGoz866TlIorPxIlToiT4o0= Subject key identifier: D3:00:82:BE:6C:E3:C5:EB:78:90:A3:69:EF:20:F0:BC:6B:F4:54:B4 Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46 Certificate serial: 019B7C130EF468486841E10A57326C658453 Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/0wCCvmzjxet4kKNp7yDwvGv0VLQ.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210152 IP address blocks: 2001:67c:c14::/48 maxlen: 48 2001:67c:e88::/48 maxlen: 48 2001:67c:2ff8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0e:f4:68:48:68:41:e1:0a:57:32:6c:65:84:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46 Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d30082be6ce3c5eb7890a369ef20f0bc6bf454b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fa:aa:05:86:9e:b5:93:84:a9:da:50:39:94: 1a:62:09:29:b8:3f:6a:03:d3:2e:8f:ef:63:be:2f: cb:44:ca:8f:f8:89:18:57:2f:0b:b7:d8:d5:11:4a: 1a:ca:9c:e1:a8:d1:38:3e:20:7b:3b:45:07:a4:8e: 61:d6:2b:95:1f:41:da:a8:8f:2d:42:02:02:1b:81: 29:e1:ed:46:ec:41:78:1f:47:4f:93:ec:43:3e:a8: 1f:d5:76:b5:3e:b1:e2:d7:d4:1e:4e:cd:be:b0:22: 25:05:8e:e3:e3:63:c9:2d:2d:19:75:e4:81:6a:75: 77:c7:61:88:21:29:40:e1:2e:e1:b3:cc:f1:3d:c0: be:ec:34:35:19:ec:c8:be:2b:5a:c4:fd:af:9a:09: ff:bc:4d:42:c1:c5:8f:a3:56:45:7e:78:8c:5f:0a: e9:14:5e:95:82:f2:01:e4:fc:a1:63:37:42:f9:98: 96:18:31:11:01:19:9a:9c:46:d0:4c:aa:fb:62:b3: ed:74:26:2a:97:e4:de:7c:6e:c9:04:9a:1e:79:58: b4:a4:e2:b0:bc:b5:4e:e3:e1:7e:64:9b:6a:89:a7: e4:fb:78:f6:f7:d4:38:29:95:80:47:d1:92:59:0c: 58:63:11:4e:95:56:95:ef:e4:58:e4:d0:c6:91:dd: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:00:82:BE:6C:E3:C5:EB:78:90:A3:69:EF:20:F0:BC:6B:F4:54:B4 X509v3 Authority Key Identifier: keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/0wCCvmzjxet4kKNp7yDwvGv0VLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c14::/48 2001:67c:e88::/48 2001:67c:2ff8::/48 Signature Algorithm: sha256WithRSAEncryption 91:2c:66:d1:e8:ff:1c:8b:45:c3:80:2f:84:42:5a:75:f7:cb: 7f:0d:eb:ff:68:e5:22:45:3b:05:41:6d:18:73:55:9a:a8:d9: 4d:7b:0e:01:51:19:1d:7e:5b:d7:03:0d:bd:f0:dc:f9:92:e5: ec:2f:dd:ee:66:c3:f2:32:3b:2c:67:ba:cf:17:37:b6:88:8c: 60:cb:c3:e1:7c:b3:e2:a5:12:01:aa:04:cc:16:4e:46:83:43: 57:00:95:54:b3:c2:3e:0b:67:6e:6e:a4:13:d7:02:f7:63:c5: 54:1c:71:90:02:06:1d:fc:92:fb:07:c0:54:71:af:a1:bf:77: 9a:fa:08:93:76:96:98:78:f3:69:6e:8c:82:39:da:0b:15:97: f3:9c:bf:05:50:3f:a4:6e:6f:af:e2:3b:30:af:bc:04:42:e4: 51:5d:26:9a:6d:a8:72:7a:ba:d1:3e:f0:ee:ae:b3:ff:a3:60: 2c:e2:94:eb:aa:0a:12:0b:4b:5d:41:dc:26:d3:3f:d7:d3:e8: 16:81:5b:49:01:52:a5:1a:e0:b5:7a:39:1e:23:14:ca:83:13: d0:26:54:7d:20:65:30:0b:9a:08:79:93:4c:f1:cf:88:73:6d: 6a:68:1f:b9:cd:30:c0:72:f3:8e:0b:de:09:83:79:2f:dd:ab: 37:9d:1f:b4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8Ew70aEhoQeEKVzJsZYRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZmIwZDU0OGM0OWI2YTU2MThhNGQzYjNjMWRhNGMzZDE0 NGJmNDYwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzAwODJiZTZjZTNjNWViNzg5MGEzNjllZjIwZjBiYzZiZjQ1NGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vqqBYaetZOEqdpQOZQaYgkpuD9q A9Muj+9jvi/LRMqP+IkYVy8Lt9jVEUoaypzhqNE4PiB7O0UHpI5h1iuVH0HaqI8t QgICG4Ep4e1G7EF4H0dPk+xDPqgf1Xa1PrHi19QeTs2+sCIlBY7j42PJLS0ZdeSB anV3x2GIISlA4S7hs8zxPcC+7DQ1GezIvitaxP2vmgn/vE1CwcWPo1ZFfniMXwrp FF6VgvIB5PyhYzdC+ZiWGDERARmanEbQTKr7YrPtdCYql+TefG7JBJoeeVi0pOKw vLVO4+F+ZJtqiafk+3j299Q4KZWAR9GSWQxYYxFOlVaV7+RY5NDGkd2+6QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNMAgr5s48XreJCjae8g8Lxr9FS0MB8GA1UdIwQY MBaAFCv7DVSMSbalYYpNOzwdpMPRRL9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2Mt MTM3MTA5MzY5NjIxLzEvMHdDQ3Ztemp4ZXQ0a0tOcDd5RHd2R3YwVkxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2MtMTM3MTA5MzY5NjIx LzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAIAEGfAwU AwcAIAEGfA6IAwcAIAEGfC/4MA0GCSqGSIb3DQEBCwUAA4IBAQCRLGbR6P8ci0XD gC+EQlp198t/Dev/aOUiRTsFQW0Yc1WaqNlNew4BURkdflvXAw298Nz5kuXsL93u ZsPyMjssZ7rPFze2iIxgy8PhfLPipRIBqgTMFk5Gg0NXAJVUs8I+C2dubqQT1wL3 Y8VUHHGQAgYd/JL7B8BUca+hv3ea+giTdpaYePNpboyCOdoLFZfznL8FUD+kbm+v 4jswr7wEQuRRXSaabahyerrRPvDurrP/o2As4pTrqgoSC0tdQdwm0z/X0+gWgVtJ AVKlGuC1ejkeIxTKgxPQJlR9IGUwC5oIeZNM8c+Ic21qaB+5zTDAcvOOC94Jg3kv 3as3nR+0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:20 2026 by rpki-client