This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/nenXOTdR_MN811e1s9Lg1rInHxY.roa File: nenXOTdR_MN811e1s9Lg1rInHxY.roa (raw, json) Hash identifier: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic= Subject key identifier: 9D:E9:D7:39:37:51:FC:C3:7C:D7:57:B5:B3:D2:E0:D6:B2:27:1F:16 Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323 Certificate serial: 019B76EAD73DA681C68EC6D8502F92BA1D15 Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/nenXOTdR_MN811e1s9Lg1rInHxY.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52000 IP address blocks: 2a13:3d81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d7:3d:a6:81:c6:8e:c6:d8:50:2f:92:ba:1d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9de9d7393751fcc37cd757b5b3d2e0d6b2271f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:ac:1f:36:45:c8:bb:00:1e:b4:16:5f:85: f5:f8:1a:76:8c:1d:1a:cb:3f:62:7c:90:5f:db:ea: f4:10:de:87:02:2f:59:3d:70:2c:61:33:1f:da:92: 67:3c:86:7b:ce:14:a8:21:6d:c0:5d:b2:74:63:6e: 6a:1e:03:e5:cd:46:8c:de:92:dc:b7:ae:f0:21:09: ea:c6:40:83:91:85:cf:7c:06:43:1e:a9:d7:1f:33: e2:bc:60:55:2c:89:eb:77:6d:14:38:49:c6:55:77: 94:e8:ad:f9:7d:51:ee:50:62:8e:2a:43:59:c7:c7: d8:54:d5:e6:d9:2b:05:fd:04:27:c9:ea:21:e5:c1: fd:c7:a2:dd:0d:06:10:87:6b:e3:8b:2d:60:87:ac: 8b:5a:27:cb:9b:9c:20:7a:f3:9d:46:05:5d:24:69: 5a:9c:c3:24:af:e1:b0:b3:41:43:ec:57:46:c2:66: 94:ad:5d:e1:20:53:b5:3c:f9:8c:41:71:fe:04:d9: 10:00:86:b6:53:bc:e7:a0:5e:d2:aa:5e:3c:75:f1: 52:5d:86:aa:20:39:dc:9e:6f:77:ed:c4:12:61:00: c4:c1:76:37:78:f4:05:ae:c3:ed:28:79:b1:48:fb: 8e:c1:87:bd:24:7c:4d:0c:7f:d4:09:77:65:be:67: 07:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E9:D7:39:37:51:FC:C3:7C:D7:57:B5:B3:D2:E0:D6:B2:27:1F:16 X509v3 Authority Key Identifier: keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/nenXOTdR_MN811e1s9Lg1rInHxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:3d81::/48 Signature Algorithm: sha256WithRSAEncryption 5e:c0:16:21:37:f4:f0:40:eb:3f:37:2e:3a:1b:c1:1f:42:9b: 80:c0:7b:bd:a7:f3:88:46:96:25:07:d9:38:7d:a9:70:a2:fd: 89:5a:2e:da:13:f7:43:34:b6:ef:76:2b:0b:96:5e:81:08:8d: 16:98:47:19:85:98:fd:ba:19:93:5b:97:9a:62:c2:92:9f:86: f9:70:8c:6f:f1:19:85:0b:1d:68:b7:74:bf:8f:90:75:80:04: 0e:d8:7c:18:5e:cc:b5:48:7e:9f:11:7a:2a:c9:fd:9a:12:8c: b0:a8:0b:43:95:19:8d:ae:cb:82:56:95:76:e2:96:56:47:af: 36:ff:fe:03:27:2c:aa:6b:b1:bf:18:9f:bb:08:55:d7:8b:94: 44:9c:16:ae:5e:75:cc:12:ec:20:71:04:7c:92:a8:a9:c7:e6: b0:cc:5f:51:65:71:5e:34:c2:21:a7:cb:9e:4e:f3:af:24:30: 02:a2:31:af:3d:46:15:29:58:4a:d2:5e:17:32:94:28:37:ae: 7e:b1:4e:5f:f0:a6:3d:a5:9f:f7:19:0c:a9:59:16:67:e2:be: a1:c6:f3:35:a9:ab:2f:e0:ff:ee:55:6f:be:be:c3:a5:46:18: ce:77:b8:62:97:0d:c0:8b:4b:1a:64:93:0a:34:51:bc:d9:8f: 9b:00:f4:fb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26tc9poHGjsbYUC+Suh0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmYzOTEzOWI3MTBjNGY3MjM3ZWRmZDg4NTE4NjU1YWYz OWMzMjMwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGU5ZDczOTM3NTFmY2MzN2NkNzU3YjViM2QyZTBkNmIyMjcxZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8isHzZFyLsAHrQWX4X1+Bp2jB0a yz9ifJBf2+r0EN6HAi9ZPXAsYTMf2pJnPIZ7zhSoIW3AXbJ0Y25qHgPlzUaM3pLc t67wIQnqxkCDkYXPfAZDHqnXHzPivGBVLInrd20UOEnGVXeU6K35fVHuUGKOKkNZ x8fYVNXm2SsF/QQnyeoh5cH9x6LdDQYQh2vjiy1gh6yLWifLm5wgevOdRgVdJGla nMMkr+Gws0FD7FdGwmaUrV3hIFO1PPmMQXH+BNkQAIa2U7znoF7Sql48dfFSXYaq IDncnm937cQSYQDEwXY3ePQFrsPtKHmxSPuOwYe9JHxNDH/UCXdlvmcHgQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ3p1zk3UfzDfNdXtbPS4NayJx8WMB8GA1UdIwQY MBaAFBS/ORObcQxPcjft/YhRhlWvOcMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iOTYyNTktMzNiOC00NTRhLThjNWYt YTg2MmI4ODU5M2EwLzEvbmVuWE9UZFJfTU44MTFlMXM5TGcxckluSHhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iOTYyNTktMzNiOC00NTRhLThjNWYtYTg2MmI4ODU5M2Ew LzEvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhM9gQAA MA0GCSqGSIb3DQEBCwUAA4IBAQBewBYhN/TwQOs/Ny46G8EfQpuAwHu9p/OIRpYl B9k4falwov2JWi7aE/dDNLbvdisLll6BCI0WmEcZhZj9uhmTW5eaYsKSn4b5cIxv 8RmFCx1ot3S/j5B1gAQO2HwYXsy1SH6fEXoqyf2aEoywqAtDlRmNrsuCVpV24pZW R682//4DJyyqa7G/GJ+7CFXXi5REnBauXnXMEuwgcQR8kqipx+awzF9RZXFeNMIh p8ueTvOvJDACojGvPUYVKVhK0l4XMpQoN65+sU5f8KY9pZ/3GQypWRZn4r6hxvM1 qasv4P/uVW++vsOlRhjOd7hilw3Ai0saZJMKNFG82Y+bAPT7 -----END CERTIFICATE-----Generated at Thu Jan 1 21:24:00 2026 by rpki-client