This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1-MS_1hW7JFlt6y_BMV0sVhufPYg.roa File: 1-MS_1hW7JFlt6y_BMV0sVhufPYg.roa (raw, json) Hash identifier: zjiwcFFi0S1Y8nQHXq7Qb4C7Id+eZe4D5BdMHADiqFU= Subject key identifier: F8:C4:BF:D6:15:BB:24:59:6D:EB:2F:C1:31:5D:2C:56:1B:9F:3D:88 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C4494E83EDA7F01416A758F8ED76 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1-MS_1hW7JFlt6y_BMV0sVhufPYg.roa Signing time: Fri 02 Jan 2026 18:21:49 +0000 ROA not before: Fri 02 Jan 2026 18:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214329 IP address blocks: 2a03:5840:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c4:49:4e:83:ed:a7:f0:14:16:a7:58:f8:ed:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8c4bfd615bb24596deb2fc1315d2c561b9f3d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:31:95:62:03:b2:64:72:48:13:63:3c:78: 00:ad:01:c6:c6:a8:77:82:52:4d:ad:5f:c9:37:5c: ff:ae:f0:ef:4a:1e:5f:4f:66:0e:7b:cd:9a:0b:e7: 22:91:86:53:b9:2d:43:6a:93:1d:c3:20:71:8e:3c: f3:7c:c4:52:52:ab:8c:38:9c:e9:68:36:18:af:e6: e4:d0:71:9d:33:23:96:75:89:8d:a3:c2:ec:e7:cd: 67:3b:a6:2f:ad:fe:63:58:2d:61:22:e1:0d:20:68: ff:60:ae:90:1c:0d:b5:1b:b1:da:2b:09:f5:4c:0f: 8e:df:ae:ee:d3:e4:a2:3e:6d:93:85:9c:34:3f:f8: 64:0a:4b:5a:78:c5:9b:6d:2b:a3:17:cc:f5:fc:39: 4c:2e:dd:2a:ff:53:33:22:1e:4d:4e:b6:94:3e:07: 70:6d:ad:8f:19:a1:0a:16:33:1f:0d:e9:b5:3f:08: c6:f4:b2:6b:16:0f:3a:8a:d1:01:3a:e7:c6:57:24: 42:0a:c1:a6:f2:84:a0:f5:b2:c4:85:4b:89:4a:84: d4:0b:81:a6:90:46:61:d8:6a:30:8a:d1:b5:a6:41: 2f:0d:bd:02:73:9b:34:94:5a:b1:61:16:aa:41:d1: 41:90:db:9d:ad:91:9c:ad:22:90:6d:60:0b:c6:bf: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C4:BF:D6:15:BB:24:59:6D:EB:2F:C1:31:5D:2C:56:1B:9F:3D:88 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1-MS_1hW7JFlt6y_BMV0sVhufPYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:120::/48 Signature Algorithm: sha256WithRSAEncryption 59:e6:24:90:4f:b5:76:1e:ac:f6:7d:b2:3c:64:ed:44:2d:37: ad:51:d8:5e:5e:5b:16:2b:92:cf:d0:56:cd:96:82:75:07:1e: e3:c2:4f:10:d7:48:c3:86:bb:ca:41:41:c2:1c:85:19:62:0d: a4:00:06:e2:72:2a:ef:df:34:18:57:af:0d:b9:9b:37:9d:c3: bd:a5:38:29:66:b4:f0:dd:24:25:4c:15:89:8f:aa:c1:a3:60: e5:67:2f:80:f8:8e:bd:55:5e:4a:30:0a:bf:cf:63:0d:23:e0: 0d:63:50:b6:6b:94:72:08:4d:af:bf:9a:73:9e:25:48:18:24: e4:f5:46:02:30:16:16:69:7c:eb:a9:aa:a1:d4:7f:3d:be:8f: 76:2e:24:d6:5e:20:1e:b5:96:ec:04:ae:b7:56:54:28:0e:61: 25:e8:ef:d9:20:80:25:5f:3f:65:8d:b5:5e:b0:6c:a6:15:16: cc:c5:96:2d:20:06:d5:ee:bf:ac:b3:08:54:b6:1f:62:42:54: 60:d9:d1:a7:d2:bf:70:58:94:8e:aa:27:98:79:ca:22:16:24: e8:f8:0f:f8:fa:c4:8b:7d:98:4e:86:f5:96:49:b3:9e:1f:8a: 34:a3:ec:91:40:81:0b:89:0b:6f:91:fe:1a:1c:5e:4e:87:48: 91:e4:7f:cd -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt/8cRJToPtp/AUFqdY+O12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGM0YmZkNjE1YmIyNDU5NmRlYjJmYzEzMTVkMmM1NjFiOWYzZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4kxlWIDsmRySBNjPHgArQHGxqh3 glJNrV/JN1z/rvDvSh5fT2YOe82aC+cikYZTuS1DapMdwyBxjjzzfMRSUquMOJzp aDYYr+bk0HGdMyOWdYmNo8Ls581nO6Yvrf5jWC1hIuENIGj/YK6QHA21G7HaKwn1 TA+O367u0+SiPm2ThZw0P/hkCktaeMWbbSujF8z1/DlMLt0q/1MzIh5NTraUPgdw ba2PGaEKFjMfDem1PwjG9LJrFg86itEBOufGVyRCCsGm8oSg9bLEhUuJSoTUC4Gm kEZh2GowitG1pkEvDb0Cc5s0lFqxYRaqQdFBkNudrZGcrSKQbWALxr91swIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPjEv9YVuyRZbesvwTFdLFYbnz2IMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvMS1NU18xaFc3SkZsdDZ5X0JNVjBzVmh1ZlBZZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2MvMDIyODM5LTY5ODQtNDBkNC04NzE2LTZjYjg5NzkxZDdm ZC8xLzkzY0Y2SnUyVzBjdVRnR0UxdjZiLTR4WVkxby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoDWEAB IDANBgkqhkiG9w0BAQsFAAOCAQEAWeYkkE+1dh6s9n2yPGTtRC03rVHYXl5bFiuS z9BWzZaCdQce48JPENdIw4a7ykFBwhyFGWINpAAG4nIq7980GFevDbmbN53DvaU4 KWa08N0kJUwViY+qwaNg5WcvgPiOvVVeSjAKv89jDSPgDWNQtmuUcghNr7+ac54l SBgk5PVGAjAWFml866mqodR/Pb6Pdi4k1l4gHrWW7ASut1ZUKA5hJejv2SCAJV8/ ZY21XrBsphUWzMWWLSAG1e6/rLMIVLYfYkJUYNnRp9K/cFiUjqonmHnKIhYk6PgP +PrEi32YTob1lkmznh+KNKPskUCBC4kLb5H+GhxeTodIkeR/zQ== -----END CERTIFICATE-----Generated at Fri Jan 23 15:22:27 2026 by rpki-client