This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/1-99tj9n-LWYw_lI6J2ZtTlYMtsw.roa File: 1-99tj9n-LWYw_lI6J2ZtTlYMtsw.roa (raw, json) Hash identifier: Ptwrv4fZgKC6RoxF9JtUijELaGYTN5wfnCikQVHX0jc= Subject key identifier: FB:DF:6D:8F:D9:FE:2D:66:30:FE:52:3A:27:66:6D:4E:56:0C:B6:CC Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81 Certificate serial: 019B7CED750D74538A5596BA82DC6AC5A6AD Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/1-99tj9n-LWYw_lI6J2ZtTlYMtsw.roa Signing time: Fri 02 Jan 2026 04:18:15 +0000 ROA not before: Fri 02 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 2a05:8943::/32 maxlen: 32 2a05:8944::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:75:0d:74:53:8a:55:96:ba:82:dc:6a:c5:a6:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81 Validity Not Before: Jan 2 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbdf6d8fd9fe2d6630fe523a27666d4e560cb6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:90:54:1d:5d:8a:25:c2:df:b1:c6:2e:6e:17: 7d:ed:d0:7b:37:85:5e:e7:a6:5a:8e:c5:ea:73:15: 2f:45:96:31:86:b0:56:ed:5d:5b:f3:5e:bf:9a:87: 34:75:5a:4a:b3:37:75:ee:f8:52:6b:ff:55:7f:7b: ab:cd:a6:7f:49:73:7c:1c:03:02:6e:2b:cd:a1:ee: 55:ef:8c:0a:c7:52:a9:d1:d7:99:7c:b6:1f:17:08: 2b:f7:5a:34:09:85:e0:a2:3f:b3:d6:ad:36:5f:55: 4b:89:b1:79:a1:9f:5e:26:7c:3c:54:43:e4:cf:26: 73:70:be:31:33:a1:b9:c0:3a:ca:c3:be:a5:4c:d3: d5:98:9e:ac:f8:ec:61:dd:bb:dd:bc:f2:93:74:cd: 83:2d:3d:f3:f5:f4:79:27:53:3f:70:35:49:ab:5e: b9:56:8d:47:17:80:b2:42:82:df:69:8c:d8:63:89: 95:0a:c7:77:f0:7d:a0:c0:32:ad:83:b5:9e:38:cc: b2:2f:d5:d2:d1:f1:96:46:9e:45:86:41:93:b8:58: 62:33:c7:1d:78:21:2d:75:0a:fb:76:ca:fd:0e:f3: b1:d9:cb:8d:53:b2:68:b0:7f:a0:69:42:6a:31:ef: 66:30:02:ab:a5:77:52:65:a1:e8:b5:2d:18:5a:9c: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DF:6D:8F:D9:FE:2D:66:30:FE:52:3A:27:66:6D:4E:56:0C:B6:CC X509v3 Authority Key Identifier: keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/1-99tj9n-LWYw_lI6J2ZtTlYMtsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:8943::-2a05:8944:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6b:68:1c:f0:b9:81:a6:ed:8c:19:09:de:77:03:45:8b:60:dc: 7b:eb:12:02:ce:ec:97:13:9f:40:e0:a2:03:3f:9a:9a:37:6f: b7:c8:c2:84:26:08:ab:dc:ee:d0:11:e3:7a:5d:eb:d1:d4:8a: 72:56:a1:b4:f1:15:50:80:0f:bd:9e:21:df:7f:6d:76:7f:9e: 8c:62:1e:6f:ab:5f:6c:0a:e9:06:5b:79:4b:1b:65:b8:43:fc: 7d:31:9d:0e:d4:7e:6a:f2:bb:e3:29:00:ae:6e:fd:26:93:29: 96:f2:17:db:9d:5d:54:ea:90:f7:75:2e:3a:c0:1e:55:a3:57: fc:4e:cc:41:a4:92:c9:c8:46:3c:94:91:8b:da:fb:ee:5c:bc: 10:13:8e:e0:4c:42:50:73:ca:49:db:6c:a6:5b:1d:1c:63:46: 72:b1:34:91:aa:da:00:ec:22:24:ab:88:f0:26:8c:69:ec:35: 5b:6f:bc:69:96:59:ee:fd:9e:2f:b1:b2:3e:30:fb:fe:5e:64: e4:9d:35:e8:51:ef:ba:b8:bd:a8:63:cd:ea:e7:0d:b8:4f:c7: f3:f0:08:9b:1f:9f:65:88:74:4c:2a:09:2c:b5:7a:42:58:a9: 7d:e7:6c:f4:e7:9e:c1:43:70:6a:08:db:24:2d:01:37:c0:f4: 4f:42:c2:a6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt87XUNdFOKVZa6gtxqxaatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNzg5NjNiM2M0ZjJkZDE4N2MyMDQzN2RmMWQ3ZDljMTY4 Y2FiODEwHhcNMjYwMTAyMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmRmNmQ4ZmQ5ZmUyZDY2MzBmZTUyM2EyNzY2NmQ0ZTU2MGNiNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZBUHV2KJcLfscYubhd97dB7N4Ve 56ZajsXqcxUvRZYxhrBW7V1b816/moc0dVpKszd17vhSa/9Vf3urzaZ/SXN8HAMC bivNoe5V74wKx1Kp0deZfLYfFwgr91o0CYXgoj+z1q02X1VLibF5oZ9eJnw8VEPk zyZzcL4xM6G5wDrKw76lTNPVmJ6s+Oxh3bvdvPKTdM2DLT3z9fR5J1M/cDVJq165 Vo1HF4CyQoLfaYzYY4mVCsd38H2gwDKtg7WeOMyyL9XS0fGWRp5FhkGTuFhiM8cd eCEtdQr7dsr9DvOx2cuNU7JosH+gaUJqMe9mMAKrpXdSZaHotS0YWpzkewIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFPvfbY/Z/i1mMP5SOidmbU5WDLbMMB8GA1UdIwQY MBaAFI94ljs8Ty3Rh8IEN98dfZwWjKuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgt MWVmOWYyMzE5NTIyLzEvMS05OXRqOW4tTFdZd19sSTZKMlp0VGxZTXRzdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvY2EvZGJmY2ExLTJiOTQtNGQwYi05ZGQ4LTFlZjlmMjMxOTUy Mi8xL2ozaVdPenhQTGRHSHdnUTMzeDE5bkJhTXE0RS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEDAOAwUAKgWJ QwMFACoFiUQwDQYJKoZIhvcNAQELBQADggEBAGtoHPC5gabtjBkJ3ncDRYtg3Hvr EgLO7JcTn0DgogM/mpo3b7fIwoQmCKvc7tAR43pd69HUinJWobTxFVCAD72eId9/ bXZ/noxiHm+rX2wK6QZbeUsbZbhD/H0xnQ7Ufmryu+MpAK5u/SaTKZbyF9udXVTq kPd1LjrAHlWjV/xOzEGkksnIRjyUkYva++5cvBATjuBMQlBzyknbbKZbHRxjRnKx NJGq2gDsIiSriPAmjGnsNVtvvGmWWe79ni+xsj4w+/5eZOSdNehR77q4vahjzern DbhPx/PwCJsfn2WIdEwqCSy1ekJYqX3nbPTnnsFDcGoI2yQtATfA9E9CwqY= -----END CERTIFICATE-----Generated at Fri Jan 23 16:04:39 2026 by rpki-client