This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1FUxMg1bQhNI0pfJRK49ML-T4cI.roa File: 1FUxMg1bQhNI0pfJRK49ML-T4cI.roa (raw, json) Hash identifier: gX7YlSl/a5sYQX9eMfgbv6qQK32oxW9gbZGHwsK7INU= Subject key identifier: D4:55:31:32:0D:5B:42:13:48:D2:97:C9:44:AE:3D:30:BF:93:E1:C2 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6DF925116A58F8C532B3FBF47AF35 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1FUxMg1bQhNI0pfJRK49ML-T4cI.roa Signing time: Fri 02 Jan 2026 12:20:23 +0000 ROA not before: Fri 02 Jan 2026 12:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201335 IP address blocks: 2a0c:9a40:8ab0::/44 maxlen: 48 2a0c:9a40:9900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:df:92:51:16:a5:8f:8c:53:2b:3f:bf:47:af:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d45531320d5b421348d297c944ae3d30bf93e1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1a:15:90:e0:74:72:de:24:a7:15:b9:06:da: d5:32:35:fd:0c:d8:8c:15:b9:22:8b:d0:17:49:c1: ef:8a:ad:1f:19:2c:7e:de:f9:70:2a:43:cd:0d:11: 8f:47:50:3b:fe:f0:e9:1d:67:9e:54:f2:ef:e6:d1: 08:46:71:22:6e:26:94:3a:98:c7:fb:8d:cf:93:4d: 31:e1:60:d8:64:74:14:99:fc:d5:62:6d:eb:82:72: 55:c9:f0:eb:78:80:f9:53:e4:10:62:23:07:9a:c9: 95:1b:48:41:e9:dc:40:fa:b4:69:f1:87:96:49:85: 70:88:31:a6:5f:f7:b7:cf:eb:73:1d:02:66:e1:01: 9b:23:60:59:73:5d:be:22:91:28:31:d2:84:0b:5c: 11:a3:42:42:39:79:c9:3d:21:b9:14:50:74:4b:1b: 35:c2:cf:c7:a2:17:98:81:3f:02:00:9b:f7:e2:6d: 32:c7:ec:06:97:89:ec:b6:3b:66:4e:71:c3:b6:0a: 1a:c9:98:2d:af:cf:91:db:39:67:5b:31:fa:bc:1b: ef:75:6a:d8:34:dd:0e:ac:53:ec:57:b5:60:70:61: 6d:f8:0b:9c:49:dd:50:ed:ee:84:8e:29:eb:06:0d: f0:7c:8c:a2:73:21:de:c4:aa:d1:1b:61:ee:12:69: 83:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:55:31:32:0D:5B:42:13:48:D2:97:C9:44:AE:3D:30:BF:93:E1:C2 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1FUxMg1bQhNI0pfJRK49ML-T4cI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8ab0::/44 2a0c:9a40:9900::/40 Signature Algorithm: sha256WithRSAEncryption ce:cf:7e:78:91:3b:74:71:35:05:c9:d5:e5:91:37:ba:a0:5c: 92:d8:28:58:62:a5:d8:65:66:e4:fe:b4:3b:e7:61:d1:d5:1f: 10:7b:d8:30:91:7e:31:e2:3f:cb:16:e1:ca:30:58:36:5c:14: a3:82:40:5d:99:71:fc:a5:d8:bb:94:ac:5a:a3:07:70:b3:8e: 94:88:56:90:7e:ef:66:d3:b9:70:26:04:bc:c9:cb:81:7b:5a: 8c:52:24:38:b8:66:59:21:00:27:af:91:60:e4:e0:77:3f:32: 0e:29:d6:11:ae:b2:9e:d3:97:4e:e1:76:a4:fc:03:94:b6:f9: f0:75:a3:6f:f8:ed:61:36:c8:6c:34:d7:01:5b:dc:38:e4:04: 5c:26:9f:79:57:bd:b9:0b:d9:9e:68:5b:4a:65:c3:0e:28:9d: c1:92:d0:1e:a8:1a:3c:88:cd:f2:c1:ee:ef:6e:46:a4:e1:d4: c5:50:53:66:a5:bf:02:d0:87:29:80:3d:2b:91:d1:14:af:2a: 6f:dd:37:9d:a2:79:34:1f:10:9c:da:80:50:39:5d:c1:0e:69: c4:a0:89:0b:e7:9a:9b:f0:58:f5:dd:60:58:bf:76:9b:36:54: 20:0d:96:f4:75:44:31:e2:9a:b9:86:5e:8a:34:24:74:ac:36: 5f:3c:71:1e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt+pt+SURalj4xTKz+/R681MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDU1MzEzMjBkNWI0MjEzNDhkMjk3Yzk0NGFlM2QzMGJmOTNlMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBoVkOB0ct4kpxW5BtrVMjX9DNiM Fbkii9AXScHviq0fGSx+3vlwKkPNDRGPR1A7/vDpHWeeVPLv5tEIRnEibiaUOpjH +43Pk00x4WDYZHQUmfzVYm3rgnJVyfDreID5U+QQYiMHmsmVG0hB6dxA+rRp8YeW SYVwiDGmX/e3z+tzHQJm4QGbI2BZc12+IpEoMdKEC1wRo0JCOXnJPSG5FFB0Sxs1 ws/HoheYgT8CAJv34m0yx+wGl4nstjtmTnHDtgoayZgtr8+R2zlnWzH6vBvvdWrY NN0OrFPsV7VgcGFt+AucSd1Q7e6EjinrBg3wfIyicyHexKrRG2HuEmmDBwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFNRVMTINW0ITSNKXyUSuPTC/k+HCMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMUZVeE1nMWJRaE5JMHBmSlJLNDlNTC1UNGNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKgyaQIqw AwYAKgyaQJkwDQYJKoZIhvcNAQELBQADggEBAM7PfniRO3RxNQXJ1eWRN7qgXJLY KFhipdhlZuT+tDvnYdHVHxB72DCRfjHiP8sW4cowWDZcFKOCQF2Zcfyl2LuUrFqj B3CzjpSIVpB+72bTuXAmBLzJy4F7WoxSJDi4ZlkhACevkWDk4Hc/Mg4p1hGusp7T l07hdqT8A5S2+fB1o2/47WE2yGw01wFb3DjkBFwmn3lXvbkL2Z5oW0plww4oncGS 0B6oGjyIzfLB7u9uRqTh1MVQU2alvwLQhymAPSuR0RSvKm/dN52ieTQfEJzagFA5 XcEOacSgiQvnmpvwWPXdYFi/dps2VCANlvR1RDHimrmGXoo0JHSsNl88cR4= -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:39 2026 by rpki-client