This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/1YDQiRpIkl8dKkn91J4BZcjxLG8.roa File: 1YDQiRpIkl8dKkn91J4BZcjxLG8.roa (raw, json) Hash identifier: swQzBQz8qYH+Ns05cWnj9m77XbPZt1CRiB4AvNOU1+4= Subject key identifier: D5:80:D0:89:1A:48:92:5F:1D:2A:49:FD:D4:9E:01:65:C8:F1:2C:6F Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Certificate serial: 019B7CECCC4E947D5561333D49F67444513F Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/1YDQiRpIkl8dKkn91J4BZcjxLG8.roa Signing time: Fri 02 Jan 2026 04:17:32 +0000 ROA not before: Fri 02 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29663 IP address blocks: 2001:67c:2ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:cc:4e:94:7d:55:61:33:3d:49:f6:74:44:51:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Validity Not Before: Jan 2 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d580d0891a48925f1d2a49fdd49e0165c8f12c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:15:24:84:45:86:25:ea:55:a5:9b:2c:14:ad: e3:54:a4:80:ac:9f:62:7d:c3:79:94:96:61:85:f5: f1:2e:26:1b:f5:98:8a:36:12:41:1f:27:91:0d:79: 29:a6:56:ee:05:03:18:03:30:8d:08:f9:ec:00:3e: e4:33:34:6d:0c:48:d2:71:d9:6d:13:97:66:34:5b: 60:e1:2f:c0:ac:1e:4d:7f:83:5f:e6:90:c4:03:98: 43:aa:08:a8:c7:e6:38:49:a2:c8:19:8b:04:28:ca: 8c:68:3e:b3:35:00:73:08:0c:05:c4:aa:09:8f:01: 69:7c:07:eb:8a:51:f0:20:8d:31:67:96:f6:a3:53: b4:8e:2b:68:ba:79:bb:87:e1:7f:7e:c7:6e:11:77: 10:2f:3e:11:33:95:fc:92:f0:54:c3:5f:0a:f7:dc: de:e9:a9:e3:ab:a3:f0:7b:30:94:79:e5:fa:9b:76: 6e:86:2f:f1:66:b2:89:59:32:14:f5:fc:dc:e4:33: 43:4e:d8:27:85:cb:7d:3f:4f:c9:63:ae:7b:3b:b3: 04:bb:3b:a5:9a:c6:3d:24:b8:8c:8a:17:35:ad:b0: 4a:18:b6:26:bd:fa:3e:5b:4c:af:8a:fe:62:81:f5: b2:40:46:54:2f:8f:46:a9:a3:45:c3:a8:a3:c3:0b: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:80:D0:89:1A:48:92:5F:1D:2A:49:FD:D4:9E:01:65:C8:F1:2C:6F X509v3 Authority Key Identifier: keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/1YDQiRpIkl8dKkn91J4BZcjxLG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2ac0::/48 Signature Algorithm: sha256WithRSAEncryption b1:2e:48:e3:41:cd:fe:78:02:08:9f:02:38:24:36:ad:81:67: 60:d5:25:ee:87:cd:0e:03:bd:90:07:d3:13:18:63:00:67:d6: 2d:60:8e:23:87:c1:f0:8d:63:2c:8a:5c:ab:53:9a:04:09:27: d7:68:3d:c6:c7:73:75:cd:1d:40:91:3d:78:59:38:9e:bf:1d: 9b:d6:f5:86:b6:49:86:8c:72:88:58:8a:2b:20:94:4b:8b:ec: 96:c2:9c:72:a0:15:86:2d:9b:d3:58:80:90:c5:71:3b:fb:87: f0:98:c9:ba:6f:fa:52:1f:92:4f:29:fe:85:13:e1:31:ff:66: 43:dd:bb:4b:a1:cc:20:61:57:06:91:c4:e0:b7:d8:7c:56:49: ec:1a:de:f8:06:29:b2:e1:07:9b:46:71:1c:d1:22:ff:83:e6: 98:3c:c8:79:04:cc:f6:da:6c:bd:1f:a7:8c:df:62:f6:4d:7c: 55:32:83:03:f2:78:a7:47:95:49:9a:a8:84:c3:e5:e4:a5:ed: 4e:c8:f4:60:5c:34:d6:b4:5d:ee:1c:a8:7f:e2:6d:3f:64:67: c9:8c:42:a6:4c:6f:9f:85:89:d3:6c:c2:e3:b1:ab:3c:f7:09: 14:3f:05:89:78:32:cd:fb:88:ea:f3:63:b6:f9:02:8e:bd:49: fd:e9:55:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87MxOlH1VYTM9SfZ0RFE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODljYjg4OWY5OTIxMmU4YmY1M2QwNmU0NWQ4N2FiYjkx Njk1MDYwHhcNMjYwMTAyMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTgwZDA4OTFhNDg5MjVmMWQyYTQ5ZmRkNDllMDE2NWM4ZjEyYzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhUkhEWGJepVpZssFK3jVKSArJ9i fcN5lJZhhfXxLiYb9ZiKNhJBHyeRDXkpplbuBQMYAzCNCPnsAD7kMzRtDEjScdlt E5dmNFtg4S/ArB5Nf4Nf5pDEA5hDqgiox+Y4SaLIGYsEKMqMaD6zNQBzCAwFxKoJ jwFpfAfrilHwII0xZ5b2o1O0jitounm7h+F/fsduEXcQLz4RM5X8kvBUw18K99ze 6anjq6PwezCUeeX6m3Zuhi/xZrKJWTIU9fzc5DNDTtgnhct9P0/JY657O7MEuzul msY9JLiMihc1rbBKGLYmvfo+W0yviv5igfWyQEZUL49GqaNFw6ijwwvfFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNWA0IkaSJJfHSpJ/dSeAWXI8SxvMB8GA1UdIwQY MBaAFM+Jy4ifmSEui/U9BuRdh6u5FpUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjct ZDlhNDBjNGQzMjkxLzEvMVlEUWlScElrbDhkS2tuOTFKNEJaY2p4TEc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjctZDlhNDBjNGQzMjkx LzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCrA MA0GCSqGSIb3DQEBCwUAA4IBAQCxLkjjQc3+eAIInwI4JDatgWdg1SXuh80OA72Q B9MTGGMAZ9YtYI4jh8HwjWMsilyrU5oECSfXaD3Gx3N1zR1AkT14WTievx2b1vWG tkmGjHKIWIorIJRLi+yWwpxyoBWGLZvTWICQxXE7+4fwmMm6b/pSH5JPKf6FE+Ex /2ZD3btLocwgYVcGkcTgt9h8VknsGt74Bimy4QebRnEc0SL/g+aYPMh5BMz22my9 H6eM32L2TXxVMoMD8ninR5VJmqiEw+Xkpe1OyPRgXDTWtF3uHKh/4m0/ZGfJjEKm TG+fhYnTbMLjsas89wkUPwWJeDLN+4jq82O2+QKOvUn96VVC -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:16 2026 by rpki-client