This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/8d1TGVzn_DMdZ6n8RJ9ANKIdKwo.roa File: 8d1TGVzn_DMdZ6n8RJ9ANKIdKwo.roa (raw, json) Hash identifier: XGi2dMcjiow8SPFk+dkz5coR9Tc9b4OF22dtNkjQ4js= Subject key identifier: F1:DD:53:19:5C:E7:FC:33:1D:67:A9:FC:44:9F:40:34:A2:1D:2B:0A Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84CE2AE55752E07487A35531F142CF Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/8d1TGVzn_DMdZ6n8RJ9ANKIdKwo.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212027 IP address blocks: 2a12:d3c0::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ce:2a:e5:57:52:e0:74:87:a3:55:31:f1:42:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1dd53195ce7fc331d67a9fc449f4034a21d2b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:4f:cb:eb:ed:20:25:5a:da:e4:b3:52:cb: 64:ee:32:39:f1:e5:6e:4a:28:17:e6:e9:fa:94:99: 59:9f:ed:53:e7:30:70:72:6d:cd:33:12:19:64:86: 30:a6:96:cb:53:2b:93:6d:2a:9f:90:db:ec:3d:c0: d3:58:b1:4f:23:06:99:6c:32:d8:72:d6:50:a8:e4: fe:dd:5c:61:e9:88:b0:d5:a2:9d:30:fd:cb:e5:88: d5:99:4c:67:96:e2:ba:58:57:46:61:93:21:8f:25: 2d:b9:65:fc:55:7f:ea:cc:cc:4a:f5:bc:76:83:a0: f6:5f:8c:1f:57:21:ab:9b:3f:7d:91:18:a6:6b:2d: f0:ff:04:2f:f5:be:94:f2:d4:59:49:69:27:e7:31: c2:f8:c7:a9:73:7e:64:c8:a0:d9:39:7c:f6:e4:98: ee:72:ba:87:de:fe:6a:0b:fd:0b:79:4c:ca:3f:d7: fe:2b:aa:38:4b:2d:a0:e5:41:06:4d:99:7e:55:8c: 0f:bc:37:f8:ac:9d:13:df:8b:d2:27:7b:be:6a:d8: 41:b1:b0:9f:3f:67:ab:78:fb:bc:c1:3a:5e:5e:40: ab:e0:38:2a:47:7a:dc:3f:24:84:6e:20:55:45:4c: 34:44:c8:50:ef:02:a6:05:8f:3e:d3:01:a0:7c:fc: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DD:53:19:5C:E7:FC:33:1D:67:A9:FC:44:9F:40:34:A2:1D:2B:0A X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/8d1TGVzn_DMdZ6n8RJ9ANKIdKwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:d3c0::/29 Signature Algorithm: sha256WithRSAEncryption aa:77:94:c1:b5:ab:7f:a8:f9:c2:4f:e3:96:2e:16:9f:db:ff: 7d:56:ed:dd:fb:6a:0c:81:fb:2b:0d:51:c7:23:20:81:f9:ad: 12:2b:19:fa:18:d9:c2:a6:c7:58:9b:75:30:c3:dd:d2:6e:a9: 10:7f:83:5a:ea:dc:29:57:f8:57:55:4d:5c:74:eb:55:3a:cf: 57:49:f5:8b:62:77:f1:7a:a0:ca:89:fc:a4:df:d8:48:b9:ce: e0:b0:b8:dc:d7:44:76:8b:cb:0a:c0:b5:94:ab:00:6a:d2:fd: 19:5f:8d:f5:95:88:2f:dd:d9:c5:53:9e:e3:54:21:78:1d:3b: 6a:f3:69:72:0e:de:58:8c:fd:08:54:73:26:8a:90:76:f4:d4: 5d:07:e6:2a:9f:c2:ea:40:d6:93:3a:56:6d:6e:59:66:71:ee: c0:9a:00:93:0d:ae:79:a5:53:e4:ad:bf:24:90:4c:ed:db:34: 89:3c:63:b5:7e:27:8e:b4:cb:e9:17:5c:67:ba:8b:7c:ca:34: c9:36:69:2f:7b:7f:46:dc:14:da:66:b6:bb:20:06:25:d9:b5: 47:44:87:09:08:57:87:5d:f0:87:7b:28:b4:d3:00:e3:d2:65: 67:a2:9b:b9:c0:73:e3:ba:4e:e5:84:1e:ba:7f:a9:4c:bd:46: 4b:15:1c:9b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hM4q5VdS4HSHo1Ux8ULPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWRkNTMxOTVjZTdmYzMzMWQ2N2E5ZmM0NDlmNDAzNGEyMWQyYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gxPy+vtICVa2uSzUstk7jI58eVu SigX5un6lJlZn+1T5zBwcm3NMxIZZIYwppbLUyuTbSqfkNvsPcDTWLFPIwaZbDLY ctZQqOT+3Vxh6Yiw1aKdMP3L5YjVmUxnluK6WFdGYZMhjyUtuWX8VX/qzMxK9bx2 g6D2X4wfVyGrmz99kRimay3w/wQv9b6U8tRZSWkn5zHC+Mepc35kyKDZOXz25Jju crqH3v5qC/0LeUzKP9f+K6o4Sy2g5UEGTZl+VYwPvDf4rJ0T34vSJ3u+athBsbCf P2erePu8wTpeXkCr4DgqR3rcPySEbiBVRUw0RMhQ7wKmBY8+0wGgfPy9nQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPHdUxlc5/wzHWep/ESfQDSiHSsKMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvOGQxVEdWem5fRE1kWjZuOFJKOUFOS0lkS3dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLTwDAN BgkqhkiG9w0BAQsFAAOCAQEAqneUwbWrf6j5wk/jli4Wn9v/fVbt3ftqDIH7Kw1R xyMggfmtEisZ+hjZwqbHWJt1MMPd0m6pEH+DWurcKVf4V1VNXHTrVTrPV0n1i2J3 8Xqgyon8pN/YSLnO4LC43NdEdovLCsC1lKsAatL9GV+N9ZWIL93ZxVOe41QheB07 avNpcg7eWIz9CFRzJoqQdvTUXQfmKp/C6kDWkzpWbW5ZZnHuwJoAkw2ueaVT5K2/ JJBM7ds0iTxjtX4njrTL6RdcZ7qLfMo0yTZpL3t/RtwU2ma2uyAGJdm1R0SHCQhX h13wh3sotNMA49JlZ6KbucBz47pO5YQeun+pTL1GSxUcmw== -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:26 2026 by rpki-client