This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/11UHbWWyzf12DKqEVtlPbvmvLDo.roa File: 11UHbWWyzf12DKqEVtlPbvmvLDo.roa (raw, json) Hash identifier: Dg6T6ROSIHh46iUOhkgkZyjyj5P7h4/p+TTyu04jv1k= Subject key identifier: D7:55:07:6D:65:B2:CD:FD:76:0C:AA:84:56:D9:4F:6E:F9:AF:2C:3A Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63 Certificate serial: 019B77595562BF0FC4D233E74D5724891BDD Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/11UHbWWyzf12DKqEVtlPbvmvLDo.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 217.68.224.0/20 maxlen: 20 2a01:9320::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:55:62:bf:0f:c4:d2:33:e7:4d:57:24:89:1b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d755076d65b2cdfd760caa8456d94f6ef9af2c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:20:68:0b:2f:a6:87:a4:ea:50:87:86:7c: 13:a7:5e:32:3e:62:ca:31:6e:5a:45:a7:ac:bb:00: 9b:c9:54:98:8f:10:31:b1:39:dd:7a:7b:55:46:ce: 24:5b:9f:99:c2:7f:8e:70:6d:5a:96:37:8c:a8:02: b0:b5:45:6f:13:86:0d:a6:c2:87:d6:cb:aa:0b:af: 48:94:fc:59:f3:59:e6:c9:f8:96:5d:66:c1:a0:53: bf:b6:94:e9:c9:b5:e7:70:5e:14:33:30:77:db:95: 95:80:20:f0:c2:2b:10:f2:c9:89:3e:97:ca:91:51: 25:42:ba:1d:fa:f5:dc:28:f1:15:e1:bc:e7:11:8e: 4a:02:da:15:36:53:34:ce:2e:38:62:47:68:d1:cf: fc:57:bc:38:1b:67:8b:2c:3e:2d:00:70:55:90:ce: c7:db:ea:2c:68:ab:a4:34:df:37:28:cd:ee:69:ae: 6e:81:ee:ea:2d:48:b8:7f:5b:31:ce:bc:53:60:0e: 92:ae:44:ee:d6:f2:2f:99:f9:23:ad:3e:6e:a1:b8: 61:11:bd:cb:2c:53:4f:2c:e4:1f:db:7f:d0:39:ca: b7:dd:29:8d:43:93:d3:5f:83:23:ef:95:ef:f1:0f: 9c:30:be:70:78:02:dd:87:cb:6e:30:fc:a5:a0:41: c5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:55:07:6D:65:B2:CD:FD:76:0C:AA:84:56:D9:4F:6E:F9:AF:2C:3A X509v3 Authority Key Identifier: keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/11UHbWWyzf12DKqEVtlPbvmvLDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.68.224.0/20 IPv6: 2a01:9320::/32 Signature Algorithm: sha256WithRSAEncryption 03:78:d5:8b:24:aa:b7:47:01:82:ca:ab:7a:0a:4d:6b:c4:b3: 42:55:00:93:09:42:91:10:06:e1:21:d0:19:cb:df:22:cf:05: 79:d0:d4:62:d9:74:0c:51:14:63:0a:06:f8:76:4d:66:8e:4c: 9b:1c:c9:53:af:5d:af:31:ed:c0:8e:2b:d1:40:89:04:56:a8: 5f:3d:06:66:6a:d3:cc:ce:a4:f0:fd:87:25:7b:b3:40:c0:04: 5d:35:b9:77:1d:fe:f1:31:a0:65:cb:47:70:05:60:b9:f4:8d: b6:19:f3:68:73:39:3e:f8:85:56:94:80:95:08:fa:ec:df:95: 9c:28:a6:ce:34:75:05:9f:c6:ad:77:0e:20:b9:32:7d:51:cc: 7b:88:e3:24:cb:b6:3d:c6:46:8c:9b:9f:7b:aa:f2:d7:25:66: 5e:e1:37:4f:3d:07:8b:8e:ec:35:00:c4:2f:fb:80:f6:b8:33: df:f2:2a:03:db:60:76:f4:aa:8e:d3:f6:d8:41:76:a0:14:ad: f1:4c:92:6c:0d:6e:af:70:01:8a:9b:0d:ec:4a:d8:99:3f:46: 50:9d:49:97:b5:d3:10:31:5e:64:e2:a8:57:9a:f9:20:23:2e: 9e:51:c9:c1:62:bf:9d:bd:7b:03:07:78:86:bc:ea:bc:38:60: 11:e9:da:49 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WVVivw/E0jPnTVckiRvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzI1YTQxZjFjNTIyOGUxMGVhOTQxY2U3MDc4ZjQzY2Q5 MDliNjMwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzU1MDc2ZDY1YjJjZGZkNzYwY2FhODQ1NmQ5NGY2ZWY5YWYyYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1kgaAsvpoek6lCHhnwTp14yPmLK MW5aRaesuwCbyVSYjxAxsTndentVRs4kW5+Zwn+OcG1aljeMqAKwtUVvE4YNpsKH 1suqC69IlPxZ81nmyfiWXWbBoFO/tpTpybXncF4UMzB325WVgCDwwisQ8smJPpfK kVElQrod+vXcKPEV4bznEY5KAtoVNlM0zi44Ykdo0c/8V7w4G2eLLD4tAHBVkM7H 2+osaKukNN83KM3uaa5uge7qLUi4f1sxzrxTYA6SrkTu1vIvmfkjrT5uobhhEb3L LFNPLOQf23/QOcq33SmNQ5PTX4Mj75Xv8Q+cML5weALdh8tuMPyloEHF9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNdVB21lss39dgyqhFbZT275ryw6MB8GA1UdIwQY MBaAFGfCWkHxxSKOEOqUHOcHj0PNkJtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYt ZmM5MTBjMGIxOWFlLzEvMTFVSGJXV3l6ZjEyREtxRVZ0bFBidm12TERvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYtZmM5MTBjMGIxOWFl LzEvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2UTgMA0E AgACMAcDBQAqAZMgMA0GCSqGSIb3DQEBCwUAA4IBAQADeNWLJKq3RwGCyqt6Ck1r xLNCVQCTCUKREAbhIdAZy98izwV50NRi2XQMURRjCgb4dk1mjkybHMlTr12vMe3A jivRQIkEVqhfPQZmatPMzqTw/Ycle7NAwARdNbl3Hf7xMaBly0dwBWC59I22GfNo czk++IVWlICVCPrs35WcKKbONHUFn8atdw4guTJ9Ucx7iOMky7Y9xkaMm597qvLX JWZe4TdPPQeLjuw1AMQv+4D2uDPf8ioD22B29KqO0/bYQXagFK3xTJJsDW6vcAGK mw3sStiZP0ZQnUmXtdMQMV5k4qhXmvkgIy6eUcnBYr+dvXsDB3iGvOq8OGAR6dpJ -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:16 2026 by rpki-client