This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1sCBBC80-b387uFvyo8gem0qgBM.roa File: 1sCBBC80-b387uFvyo8gem0qgBM.roa (raw, json) Hash identifier: EMdTPavEe7DHxlSw4p3yZh2opqJKAxl5uGVTTYPAb48= Subject key identifier: D6:C0:81:04:2F:34:F9:BD:FC:EE:E1:6F:CA:8F:20:7A:6D:2A:80:13 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13E6D6CB8E7B3F76927C5064E55AAE Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1sCBBC80-b387uFvyo8gem0qgBM.roa Signing time: Fri 02 Jan 2026 14:19:29 +0000 ROA not before: Fri 02 Jan 2026 14:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34590 IP address blocks: 2a02:2698:1c00::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:e6:d6:cb:8e:7b:3f:76:92:7c:50:64:e5:5a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6c081042f34f9bdfceee16fca8f207a6d2a8013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:f4:c7:43:23:e2:05:c4:1f:45:dd:53:3f: 5a:bc:cd:49:e6:8c:22:b3:19:1d:83:76:a6:1f:a8: 90:9b:7a:fc:15:6f:b3:7d:3e:fb:9b:e7:12:1d:89: 97:53:5e:e3:b8:c0:4b:8d:6b:e2:7c:0a:ac:ce:dd: db:3e:c2:76:76:b1:f0:8c:4c:2c:e0:56:f8:ec:e2: d3:6d:b9:87:f0:dc:49:2f:8f:00:41:e3:9c:1e:d4: 78:25:cf:fb:96:fc:8d:52:55:73:db:b5:f0:5f:05: cb:4b:fe:74:c3:c0:6d:7d:88:68:23:31:cf:5b:de: e4:13:a3:a7:84:fd:89:5c:ca:98:77:de:fd:a3:43: 8f:ec:f8:62:44:c3:26:1d:bd:55:0a:c6:33:3b:1f: b4:47:09:f0:b2:93:32:ac:10:a0:77:b4:74:8c:d2: 6f:e4:61:78:9f:53:49:10:ce:dc:6a:ce:e0:61:e5: 9f:f1:c2:e3:64:94:d9:4c:a4:dd:92:68:9e:48:97: 7f:1b:f3:5c:09:c8:bb:f5:c2:86:b2:ef:49:83:49: 31:95:08:08:43:74:2a:73:49:d8:64:2e:9c:2c:15: a9:3b:ab:04:16:39:c4:09:60:0f:f0:6c:74:cd:9c: a4:9d:4e:bb:d9:07:1d:d6:e8:cd:6b:59:07:2d:e0: 5f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C0:81:04:2F:34:F9:BD:FC:EE:E1:6F:CA:8F:20:7A:6D:2A:80:13 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1sCBBC80-b387uFvyo8gem0qgBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:1c00::/38 Signature Algorithm: sha256WithRSAEncryption b2:f1:da:f1:d0:87:f9:74:a0:de:61:24:da:78:57:70:79:45: 25:eb:11:6a:47:4e:d6:a3:8e:55:99:38:1f:be:d8:2d:bf:dd: d6:ea:37:da:0f:d3:81:2e:b8:30:45:a3:96:d7:a2:ba:64:8d: 2d:9e:50:8c:16:0e:65:29:d6:5a:6e:88:36:44:ea:4e:82:3f: 0a:00:76:3a:1e:1a:e1:59:12:a8:dc:98:26:f1:62:24:83:34: 54:ce:64:7e:4e:92:ce:31:2f:ff:d8:99:3a:98:46:e9:78:2f: 38:9f:72:20:0c:9b:3e:3c:f4:52:9a:d4:52:29:b0:fa:f9:bf: ec:16:69:77:a7:76:c3:93:b3:65:94:2a:d2:82:d7:95:ad:4a: db:e8:a9:27:99:ce:97:25:53:86:43:86:15:e8:4f:28:a3:bb: 62:c2:e5:58:d3:3c:fe:e9:bb:03:a5:e3:50:95:14:4b:f8:2e: 5f:8b:b9:0c:78:7c:8c:a3:10:3d:f7:eb:1f:c1:c7:bb:3c:1e: 11:ed:18:1e:74:a2:10:9e:a3:e8:14:c7:f7:eb:d1:5c:45:98: 99:91:70:48:c4:66:8e:67:8f:fd:66:2d:4f:36:2c:27:54:bd: 14:b4:e1:94:72:a0:f5:97:09:fd:f5:8c:b8:bd:86:ec:9f:3b: 3d:89:5a:ca -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E+bWy457P3aSfFBk5VquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmMwODEwNDJmMzRmOWJkZmNlZWUxNmZjYThmMjA3YTZkMmE4MDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4f0x0Mj4gXEH0XdUz9avM1J5owi sxkdg3amH6iQm3r8FW+zfT77m+cSHYmXU17juMBLjWvifAqszt3bPsJ2drHwjEws 4Fb47OLTbbmH8NxJL48AQeOcHtR4Jc/7lvyNUlVz27XwXwXLS/50w8BtfYhoIzHP W97kE6OnhP2JXMqYd979o0OP7PhiRMMmHb1VCsYzOx+0RwnwspMyrBCgd7R0jNJv 5GF4n1NJEM7cas7gYeWf8cLjZJTZTKTdkmieSJd/G/NcCci79cKGsu9Jg0kxlQgI Q3Qqc0nYZC6cLBWpO6sEFjnECWAP8Gx0zZyknU672Qcd1ujNa1kHLeBfbwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNbAgQQvNPm9/O7hb8qPIHptKoATMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvMXNDQkJDODAtYjM4N3VGdnlvOGdlbTBxZ0JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmBww DQYJKoZIhvcNAQELBQADggEBALLx2vHQh/l0oN5hJNp4V3B5RSXrEWpHTtajjlWZ OB++2C2/3dbqN9oP04EuuDBFo5bXorpkjS2eUIwWDmUp1lpuiDZE6k6CPwoAdjoe GuFZEqjcmCbxYiSDNFTOZH5Oks4xL//YmTqYRul4LzifciAMmz489FKa1FIpsPr5 v+wWaXendsOTs2WUKtKC15WtStvoqSeZzpclU4ZDhhXoTyiju2LC5VjTPP7puwOl 41CVFEv4Ll+LuQx4fIyjED336x/Bx7s8HhHtGB50ohCeo+gUx/fr0VxFmJmRcEjE Zo5nj/1mLU82LCdUvRS04ZRyoPWXCf31jLi9huyfOz2JWso= -----END CERTIFICATE-----Generated at Thu Feb 5 06:00:20 2026 by rpki-client