This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M11YDFyrrYAd20Im6jGVu-ZOEvs.roa File: M11YDFyrrYAd20Im6jGVu-ZOEvs.roa (raw, json) Hash identifier: nVTujTyk3hQyLUDNlAZDSu6fdniPAQJJNIW4jwxsnao= Subject key identifier: 33:5D:58:0C:5C:AB:AD:80:1D:DB:42:26:EA:31:95:BB:E6:4E:12:FB Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA75CEC753F380A7A826CC2FFB6B967 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M11YDFyrrYAd20Im6jGVu-ZOEvs.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209517 IP address blocks: 2a0d:6f80:1f71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5c:ec:75:3f:38:0a:7a:82:6c:c2:ff:b6:b9:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=335d580c5cabad801ddb4226ea3195bbe64e12fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f0:88:fc:80:16:12:92:1c:ce:9c:7f:d6:0f: 83:f7:dd:d0:77:2e:f0:ce:91:70:75:7a:e0:0b:c5: 28:74:25:62:53:8e:d3:af:e8:87:8d:be:aa:1d:e3: 65:18:c6:6d:77:54:59:ed:5e:b8:30:fe:ef:95:2a: 22:09:a4:01:b2:06:c4:75:88:49:7a:fc:54:8c:38: 56:40:4d:0d:61:f8:6b:ba:1e:14:e9:fb:aa:84:80: a7:cf:0a:2c:3d:29:94:30:ae:3c:ff:fa:e6:0e:08: 22:93:bf:d1:cc:b1:37:2f:f4:57:60:f9:2f:34:93: 08:dd:4a:f0:7c:f6:52:2c:53:fe:9b:bd:41:c4:bc: 73:9b:37:53:d9:e9:2f:97:dc:ee:ba:7d:f1:f4:5e: 94:d9:85:1b:84:08:34:81:26:98:df:62:9f:48:e3: 7a:56:7d:a9:58:95:32:fd:01:7b:e7:10:ed:81:9d: 0d:74:dc:92:a0:ab:6d:d3:55:c4:80:34:29:6d:7a: 8b:e3:9a:58:90:f7:45:a1:42:6c:19:46:82:8f:5b: 58:4b:26:18:53:a4:e3:e2:d3:19:e2:ee:ba:55:2b: bd:01:74:a0:74:5e:50:ba:97:e7:97:3c:63:ca:29: 24:f4:46:c9:5f:0c:d5:be:6f:52:86:c4:0d:73:73: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5D:58:0C:5C:AB:AD:80:1D:DB:42:26:EA:31:95:BB:E6:4E:12:FB X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M11YDFyrrYAd20Im6jGVu-ZOEvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6f80:1f71::/48 Signature Algorithm: sha256WithRSAEncryption ac:b8:f6:c1:59:32:77:a7:c6:01:ba:d0:97:a4:aa:c5:24:9f: fc:5e:5e:4f:46:e8:e0:4c:a1:8d:38:e9:15:1b:c6:ef:e5:54: 92:2b:ae:4b:99:90:1a:fe:9b:36:85:35:c4:78:dd:00:de:2b: 6f:d2:6b:2e:fe:5f:46:a4:a3:8c:de:f4:54:e7:f3:13:b0:0c: 3a:10:3a:03:21:16:32:ad:18:a2:77:1a:06:41:8d:90:26:b2: 9d:80:27:c7:ad:0f:d9:cf:bc:0c:1b:e6:a0:c7:42:6a:01:e2: 96:91:2b:c0:f6:90:64:48:60:1a:1a:22:dc:7d:35:a3:bc:1f: 62:91:64:fc:c7:fa:31:d6:a7:5b:4b:c9:a2:ff:ae:49:ac:7e: 19:ef:d3:dd:a2:96:8b:52:d3:a0:81:b3:41:4d:bb:98:0d:68: 4a:b9:72:79:d0:1e:12:61:7e:7b:2c:c1:45:10:c7:00:37:be: 67:bf:17:5b:da:0d:6e:48:1c:6f:8d:57:ae:98:ac:55:4b:d0: a0:4d:da:57:a1:64:2d:45:c0:1e:c9:20:96:6d:62:07:ff:54: 9e:25:44:ea:58:0f:08:9c:2b:fe:9b:62:3d:01:5b:d2:72:98: 7d:dd:3b:81:49:60:17:e3:ad:82:f3:8f:ba:3f:74:68:89:be: b6:f7:c6:04 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1zsdT84CnqCbML/trlnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzVkNTgwYzVjYWJhZDgwMWRkYjQyMjZlYTMxOTViYmU2NGUxMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPCI/IAWEpIczpx/1g+D993Qdy7w zpFwdXrgC8UodCViU47Tr+iHjb6qHeNlGMZtd1RZ7V64MP7vlSoiCaQBsgbEdYhJ evxUjDhWQE0NYfhruh4U6fuqhICnzwosPSmUMK48//rmDggik7/RzLE3L/RXYPkv NJMI3UrwfPZSLFP+m71BxLxzmzdT2ekvl9zuun3x9F6U2YUbhAg0gSaY32KfSON6 Vn2pWJUy/QF75xDtgZ0NdNySoKtt01XEgDQpbXqL45pYkPdFoUJsGUaCj1tYSyYY U6Tj4tMZ4u66VSu9AXSgdF5Qupfnlzxjyikk9EbJXwzVvm9ShsQNc3O4IwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDNdWAxcq62AHdtCJuoxlbvmThL7MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvTTExWURGeXJyWUFkMjBJbTZqR1Z1LVpPRXZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgB9x MA0GCSqGSIb3DQEBCwUAA4IBAQCsuPbBWTJ3p8YButCXpKrFJJ/8Xl5PRujgTKGN OOkVG8bv5VSSK65LmZAa/ps2hTXEeN0A3itv0msu/l9GpKOM3vRU5/MTsAw6EDoD IRYyrRiidxoGQY2QJrKdgCfHrQ/Zz7wMG+agx0JqAeKWkSvA9pBkSGAaGiLcfTWj vB9ikWT8x/ox1qdbS8mi/65JrH4Z79PdopaLUtOggbNBTbuYDWhKuXJ50B4SYX57 LMFFEMcAN75nvxdb2g1uSBxvjVeumKxVS9CgTdpXoWQtRcAeySCWbWIH/1SeJUTq WA8InCv+m2I9AVvScph93TuBSWAX462C84+6P3Roib6298YE -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:21 2026 by rpki-client