This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/1RkuJiMIA6c-YKXkOiXgVUr3tk0.roa File: 1RkuJiMIA6c-YKXkOiXgVUr3tk0.roa (raw, json) Hash identifier: VMbTIDUnS0rJprZQrwM8fOUQBhB/Ygv1jHJEt/ApBqE= Subject key identifier: D5:19:2E:26:23:08:03:A7:3E:60:A5:E4:3A:25:E0:55:4A:F7:B6:4D Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019BD1027ADC45E5EBAD28F022473400AA00 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/1RkuJiMIA6c-YKXkOiXgVUr3tk0.roa Signing time: Sun 18 Jan 2026 12:09:19 +0000 ROA not before: Sun 18 Jan 2026 12:09:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211138 IP address blocks: 2a05:4140:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:02:7a:dc:45:e5:eb:ad:28:f0:22:47:34:00:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 18 12:09:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5192e26230803a73e60a5e43a25e0554af7b64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:20:76:12:c7:2d:b9:0c:a0:e4:3f:14:38: 2a:9c:af:58:c1:f9:b3:da:08:0e:00:0b:e6:ae:15: cb:62:4a:d6:a2:6a:9d:f7:2f:c7:2c:d5:af:e9:83: 6d:08:d5:a4:7a:db:ae:fc:24:81:e5:32:5d:8d:30: ea:c6:d0:6a:84:2f:e0:44:1f:12:af:d5:d9:5f:25: 24:9f:fa:19:4f:db:73:a4:0c:92:ac:1e:fc:7c:55: 44:02:07:b6:3b:58:8c:76:39:e4:ba:b1:56:f4:4d: d8:d7:b7:9d:8a:be:42:d8:37:bb:c7:a2:86:0b:c6: 8a:6e:5d:0f:b6:14:82:57:cb:cc:c5:af:41:94:60: 23:c6:88:76:12:79:85:f4:04:19:eb:d2:4b:65:f9: bf:32:81:38:d0:9d:5a:19:69:ff:09:34:ec:36:1c: f9:6a:bc:16:f2:3c:a9:37:fd:81:96:c2:1e:22:f9: 36:46:73:f1:d2:22:a4:99:75:d4:bd:52:de:18:ed: c8:1b:29:26:9f:8e:32:dc:cf:1c:b3:68:dc:36:44: d6:78:78:20:19:bb:ec:ca:f9:4f:dc:24:9c:f1:48: 12:a8:0e:5a:29:d6:98:98:c7:45:a5:c4:35:6b:cc: c6:3c:2d:5b:31:23:ca:6e:f3:fd:c7:f0:1b:f8:6e: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:19:2E:26:23:08:03:A7:3E:60:A5:E4:3A:25:E0:55:4A:F7:B6:4D X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/1RkuJiMIA6c-YKXkOiXgVUr3tk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4140:500::/40 Signature Algorithm: sha256WithRSAEncryption 47:5f:c2:42:89:0e:c1:96:38:07:82:06:6c:86:34:9b:a2:6c: 2a:57:33:55:ae:96:86:4b:5c:4e:a4:9f:e8:82:39:3a:a2:db: d1:a7:08:92:59:58:b1:e7:35:cb:75:76:fa:b7:b0:8b:c6:25: 22:90:46:42:cf:a0:23:0c:56:80:63:05:61:ab:f0:a0:4a:4b: 74:7d:7b:80:b3:07:95:13:8f:ad:7a:f1:f3:94:3b:13:45:d6: d9:98:dc:45:cc:40:f5:34:b9:7d:89:31:16:bc:ca:0a:55:4b: 09:44:52:c0:8c:8d:9d:7b:4c:19:ec:73:ad:11:ee:d0:d4:6a: 6c:45:9e:e2:17:4e:c7:05:c3:1f:28:77:d7:8b:a1:59:5c:54: bf:48:a6:cf:8b:a0:b1:bf:27:ba:2c:2f:5c:46:d2:39:78:53: be:0c:1a:dd:b1:3e:da:28:a0:5b:c0:5d:af:72:b3:5a:51:cf: 4d:c5:5f:8f:0e:02:53:8e:2b:ce:a2:18:19:5e:19:80:91:bb: 85:e8:91:2f:0a:8a:8c:21:2c:48:bb:23:ef:1e:57:00:4b:16: dd:dc:fd:b8:a4:96:b3:04:8f:ca:ea:55:de:32:da:6e:76:20: 5d:50:a1:b4:99:42:8f:da:b6:ba:48:5e:c5:73:a7:b7:e5:d4: 58:1a:0b:7a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZvRAnrcReXrrSjwIkc0AKoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTE4MTIwOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTE5MmUyNjIzMDgwM2E3M2U2MGE1ZTQzYTI1ZTA1NTRhZjdiNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutkgdhLHLbkMoOQ/FDgqnK9Ywfmz 2ggOAAvmrhXLYkrWomqd9y/HLNWv6YNtCNWketuu/CSB5TJdjTDqxtBqhC/gRB8S r9XZXyUkn/oZT9tzpAySrB78fFVEAge2O1iMdjnkurFW9E3Y17edir5C2De7x6KG C8aKbl0PthSCV8vMxa9BlGAjxoh2EnmF9AQZ69JLZfm/MoE40J1aGWn/CTTsNhz5 arwW8jypN/2BlsIeIvk2RnPx0iKkmXXUvVLeGO3IGykmn44y3M8cs2jcNkTWeHgg GbvsyvlP3CSc8UgSqA5aKdaYmMdFpcQ1a8zGPC1bMSPKbvP9x/Ab+G7F3wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNUZLiYjCAOnPmCl5Dol4FVK97ZNMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvMVJrdUppTUlBNmMtWUtYa09pWGdWVXIzdGswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgVBQAUw DQYJKoZIhvcNAQELBQADggEBAEdfwkKJDsGWOAeCBmyGNJuibCpXM1WuloZLXE6k n+iCOTqi29GnCJJZWLHnNct1dvq3sIvGJSKQRkLPoCMMVoBjBWGr8KBKS3R9e4Cz B5UTj6168fOUOxNF1tmY3EXMQPU0uX2JMRa8ygpVSwlEUsCMjZ17TBnsc60R7tDU amxFnuIXTscFwx8od9eLoVlcVL9Ips+LoLG/J7osL1xG0jl4U74MGt2xPtoooFvA Xa9ys1pRz03FX48OAlOOK86iGBleGYCRu4XokS8KiowhLEi7I+8eVwBLFt3c/bik lrMEj8rqVd4y2m52IF1QobSZQo/atrpIXsVzp7fl1FgaC3o= -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:59 2026 by rpki-client