This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/94VCH5-yUsBwicojbjgImHgRoJA.roa File: 94VCH5-yUsBwicojbjgImHgRoJA.roa (raw, json) Hash identifier: JkHlAtKE0WPUSQeAnVh91wdkspZbKJDK7LSBm6EyhHc= Subject key identifier: F7:85:42:1F:9F:B2:52:C0:70:89:CA:23:6E:38:08:98:78:11:A0:90 Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B79EC0CB8BF4F6213CCA4E5311021D28C Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/94VCH5-yUsBwicojbjgImHgRoJA.roa Signing time: Thu 01 Jan 2026 14:17:51 +0000 ROA not before: Thu 01 Jan 2026 14:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216072 IP address blocks: 2a05:4140:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:0c:b8:bf:4f:62:13:cc:a4:e5:31:10:21:d2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 1 14:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f785421f9fb252c07089ca236e3808987811a090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a6:c4:c3:f2:0d:48:de:de:b9:68:a1:bd:a9: c3:09:a6:9e:7b:16:36:cd:65:3e:31:87:7d:34:84: f1:a8:58:b2:72:a3:fb:96:bc:cb:3b:35:84:f7:00: 0c:39:10:d9:03:3f:ea:df:00:99:0a:bc:95:0e:f5: a7:a5:06:b2:f3:0c:7c:89:29:88:06:1c:cf:7a:ac: 17:bc:4b:db:74:ff:5f:d8:53:b5:86:3c:7e:0e:bc: 5c:fe:ad:b5:a4:f1:65:d9:0f:92:ca:4f:33:8d:05: 3e:6e:77:6c:0e:75:cb:bb:f1:cb:34:71:45:ff:d7: 48:9a:5d:71:ec:ea:76:c6:0b:52:0a:fd:c3:ed:eb: 42:00:b8:56:b1:5c:7d:1e:a9:6a:d2:99:0b:4f:98: b1:e2:b9:8c:18:43:04:01:d4:b3:42:5a:c0:8e:d8: 2f:7a:fc:52:c9:9f:59:ec:09:cb:a3:bf:98:c6:53: df:97:10:4d:61:1e:36:e5:47:ec:28:d7:d3:14:01: 75:2a:7c:f5:df:71:f0:73:e8:d4:51:0d:16:df:ee: b3:e1:2e:c4:5f:5c:1b:79:c4:97:c0:48:2c:4c:ad: 6c:6b:ea:92:1d:06:13:fe:a1:ed:89:97:5f:d7:c0: 7b:4f:69:af:d3:5f:c4:62:e1:ee:94:c4:a5:6b:51: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:85:42:1F:9F:B2:52:C0:70:89:CA:23:6E:38:08:98:78:11:A0:90 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/94VCH5-yUsBwicojbjgImHgRoJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4140:38::/48 Signature Algorithm: sha256WithRSAEncryption 5a:02:53:a6:ca:6b:73:5a:2d:99:e7:9c:c4:12:8e:44:63:f6: 21:67:77:91:f2:ab:6a:41:e0:4e:01:59:76:25:6e:1c:8e:0d: 2a:63:86:6d:21:b0:93:27:65:e4:27:cf:8f:dc:58:14:31:d9: 90:4a:8b:99:51:c6:6a:3e:9a:c4:a0:19:ee:ff:ba:78:53:3f: 91:61:ab:3b:29:39:32:37:79:4e:f5:93:eb:54:ee:d0:8a:93: e7:6e:fb:e7:55:37:1b:09:79:fb:82:71:f9:af:73:b2:6e:be: ee:ad:a7:da:61:1b:ea:5c:3f:00:32:4c:c3:76:05:97:b9:76: dc:1f:66:85:4f:8e:ef:58:83:82:e3:6f:0f:66:6c:bd:42:1b: 65:86:89:6b:ab:af:e1:4b:b3:67:21:61:59:c8:ec:8c:5d:77: e6:78:61:49:d5:a9:32:f6:64:5c:74:94:a7:2a:2d:83:d9:61: 20:e9:ef:7a:28:b7:00:67:e0:1a:ae:77:1d:08:04:68:d4:fe: d6:32:1d:c5:7a:2b:42:46:a6:1d:ab:9f:87:7c:45:81:5e:33: f5:40:d1:d8:47:d4:80:4c:e3:7a:5b:cf:a5:be:98:f9:8d:81: cf:c7:a6:48:aa:20:2c:e6:54:d7:71:8d:7d:33:1b:b3:8e:25: 36:71:91:5f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57Ay4v09iE8yk5TEQIdKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTAxMTQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzg1NDIxZjlmYjI1MmMwNzA4OWNhMjM2ZTM4MDg5ODc4MTFhMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qbEw/INSN7euWihvanDCaaeexY2 zWU+MYd9NITxqFiycqP7lrzLOzWE9wAMORDZAz/q3wCZCryVDvWnpQay8wx8iSmI BhzPeqwXvEvbdP9f2FO1hjx+Drxc/q21pPFl2Q+Syk8zjQU+bndsDnXLu/HLNHFF /9dIml1x7Op2xgtSCv3D7etCALhWsVx9Hqlq0pkLT5ix4rmMGEMEAdSzQlrAjtgv evxSyZ9Z7AnLo7+YxlPflxBNYR425UfsKNfTFAF1Knz133Hwc+jUUQ0W3+6z4S7E X1wbecSXwEgsTK1sa+qSHQYT/qHtiZdf18B7T2mv01/EYuHulMSla1F93wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPeFQh+fslLAcInKI244CJh4EaCQMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvOTRWQ0g1LXlVc0J3aWNvamJqZ0ltSGdSb0pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgVBQAA4 MA0GCSqGSIb3DQEBCwUAA4IBAQBaAlOmymtzWi2Z55zEEo5EY/YhZ3eR8qtqQeBO AVl2JW4cjg0qY4ZtIbCTJ2XkJ8+P3FgUMdmQSouZUcZqPprEoBnu/7p4Uz+RYas7 KTkyN3lO9ZPrVO7QipPnbvvnVTcbCXn7gnH5r3Oybr7urafaYRvqXD8AMkzDdgWX uXbcH2aFT47vWIOC428PZmy9Qhtlholrq6/hS7NnIWFZyOyMXXfmeGFJ1aky9mRc dJSnKi2D2WEg6e96KLcAZ+AarncdCARo1P7WMh3FeitCRqYdq5+HfEWBXjP1QNHY R9SATON6W8+lvpj5jYHPx6ZIqiAs5lTXcY19MxuzjiU2cZFf -----END CERTIFICATE-----Generated at Wed Jan 21 16:16:42 2026 by rpki-client