This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/c585sEb31KrksO5MlyuNt-hfuHU.roa File: c585sEb31KrksO5MlyuNt-hfuHU.roa (raw, json) Hash identifier: fJ78hp+mIYgaOdDbv0g//N4rP8oKIJRANU6rLFZmpT4= Subject key identifier: 73:9F:39:B0:46:F7:D4:AA:E4:B0:EE:4C:97:2B:8D:B7:E8:5F:B8:75 Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B79EC051280A00EA2852043274E3489A1 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/c585sEb31KrksO5MlyuNt-hfuHU.roa Signing time: Thu 01 Jan 2026 14:17:49 +0000 ROA not before: Thu 01 Jan 2026 14:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14315 IP address blocks: 2a05:4140:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:05:12:80:a0:0e:a2:85:20:43:27:4e:34:89:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 1 14:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=739f39b046f7d4aae4b0ee4c972b8db7e85fb875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:d8:cf:ae:57:08:61:1e:74:e0:d3:9a:ba: 5d:0f:30:a6:4d:85:6d:cc:9d:c9:48:6e:2c:da:ae: 31:94:eb:51:aa:bd:3d:9d:b5:bf:7d:22:84:ed:5e: f2:95:8a:6e:c1:ec:d0:58:da:37:e2:3d:e4:25:e1: 2f:66:71:e2:b2:82:9b:3b:f0:a3:5b:13:5d:60:76: 5f:ef:4a:5d:d7:8b:c3:dd:52:82:88:d6:14:65:3e: 50:6e:20:64:1b:81:db:6a:d5:b0:87:b4:89:db:9b: 79:bd:51:20:84:75:34:82:3a:45:62:8b:15:ed:05: c7:4d:47:3b:5a:92:6d:a1:44:51:07:d7:57:3e:aa: e0:5e:d0:87:e1:80:67:d4:ff:6f:15:48:d0:4a:d8: c3:c7:7c:b5:96:77:22:d4:4f:f6:b3:80:f0:a7:57: a1:20:d4:85:8e:01:09:14:95:1f:87:5b:aa:5f:3d: ba:d8:2e:17:cb:fa:46:a1:e4:f6:0b:61:72:56:00: ff:b0:be:54:b5:23:b0:4c:4c:e9:52:1d:7c:f4:c5: c8:d5:f7:34:ba:cb:f0:53:57:6c:57:20:56:7c:40: 81:61:3b:27:cd:27:54:92:c4:89:bb:a4:8b:c7:5f: a6:b2:e3:b0:f8:0a:a1:c2:fc:cc:7d:0f:32:e0:f5: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9F:39:B0:46:F7:D4:AA:E4:B0:EE:4C:97:2B:8D:B7:E8:5F:B8:75 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/c585sEb31KrksO5MlyuNt-hfuHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4140:19::/48 Signature Algorithm: sha256WithRSAEncryption 39:95:55:31:6c:4e:2c:f9:e5:52:ea:b4:72:1f:c8:37:4c:89: 9f:2f:0d:b2:e7:69:59:fa:26:77:ee:a5:f7:1e:09:bd:0d:20: 61:d0:17:16:1e:53:32:5a:90:bf:2c:3b:e1:4a:23:10:cf:83: a7:6f:c8:06:ef:6f:62:69:2b:e6:6e:45:9d:fc:ac:c1:87:a0: d7:24:84:84:46:c2:62:6c:e0:2b:69:a2:da:c4:00:c1:04:60: 26:d7:ce:e4:8a:3a:20:6d:fd:3a:4f:cf:8a:e5:9f:dc:9a:cc: 21:67:8d:86:4d:1e:38:86:35:e1:b4:bb:2a:45:92:f1:e0:b5: 51:e8:7a:0c:60:95:17:7f:f7:49:43:30:75:bd:0f:53:48:b1: 58:b9:af:9f:b5:5c:05:b5:db:d6:06:c6:65:f3:7a:0d:88:19: c2:2f:f8:a9:c8:90:2f:a9:f7:a7:65:77:72:09:d0:a8:52:65: 31:f1:79:dc:7e:a8:3a:d4:96:8b:15:3c:cd:e1:00:b7:62:76: 98:89:0f:95:fb:94:2f:db:6a:dc:69:d1:0d:14:95:b9:0a:a9: e1:9b:23:31:31:31:a5:d6:67:53:7d:7c:21:55:e2:9d:d4:45: b0:2d:47:07:69:1d:73:a0:03:35:a7:44:3a:41:6d:f5:3b:49: 85:29:a8:9c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57AUSgKAOooUgQydONImhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTAxMTQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzlmMzliMDQ2ZjdkNGFhZTRiMGVlNGM5NzJiOGRiN2U4NWZiODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VPYz65XCGEedODTmrpdDzCmTYVt zJ3JSG4s2q4xlOtRqr09nbW/fSKE7V7ylYpuwezQWNo34j3kJeEvZnHisoKbO/Cj WxNdYHZf70pd14vD3VKCiNYUZT5QbiBkG4HbatWwh7SJ25t5vVEghHU0gjpFYosV 7QXHTUc7WpJtoURRB9dXPqrgXtCH4YBn1P9vFUjQStjDx3y1lnci1E/2s4Dwp1eh INSFjgEJFJUfh1uqXz262C4Xy/pGoeT2C2FyVgD/sL5UtSOwTEzpUh189MXI1fc0 usvwU1dsVyBWfECBYTsnzSdUksSJu6SLx1+msuOw+AqhwvzMfQ8y4PVvaQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHOfObBG99Sq5LDuTJcrjbfoX7h1MB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvYzU4NXNFYjMxS3Jrc081TWx5dU50LWhmdUhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgVBQAAZ MA0GCSqGSIb3DQEBCwUAA4IBAQA5lVUxbE4s+eVS6rRyH8g3TImfLw2y52lZ+iZ3 7qX3Hgm9DSBh0BcWHlMyWpC/LDvhSiMQz4Onb8gG729iaSvmbkWd/KzBh6DXJISE RsJibOAraaLaxADBBGAm187kijogbf06T8+K5Z/cmswhZ42GTR44hjXhtLsqRZLx 4LVR6HoMYJUXf/dJQzB1vQ9TSLFYua+ftVwFtdvWBsZl83oNiBnCL/ipyJAvqfen ZXdyCdCoUmUx8Xncfqg61JaLFTzN4QC3YnaYiQ+V+5Qv22rcadENFJW5CqnhmyMx MTGl1mdTfXwhVeKd1EWwLUcHaR1zoAM1p0Q6QW31O0mFKaic -----END CERTIFICATE-----Generated at Wed Jan 21 13:24:52 2026 by rpki-client