This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa File: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (raw, json) Hash identifier: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M= Subject key identifier: D6:FD:C8:3E:5F:0C:D5:E2:4F:06:10:80:2B:BB:B8:BE:AE:2B:51:A2 Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Certificate serial: 019B7BA43BE4B40EE488BE6C1F5CA664D589 Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa Signing time: Thu 01 Jan 2026 22:18:39 +0000 ROA not before: Thu 01 Jan 2026 22:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199959 IP address blocks: 2a07:efc0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:3b:e4:b4:0e:e4:88:be:6c:1f:5c:a6:64:d5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Validity Not Before: Jan 1 22:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6fdc83e5f0cd5e24f0610802bbbb8beae2b51a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:fe:99:b5:39:28:23:54:24:91:70:36:05: 97:67:28:7a:29:c2:14:83:5f:f3:2f:de:ec:ba:95: 5e:c1:07:b1:08:f6:21:98:96:d7:9c:ef:62:12:48: 3d:88:f3:12:75:ba:56:c0:23:00:87:de:7f:75:c4: ba:c9:a5:d0:61:e6:ab:fb:87:86:08:a3:1e:da:e0: 56:1b:56:e7:d5:5b:99:18:8d:56:ac:65:96:f7:e4: 5b:75:47:da:a3:0d:fb:5c:d3:46:ab:4f:be:06:99: c6:22:68:6b:32:ab:72:9d:63:ed:f1:59:1e:db:ee: be:b0:58:3f:63:38:26:a9:f9:17:f2:18:f5:c7:3a: 8d:a5:9d:d1:34:eb:22:be:f2:29:1d:28:02:3a:13: c8:3a:49:b0:47:d8:a4:bd:a4:dc:42:cc:b5:45:79: 91:da:2b:c2:d9:5c:5d:53:c9:ac:69:29:5a:11:30: 19:8d:b5:08:af:81:bc:5a:7f:33:1e:5c:80:bb:1e: fa:a5:7d:a6:a4:c1:e5:22:71:00:f9:3a:99:1b:fe: 27:d3:25:7a:d3:7c:0b:6d:db:14:fe:62:c4:7f:a5: 3a:00:93:0c:42:1d:ab:76:1b:30:c1:fc:c8:7c:26: ad:c9:fb:69:5f:0d:07:cb:be:30:dd:cb:3c:28:1f: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FD:C8:3E:5F:0C:D5:E2:4F:06:10:80:2B:BB:B8:BE:AE:2B:51:A2 X509v3 Authority Key Identifier: keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:efc0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 0a:bc:14:86:ad:75:70:e5:e5:a3:be:07:4a:95:80:60:6b:c9: c5:3a:90:2b:53:f0:83:40:c4:c7:50:bd:90:e2:6c:04:64:73: 35:a0:4f:d0:66:c6:88:c0:90:46:e0:75:27:e3:30:c4:c0:24: ce:b8:35:b6:f8:49:89:9d:61:8a:fe:b1:d0:88:0d:17:8e:ce: 25:a0:3e:7f:b4:48:17:31:b3:6d:b1:25:44:22:6b:dc:cb:e7: 8c:ff:f5:57:fc:f8:bb:d8:9f:57:c9:92:35:d3:eb:68:8d:de: 2e:a9:a7:08:02:ae:80:41:4d:7d:79:56:04:4a:c0:a2:49:95: a0:59:b8:8e:e5:d7:9e:cf:e1:24:a2:7b:68:6d:23:20:7a:0f: e0:72:1b:82:97:41:c7:1a:e4:50:cb:6a:16:ed:91:2a:f6:1d: 13:da:fc:e0:0b:71:0a:a4:77:54:99:18:41:d6:ea:d4:48:8a: 62:f1:73:8f:86:6f:99:f4:5e:65:21:4e:18:69:fe:99:ce:5e: bc:18:e3:9c:03:88:9d:40:ac:d3:0b:de:33:cb:5f:b2:f0:d4: d1:17:7e:07:ea:74:46:ae:8f:9f:0b:0a:30:62:10:a5:ed:59: 45:0c:52:03:b8:8b:0c:2c:e0:3a:ab:e1:cf:60:ee:67:88:28: 2a:6b:aa:9e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7pDvktA7kiL5sH1ymZNWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZjg2Y2YzM2UxNWVhNDA4OWRhMjllMmE3ODgxZDc0NmRm ODI2ZWYwHhcNMjYwMTAxMjIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmZkYzgzZTVmMGNkNWUyNGYwNjEwODAyYmJiYjhiZWFlMmI1MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU3+mbU5KCNUJJFwNgWXZyh6KcIU g1/zL97supVewQexCPYhmJbXnO9iEkg9iPMSdbpWwCMAh95/dcS6yaXQYear+4eG CKMe2uBWG1bn1VuZGI1WrGWW9+RbdUfaow37XNNGq0++BpnGImhrMqtynWPt8Vke 2+6+sFg/YzgmqfkX8hj1xzqNpZ3RNOsivvIpHSgCOhPIOkmwR9ikvaTcQsy1RXmR 2ivC2VxdU8msaSlaETAZjbUIr4G8Wn8zHlyAux76pX2mpMHlInEA+TqZG/4n0yV6 03wLbdsU/mLEf6U6AJMMQh2rdhswwfzIfCatyftpXw0Hy74w3cs8KB+qZwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNb9yD5fDNXiTwYQgCu7uL6uK1GiMB8GA1UdIwQY MBaAFE/4bPM+FepAidop4qeIHXRt+CbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQt NmZjNWZjYTA5NjI5LzEvMXYzSVBsOE0xZUpQQmhDQUs3dTR2cTRyVWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQtNmZjNWZjYTA5NjI5 LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgfvwBAw DQYJKoZIhvcNAQELBQADggEBAAq8FIatdXDl5aO+B0qVgGBrycU6kCtT8INAxMdQ vZDibARkczWgT9BmxojAkEbgdSfjMMTAJM64Nbb4SYmdYYr+sdCIDReOziWgPn+0 SBcxs22xJUQia9zL54z/9Vf8+LvYn1fJkjXT62iN3i6ppwgCroBBTX15VgRKwKJJ laBZuI7l157P4SSie2htIyB6D+ByG4KXQcca5FDLahbtkSr2HRPa/OALcQqkd1SZ GEHW6tRIimLxc4+Gb5n0XmUhThhp/pnOXrwY45wDiJ1ArNML3jPLX7Lw1NEXfgfq dEauj58LCjBiEKXtWUUMUgO4iwws4Dqr4c9g7meIKCprqp4= -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:30 2026 by rpki-client