This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa File: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (raw, json) Hash identifier: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI= Subject key identifier: D4:4B:D5:D6:FB:5B:EF:12:5A:7F:67:F7:45:00:C9:D1:49:2E:CB:C5 Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019B7C12B83957DD1720C16605B05B58CAAE Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa Signing time: Fri 02 Jan 2026 00:19:20 +0000 ROA not before: Fri 02 Jan 2026 00:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203069 IP address blocks: 2a0a:280:1e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b8:39:57:dd:17:20:c1:66:05:b0:5b:58:ca:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d44bd5d6fb5bef125a7f67f74500c9d1492ecbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:16:9b:b1:d9:bd:b4:41:9b:09:6a:b9:b5: 02:65:c5:63:1d:e7:d9:f3:14:7d:14:63:61:23:f4: 98:e5:7c:01:a9:f6:3c:2f:ae:e0:30:c8:84:d4:76: 5f:15:d4:21:9c:78:bc:af:28:22:3b:34:83:10:86: c6:e7:1e:8b:92:10:d6:f9:da:ca:e6:e1:28:68:62: 75:a1:87:d8:7c:26:82:e7:d3:e2:d7:5c:08:25:43: 22:c2:b8:ff:33:1a:ec:01:50:52:f7:11:60:ad:88: 93:ba:d3:1a:d4:c9:1e:7f:3c:17:39:75:8c:6a:0b: 54:07:93:29:1d:01:4e:2e:a7:22:26:0b:0d:6a:b9: e0:c1:48:97:48:61:9c:34:30:cf:77:c1:0a:a4:39: 0b:8b:b0:90:70:f6:bf:7e:da:57:1f:e7:d3:11:18: 09:b3:50:a6:86:3f:37:73:e7:86:f5:a9:9e:9a:b1: 9b:96:5a:20:1c:11:22:73:01:ce:db:13:50:72:ed: 93:f0:46:94:c3:3d:ea:44:1c:af:d9:35:b7:7d:80: 46:e6:4f:44:36:a5:46:16:e0:e3:82:6d:20:56:9f: 44:8c:3b:4f:54:95:b4:e7:41:2a:b5:af:1b:13:24: 05:4c:b0:23:88:5f:26:9a:ed:96:16:69:4a:61:99: 97:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4B:D5:D6:FB:5B:EF:12:5A:7F:67:F7:45:00:C9:D1:49:2E:CB:C5 X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:280:1e00::/40 Signature Algorithm: sha256WithRSAEncryption 24:58:01:bb:fe:ab:54:0e:1f:58:38:da:17:1f:a8:0b:32:f6: a1:6e:75:2f:18:a1:29:34:e5:61:00:5a:1c:14:4e:05:f6:ac: 2a:28:c1:c8:a6:d3:a3:84:ad:57:22:ee:fd:11:d0:02:2d:f7: 84:ac:a3:b6:77:df:76:6d:e7:62:72:21:08:7a:84:28:d7:f5: f1:12:3c:88:0e:79:7e:fd:e9:ac:73:53:4f:7c:e9:b3:83:17: da:47:f6:4e:ca:0c:b2:ca:95:35:c4:5a:e1:2b:bd:ad:18:7c: 8a:78:43:a4:4d:5c:cb:70:39:90:89:be:dc:d4:27:97:76:04: 37:c7:b4:49:11:b4:1b:aa:aa:6f:61:8d:ec:3b:81:16:39:28: 36:01:14:7e:29:8c:53:57:55:ca:ea:1e:d4:8e:2d:e8:55:8b: 8f:89:9b:dc:37:bb:f2:37:a7:ca:5b:a1:b5:4a:a8:10:13:1f: ec:fb:ec:dc:9c:1f:6b:7b:54:92:bf:c4:2b:aa:16:e1:98:bb: e2:57:99:ec:af:44:4e:00:b4:56:28:ba:3f:7e:83:cc:a2:60: 82:64:6c:5a:48:d1:2c:eb:18:c7:89:ec:44:7d:13:aa:ae:19: f1:0b:da:e6:96:ec:22:0f:2f:ce:29:80:a3:e3:e5:7f:6c:c9: 08:62:5e:0d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8Erg5V90XIMFmBbBbWMquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDRiZDVkNmZiNWJlZjEyNWE3ZjY3Zjc0NTAwYzlkMTQ5MmVjYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofIWm7HZvbRBmwlqubUCZcVjHefZ 8xR9FGNhI/SY5XwBqfY8L67gMMiE1HZfFdQhnHi8rygiOzSDEIbG5x6LkhDW+drK 5uEoaGJ1oYfYfCaC59Pi11wIJUMiwrj/MxrsAVBS9xFgrYiTutMa1MkefzwXOXWM agtUB5MpHQFOLqciJgsNarngwUiXSGGcNDDPd8EKpDkLi7CQcPa/ftpXH+fTERgJ s1Cmhj83c+eG9amemrGbllogHBEicwHO2xNQcu2T8EaUwz3qRByv2TW3fYBG5k9E NqVGFuDjgm0gVp9EjDtPVJW050Eqta8bEyQFTLAjiF8mmu2WFmlKYZmX4wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNRL1db7W+8SWn9n90UAydFJLsvFMB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvMUV2VjF2dGI3eEphZjJmM1JRREowVWt1eThVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgB4w DQYJKoZIhvcNAQELBQADggEBACRYAbv+q1QOH1g42hcfqAsy9qFudS8YoSk05WEA WhwUTgX2rCoowcim06OErVci7v0R0AIt94Sso7Z333Zt52JyIQh6hCjX9fESPIgO eX796axzU0986bODF9pH9k7KDLLKlTXEWuErva0YfIp4Q6RNXMtwOZCJvtzUJ5d2 BDfHtEkRtBuqqm9hjew7gRY5KDYBFH4pjFNXVcrqHtSOLehVi4+Jm9w3u/I3p8pb obVKqBATH+z77NycH2t7VJK/xCuqFuGYu+JXmeyvRE4AtFYouj9+g8yiYIJkbFpI 0SzrGMeJ7ER9E6quGfEL2uaW7CIPL84pgKPj5X9syQhiXg0= -----END CERTIFICATE-----Generated at Wed Jan 21 17:34:12 2026 by rpki-client