This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/845se0I5w_ABtHgN1jpZJhRDX2U.roa File: 845se0I5w_ABtHgN1jpZJhRDX2U.roa (raw, json) Hash identifier: XtKaLfEk8dB6Tywis/naWcuQfxkanpJ2MfBAflauD8s= Subject key identifier: F3:8E:6C:7B:42:39:C3:F0:01:B4:78:0D:D6:3A:59:26:14:43:5F:65 Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Certificate serial: 019B7AC944EAD48BCD4856BDC24053C386A5 Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/845se0I5w_ABtHgN1jpZJhRDX2U.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212027 IP address blocks: 2a14:1d40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:44:ea:d4:8b:cd:48:56:bd:c2:40:53:c3:86:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f38e6c7b4239c3f001b4780dd63a592614435f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:98:13:da:18:87:4d:91:7c:e1:bd:f3:7a:d8: 5c:fe:75:b9:de:0d:38:f2:3d:7d:93:70:6e:63:03: cb:a5:99:7b:50:de:ac:87:3b:49:dd:d5:c6:71:54: fe:d2:78:71:43:49:a3:85:53:ff:f4:ab:de:72:be: ac:24:16:e1:18:45:e5:07:a0:98:4f:c3:79:5f:c8: ed:8d:3c:aa:09:79:c4:f3:0b:2f:73:31:8e:cc:8c: e2:79:d2:20:27:b1:1f:ce:3d:c8:f8:d9:ca:09:f8: 82:91:49:23:e6:23:5c:06:6d:86:7d:c6:c5:4a:fb: cc:9f:c4:bb:71:09:ae:82:bf:0f:e1:9e:ec:bc:28: f6:a6:eb:07:0f:0b:61:83:cf:8c:c6:a9:ef:27:a5: 16:b1:c8:ba:50:91:5b:c8:52:d8:9f:7b:a3:61:79: 41:44:2c:90:e2:ec:08:61:a3:39:b6:e3:91:a3:ed: f8:0f:6e:e4:a9:87:a6:49:08:05:20:de:3f:48:9e: 57:71:36:d8:d8:7e:67:a4:fb:60:e6:60:f1:7d:6f: 7a:5e:c6:62:21:56:2b:98:45:3d:54:bf:d4:cc:59: b3:6a:1c:04:1c:80:f2:ea:29:8e:76:f6:df:cb:55: 75:a4:3b:ed:80:67:16:3e:44:9c:30:f1:3e:f1:d3: 80:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8E:6C:7B:42:39:C3:F0:01:B4:78:0D:D6:3A:59:26:14:43:5F:65 X509v3 Authority Key Identifier: keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/845se0I5w_ABtHgN1jpZJhRDX2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1d40::/29 Signature Algorithm: sha256WithRSAEncryption 85:c0:6d:ef:ed:4f:72:27:82:da:41:f0:24:95:07:4a:16:04: 17:f3:5f:30:ac:26:87:aa:8d:45:31:80:ea:9e:27:77:b6:8a: a0:64:fb:d9:bd:62:91:20:08:99:e4:8e:6c:81:db:2e:49:7d: 7b:ee:f5:27:f5:e6:d2:ec:c7:f6:c3:b8:b5:05:c3:78:81:c4: bf:70:95:b2:6b:17:bf:dd:b6:0b:d6:30:4d:8a:c1:6c:c5:31: c7:2f:1d:98:df:9b:31:ea:ed:8b:13:04:bc:28:52:a8:03:af: 6d:c3:b0:4c:30:8c:93:28:9a:d1:73:cd:da:e7:47:e9:c6:b9: 55:20:08:3f:43:26:dd:da:ab:3b:d7:c3:fb:d8:fc:6f:2d:09: 5a:4a:db:f3:8a:38:7b:40:47:66:14:e2:f3:03:92:31:d9:5b: 13:e6:49:c4:76:59:af:2e:30:3b:76:af:be:46:37:4c:cd:cf: 4e:e1:97:26:9c:ed:ef:3d:98:34:b7:d9:7a:8c:26:7b:b0:73: b0:a2:4b:22:0c:e3:29:02:39:9e:77:ac:0e:ae:91:0e:2d:22: b8:23:2c:82:63:c9:36:2f:cb:b2:b6:ac:59:73:2e:e7:7c:84: 6b:a5:08:f0:6a:4b:04:d6:c7:01:bc:34:d0:cb:82:60:da:19: 79:c5:e4:ac -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yUTq1IvNSFa9wkBTw4alMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz NTBiY2IwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzhlNmM3YjQyMzljM2YwMDFiNDc4MGRkNjNhNTkyNjE0NDM1ZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5gT2hiHTZF84b3zethc/nW53g04 8j19k3BuYwPLpZl7UN6shztJ3dXGcVT+0nhxQ0mjhVP/9Kvecr6sJBbhGEXlB6CY T8N5X8jtjTyqCXnE8wsvczGOzIziedIgJ7Efzj3I+NnKCfiCkUkj5iNcBm2GfcbF SvvMn8S7cQmugr8P4Z7svCj2pusHDwthg8+MxqnvJ6UWsci6UJFbyFLYn3ujYXlB RCyQ4uwIYaM5tuORo+34D27kqYemSQgFIN4/SJ5XcTbY2H5npPtg5mDxfW96XsZi IVYrmEU9VL/UzFmzahwEHIDy6imOdvbfy1V1pDvtgGcWPkScMPE+8dOAswIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPOObHtCOcPwAbR4DdY6WSYUQ19lMB8GA1UdIwQY MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt NTI4NzQ2MTFjZDIxLzEvODQ1c2UwSTV3X0FCdEhnTjFqcFpKaFJEWDJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQdQDAN BgkqhkiG9w0BAQsFAAOCAQEAhcBt7+1PcieC2kHwJJUHShYEF/NfMKwmh6qNRTGA 6p4nd7aKoGT72b1ikSAImeSObIHbLkl9e+71J/Xm0uzH9sO4tQXDeIHEv3CVsmsX v922C9YwTYrBbMUxxy8dmN+bMertixMEvChSqAOvbcOwTDCMkyia0XPN2udH6ca5 VSAIP0Mm3dqrO9fD+9j8by0JWkrb84o4e0BHZhTi8wOSMdlbE+ZJxHZZry4wO3av vkY3TM3PTuGXJpzt7z2YNLfZeowme7BzsKJLIgzjKQI5nnesDq6RDi0iuCMsgmPJ Ni/LsrasWXMu53yEa6UI8GpLBNbHAbw00MuCYNoZecXkrA== -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:41 2026 by rpki-client