This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/1-1Ic5gcyRLNc4y6lZMhKlnsHlIk.roa File: 1-1Ic5gcyRLNc4y6lZMhKlnsHlIk.roa (raw, json) Hash identifier: U8NuaZXQIXbJYqStLcZdEAJOjjGzKdcKPJX3ZKFHQ8A= Subject key identifier: FB:52:1C:E6:07:32:44:B3:5C:E3:2E:A5:64:C8:4A:96:7B:07:94:89 Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4 Certificate serial: 019B7AC790FBC81D3D04C6560DEFD8BEFD76 Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/1-1Ic5gcyRLNc4y6lZMhKlnsHlIk.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211992 IP address blocks: 2001:67c:aec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:90:fb:c8:1d:3d:04:c6:56:0d:ef:d8:be:fd:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4 Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb521ce6073244b35ce32ea564c84a967b079489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:7f:b1:02:97:41:73:cb:9b:69:4b:b9:a9: d0:6f:9e:9f:f3:65:9f:1b:01:7e:86:66:bc:21:66: ad:e1:1d:92:0e:54:40:f2:17:a3:8b:96:83:fb:9b: b2:ef:eb:6e:55:53:da:8b:ff:37:90:1e:43:08:06: 6a:89:c8:80:d2:9b:bc:fb:d2:f8:43:9a:df:4b:4d: 84:cf:93:a7:c6:86:8b:c5:d3:f2:bf:2b:7c:8a:91: 42:54:27:e1:03:28:e1:83:c8:95:3d:99:26:e7:56: 4c:db:b3:ee:ca:fc:b0:b4:8f:1a:ab:c1:02:0f:87: b9:40:0c:86:3f:9c:35:66:08:d0:1a:a9:b9:8d:7a: d5:aa:06:52:3a:30:72:79:86:33:ad:28:57:92:d8: 6a:1e:25:3c:13:18:91:2b:bf:c5:c5:5f:94:a1:ae: 1d:3e:bb:b2:36:b2:3e:ab:47:87:92:b3:a6:bf:fd: bb:12:df:1c:9f:83:b0:35:80:86:69:f5:c7:42:56: f8:28:ed:67:5f:55:b5:93:b4:7f:ef:2b:69:21:9f: f6:07:29:43:12:66:3a:cb:1e:0a:33:7c:a1:e0:5a: e9:b0:a3:78:4f:3f:d6:c9:76:11:50:1d:11:0a:7c: 06:57:b7:64:34:12:b4:60:5e:91:29:93:07:4b:09: 8d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:52:1C:E6:07:32:44:B3:5C:E3:2E:A5:64:C8:4A:96:7B:07:94:89 X509v3 Authority Key Identifier: keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/1-1Ic5gcyRLNc4y6lZMhKlnsHlIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:aec::/48 Signature Algorithm: sha256WithRSAEncryption 7c:ea:e0:f7:db:2b:7a:ac:73:56:e3:e7:ee:f6:c1:dd:5f:e7: 4a:27:1c:ea:0c:59:02:12:00:ca:2b:e0:f7:70:20:8b:ca:4d: 09:b1:de:44:bc:54:b9:e8:b1:93:b1:65:6e:0b:41:32:2e:17: 16:6f:bf:a3:be:ad:bd:02:f9:87:ae:26:d3:cb:3a:3a:6a:b3: f1:73:78:74:7d:4d:f4:53:2d:5a:e1:0d:2b:cf:1d:9d:ea:3c: e9:5f:f3:00:86:af:7f:fe:8d:2d:cb:78:ed:6a:e7:9b:94:d7: a0:d8:05:9c:f9:d0:13:75:39:fd:8d:c8:6c:c1:1e:94:75:2a: c8:e0:13:fd:ee:33:b0:90:a0:4f:3a:46:c3:fc:97:35:64:49: b8:71:ad:6c:05:eb:67:1b:7b:61:9f:6d:15:a9:ec:7b:86:8c: f1:2e:0e:bd:04:b6:81:98:c3:07:19:1e:67:b8:90:f4:a0:34: 54:02:aa:b9:5f:06:9c:c2:40:0f:ff:ca:b5:3e:0a:23:3f:10: 7c:fb:fe:4b:7e:de:bb:12:8a:8f:35:b4:0e:ef:6c:9f:99:a4: ee:c6:a5:7d:72:cf:c3:b2:9e:34:43:a4:32:bd:c3:c2:70:da: 20:60:ea:57:fb:12:35:c8:4d:c3:d0:45:82:1f:ef:bf:05:6f: a1:f6:09:29 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt6x5D7yB09BMZWDe/Yvv12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMGExMWE2YjFkMTg5NjU3YzdmYjk2ZWMxNDU4YmFmY2Ex ODY0ZjQwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjUyMWNlNjA3MzI0NGIzNWNlMzJlYTU2NGM4NGE5NjdiMDc5NDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIZ/sQKXQXPLm2lLuanQb56f82Wf GwF+hma8IWat4R2SDlRA8heji5aD+5uy7+tuVVPai/83kB5DCAZqiciA0pu8+9L4 Q5rfS02Ez5OnxoaLxdPyvyt8ipFCVCfhAyjhg8iVPZkm51ZM27PuyvywtI8aq8EC D4e5QAyGP5w1ZgjQGqm5jXrVqgZSOjByeYYzrShXkthqHiU8ExiRK7/FxV+Uoa4d PruyNrI+q0eHkrOmv/27Et8cn4OwNYCGafXHQlb4KO1nX1W1k7R/7ytpIZ/2BylD EmY6yx4KM3yh4FrpsKN4Tz/WyXYRUB0RCnwGV7dkNBK0YF6RKZMHSwmNWwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPtSHOYHMkSzXOMupWTISpZ7B5SJMB8GA1UdIwQY MBaAFJ4KEaax0YllfH+5bsFFi6/KGGT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAt NThjYjgzMDg3NWY1LzEvMS0xSWM1Z2N5UkxOYzR5NmxaTWhLbG5zSGxJay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmUvMWNkYWNlLTRlMDAtNDY5YS04YzUwLTU4Y2I4MzA4NzVm NS8xL25nb1JwckhSaVdWOGY3bHV3VVdMcjhvWVpQUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwK 7DANBgkqhkiG9w0BAQsFAAOCAQEAfOrg99sreqxzVuPn7vbB3V/nSicc6gxZAhIA yivg93Agi8pNCbHeRLxUueixk7FlbgtBMi4XFm+/o76tvQL5h64m08s6Omqz8XN4 dH1N9FMtWuENK88dneo86V/zAIavf/6NLct47Wrnm5TXoNgFnPnQE3U5/Y3IbMEe lHUqyOAT/e4zsJCgTzpGw/yXNWRJuHGtbAXrZxt7YZ9tFanse4aM8S4OvQS2gZjD BxkeZ7iQ9KA0VAKquV8GnMJAD//KtT4KIz8QfPv+S37euxKKjzW0Du9sn5mk7sal fXLPw7KeNEOkMr3DwnDaIGDqV/sSNchNw9BFgh/vvwVvofYJKQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:41 2026 by rpki-client