This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/14H-LNkPVbf1P9syu0gSDZX0QuA.roa File: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (raw, json) Hash identifier: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y= Subject key identifier: D7:81:FE:2C:D9:0F:55:B7:F5:3F:DB:32:BB:48:12:0D:95:F4:42:E0 Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB8EDF2D2FF2F4378D68AC60C5150D Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/14H-LNkPVbf1P9syu0gSDZX0QuA.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202818 IP address blocks: 2001:4cd0:dc00::/48 maxlen: 48 2001:4cd0:dc00:1200::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8e:df:2d:2f:f2:f4:37:8d:68:ac:60:c5:15:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d781fe2cd90f55b7f53fdb32bb48120d95f442e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:3d:40:1b:fa:2f:c0:af:4e:74:74:91:13: 92:75:b6:95:5e:34:e1:d1:ea:26:ce:1b:54:08:b2: da:8d:db:53:c3:66:44:09:80:de:a3:a1:d1:2a:a3: 8a:c2:88:a4:67:b0:24:9f:16:3c:3b:eb:a9:7b:3c: 38:14:7b:d4:fc:22:ac:f6:e4:7c:34:b1:79:71:73: 9d:a5:e0:de:72:c6:ff:92:87:3f:ff:88:43:ed:d4: 85:e7:0a:76:38:26:c4:98:bc:96:5f:16:cf:51:c6: 30:2a:0d:7b:91:d0:0f:7b:b6:a4:b6:f2:00:42:ee: 0a:6c:76:fd:38:75:d9:f5:f6:95:42:9d:a4:dc:3e: 7d:70:98:73:75:fa:64:91:61:49:d2:af:46:6c:80: a7:0b:f7:17:02:b6:f3:f1:b4:1e:11:a2:89:1e:19: f7:24:ce:e4:17:cb:74:c6:1b:d6:35:93:f9:78:38: 16:84:b8:e0:db:0a:70:41:d1:ce:67:22:4e:60:3f: 0f:c9:c9:94:c9:a6:bb:7f:87:03:21:5f:8c:14:67: 27:18:ee:52:67:10:3c:a9:cb:56:5d:62:a6:56:b5: 00:16:0c:0d:1d:64:4e:52:c5:9c:ca:f2:86:27:e2: 25:3c:98:d9:eb:52:fc:ef:c5:d1:b5:af:7c:8b:b6: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:81:FE:2C:D9:0F:55:B7:F5:3F:DB:32:BB:48:12:0D:95:F4:42:E0 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/14H-LNkPVbf1P9syu0gSDZX0QuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:4cd0:dc00::/48 Signature Algorithm: sha256WithRSAEncryption 5b:84:90:0d:71:df:38:37:32:a2:c9:cb:4a:8b:3c:de:f1:8b: fa:3a:e6:94:fc:c2:7a:37:aa:0a:9f:68:dd:ea:8f:d4:61:b3: 79:b9:df:46:da:25:bd:80:2b:68:2f:34:b6:d1:4e:df:7b:ce: 6c:7b:89:ad:77:48:00:ae:12:75:88:6c:33:78:94:85:a4:e0: c5:1d:3b:2d:80:a3:4b:17:29:f1:a5:85:b2:d7:66:3f:d1:c0: 35:5b:fc:a0:1b:9b:bb:ee:7b:11:56:dc:e3:eb:a6:98:ff:77: 2f:a5:a8:0a:fe:22:e7:09:0f:77:25:54:8c:19:ea:a6:68:88: f4:d5:3c:a6:1f:16:c9:63:0f:d3:b8:23:b4:4d:3d:82:02:4a: db:44:ce:a3:a3:0c:c9:8f:97:63:2b:0f:f4:a3:30:3a:fa:d0: 34:dc:da:1c:42:04:23:e7:48:9c:47:91:68:29:cc:5c:65:70: f2:61:62:2f:00:71:02:52:d4:8f:7f:e2:fd:ac:47:33:2a:67: 09:db:73:52:5e:bd:7f:9f:59:d3:15:ca:5f:ef:14:a4:1f:49: f6:06:62:d2:00:54:af:6e:d5:fe:05:81:d5:4e:0b:f8:2e:00: 1d:8a:8b:27:9c:57:90:7c:01:56:cb:5d:d1:49:c2:cf:4b:9f: 71:b3:cd:22 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt2647fLS/y9DeNaKxgxRUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzgxZmUyY2Q5MGY1NWI3ZjUzZmRiMzJiYjQ4MTIwZDk1ZjQ0MmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroo9QBv6L8CvTnR0kROSdbaVXjTh 0eomzhtUCLLajdtTw2ZECYDeo6HRKqOKwoikZ7AknxY8O+upezw4FHvU/CKs9uR8 NLF5cXOdpeDecsb/koc//4hD7dSF5wp2OCbEmLyWXxbPUcYwKg17kdAPe7aktvIA Qu4KbHb9OHXZ9faVQp2k3D59cJhzdfpkkWFJ0q9GbICnC/cXArbz8bQeEaKJHhn3 JM7kF8t0xhvWNZP5eDgWhLjg2wpwQdHOZyJOYD8PycmUyaa7f4cDIV+MFGcnGO5S ZxA8qctWXWKmVrUAFgwNHWROUsWcyvKGJ+IlPJjZ61L878XRta98i7ZlAwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNeB/izZD1W39T/bMrtIEg2V9ELgMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvMTRILUxOa1BWYmYxUDlzeXUwZ1NEWlgwUXVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFM0NwA MA0GCSqGSIb3DQEBCwUAA4IBAQBbhJANcd84NzKiyctKizze8Yv6OuaU/MJ6N6oK n2jd6o/UYbN5ud9G2iW9gCtoLzS20U7fe85se4mtd0gArhJ1iGwzeJSFpODFHTst gKNLFynxpYWy12Y/0cA1W/ygG5u77nsRVtzj66aY/3cvpagK/iLnCQ93JVSMGeqm aIj01TymHxbJYw/TuCO0TT2CAkrbRM6jowzJj5djKw/0ozA6+tA03NocQgQj50ic R5FoKcxcZXDyYWIvAHECUtSPf+L9rEczKmcJ23NSXr1/n1nTFcpf7xSkH0n2BmLS AFSvbtX+BYHVTgv4LgAdiosnnFeQfAFWy13RScLPS59xs80i -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:36 2026 by rpki-client