This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/1-earsS0WLz1IJKO-WJXouPRRDc.roa File: 1-earsS0WLz1IJKO-WJXouPRRDc.roa (raw, json) Hash identifier: 0PMS6Wj9PBe3RqKaVauppM1NP8rM+o6ZHX9nxGiIcug= Subject key identifier: D7:E7:9A:AE:C4:B4:58:BC:F5:20:92:8E:F9:62:57:A2:E3:D1:44:37 Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc Certificate serial: 019B7B35B6A9ACFE47D98F40A5C283EA4014 Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/1-earsS0WLz1IJKO-WJXouPRRDc.roa Signing time: Thu 01 Jan 2026 20:17:56 +0000 ROA not before: Thu 01 Jan 2026 20:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208661 IP address blocks: 2a0c:b6c3::/32 maxlen: 32 2a0c:b6c4::/32 maxlen: 32 2a0c:b6c5::/32 maxlen: 32 2a0c:b6c6::/32 maxlen: 32 2a0c:b6c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b6:a9:ac:fe:47:d9:8f:40:a5:c2:83:ea:40:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc Validity Not Before: Jan 1 20:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7e79aaec4b458bcf520928ef96257a2e3d14437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:45:78:22:38:64:fd:fc:bb:dd:92:20:05: b6:86:4c:0e:47:1f:27:1c:d6:30:8e:a2:cb:54:58: 63:10:72:e0:5f:3f:48:7f:3f:99:82:d9:4a:60:a7: 74:fa:b6:1d:59:c2:e9:6e:05:31:a4:45:9b:34:72: d8:23:b1:fd:6c:04:d6:4a:c2:33:0b:c8:0e:33:d6: d8:4c:bd:64:66:bb:5e:cc:4d:a9:7c:e6:80:76:e0: 30:c2:0b:c6:7a:c6:3e:e6:db:03:0f:9d:33:1d:08: 0e:f8:d4:75:5d:bb:9a:3b:a9:44:f2:44:66:e6:06: e1:d8:a7:9a:96:87:04:10:57:20:68:98:a6:42:8a: 6e:bd:d6:74:d1:7f:ac:43:c1:78:f7:c0:08:d4:5f: fb:1a:99:fc:61:d4:26:40:3c:7e:25:0e:a4:ed:14: 30:57:a7:16:98:51:ca:8a:8b:ef:df:57:8d:24:7c: aa:ea:5b:de:8b:f6:d3:1d:7d:e8:36:fa:b4:90:42: a0:c5:09:d1:2d:e8:16:92:eb:86:cd:f9:1e:4a:40: f7:64:f7:04:e9:41:35:f6:d7:2d:14:8c:0a:a3:f9: fe:37:36:6d:0c:83:51:8c:ac:35:00:64:ab:41:fa: 67:6b:87:88:c4:24:0b:38:85:63:92:ea:e1:93:bc: df:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E7:9A:AE:C4:B4:58:BC:F5:20:92:8E:F9:62:57:A2:E3:D1:44:37 X509v3 Authority Key Identifier: keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/1-earsS0WLz1IJKO-WJXouPRRDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b6c3::-2a0c:b6c7:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8d:1d:8a:b0:f3:fc:77:72:52:cf:aa:ed:32:d2:d0:84:8f:84: a6:1e:99:5f:41:95:bd:15:f3:17:06:50:ad:ad:65:de:f6:79: f7:86:8e:51:ba:60:76:48:b2:27:86:03:1d:42:25:b5:6a:e6: c1:1b:e6:cf:3c:9e:cd:a3:e6:82:3b:6f:95:9d:d6:cf:f7:96: ec:f3:9c:58:42:0c:a5:d0:c8:97:c3:36:57:8c:6b:2a:af:67: 81:f1:bc:b8:54:15:3c:e9:af:1c:93:82:eb:da:96:d2:f2:f0: 49:77:fd:16:02:d1:f2:e1:e0:3a:fd:ad:d4:a0:bc:37:a9:d4: 88:7c:b4:54:0c:cc:aa:7b:84:b7:69:8b:d4:ad:92:b5:fb:9f: 7e:50:75:02:bb:3a:ab:d5:04:61:e3:a2:2b:1d:ad:d2:64:07: 9a:d2:9d:f3:a4:ea:c9:34:39:4c:8b:ae:92:2c:34:34:20:f1: c5:33:78:ee:01:58:ca:f2:e7:fb:12:74:54:96:54:47:09:88: ff:11:dc:b6:a6:c8:08:1e:c7:40:25:1d:cd:e0:ab:46:2a:88: 56:f5:9c:89:28:21:1f:58:5c:2e:47:65:21:5f:eb:6c:a6:a5: 50:e9:38:18:81:1b:90:af:c4:8c:86:5a:8b:d7:f3:55:0a:0e: 5c:03:bc:93 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt7NbaprP5H2Y9ApcKD6kAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3 ODdmYmMwHhcNMjYwMTAxMjAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2U3OWFhZWM0YjQ1OGJjZjUyMDkyOGVmOTYyNTdhMmUzZDE0NDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTpFeCI4ZP38u92SIAW2hkwORx8n HNYwjqLLVFhjEHLgXz9Ifz+ZgtlKYKd0+rYdWcLpbgUxpEWbNHLYI7H9bATWSsIz C8gOM9bYTL1kZrtezE2pfOaAduAwwgvGesY+5tsDD50zHQgO+NR1XbuaO6lE8kRm 5gbh2KealocEEFcgaJimQopuvdZ00X+sQ8F498AI1F/7Gpn8YdQmQDx+JQ6k7RQw V6cWmFHKiovv31eNJHyq6lvei/bTHX3oNvq0kEKgxQnRLegWkuuGzfkeSkD3ZPcE 6UE19tctFIwKo/n+NzZtDINRjKw1AGSrQfpna4eIxCQLOIVjkurhk7zfxwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFNfnmq7EtFi89SCSjvliV6Lj0UQ3MB8GA1UdIwQY MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt OTQxY2M2YTdiYWQ5LzEvMS1lYXJzUzBXTHoxSUpLTy1XSlhvdVBSUkRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5 LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqDLbD AwUDKgy2wDANBgkqhkiG9w0BAQsFAAOCAQEAjR2KsPP8d3JSz6rtMtLQhI+Eph6Z X0GVvRXzFwZQra1l3vZ594aOUbpgdkiyJ4YDHUIltWrmwRvmzzyezaPmgjtvlZ3W z/eW7POcWEIMpdDIl8M2V4xrKq9ngfG8uFQVPOmvHJOC69qW0vLwSXf9FgLR8uHg Ov2t1KC8N6nUiHy0VAzMqnuEt2mL1K2StfufflB1Ars6q9UEYeOiKx2t0mQHmtKd 86TqyTQ5TIuukiw0NCDxxTN47gFYyvLn+xJ0VJZURwmI/xHctqbICB7HQCUdzeCr RiqIVvWciSghH1hcLkdlIV/rbKalUOk4GIEbkK/EjIZai9fzVQoOXAO8kw== -----END CERTIFICATE-----Generated at Wed Jan 21 22:55:09 2026 by rpki-client