This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/1sGhU6MrhqOQe72GVQ3uEjbGwB8.roa File: 1sGhU6MrhqOQe72GVQ3uEjbGwB8.roa (raw, json) Hash identifier: IzX/NeS/gsGTMbDaq8QMW6ohP4ePoSu82S6CGrAjXmE= Subject key identifier: D6:C1:A1:53:A3:2B:86:A3:90:7B:BD:86:55:0D:EE:12:36:C6:C0:1F Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Certificate serial: 019B77C668BA6D518C768D9F207C8A737986 Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/1sGhU6MrhqOQe72GVQ3uEjbGwB8.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216091 IP address blocks: 2a0a:cd83::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:68:ba:6d:51:8c:76:8d:9f:20:7c:8a:73:79:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6c1a153a32b86a3907bbd86550dee1236c6c01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:b1:a7:73:54:77:ef:69:0e:2f:08:68:d9: 73:2d:67:8e:80:87:d1:61:8b:8c:ba:4a:5d:29:77: d7:e1:be:74:98:99:3e:dd:ad:fe:72:59:90:03:0f: c9:85:0e:18:b1:35:c2:09:d4:4f:9a:98:d1:6b:1b: b3:51:e4:16:f4:bd:8e:42:45:c0:76:f1:43:5e:2a: 2b:3b:23:e7:51:25:ed:95:77:1f:dc:95:74:d9:2c: 15:59:a2:c7:4f:b3:12:6b:69:ae:df:02:1c:24:7d: 89:81:35:5c:a2:78:57:de:ff:05:81:84:29:43:ba: e3:55:38:3f:48:03:5a:bd:1c:3c:b8:d6:5d:ad:e4: 52:1c:5d:50:13:f5:1f:cf:bd:b1:97:e5:cf:c1:5e: 6c:42:f5:59:94:37:8f:da:9c:fb:6d:47:87:a3:0b: 7a:67:bc:15:a1:e9:96:3d:c6:3c:62:c5:9c:dc:bf: eb:88:28:53:10:09:2d:33:01:21:6d:38:46:2f:4b: 22:c3:66:1a:68:57:f8:30:4a:c6:ef:ac:10:e5:a6: 38:87:f9:e6:53:39:62:db:dc:7f:d0:1f:03:8f:ce: 31:a6:89:fc:1c:0a:fd:7b:37:44:2b:87:fc:d9:0e: 01:91:3b:76:47:ed:2c:bd:40:d6:9f:ce:59:71:3e: 12:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C1:A1:53:A3:2B:86:A3:90:7B:BD:86:55:0D:EE:12:36:C6:C0:1F X509v3 Authority Key Identifier: keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/1sGhU6MrhqOQe72GVQ3uEjbGwB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:cd83::/32 Signature Algorithm: sha256WithRSAEncryption 76:ca:cd:6d:09:68:48:63:6d:5e:c9:59:e3:fe:a8:53:8c:15: ff:e3:6d:60:e0:22:5a:e2:2a:cb:5b:a6:63:f1:6d:24:8e:d5: d5:73:a7:d6:55:50:8d:eb:4c:9d:9a:13:49:91:27:d5:ef:e1: 1e:c4:e8:97:61:0c:25:d0:a8:b8:a7:7b:e2:59:17:f7:d5:24: 6e:ae:ac:10:b1:dd:18:53:6f:cb:27:b1:23:6b:19:b1:4a:56: 81:66:a4:10:1d:9f:e4:4b:8e:4d:8b:e8:1c:47:ab:9e:e7:82: 6f:11:ee:8b:fd:92:35:75:ac:ed:b4:9b:f7:92:9a:25:f0:7c: 48:a9:3d:d1:92:a4:46:03:0a:e6:c6:c7:7d:29:36:65:dd:c6: 10:b2:29:d2:15:9b:a1:4d:48:b4:5b:0d:ef:80:0d:05:07:3d: 49:9c:a1:5c:cc:87:16:82:86:18:7d:80:e1:cd:6f:5d:93:fc: 3b:c0:51:e8:5d:33:a8:43:9a:72:a5:be:4c:29:86:05:8d:c3: 46:cb:5f:c2:ca:40:fc:22:73:a1:27:a0:76:e6:e5:6b:49:68: ff:d2:5b:5c:35:09:07:7f:1c:38:fb:35:22:e7:ba:4f:d6:b9: 6d:8f:dc:2a:3d:b6:37:2b:01:ea:1d:30:80:c7:b2:a6:11:9b: 15:a5:a2:44 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xmi6bVGMdo2fIHyKc3mGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzFkMDNiNDk1MDRkMzQ0NjVkYzQwYTNkMGY5MDg2Y2Fj ZmRiOGUwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmMxYTE1M2EzMmI4NmEzOTA3YmJkODY1NTBkZWUxMjM2YzZjMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufexp3NUd+9pDi8IaNlzLWeOgIfR YYuMukpdKXfX4b50mJk+3a3+clmQAw/JhQ4YsTXCCdRPmpjRaxuzUeQW9L2OQkXA dvFDXiorOyPnUSXtlXcf3JV02SwVWaLHT7MSa2mu3wIcJH2JgTVconhX3v8FgYQp Q7rjVTg/SANavRw8uNZdreRSHF1QE/Ufz72xl+XPwV5sQvVZlDeP2pz7bUeHowt6 Z7wVoemWPcY8YsWc3L/riChTEAktMwEhbThGL0siw2YaaFf4MErG76wQ5aY4h/nm Uzli29x/0B8Dj84xpon8HAr9ezdEK4f82Q4BkTt2R+0svUDWn85ZcT4SXQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNbBoVOjK4ajkHu9hlUN7hI2xsAfMB8GA1UdIwQY MBaAFJjB0DtJUE00Rl3ECj0PkIbKz9uOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEt YzMxYmRlNTEwMDg1LzEvMXNHaFU2TXJocU9RZTcyR1ZRM3VFamJHd0I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEtYzMxYmRlNTEwMDg1 LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgrNgzAN BgkqhkiG9w0BAQsFAAOCAQEAdsrNbQloSGNtXslZ4/6oU4wV/+NtYOAiWuIqy1um Y/FtJI7V1XOn1lVQjetMnZoTSZEn1e/hHsTol2EMJdCouKd74lkX99Ukbq6sELHd GFNvyyexI2sZsUpWgWakEB2f5EuOTYvoHEernueCbxHui/2SNXWs7bSb95KaJfB8 SKk90ZKkRgMK5sbHfSk2Zd3GELIp0hWboU1ItFsN74ANBQc9SZyhXMyHFoKGGH2A 4c1vXZP8O8BR6F0zqEOacqW+TCmGBY3DRstfwspA/CJzoSegdubla0lo/9JbXDUJ B38cOPs1Iue6T9a5bY/cKj22NysB6h0wgMeyphGbFaWiRA== -----END CERTIFICATE-----Generated at Tue Jan 20 04:00:45 2026 by rpki-client